---
id: "dotnet_typelib_id"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["software", "identifiers"]
langs: ["common"]
quality: 75
url: "https://registry.apicrafter.io/datatype/dotnet_typelib_id"
---

# .NET TypeLib ID (assembly GUID) (`dotnet_typelib_id`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

GUID in the GuidAttribute of a .NET assembly, written by Visual Studio into Properties/AssemblyInfo.cs when a project is created ([assembly: Guid("...")]). It becomes the ID of the type library if the assembly is exposed to COM. Because it stays the same across all builds of a project, threat hunters use it to link malware and offensive tools to their source project; VirusTotal reports it as dot_net_guids.typelib_id. The text form is a standard UUID, usually in lowercase.

- Parent datatype: `uuid`
- Personal data (PII): no
- Categories: Software development (software), Universal unique identifiers (identifiers)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$
```

## Examples

- `aec32155-d589-4150-8fe7-2900df4554c8` — TypeLib ID of GhostPack Seatbelt (Seatbelt/Properties/AssemblyInfo.cs)
- `658c8b7f-3664-4a95-9572-a3e5871dfc06` — TypeLib ID of GhostPack Rubeus (Rubeus/Properties/AssemblyInfo.cs)
- `{aec32155-d589-4150-8fe7-2900df4554c8}` (invalid example) — Braced GUID form, which the GuidAttribute does not use

## Sources

- doc: <https://learn.microsoft.com/en-us/dotnet/api/system.runtime.interopservices.guidattribute>
- other: <https://virustotal.readme.io/reference/file-object-dot-net-guids>
- other: <https://github.com/GhostPack/Seatbelt/blob/master/Seatbelt/Properties/AssemblyInfo.cs>

## Quality

Score 75/100. Missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/dotnet_typelib_id.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/software/dotnet_typelib_id.yaml>