Benign dotnet 15,490 installs Download

TestZ80Assembler 0.0.283

“Package Description”

Manifest is MyApplication template namePE ships only RT_VERSION + RT_MANIFEST resources
SHA-256fe5fc7ac00001bb9356a8c9f431b943a2092fb9a281a8d9d95a45ecf6f40bf7a
MaleculeMd₂(BiBk)

Evidence

.NET Assembly (mscoree.dll) 0x498–0x4c8
0x4980070280d00000a2a1e02281400000a2a.p(....*..(....*
0x4a842534a4201000100000000000c000000BSJB............
0x4b876342e302e3330333139000000000500v4.0.30319......
0x4c86c000000 l...
.dll extension reference 0x95a–0x9aa
0x95a546573745a3830417373656d626c6572TestZ80Assembler
0x96a2e646c6c0050726f6772616d00537973.dll.Program.Sys
0x97a74656d004d61696e0053797374656d2etem.Main.System.
⋯3 more rows
PE version resource structure 0x1486–0x14b6
0x148600000000000000000000700334000000..........p.4...
0x1496560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x14a64f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x14b60000bd04effe000001000000000000 ...............
PE FileVersion metadata field 0x15f2–0x1652
0x15f26c00650072000000000034000a000100l.e.r.....4.....
0x1602460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x161269006f006e000000000030002e003000i.o.n.....0...0.
⋯4 more rows
PE ProductVersion metadata field 0x1732–0x17a2
0x17326c006500720000000000860031000100l.e.r.......1...
0x1742500072006f0064007500630074005600P.r.o.d.u.c.t.V.
0x175265007200730069006f006e0000003000e.r.s.i.o.n...0.
⋯5 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.