Open-source atomic malware analysis

Analyze another

GeneXus.Search.Core 1.36.4

ZIP
Verdict: BENIGN
SHA256: 3960b8206662ee6a17add6ebcff1aa885dc86d87fbd907cbb188014a580ff57d
Mal-ecule
H(Cm)Md(Bi)
Size 39.7 KB download
First seen 54 days ago
Analyzed 54 days ago
Ecosystem dotnet
Source api.nuget.org

Well-known

component severity, 95% confident.
game Wynncraft installer file version

Objectives

baseline severity, 85% confident.
evasion/masquerade/dll DLL filename extension present
component severity, 100% confident.
anti-static/obfuscation/binary-metrics Binary has normal code entropy (>5.5)
component severity, 99% confident.
anti-static/obfuscation/payload PE version resource text
component severity, 90% confident.
anti-static/pack PE has under ten imports
component severity, 100% confident.
command-and-control/infrastructure Binary has 4 or fewer sections
component severity, 95% confident.
evasion/indicator-removal Regex component marker
component severity, 95% confident.
evasion/masquerade/identity PE FileDescription is single-character placeholder
component severity, 92% confident.
evasion/process/injection Regex component marker
component severity, 100% confident.
impact/ransom PDF file extension
component severity, 98% confident.
supply-chain/metadata-anomaly/manifest NuGet nuspec manifest file

Micro-behaviors

notable severity, 86% confident.
communications/ip Hardcoded external IPv4 address
component severity, 100% confident.
communications/http/server Modification of HTTP context items

Metadata

notable severity, 72% confident.
binary Embedded absolute PDB path
baseline severity, 90% confident.
binary/section PE .reloc section presence
baseline severity, 95% confident.
dylib::mscoree links mscoree (CorDllMain)
baseline severity, 100% confident.
hardening ASLR enabled (DYNAMIC_BASE)
baseline severity, 80% confident.
lang/compiler System namespace reference
baseline severity, 90% confident.
package PE version resource metadata
component severity, 95% confident.
binary/anomaly PE version info numeric fields present

20 of 33 traits shown

Identity

SHA-256 3960b8206662ee6a17add6ebcff1aa885dc86d87fbd907cbb188014a580ff57d
Canonical SHA-256 2d02c46eb74bbc6dbccd78dbf9c6e0ee2885691902e9ae361a37f878cddf806d
Filename GeneXus.Search.Core.1.36.4.nupkg
Package GeneXus.Search.Core
Version 1.36.4

Origin

Source forager
Feed nuget.org
Ecosystem dotnet
Domain nuget.org
URL https://api.nuget.org/v3-flatcontainer/genexus.search.core/1.36.4/genexus.search.core.1.36.4.nupkg

Timeline

First seen 3 Jun 2026 20:19 UTC
First analyzed 4 Jun 2026 04:41 UTC
Last analyzed 4 Jun 2026 04:41 UTC
Last updated 4 Jun 2026 04:41 UTC

Labeling

Label unknown
Label source forager
Traits version 84adb