Benign dotnet 1,114,682 installs Download

Soenneker.Utils.Directory 4.0.887

“A utility library encapsulating various directory methods”

PE has no signature recordMarkdown references a remote image
SHA-256eae9840e88ca4d25c2285a8a461df72a09651acefeb943842948db33fd5a1406

Evidence

Embedded HTTP or WebSocket URL 0x6d98–0x6df8
0x6d986d65092e4e45542031302e301a010015me..NET 10.0....
0x6da868747470733a2f2f736f656e6e656b65https://soenneke
0x6db8722e636f6d00000c01000752656c6561r.com......Relea
0x6dc8736500002a010025436f707972696768se..*..%Copyrigh
⋯3 more rows
PE version metadata includes CompanyName 0x73b6–0x73e6
0x73b668006f006400730000004c0016000100h.o.d.s...L.....
0x73c643006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x73d661006d00650000000000680074007400a.m.e.....h.t.t.
0x73e6700073003a002f002f0073 p.s.:././.s
PE version metadata includes FileDescription 0x7402–0x7432
0x74022e0063006f006d0000005c001a000100..c.o.m...\.....
0x7412460069006c0065004400650073006300F.i.l.e.D.e.s.c.
0x7422720069007000740069006f006e000000r.i.p.t.i.o.n...
0x7432000053006f0065006e006e0065006b ..S.o.e.n.n.e.k
PE version metadata includes FileVersion 0x745e–0x74be
0x745e74006f0072007900000034000a000100t.o.r.y...4.....
0x746e460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x747e69006f006e000000000034002e003000i.o.n.....4...0.
0x748e2e003800380037002e00300000005c00..8.8.7...0...\.
0x749e1e00010049006e007400650072006e00....I.n.t.e.r.n.
0x74ae61006c004e0061006d00650000005300a.l.N.a.m.e...S.
0x74be6f0065006e006e0065006b0065007200o.e.n.n.e.k.e.r.
PE version metadata includes ProductVersion 0x7616–0x7686
0x761674006f00720079000000860031000100t.o.r.y.....1...
0x7626500072006f0064007500630074005600P.r.o.d.u.c.t.V.
0x763665007200730069006f006e0000003400e.r.s.i.o.n...4.
0x76462e0030002e003800380037002b006300..0...8.8.7.+.c.
0x7656350037006300370035006600370065005.7.c.7.5.f.7.e.
0x7666320031006300640063003200350033002.1.c.d.c.2.5.3.
0x767661003800620032003900660063003400a.8.b.2.9.f.c.4.
0x76866200340034006600360062003300 b.4.4.f.6.b.3.

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.