HashPEFileHandle

gadget

CLR v2 adopts -c as a native PE-file handle in System.Security.Policy.Hash, which may later crash or corrupt the target process when native code consumes or releases it. .NET 4 removed the branch. No code execution or memory read/write is proved.

Declared metadata, not a runtime result. How to read evidence.

.\ysonet.exe -g HashPEFileHandle -h

Target declarations

Variant	Formatters	Inputs	Requirements	Runtime tokens
Default	BinaryFormatter, LosFormatter	other	built-in, net-framework	net-fx-2.0

No module-specific options declared.

Credit: [Finders: Soroush Dalili]

All modules · Full catalog JSON