home

aspnet_state.exe

Microsoft .NET Framework

Microsoft Corporation

The Microsoft ASP.NET State Server is distributed with version 2.0 of the .NET Framework This assembly is part of version 2.0 of the .NET Framework and released with a service pack update.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® .NET Framework

Description:
Microsoft ASP.NET State Server

Version:
2.0.50727.3053 (netfxsp.050727-3000)

MD5:
47056b51ac74630aa158824c57ba2d8c

SHA-1:
c5faa46dc05ad0c26cc6c4b2a04b48d4e0852a07

SHA-256:
7421c26d97c48ae9695ffb9c5971e309f764cb34e2e8752ff883d52f9ff5c1bd

Scanner detections:
1 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 12:47:02 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
infected with Win32.Parite.2
9.0.1.05190

File size:
207.5 KB (212,438 bytes)

Product version:
2.0.50727.3053

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
aspnet_state.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
8/23/2007 12:23:13 AM

Valid to:
2/23/2009 12:33:13 AM

Subject:
CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
610F784D000000000003

File PE Metadata
Compilation timestamp:
7/25/2008 3:10:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
6144:B0xgx7Z7iU+ndu0w2Fl5OOwR9f5Nc+I80vp8:BKg1EU+nO1R9f5Nch80x8

Entry address:
0x4940

Entry point:
E8, F8, FB, FF, FF, E9, A2, FD, FF, FF, FF, 25, 08, 11, 00, 10, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, 68, DD, 49, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, B8, 70, 00, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D...
 
[+]

Code size:
21 KB (21,504 bytes)

Scan aspnet_state.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.