Benign dotnet 355,516 installs Download

Kayisoft.Abp.DicomCompression.Policy.Domain.Shared 5.2.8

Legitimate .NET NuGet package

“Kayisoft DicomCompression Policy Module”

PE has no signature recordPE ProductVersion has SemVer git hash

Evidence

.NET managed assembly Kayisoft.Abp.DicomCompression.Policy.Domain.Shared.dll · 0x1e0–0x4c0
⋯39 more rows
0x4501700000a2a4a027b14000004027b1500....*J.{.....{..
0x46000046f2000000a2a42534a4201000100..o ...*BSJB....
0x470000000000c00000076342e302e333033........v4.0.303
⋯5 more rows
Hardcoded network URL with domain name Kayisoft.Abp.DicomCompression.Policy.Domain.Shared.dll · 0x1c13–0x1ce3
⋯3 more rows
0x1c4301000d5265706f7369746f727955726c...RepositoryUrl
0x1c534268747470733a2f2f6769746c61622eBhttps://gitlab.
0x1c636b617969636c6f75642e636f6d2f6b61kayicloud.com/ka
0x1c7379692d636c6f75642d656e7465727072yi-cloud-enterpr
⋯7 more rows
PE version resource structure Kayisoft.Abp.DicomCompression.Policy.Domain.Shared.dll · 0x29e0–0x2ac0
⋯6 more rows
0x2a4000000000480000005860000010040000....H...X`......
0x2a5000000000000000001004340000005600..........4...V.
0x2a6053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x2a704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes FileDescription Kayisoft.Abp.DicomCompression.Policy.Domain.Shared.dll · 0x2b1a–0x2e0a
⋯7 more rows
0x2b8a790020004d006f00640075006c006500y. .M.o.d.u.l.e.
0x2b9a00008e0033000100460069006c006500....3...F.i.l.e.
0x2baa44006500730063007200690070007400D.e.s.c.r.i.p.t.
0x2bba69006f006e00000000004b0061007900i.o.n.....K.a.y.
⋯5 more rows
0x2c1a2e005300680061007200650064000000..S.h.a.r.e.d...
0x2c2a0000300008000100460069006c006500..0.....F.i.l.e.
0x2c3a560065007200730069006f006e000000V.e.r.s.i.o.n...
0x2c4a000035002e0032002e0038002e003000..5...2...8...0.
0x2c5a00008e003700010049006e0074006500....7...I.n.t.e.
0x2c6a72006e0061006c004e0061006d006500r.n.a.l.N.a.m.e.
0x2c7a00004b0061007900690073006f006600..K.a.y.i.s.o.f.
⋯17 more rows
0x2d9a7200650064002e0064006c006c000000r.e.d...d.l.l...
0x2daa000082002f000100500072006f006400..../...P.r.o.d.
0x2dba75006300740056006500720073006900u.c.t.V.e.r.s.i.
0x2dca6f006e00000035002e0032002e003800o.n...5...2...8.
0x2dda2b003200610034003600310065003900+.2.a.4.6.1.e.9.
0x2dea370039003000370037003300360039007.9.0.7.7.3.6.9.
0x2dfa360062003500370037003800370039006.b.5.7.7.8.7.9.
0x2e0a370034006200610035003200610037007.4.b.a.5.2.a.7.
NuGet package declares dependencies Kayisoft.Abp.DicomCompression.Policy.Domain.Shared.nuspec · lines 1–19
1<?xml version="1.0" encoding="utf-8"?>
2<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
3 <metadata>
4 <id>Kayisoft.Abp.DicomCompression.Policy.Domain.Shared</id>
⋯15 lines

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.