home

NuGet.exe

NuGet

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
NuGet

Description:
NuGet Command Line

Version:
3.2.0.10516

MD5:
425f246293017a79e0a6e1a0b797d596

SHA-1:
fcb6f31c977e47bc300a7f50fe253508601d3507

SHA-256:
2760cee595d00461202e82e2c3d786433c12646e3bc5de0535537c071eed454f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 10:32:07 PM UTC  (today)

File size:
3.6 MB (3,744,336 bytes)

Product version:
3.2.0

Copyright:
Microsoft Corporation. All rights reserved.

Original file name:
NuGet.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\nuget.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/5/2015 1:42:45 AM

Valid to:
9/5/2016 1:42:45 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
9/15/2015 3:32:48 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:gryHISoW4FfaqCcOZ14PosgiwR6fPFco:grmdhow8PFc

Entry address:
0x391456

Entry point:
FF, 25, 64, 14, 79, 00, 00, 00, 00, 00, 00, 00, 00, 00, 38, 14, 39, 00, 00, 00, 00, 00, 00, 00, 00, 00, E0, 20, F7, 55, 00, 00, 00, 00, 02, 00, 00, 00, 5C, 00, 00, 00, 88, 14, 39, 00, 88, F6, 38, 00, 52, 53, 44, 53, 19, 3F, 11, D2, 38, C2, DA, 47, 90, 02, FD, 58, 61, D0, 82, B9, 01, 00, 00, 00, 43, 3A, 5C, 54, 65, 61, 6D, 43, 69, 74, 79, 5C, 62, 75, 69, 6C, 64, 41, 67, 65, 6E, 74, 5C, 77, 6F, 72, 6B, 5C, 61, 35, 34, 32, 36, 33, 66, 64, 32, 37, 36, 35, 63, 63, 32, 37, 5C, 49, 4C, 4D, 65, 72, 67, 65, 4E, 75...
 
[+]

Entropy:
5.9002

Code size:
3.6 MB (3,732,992 bytes)

The file NuGet.exe has been seen being distributed by the following 3 URLs.

https://dist.nuget.org/win-x86-commandline/.../nuget.exe

https://dist.nuget.org/win-x86-commandline/.../nuget.exe

https://git.autodesk.com/github-enterprise-releases/0001/.../32eb3202-8d1b-11e5-96ae-ca360e8defff.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.