Microsoft.Build.dll

  • File Path: C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.8\Microsoft.Build.dll
  • Description: Microsoft.Build.dll
  • Comments: Flavor=Retail

Hashes

Type Hash
MD5 837ECC7723E27C1D5845BD87BC457FFD
SHA1 9148811F9532AE941A52ECE48164682DC33A9AF7
SHA256 90315C43A193E6045AEE5CD346B7A213F7C22690B04E833DBFC3AFADD3B9265C
SHA384 31BCC26C9C6E37AB70EBAB082E8A5579223A8E4E11683D715E1EF42352EDC227B2E5EC2A51E22FFDA10E7AB1E6A899A5
SHA512 7A426A509B4612811750DEC49697176A7600761BD82DB3061277383AA34EB1F2994FEFA80FD4CB255A73698F752F3B5C696B16F44AD4FC1D51C78D8632D63068
SSDEEP 6144:Zk9ZnN2wFbWAVxDn7fqgRSRU6tpo8QuyLZYZbiQ:ZkTN2wpFrn7GdG8+YZbiQ
IMP DAE02F32A21E03CE65412F6E56942DAA
PESHA1 A24F761265D0468FF8FD5BB45DEB563ACED935EC
PE256 6930FB370AF1139893A7CED672943CCE8FCFCA479740DADBFC5A79B05002235F

Signature

  • Status: Signature verified.
  • Serial: 33000001519E8D8F4071A30E41000000000151
  • Thumbprint: 62009AAABDAE749FD47D19150958329BF6FF4B34
  • Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Microsoft.Build.dll
  • Product Name: Microsoft .NET Framework
  • Company Name: Microsoft Corporation
  • File Version: 4.8.4084.0 built by: NET48REL1
  • Product Version: 4.8.4084.0
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/76
  • VirusTotal Link: https://www.virustotal.com/gui/file/90315c43a193e6045aee5cd346b7a213f7c22690b04e833dbfc3afadd3b9265c/detection

Possible Misuse

The following table contains possible examples of Microsoft.Build.dll being misused. While Microsoft.Build.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.

Source Source File Example License
atomic-red-team T1127.001.md <blockquote>Adversaries may use MSBuild to proxy execution of code through a trusted Windows utility. MSBuild.exe (Microsoft Build Engine) is a software build platform used by Visual Studio. It handles XML formatted project files that define requirements for loading and building various platforms and configurations.(Citation: MSDN MSBuild) MIT License. © 2018 Red Canary

MIT License. Copyright (c) 2020 Strontic.