Benign dotnet 64,770 installs Download

Soenneker.DataTables.Dtos.ServerResponse 4.0.20

Legitimate NuGet package metadata

“A DTO for translation into table format.”

PE has no signature recordPE ProductVersion has SemVer git hash

SHA-256e74e5ac338c5753583daeafc517718bb9d041edad7efa94e6f6970be87f148af

URLhttps://api.nuget.org/v3-flatcontainer/soenneker.datatables.dtos.serverresponse/4.0.20/soenneker.datatables.dtos.serverresponse.4.0.20.nupkg

MaleculeH(Cm)Md₂(BiPa)

Evidence

.NET managed assembly 0x1e0–0x430

⋯17 more rows
0x2f06f0a0000062a1e02281300000a2a0000o....*..(....*..
0x30042534a4201000100000000000c000000BSJB............
0x31076342e302e3330333139000000000500v4.0.30319......
⋯18 more rows

Hardcoded network URL with domain name 0xd53–0xe23

⋯3 more rows
0xd836d65092e4e45542031302e301a010015me..NET 10.0....
0xd9368747470733a2f2f736f656e6e656b65https://soenneke
0xda3722e636f6d00000c01000752656c6561r.com......Relea
0xdb3736500002a010025436f707972696768se..*..%Copyrigh
⋯7 more rows

PE version resource structure 0x11e0–0x12c0

⋯6 more rows
0x1240000000004800000058400000e6040000....H...X@......
0x12500000000000000000e604340000005600..........4...V.
0x126053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x12704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows

PE version metadata includes CompanyName 0x131a–0x15fa

⋯7 more rows
0x138a6500200066006f0072006d0061007400e. .f.o.r.m.a.t.
0x139a2e00000000004c001600010043006f00......L.....C.o.
0x13aa6d00700061006e0079004e0061006d00m.p.a.n.y.N.a.m.
0x13ba65000000000068007400740070007300e.....h.t.t.p.s.
0x13ca3a002f002f0073006f0065006e006e00:././.s.o.e.n.n.
0x13da65006b00650072002e0063006f006d00e.k.e.r...c.o.m.
0x13ea00007a0029000100460069006c006500..z.)...F.i.l.e.
0x13fa44006500730063007200690070007400D.e.s.c.r.i.p.t.
0x140a69006f006e000000000053006f006500i.o.n.....S.o.e.
⋯4 more rows
0x145a70006f006e0073006500000000003200p.o.n.s.e.....2.
0x146a09000100460069006c00650056006500....F.i.l.e.V.e.
0x147a7200730069006f006e00000000003400r.s.i.o.n.....4.
0x148a2e0030002e00320030002e0030000000..0...2.0...0...
0x149a00007a002d00010049006e0074006500..z.-...I.n.t.e.
0x14aa72006e0061006c004e0061006d006500r.n.a.l.N.a.m.e.
0x14ba000053006f0065006e006e0065006b00..S.o.e.n.n.e.k.
⋯20 more rows

PE version metadata includes ProductVersion 0x160c–0x174c

⋯6 more rows
0x166c52006500730070006f006e0073006500R.e.s.p.o.n.s.e.
0x167c00000000840030000100500072006f00......0...P.r.o.
0x168c64007500630074005600650072007300d.u.c.t.V.e.r.s.
0x169c69006f006e00000034002e0030002e00i.o.n...4...0...
0x16ac320030002b00370039003800380036002.0.+.7.9.8.8.6.
0x16bc380031003500620039003900660030008.1.5.b.9.9.f.0.
0x16cc340065003100650030003400340065004.e.1.e.0.4.4.e.
0x16dc380061006400340061006600380063008.a.d.4.a.f.8.c.
⋯7 more rows

No evidence locations were recorded for this file. Raw result