Benign dotnet 19,727 installs Download

Soenneker.Extensions.ApplicationBuilder.Swagger 4.0.96

Legitimate NuGet package metadata

“A collection of helpful IApplicationBuilder extension methods involving Swagger/Swashbuckle”

PE has no signature recordPE ProductVersion has SemVer git hash

Evidence

.NET managed assembly 0x1e0–0x430
⋯13 more rows
0x2b003281800000a03281900000a2a000000.(.....(....*...
0x2c042534a4201000100000000000c000000BSJB............
0x2d076342e302e3330333139000000000500v4.0.30319......
⋯22 more rows
Hardcoded HTTP or WebSocket URL 0xbd7–0xca7
⋯3 more rows
0xc076d65092e4e45542031302e301a010015me..NET 10.0....
0xc1768747470733a2f2f736f656e6e656b65https://soenneke
0xc27722e636f6d00000c01000752656c6561r.com......Relea
0xc37736500002a010025436f707972696768se..*..%Copyrigh
⋯7 more rows
PE version resource structure 0xfe0–0x10c0
⋯6 more rows
0x10400000000048000000584000007a050000[email protected]...
0x105000000000000000007a05340000005600........z.4...V.
0x106053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x10704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes CompanyName 0x111a–0x140a
⋯14 more rows
0x11fa63006b006c00650000004c0016000100c.k.l.e...L.....
0x120a43006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x121a61006d00650000000000680074007400a.m.e.....h.t.t.
0x122a700073003a002f002f0073006f006500p.s.:././.s.o.e.
0x123a6e006e0065006b00650072002e006300n.n.e.k.e.r...c.
0x124a6f006d00000088003000010046006900o.m.....0...F.i.
0x125a6c006500440065007300630072006900l.e.D.e.s.c.r.i.
0x126a7000740069006f006e00000000005300p.t.i.o.n.....S.
⋯5 more rows
0x12ca77006100670067006500720000003200w.a.g.g.e.r...2.
0x12da09000100460069006c00650056006500....F.i.l.e.V.e.
0x12ea7200730069006f006e00000000003400r.s.i.o.n.....4.
0x12fa2e0030002e00390036002e0030000000..0...9.6...0...
0x130a000088003400010049006e0074006500....4...I.n.t.e.
0x131a72006e0061006c004e0061006d006500r.n.a.l.N.a.m.e.
0x132a000053006f0065006e006e0065006b00..S.o.e.n.n.e.k.
⋯14 more rows
PE version metadata includes ProductVersion 0x1494–0x1664
⋯7 more rows
0x150453007700610067006700650072000000S.w.a.g.g.e.r...
0x1514840030000100500072006f0064007500..0...P.r.o.d.u.
0x152463007400560065007200730069006f00c.t.V.e.r.s.i.o.
0x15346e00000034002e0030002e0039003600n...4...0...9.6.
0x15442b003200380032006300650032003500+.2.8.2.c.e.2.5.
0x1554380033006100380031003300650062008.3.a.8.1.3.e.b.
0x156465003100340039006100340061006400e.1.4.9.a.4.a.d.
0x1574390035003700330064006600390064009.5.7.3.d.f.9.d.
⋯15 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.