runtime/dotnet

compiled to the .NET platform

rule:
  meta:
    name: compiled to the .NET platform
    namespace: runtime/dotnet
    authors:
      - william.ballenthin@mandiant.com
    scopes:
      static: file
      dynamic: file
    examples:
      - b9f5bd514485fb06da39beff051b9fdc
  features:
    - or:
      - format: dotnet
      - import: mscoree._CorExeMain
      - import: mscoree._corexemain
      - import: mscoree._CorDllMain
      - import: mscoree._cordllmain

last edited: 2023-11-24 10:34:28