Benign dotnet 45,396 installs Download

JD.AI.Channels.Signal 1.1.688

“Signal channel adapter for JD.AI Gateway — bridges to signal-cli via JSON-RPC.”

.NET child process stdio redirection.NET child stderr redirection

SHA-2563452329112f8cc79c8bb2656450e4dd4edccd9f72275961ec09d82b00b38d57c

URLhttps://api.nuget.org/v3-flatcontainer/jd.ai.channels.signal/1.1.688/jd.ai.channels.signal.1.1.688.nupkg

Evidence

.NET Assembly (mscoree.dll) 0x132c–0x135c

0x132c36027c3400000403285500000a2a00006.|4....(U...*..
0x133c42534a4201000100000000000c000000BSJB............
0x134c76342e302e3330333139000000000500v4.0.30319......
0x135c6c000000                        l...            

WebSocket async connect method 0x2399–0x23e9

0x23996e6f6e796d6f75735479706530603400nonymousType0`4.
0x23a93c436f6e6e6563744173796e633e645f<ConnectAsync>d_
0x23b95f3139003c4d6f64756c653e00537973_19.<Module>.Sys
⋯3 more rows

.dll extension reference 0x2bd2–0x2c02

0x2bd22e4368616e6e656c732e5369676e616c.Channels.Signal
0x2be22e646c6c004b696c6c006765745f4974.dll.Kill.get_It
0x2bf2656d007365745f4974656d0053797374em.set_Item.Syst
0x2c02656d0067                        em.g            

.NET child process stdio redirection 0x2ca9–0x2d19

⋯3 more rows
0x2cd96e0052756e007365745f537461727449n.Run.set_StartI
0x2ce96e666f0050726f636573735374617274nfo.ProcessStart
0x2cf9496e666f007365745f54696d65737461Info.set_Timesta
0x2d096d70003c6a736f6e7270633e6a5f5f54mp.<jsonrpc>j__T
0x2d1950617200                        Par.            

PE version resource structure 0x6e4e–0x6e7e

0x6e4e00000000000000000000440434000000..........D.4...
0x6e5e560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x6e6e4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x6e7e0000bd04effe0000010001000100d7  ............... 

No evidence locations were recorded for this file. Raw result