Benign dotnet 52,302 installs Download

Soenneker.Requests.Entities.Named 4.0.246

“A request model that includes a required, length-limited Name property for named entities.”

PE has no signature recordMarkdown references a remote image

Evidence

Embedded HTTP or WebSocket URL 0x1178–0x11d8
0x11786d65092e4e45542031302e301a010015me..NET 10.0....
0x118868747470733a2f2f736f656e6e656b65https://soenneke
0x1198722e636f6d00000c01000752656c6561r.com......Relea
0x11a8736500002a010025436f707972696768se..*..%Copyrigh
⋯3 more rows
PE version metadata includes CompanyName 0x17fa–0x182a
0x17fa650073002e00000000004c0016000100e.s.......L.....
0x180a43006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x181a61006d00650000000000680074007400a.m.e.....h.t.t.
0x182a700073003a002f002f0073 p.s.:././.s
PE version metadata includes FileDescription 0x1846–0x1876
0x18462e0063006f006d0000006c0022000100..c.o.m...l."...
0x1856460069006c0065004400650073006300F.i.l.e.D.e.s.c.
0x1866720069007000740069006f006e000000r.i.p.t.i.o.n...
0x1876000053006f0065006e006e0065006b ..S.o.e.n.n.e.k
PE version metadata includes FileVersion 0x18b2–0x1912
0x18b261006d0065006400000034000a000100a.m.e.d...4.....
0x18c2460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x18d269006f006e000000000034002e003000i.o.n.....4...0.
0x18e22e003200340036002e00300000006c00..2.4.6...0...l.
0x18f22600010049006e007400650072006e00&...I.n.t.e.r.n.
0x190261006c004e0061006d00650000005300a.l.N.a.m.e...S.
0x19126f0065006e006e0065006b0065007200o.e.n.n.e.k.e.r.
PE version metadata includes ProductVersion 0x1a9a–0x1b0a
0x1a9a61006d00650064000000860031000100a.m.e.d.....1...
0x1aaa500072006f0064007500630074005600P.r.o.d.u.c.t.V.
0x1aba65007200730069006f006e0000003400e.r.s.i.o.n...4.
0x1aca2e0030002e003200340036002b003500..0...2.4.6.+.5.
0x1ada320061003600650062003200650035002.a.6.e.b.2.e.5.
0x1aea360065003700360061003100620065006.e.7.6.a.1.b.e.
0x1afa65006200360061003900300033003900e.b.6.a.9.0.3.9.
0x1b0a3200620066003300310036006100 2.b.f.3.1.6.a.

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.