Franz.Common.Http.Messaging 2.2.5

ZIP

BENIGN

Mal-ecule

Size 23.1 KB download

First seen 53 days ago

Analyzed 50 days ago

Ecosystem dotnet

Source api.nuget.org

Objectives

anti-static/obfuscation/binary-metrics Binary has normal code entropy (>5.5)

anti-static/obfuscation/payload PE version resource text

anti-static/obfuscation/string Long mixed-case identifiers cluster

anti-static/pack PE has under ten imports

command-and-control/backdoor/loader Staged loader upper-mid compression ratio (0.62-0.64)

command-and-control/dropper/delivery Compact PE import table

command-and-control/infrastructure Binary has 4 or fewer sections

evasion/indicator-removal Regex component marker

evasion/process/injection Regex component marker

persistence/login/scheduled-task Regex component marker

supply-chain/metadata-anomaly/manifest NuGet nuspec manifest file

communications/http/server Access to ASP.NET HttpContext

communications/proxy SOCKS5 client greeting bytes

data/text/keywords Destructive cleanup verb

binary Embedded absolute PDB path

binary/section PE .reloc section presence

file DLL filename extension present

hardening NO_SEH (SafeSEH not used)

package PE version resource metadata

binary/anomaly PE version info numeric fields present

20 of 26 traits shown

SHA-256	8882027544895bed04a677b0fe054f45e2700a325fa7e1548ff8034e3658d181
Canonical SHA-256	051505774326219cdeb86a83816e8cb676810cd102c0003467db398b5a81f7f3
Filename	Franz.Common.Http.Messaging.2.2.5.nupkg
Package	Franz.Common.Http.Messaging
Version	2.2.5

Source	forager
Feed	nuget.org
Ecosystem	dotnet
Domain	nuget.org
URL	https://api.nuget.org/v3-flatcontainer/franz.common.http.messaging/2.2.5/franz.common.http.messaging.2.2.5.nupkg

Not seeing what you expected? Let us know