Benign dotnet 10,959 installs Download

linker.messenger.logger 2.0.16

“linker messenger logger”

High code section entropyLINQ query operations

SHA-256b0e749685a70d84c3495e02a4f66161c66487a60b5cb4307926b0b13df1943be

URLhttps://api.nuget.org/v3-flatcontainer/linker.messenger.logger/2.0.16/linker.messenger.logger.2.0.16.nupkg

Evidence

High code section entropy 0x0–0x30

0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x300000000000000000000000008000    ..............  

.NET Assembly (mscoree.dll) 0x8ec–0x91c

0x8ec7b160000046f1f000006d2fe012a0000{....o.......*..
0x8fc42534a4201000100000000000c000000BSJB............
0x90c76342e302e3330333139000000000500v4.0.30319......
0x91c6c000000                        l...            

.dll extension reference 0x1b94–0x1bc4

0x1b946d657373656e6765722e6c6f67676572messenger.logger
0x1ba42e646c6c00706172616d006974656d00.dll.param.item.
0x1bb44f7065726174696e6753797374656d00OperatingSystem.
0x1bc4436f6e66                        Conf            

LINQ query operations 0x1cf5–0x1d25

0x1cf579496e666f00696e666f00536b697000yInfo.info.Skip.
0x1d0553797374656d2e4c696e7100546f5374System.Linq.ToSt
0x1d1572696e67416e64436c65617200495365ringAndClear.ISe
0x1d25727669636550726f766964          rviceProvid     

PE version resource structure 0x484e–0x487e

0x484e00000000000000000000d60334000000............4...
0x485e560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x486e4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x487e0000bd04effe000001000000020000  ............... 

No evidence locations were recorded for this file. Raw result