Benign dotnet 90,335 installs Download

Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ 5.2.8

Legitimate NuGet package metadata

“Kayisoft DicomCompression Module”

PE has no signature recordPE ProductVersion has SemVer git hash

Evidence

.NET managed assembly Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.dll · 0x790–0x820
0x790281b00000a2a3603027b1b0000046f3b(....*6..{....o;
0x7a000000a2a1e02281b00000a2a4a027b1c...*..(....*J.{.
0x7b0000004252d02262a036f3c00000a2a00...%-.&*.o<...*.
0x7c042534a4201000100000000000c000000BSJB............
0x7d076342e302e3330333139000000000500v4.0.30319......
⋯5 more rows
Hardcoded network URL with domain name Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.dll · 0x258a–0x265a
⋯3 more rows
0x25ba01000d5265706f7369746f727955726c...RepositoryUrl
0x25ca4268747470733a2f2f6769746c61622eBhttps://gitlab.
0x25da6b617969636c6f75642e636f6d2f6b61kayicloud.com/ka
0x25ea79692d636c6f75642d656e7465727072yi-cloud-enterpr
⋯7 more rows
PE version resource structure Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.dll · 0x29e0–0x2ac0
⋯6 more rows
0x2a4000000000480000005860000010040000....H...X`......
0x2a5000000000000000001004340000005600..........4...V.
0x2a6053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x2a704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes FileDescription Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.dll · 0x2b1a–0x2e0a
⋯6 more rows
0x2b7a6f006e0020004d006f00640075006c00o.n. .M.o.d.u.l.
0x2b8a65000000000094003600010046006900e.......6...F.i.
0x2b9a6c006500440065007300630072006900l.e.D.e.s.c.r.i.
0x2baa7000740069006f006e00000000004b00p.t.i.o.n.....K.
⋯6 more rows
0x2c1a690074004d0051000000300008000100i.t.M.Q...0.....
0x2c2a460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x2c3a69006f006e000000000035002e003200i.o.n.....5...2.
0x2c4a2e0038002e003000000094003a000100..8...0.....:...
0x2c5a49006e007400650072006e0061006c00I.n.t.e.r.n.a.l.
0x2c6a4e0061006d00650000004b0061007900N.a.m.e...K.a.y.
⋯18 more rows
0x2d9a690074004d0051002e0064006c006c00i.t.M.Q...d.l.l.
0x2daa000082002f000100500072006f006400..../...P.r.o.d.
0x2dba75006300740056006500720073006900u.c.t.V.e.r.s.i.
0x2dca6f006e00000035002e0032002e003800o.n...5...2...8.
0x2dda2b003200610034003600310065003900+.2.a.4.6.1.e.9.
0x2dea370039003000370037003300360039007.9.0.7.7.3.6.9.
0x2dfa360062003500370037003800370039006.b.5.7.7.8.7.9.
0x2e0a370034006200610035003200610037007.4.b.a.5.2.a.7.
NuGet package declares dependencies Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ.nuspec · lines 1–15
1<?xml version="1.0" encoding="utf-8"?>
2<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
3 <metadata>
4 <id>Kayisoft.Abp.DicomCompression.PostCompressor.RabbitMQ</id>
⋯11 lines

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.