Benign dotnet 942,100 installs Download

Soenneker.Blob.Sas 4.0.3005

“A utility library for Azure Blob SAS operations”

PE has no signature recordMarkdown references a remote image
SHA-25667d33f6b48ae477cbac7fd237df0bca0fd7aec8d83561817111308b783304fad

Evidence

Embedded HTTP or WebSocket URL 0x2183–0x21e3
0x21836d65092e4e45542031302e301a010015me..NET 10.0....
0x219368747470733a2f2f736f656e6e656b65https://soenneke
0x21a3722e636f6d00000c01000752656c6561r.com......Relea
0x21b3736500002a010025436f707972696768se..*..%Copyrigh
⋯3 more rows
PE version metadata includes CompanyName 0x27a2–0x27d2
0x27a269006f006e00730000004c0016000100i.o.n.s...L.....
0x27b243006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x27c261006d00650000000000680074007400a.m.e.....h.t.t.
0x27d2700073003a002f002f0073 p.s.:././.s
PE version metadata includes FileDescription 0x27ee–0x281e
0x27ee2e0063006f006d0000004e0013000100..c.o.m...N.....
0x27fe460069006c0065004400650073006300F.i.l.e.D.e.s.c.
0x280e720069007000740069006f006e000000r.i.p.t.i.o.n...
0x281e000053006f0065006e006e0065006b ..S.o.e.n.n.e.k
PE version metadata includes FileVersion 0x283e–0x28ae
0x283e5300610073000000000036000b000100S.a.s.....6.....
0x284e460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x285e69006f006e000000000034002e003000i.o.n.....4...0.
0x286e2e0033003000300035002e0030000000..3.0.0.5...0...
0x287e00004e001700010049006e0074006500..N.....I.n.t.e.
0x288e72006e0061006c004e0061006d006500r.n.a.l.N.a.m.e.
0x289e000053006f0065006e006e0065006b00..S.o.e.n.n.e.k.
0x28ae65007200 e.r.
PE version metadata includes ProductVersion 0x29d6–0x2a46
0x29d653006100730000000000880032000100S.a.s.......2...
0x29e6500072006f0064007500630074005600P.r.o.d.u.c.t.V.
0x29f665007200730069006f006e0000003400e.r.s.i.o.n...4.
0x2a062e0030002e0033003000300035002b00..0...3.0.0.5.+.
0x2a1664003100340065003700320034003900d.1.4.e.7.2.4.9.
0x2a2664006600340031003200610037006100d.f.4.1.2.a.7.a.
0x2a36330039006600320037003000350063003.9.f.2.7.0.5.c.
0x2a46320065003300310064003400320061 2.e.3.1.d.4.2.a

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.