× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 5a01247d99897ad20f5896f9c23387777192dfa7645934d56def79e938302500
File name: System.Core.dll
Detection ratio: 0 / 69
Analysis date: 2019-02-15 01:04:12 UTC ( 1 month ago )
Trusted source! This file belongs to the Microsoft Corporation software catalogue.
Antivirus Result Update
ALYac 20190214
AVG 20190214
Acronis 20190213
Ad-Aware 20190215
AegisLab 20190214
AhnLab-V3 20190214
Alibaba 20180921
Antiy-AVL 20190214
Arcabit 20190214
Avast 20190214
Avast-Mobile 20190214
Avira (no cloud) 20190214
Babable 20180918
Baidu 20190202
BitDefender 20190215
Bkav 20190214
CAT-QuickHeal 20190214
CMC 20190214
ClamAV 20190214
Comodo 20190215
CrowdStrike Falcon (ML) 20181023
Cylance 20190215
Cyren 20190215
DrWeb 20190214
ESET-NOD32 20190215
Emsisoft 20190214
Endgame 20181108
F-Prot 20190215
F-Secure 20190215
Fortinet 20190215
GData 20190214
Sophos ML 20181128
Jiangmin 20190215
K7AntiVirus 20190214
K7GW 20190214
Kaspersky 20190215
Kingsoft 20190215
MAX 20190215
Malwarebytes 20190215
McAfee 20190214
McAfee-GW-Edition 20190214
eScan 20190215
Microsoft 20190214
NANO-Antivirus 20190215
Palo Alto Networks (Known Signatures) 20190215
Panda 20190214
Qihoo-360 20190215
Rising 20190215
SUPERAntiSpyware 20190213
SentinelOne (Static ML) 20190203
Sophos AV 20190214
Symantec 20190214
TACHYON 20190215
Tencent 20190215
TheHacker 20190212
TotalDefense 20190214
Trapmine 20190123
TrendMicro 20190214
TrendMicro-HouseCall 20190215
Trustlook 20190215
VBA32 20190214
VIPRE 20190214
ViRobot 20190215
Webroot 20190215
Yandex 20190213
Zillya 20190214
ZoneAlarm by Check Point 20190214
Zoner 20190215
eGambit 20190215
Cybereason 20190109
Symantec Mobile Insight 20190207
The file being studied is a Portable Executable file! More specifically, it is a Win32 DLL file.
Authenticode signature block and FileVersionInfo properties
Copyright
© Microsoft Corporation. All rights reserved.

Product Microsoft® .NET Framework
Original name System.Core.dll
Internal name System.Core.dll
File version 4.6.26814.2
Description .NET Framework
Comments Flavor=Retail
Signature verification Signed file, verified signature
Signing date 7:19 AM 8/14/2018
Signers
[+] Microsoft Corporation
Status Valid
Issuer Microsoft Code Signing PCA 2011
Valid from 07:08 PM 07/12/2018
Valid to 07:08 PM 07/26/2019
Valid usage Microsoft Publisher, Code Signing
Algorithm sha256RSA
Thumbprint C3A3D43788E7ABCD287CB4F5B6583043774F99D2
Serial number 33 00 00 01 03 5E 25 1C 99 1F A3 1E B8 00 00 00 00 01 03
[+] Microsoft Code Signing PCA 2011
Status Valid
Issuer Microsoft Root Certificate Authority 2011
Valid from 07:59 PM 07/08/2011
Valid to 08:09 PM 07/08/2026
Valid usage All
Algorithm sha256RSA
Thumbprint F252E794FE438E35ACE6E53762C0A234A2C52135
Serial number 61 0E 90 D2 00 00 00 00 00 03
[+] Microsoft Root Certificate Authority 2011
Status Valid
Issuer Microsoft Root Certificate Authority 2011
Valid from 10:05 PM 03/22/2011
Valid to 10:13 PM 03/22/2036
Valid usage All
Algorithm sha256RSA
Thumbprint 8F43288AD272F3103B6FB1428485EA3014C0BCFE
Serial number 3F 8B C8 B5 FC 9F B2 96 43 B5 69 D6 6C 42 E1 44
Counter signers
[+] Microsoft Time-Stamp Service
Status This certificate or one of the certificates in the certificate chain is not time valid.
Issuer Microsoft Time-Stamp PCA 2010
Valid from 04:56 PM 09/07/2016
Valid to 04:56 PM 09/07/2018
Valid usage Timestamp Signing
Algorithm sha256RSA
Thumbrint 07C09597AE2E4E6EC9D375F6D98951988B206D3A
Serial number 33 00 00 00 B4 43 3A 1C FE B6 BA 52 89 00 00 00 00 00 B4
[+] Microsoft Time-Stamp PCA 2010
Status Valid
Issuer Microsoft Root Certificate Authority 2010
Valid from 08:36 PM 07/01/2010
Valid to 08:46 PM 07/01/2025
Valid usage All
Algorithm sha256RSA
Thumbrint 2AA752FE64C49ABE82913C463529CF10FF2F04EE
Serial number 61 09 81 2A 00 00 00 00 00 02
[+] Microsoft Root Certificate Authority 2010
Status Valid
Issuer Microsoft Root Certificate Authority 2010
Valid from 08:57 PM 06/23/2010
Valid to 09:04 PM 06/23/2035
Valid usage All
Algorithm sha256RSA
Thumbrint 3B1EFD3A66EA28B16697394703A72CA340A05BD5
Serial number 28 CC 3A 25 BF BA 44 AC 44 9A 9B 58 6B 43 39 AA
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2018-08-14 05:18:57
Number of sections 2
.NET details
Module Version ID 93fd2caf-e201-49c6-a193-6ea4414abc92
PE sections
Overlays
MD5 60524ead9fb97c6519d9995dd01ca0a3
File type data
Offset 11776
Size 9176
Entropy 7.39
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
NEUTRAL 1
PE resources
Debug information
Compressed bundles
File identification
MD5 0c14105b9e65a60f53dd6e9a120cb8d3
SHA1 962221e7df6f00e0fc3b722a1489fb4429c50778
SHA256 5a01247d99897ad20f5896f9c23387777192dfa7645934d56def79e938302500
ssdeep
384:ZcWjYW0wGnAi1RaeLsB5P7n1dyVo1dppRycqEfaxC6JwOXpytYc4HRN7LhUl4M5w:7V7asB5P7n1dyVo1dppRycqEf0JwOoON

authentihash c8d903cc724f46bca0bf9612a58be5180c81b34523a979a3f8d3e7075f2e2d04
File size 20.5 KB ( 20952 bytes )
File type Win32 DLL
Magic literal
PE32 executable for MS Windows (DLL) (console) Intel 80386 32-bit Mono/.Net assembly

TrID Win32 Executable (generic) (33.1%)
DOS Executable Borland Pascal 7.0x (14.9%)
OS/2 Executable (generic) (14.9%)
Generic Win/DOS Executable (14.7%)
DOS Executable Generic (14.7%)
Tags
assembly pedll signed overlay trusted

Trusted verdicts
This file belongs to the Microsoft Corporation software catalogue. The file is often found with System.Core.dll as its name.
VirusTotal metadata
First submission 2018-09-12 21:14:05 UTC ( 6 months, 1 week ago )
Last submission 2018-09-12 21:14:05 UTC ( 6 months, 1 week ago )
File names System.Core.dll
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!