Benign dotnet 23,305 installs Download

Soenneker.Extensions.DateTimeOffsets.DayOfWeeks 4.0.95

Legitimate NuGet package metadata

“A collection of helpful DateTimeOffset DayOfWeek extension methods”

PE has no signature recordPE ProductVersion has SemVer git hash

Evidence

.NET managed assembly 0x468–0x4f8
0x468282900000a2d090717a31d0000012b07()...-........+.
0x4780716a31d0000010c0208282a00000a17..........(*....
0x488282b00000a2a0203282600000a2a0000(+...*..(&...*..
0x49842534a4201000100000000000c000000BSJB............
0x4a876342e302e3330333139000000000500v4.0.30319......
⋯5 more rows
Hardcoded HTTP or WebSocket URL 0x123f–0x130f
⋯3 more rows
0x126f6d65092e4e45542031302e301a010015me..NET 10.0....
0x127f68747470733a2f2f736f656e6e656b65https://soenneke
0x128f722e636f6d00000c01000752656c6561r.com......Relea
0x129f7365000025010020436f707972696768se..%.. Copyrigh
⋯7 more rows
PE version resource structure 0x15e0–0x16c0
⋯6 more rows
0x16400000000048000000584000003e050000....H...X@..>...
0x165000000000000000003e05340000005600........>.4...V.
0x166053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x16704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes CompanyName 0x179a–0x1a3a
⋯3 more rows
0x17ca6f0064007300000000004c0016000100o.d.s.....L.....
0x17da43006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x17ea61006d00650000000000680074007400a.m.e.....h.t.t.
0x17fa700073003a002f002f0073006f006500p.s.:././.s.o.e.
0x180a6e006e0065006b00650072002e006300n.n.e.k.e.r...c.
0x181a6f006d00000088003000010046006900o.m.....0...F.i.
0x182a6c006500440065007300630072006900l.e.D.e.s.c.r.i.
0x183a7000740069006f006e00000000005300p.t.i.o.n.....S.
⋯5 more rows
0x189a66005700650065006b00730000003200f.W.e.e.k.s...2.
0x18aa09000100460069006c00650056006500....F.i.l.e.V.e.
0x18ba7200730069006f006e00000000003400r.s.i.o.n.....4.
0x18ca2e0030002e00390035002e0030000000..0...9.5...0...
0x18da000088003400010049006e0074006500....4...I.n.t.e.
0x18ea72006e0061006c004e0061006d006500r.n.a.l.N.a.m.e.
0x18fa000053006f0065006e006e0065006b00..S.o.e.n.n.e.k.
⋯20 more rows
PE version metadata includes ProductVersion 0x1a58–0x1ba8
⋯7 more rows
0x1ac84f0066005700650065006b0073000000O.f.W.e.e.k.s...
0x1ad8840030000100500072006f0064007500..0...P.r.o.d.u.
0x1ae863007400560065007200730069006f00c.t.V.e.r.s.i.o.
0x1af86e00000034002e0030002e0039003500n...4...0...9.5.
0x1b082b003900300033003400640065006200+.9.0.3.4.d.e.b.
0x1b18380032006300390065003300390061008.2.c.9.e.3.9.a.
0x1b28320062003500390062003400370037002.b.5.9.b.4.7.7.
0x1b3861006300650035003600620033006400a.c.e.5.6.b.3.d.
⋯7 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.