Benign dotnet 1,835 installs Download

WtExcelLib 10.2607.9299

“Package Description”

High code section entropyLINQ query operations

SHA-256e64451e6d728a8f8c48e27d78451d2297d3912059210449aac3e7aa7e5f0e0c6

URLhttps://api.nuget.org/v3-flatcontainer/wtexcellib/10.2607.9299/wtexcellib.10.2607.9299.nupkg

Evidence

High code section entropy 0x0–0x30

0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x300000000000000000000000008000    ..............  

.NET Assembly (mscoree.dll) 0x520–0x550

0x52019aa7723933b7e849eb492b33e111cb1..w#.;~.....>...
0x53042534a4201000100000000000c000000BSJB............
0x54076342e302e3330333139000000000500v4.0.30319......
0x5506c000000                        l...            

.dll extension reference 0xa7b–0xaab

0xa7b0080020000005774457863656c4c6962......WtExcelLib
0xa8b2e646c6c005774457863656c4c696200.dll.WtExcelLib.
0xa9b3c4d6f64756c653e00457863656c5574<Module>.ExcelUt
0xaab696c0053                        il.S            

LINQ query operations 0xffc–0x102c

0xffc6542617365007365745f56616c756500eBase.set_Value.
0x100c53797374656d2e4c696e7100456e756dSystem.Linq.Enum
0x101c657261626c6500436f756e74004c6f61erable.Count.Loa
0x102c6446726f6d436f6c6c6563          dFromCollec     

PE version resource structure 0x3a4e–0x3a7e

0x3a4e00000000000000000000560334000000..........V.4...
0x3a5e560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x3a6e4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x3a7e0000bd04effe000001002f0a0a0000  ........../.... 

No evidence locations were recorded for this file. Raw result