Product directory: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/artifacts/vendor_product/msi_extract/Program Files/Pacsgear/Pacsgear Image Exchange Service PGImageExchQueue.exe sha256=853e7ea4ac56cc85df9a21a81c993a36ac3bff803e35b7ba3aa7c1438a28525c PGImageExchangeQueueSvc.exe sha256=95c8fcb4a934dd809951916e74872ccce0cb8e201f3ad0508542c316be3d1299 -- Remoting registration anchors in PGImageExchQueue.exe -- 2613: .field public int32 RemotingPort 2655: IL_005c: stfld int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 7140: IL_002a: ldflda int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 7142: IL_0034: ldstr "/PGImageExchange" 14836: .field private class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel mRemoteChannel 16408: IL_000f: ldfld int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 16409: IL_0014: newobj instance void class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel::'.ctor'(int32) 16410: IL_0019: stfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16412: IL_001f: ldfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16416: IL_0027: ldstr "Unable to create TcpChannel on port " 16419: IL_0032: ldflda int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 16426: IL_0048: ldfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16427: IL_004d: callvirt instance object class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel::get_ChannelData() 16472: IL_009f: ldfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16474: IL_00a5: call void class [mscorlib]System.Runtime.Remoting.Channels.ChannelServices::RegisterChannel(class [mscorlib]System.Runtime.Remoting.Channels.IChannel, bool) 16492: IL_00df: ldstr "PGImageExchange" 16494: IL_00e5: call void class [mscorlib]System.Runtime.Remoting.RemotingConfiguration::RegisterWellKnownServiceType(class [mscorlib]System.Type, string, valuetype [mscorlib]System.Runtime.Remoting.WellKnownObjectMode) 16566: IL_0015: ldflda int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 16568: IL_001f: ldstr "/PGImageExchange" [+] Parent vulnerable remoting surface statically confirmed.