Benign dotnet Download

LFDCC.IEC60870.CS101 4.0.2

Legitimate industrial protocol library

“IEC 60870-5-101 protocol library (balanced/unbalanced link layer, serial and TCP transport, client/server) built on IEC60870.Core.”

PE has no signature recordPE ProductVersion has SemVer git hash
SHA-256e2d6f477fca53f9bc6dac26fab6aade27b1e91422653ab456a538ab611dd26a6

Evidence

.NET managed assembly IEC60870.CS101.dll · 0x96b8–0x9748
0x96b804027ca201000428bd00000a2a000000..|....(....*...
0x96c80110000000000e00c6d4001932000001............2...
0x96d836027ca20100040328be00000a2a00006.|.....(....*..
0x96e842534a4201000100000000000c000000BSJB............
0x96f876342e302e3330333139000000000500v4.0.30319......
⋯5 more rows
.NET TcpClient class reference IEC60870.CS101.dll · 0x1138c–0x1144c
⋯3 more rows
0x113bc637053657373696f6e436c69656e7400cpSessionClient.
0x113cc546370436c69656e74004e6577436c69TcpClient.NewCli
0x113dc656e7400476574456c656d656e740053ent.GetElement.S
⋯7 more rows
PE version resource structure IEC60870.CS101.dll · 0x15de0–0x15ec0
⋯6 more rows
0x15e4000000000480000005880010084040000....H...X.......
0x15e5000000000000000008404340000005600..........4...V.
0x15e6053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x15e704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes CompanyName IEC60870.CS101.dll · 0x1601a–0x162ea
⋯3 more rows
0x1604a720065002e00000000002c0006000100r.e.......,.....
0x1605a43006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x1606a61006d006500000000004c0046004400a.m.e.....L.F.D.
0x1607a43004300000046000f00010046006900C.C...F.....F.i.
0x1608a6c006500440065007300630072006900l.e.D.e.s.c.r.i.
0x1609a7000740069006f006e00000000004900p.t.i.o.n.....I.
0x160aa45004300360030003800370030002e00E.C.6.0.8.7.0...
0x160ba43005300310030003100000000003000C.S.1.0.1.....0.
0x160ca08000100460069006c00650056006500....F.i.l.e.V.e.
0x160da7200730069006f006e00000000003400r.s.i.o.n.....4.
0x160ea2e0030002e0032002e00300000004600..0...2...0...F.
0x160fa1300010049006e007400650072006e00....I.n.t.e.r.n.
0x1610a61006c004e0061006d00650000004900a.l.N.a.m.e...I.
⋯15 more rows
0x1620a3800370030002e0043005300310030008.7.0...C.S.1.0.
0x1621a31000000000082002f000100500072001......./...P.r.
0x1622a6f006400750063007400560065007200o.d.u.c.t.V.e.r.
0x1623a730069006f006e00000034002e003000s.i.o.n...4...0.
0x1624a2e0032002b0038003300360062003800..2.+.8.3.6.b.8.
0x1625a64006300390035006100380036006100d.c.9.5.a.8.6.a.
0x1626a370061003800390064006600390039007.a.8.9.d.f.9.9.
0x1627a63003500390031006500370038006200c.5.9.1.e.7.8.b.
⋯7 more rows
NuGet package declares dependencies LFDCC.IEC60870.CS101.nuspec · lines 1–18
1<?xml version="1.0" encoding="utf-8"?>
2<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
3 <metadata>
4 <id>LFDCC.IEC60870.CS101</id>
⋯14 lines

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.