× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: d57b5f2fa2b95e4f2c2f36fc4613cdc7e74fe1ab6cf9cd253f2272f63882f1b7
File name: Assembly-CSharp-firstpass.dll
Detection ratio: 0 / 61
Analysis date: 2017-05-18 20:00:15 UTC ( 1 year, 9 months ago )
Antivirus Result Update
Ad-Aware 20170518
AegisLab 20170518
AhnLab-V3 20170518
Alibaba 20170518
ALYac 20170518
Antiy-AVL 20170518
Arcabit 20170518
Avast 20170518
AVG 20170518
Avira (no cloud) 20170518
AVware 20170518
Baidu 20170503
BitDefender 20170518
Bkav 20170518
CAT-QuickHeal 20170518
ClamAV 20170518
CMC 20170518
Comodo 20170518
CrowdStrike Falcon (ML) 20170130
Cyren 20170518
DrWeb 20170518
Emsisoft 20170518
Endgame 20170515
ESET-NOD32 20170518
F-Prot 20170518
F-Secure 20170518
Fortinet 20170518
GData 20170518
Ikarus 20170518
Sophos ML 20170516
Jiangmin 20170518
K7AntiVirus 20170518
K7GW 20170518
Kaspersky 20170518
Kingsoft 20170518
Malwarebytes 20170518
McAfee 20170518
McAfee-GW-Edition 20170518
Microsoft 20170518
eScan 20170518
NANO-Antivirus 20170518
nProtect 20170518
Palo Alto Networks (Known Signatures) 20170518
Panda 20170518
Qihoo-360 20170518
Rising 20170518
SentinelOne (Static ML) 20170516
Sophos AV 20170518
SUPERAntiSpyware 20170518
Symantec 20170518
Symantec Mobile Insight 20170518
Tencent 20170518
TheHacker 20170516
TotalDefense 20170518
TrendMicro-HouseCall 20170518
VBA32 20170518
VIPRE 20170518
ViRobot 20170518
Webroot 20170518
WhiteArmor 20170517
Yandex 20170518
Zillya 20170518
ZoneAlarm by Check Point 20170518
Zoner 20170518
The file being studied is a Portable Executable file! More specifically, it is a Win32 DLL file for the Windows command line subsystem.
FileVersionInfo properties
Copyright

Original name Assembly-CSharp-firstpass.dll
Internal name Assembly-CSharp-firstpass.dll
File version 0.0.0.0
Description
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2015-04-29 12:09:04
Entry Point 0x00002000
Number of sections 3
.NET details
Module Version ID 7d504146-27df-43c5-aa27-038932add110
PE sections
PE imports
_CorDllMain
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
NEUTRAL 1
PE resources
ExifTool file metadata
UninitializedDataSize
0

LinkerVersion
6.0

ImageVersion
0.0

FileVersionNumber
0.0.0.0

LanguageCode
Neutral

FileFlagsMask
0x003f

CharacterSet
Unicode

InitializedDataSize
1024

EntryPoint
0x2000

OriginalFileName
Assembly-CSharp-firstpass.dll

MIMEType
application/octet-stream

FileVersion
0.0.0.0

TimeStamp
2015:04:29 13:09:04+01:00

FileType
Win32 DLL

PEType
PE32

InternalName
Assembly-CSharp-firstpass.dll

ProductVersion
0.0.0.0

SubsystemVersion
4.0

OSVersion
4.0

FileOS
Win32

Subsystem
Windows command line

MachineType
Intel 386 or later, and compatibles

CodeSize
72704

FileSubtype
0

ProductVersionNumber
0.0.0.0

FileTypeExtension
dll

ObjectFileType
Dynamic link library

Compressed bundles
File identification
MD5 03ea4dd48c6c5b6d5a8126c066034b79
SHA1 333c8c11b36eadc3ae3bede0ce0750a4b7782f33
SHA256 d57b5f2fa2b95e4f2c2f36fc4613cdc7e74fe1ab6cf9cd253f2272f63882f1b7
ssdeep
1536:Oj70Hkeqe8NaXCS75PrqNjkqx945o+o7H16Aqsq+RSZEvze:JqNjkY945ov7HsAxq+Ambe

authentihash 42e9785769e6d7b961acd282445d405df842d4a53927097be49b2db99803acf5
imphash dae02f32a21e03ce65412f6e56942daa
File size 73.0 KB ( 74752 bytes )
File type Win32 DLL
Magic literal
PE32 executable for MS Windows (DLL) (console) Intel 80386 32-bit Mono/.Net assembly

TrID Win32 Dynamic Link Library (generic) (43.5%)
Win32 Executable (generic) (29.8%)
Generic Win/DOS Executable (13.2%)
DOS Executable Generic (13.2%)
VXD Driver (0.2%)
Tags
assembly pedll

VirusTotal metadata
First submission 2016-05-13 07:46:43 UTC ( 2 years, 9 months ago )
Last submission 2016-05-13 07:46:43 UTC ( 2 years, 9 months ago )
File names Assembly-CSharp-firstpass.dll
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!