Benign npm Download

pkg:npm/[email protected]

String extraction truncated due to limits (count: 100000, total bytes: 50 MB)Detects SystemBC
SHA-2568470f958771bdd158f54c61acfb3822aadebae8d336fbfc48ec9977fa8300e0f
MaleculeMdTh

Evidence

Detects SystemBC 0x38d33e0–0x38d34a0
⋯3 more rows
0x38d3410b0aa294001000000e0aa294001000000..)@......)@....
0x38d3420737461727420696e6465782020697320start index is
0x38d34306c6172676572207468616e20656e6420larger than end
⋯7 more rows
Embedded PE binary at file offset 0x3c9eb78 (~32768 bytes) 0x3c9eb38–0x3c9ec08
⋯3 more rows
0x3c9eb681100000000000000e202000053000000............S...
0x3c9eb784d5a7800010000000400000000000000MZx.............
0x3c9eb8800000000000000004000000000000000........@.......
0x3c9eb9800000000000000000000000000000000................
⋯7 more rows
python code embedded in string 0x78c11ea–0x78c14da
0x78c11ea89c131d24989f0ff151b142700c685ee..1.I......'....
0x78c11fa02000000660f6fb424900000000f28bc....f.o.$.....(.
0x78c120a2480000000440f2844247066440f6f4c$....D.(D$pfD.oL
0x78c121a246066440f6f54245066440f6f5c2440$`fD.oT$PfD.o\$@
0x78c122a66440f6f6424304881c4a80000005b5ffD.od$0H......[_
⋯43 more rows
javascript code embedded in string 0x7aa6570–0x7aa6860
0x7aa6570fcff488bd0488d4c2478e8eb38faff48..H..H.L$x..8..H
0x7aa65808b4c2468e8c10afcffeb4b488bcbe807.L$h......KH....
0x7aa65900bfcff483bc574294c8d0de35f1800b9...H;.t)L..._...
0x7aa65a0030000004c8d052fc71700488d1558c6....L../...H..X.
0x7aa65b01700e823e2f9ffb8ffffffffe9fb0000...#............
⋯43 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.