Benign dotnet 29,636 installs Download

Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql 5.2.9

Legitimate .NET library package

“Kayisoft DicomAbnormal Module”

PE has no signature recordPE ProductVersion has SemVer git hash

Evidence

.NET managed assembly Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.dll · 0x4f4–0x584
0x4f400000a2a133003001500000001000011...*.0..........
0x504027b4e00000a2d0b0217250a7d4e0000.{N...-...%.}N..
0x5140a062a162a2202167d4e00000a2a062a..*.*"..}N...*.*
0x52442534a4201000100000000000c000000BSJB............
0x53476342e302e3330333139000000000500v4.0.30319......
⋯5 more rows
Hardcoded HTTP or WebSocket URL Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.dll · 0x2533–0x2603
⋯3 more rows
0x256301000d5265706f7369746f727955726c...RepositoryUrl
0x25734268747470733a2f2f6769746c61622eBhttps://gitlab.
0x25836b617969636c6f75642e636f6d2f6b61kayicloud.com/ka
0x259379692d636c6f75642d656e7465727072yi-cloud-enterpr
⋯7 more rows
PE version resource structure Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.dll · 0x29e0–0x2ac0
⋯6 more rows
0x2a40000000004800000058600000e4030000....H...X`......
0x2a500000000000000000e403340000005600..........4...V.
0x2a6053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x2a704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes FileDescription Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.dll · 0x2b1a–0x2e0a
⋯6 more rows
0x2b7a4d006f00640075006c00650000008600M.o.d.u.l.e.....
0x2b8a2f000100460069006c00650044006500/...F.i.l.e.D.e.
0x2b9a73006300720069007000740069006f00s.c.r.i.p.t.i.o.
0x2baa6e00000000004b006100790069007300n.....K.a.y.i.s.
⋯4 more rows
0x2bfa6f007300740067007200650053007100o.s.t.g.r.e.S.q.
0x2c0a6c000000000030000800010046006900l.....0.....F.i.
0x2c1a6c006500560065007200730069006f00l.e.V.e.r.s.i.o.
0x2c2a6e000000000035002e0032002e003900n.....5...2...9.
0x2c3a2e003000000086003300010049006e00..0.....3...I.n.
0x2c4a7400650072006e0061006c004e006100t.e.r.n.a.l.N.a.
0x2c5a6d00650000004b006100790069007300m.e...K.a.y.i.s.
⋯16 more rows
0x2d6a72006500530071006c002e0064006c00r.e.S.q.l...d.l.
0x2d7a6c000000000082002f00010050007200l......./...P.r.
0x2d8a6f006400750063007400560065007200o.d.u.c.t.V.e.r.
0x2d9a730069006f006e00000035002e003200s.i.o.n...5...2.
0x2daa2e0039002b0066003800360036003900..9.+.f.8.6.6.9.
0x2dba310032003200640034003800630031001.2.2.d.4.8.c.1.
0x2dca360037003000380064003600630036006.7.0.8.d.6.c.6.
0x2dda350066006600380039003200650034005.f.f.8.9.2.e.4.
⋯3 more rows
NuGet package declares dependencies Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql.nuspec · lines 1–19
1<?xml version="1.0" encoding="utf-8"?>
2<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
3 <metadata>
4 <id>Kayisoft.Abp.DicomAbnormal.Producer.PostgreSql</id>
⋯15 lines

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.