File Name | SharpMonoInjector.dll |
File Type |
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
Scanner Version | 1.0.170.174 |
Database Version | 2024-03-29 23:00:32 UTC |
Malware family: GenericMC
Hash Type | Value | Action |
---|---|---|
MD5 |
d5f8ef2cdc4323ddd7845c9b90e4c6fd
|
|
SHA1 |
fb40ced0fe0ba5bc83b0edc381c1c475ff773ff8
|
|
SHA256 |
29217632db48464afb84f163f6d389af525edb7e951384ff5ea91d91c932ee96
|
|
SHA512 |
cd6efd9093b1b4ab867f0098e281655bd28af721f3a45efcfd9771174dc47dbc05e63e5d80e10296881facc7e100b834501c3bba4088e8bde3db6f88d9e27ad2
|
|
ImpHash |
dae02f32a21e03ce65412f6e56942daa
|
Image Base | 0x10000000 |
Entry Point | 0x100071be |
Compilation Time | 2098-06-30 06:17:01 |
Checksum | 0x00000000 (Actual: 0x0000b66e) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
|
PDB Path | D:\projects\SharpMonoInjector\src\SharpMonoInjector\obj\Release\netstandard2.0\SharpMonoInjector.pdb |
Digital Signature | The PE file does not contain a certificate table. |
Imports |
1 libraries
mscoree |
Exports | 0 functions |
Resources | 1 Resources |
Sections | 3 Sections |
Translation | 0x0000 0x04b0 |
CompanyName | SharpMonoInjector |
FileDescription | SharpMonoInjector |
FileVersion | 1.0.0.0 |
InternalName | SharpMonoInjector.dll |
LegalCopyright | |
OriginalFilename | SharpMonoInjector.dll |
ProductName | SharpMonoInjector |
ProductVersion | 1.0.0 |
Assembly Version | 1.0.0.0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00002000 |
20,948 bytes | 20,992 bytes | 5.69 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
22BBBF3975DEE784E20C1017939FEE33 |
.rsrc |
0x00008000 |
876 bytes | 1,024 bytes | 2.77 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
9D752588571A7FFA58DA49F925241539 |
.reloc |
0x0000a000 |
12 bytes | 512 bytes | 0.08 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
0C2CB1FE0552E7BDEA3C8A9A406AAC4F |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_VERSION | 1 | 784 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Malware.Win32.GenericMC.cc without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system