mscorlib.dll
- File Path:
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.8\mscorlib.dll - Description: Microsoft Common Language Runtime Class Library
- Comments: Flavor=Retail
Hashes
| Type | Hash |
|---|---|
| MD5 | 0A4588D30AF06BD03957BD1D659A370C |
| SHA1 | D61E518C70963545DF047BA752098A312209177B |
| SHA256 | C977324E60809239117FD7B77113FB4DD146198969CE748D6C143AB43D295A58 |
| SHA384 | 4CE30412610EBEFDC6FBF16EE634510571CDBDFDE90037DFA9D61CCEB1DB062174B89A31568E05C4421660FEB03DD2A6 |
| SHA512 | 642420A25B5AECF39B8ACBA3BC0A601D223BC8F0C8C803F37355DCEF8B1825CC1EB43481448D326B831C7E554B612346EE7DBEA9A45725D27B4EAC78A81ECC1D |
| SSDEEP | 49152:vG6e23pLc02JdX+QXsfP3uF92j9sk/IRUnWXJ:v+ALcJo3GJ |
| IMP | DAE02F32A21E03CE65412F6E56942DAA |
| PESHA1 | 68DFAAF5BA34CF4A575848970B847291952360A1 |
| PE256 | 9D33871F5CB640EE1985E091FAD15A79223A8DF93FE234DA9E1FD4EA353BF1E3 |
Signature
- Status: Signature verified.
- Serial:
33000001519E8D8F4071A30E41000000000151 - Thumbprint:
62009AAABDAE749FD47D19150958329BF6FF4B34 - Issuer: CN=Microsoft Code Signing PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
File Metadata
- Original Filename: mscorlib.dll
- Product Name: Microsoft .NET Framework
- Company Name: Microsoft Corporation
- File Version: 4.8.4084.0 built by: NET48REL1
- Product Version: 4.8.4084.0
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/76
- VirusTotal Link: https://www.virustotal.com/gui/file/c977324e60809239117fd7b77113fb4dd146198969ce748d6c143ab43d295a58/detection
Possible Misuse
The following table contains possible examples of mscorlib.dll being misused. While mscorlib.dll is not inherently malicious, its legitimate functionality can be abused for malicious purposes.
| Source | Source File | Example | License |
|---|---|---|---|
| sigma | image_load_susp_script_dotnet_clr_dll_load.yml | - '\mscorlib.dll' |
DRL 1.0 |
MIT License. Copyright (c) 2020-2021 Strontic.