Benign rust Download

sootmark-filehistory 0.1.0

legitimate forensics library

“Windows File History catalogs (Catalog1.edb, Catalog2.edb) for forensics: every file and folder backed up, with its path, times, attributes…”

Action declares a main entrypointAction declares a post-job hook
SHA-256066b2b81be1c63a1e9936eeecc1ef0d61f5660ac226f51e86b693c911df7a0d3

Evidence

Code bundled with the ncc webpack runtime lines 1–10
1/******/ (() => { // webpackBootstrap
2/******/ var __webpack_modules__ = ({
3
4/***/ 7799:
5/***/ (function(__unused_webpack_module, exports, __nccwpck_require__) {
6
7"use strict";
8
9var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
10 function adopt(value) …
Calls JSON.stringify() lines 83–87
83:45… Keys];
84 core.debug('Resolved Keys:');
85 core.debug(JSON.stringify(keys));
86 if (keys.length > 10) {
87 throw new ValidationError(`Key Validation Error: Keys are limited to a maxi …
References the application/json media type lines 268–278
268:25… = {
269 headers: {
270 Accept: createAcceptHeader('application/json', '6.0-preview.1')
271 }
272 };
273 return requestOptions;
274}
275function createHttpClient() {
276 const token = process.env['ACTIONS_RUNTIME_TOKEN'] || '';
277 const bearerCredentialHandler = new auth_1.BearerCredentialHandler(token);
278 return new http_client_1.HttpClient …
Node.js createHash('sha256') call lines 284–293
284:58… ges in cache entry
285 components.push(versionSalt);
286 return crypto
287 .createHash('sha256')
288 .update(components.join('|'))
⋯5 lines
URL-encodes data via encodeURIComponent lines 295–297
295:93… 0 : options.compressionMethod);
296 const resource = `cache?keys=${encodeURIComponent(keys.join(','))}&version=${version}`;
297 const response = yield requestUtils_1.retryTypedResponse('getCacheEntry', () => __awaiter(this, vo …

Showing the top 5 files — 3 more files (26 regions) not shown.

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.