Benign dotnet 217,076 installs Download

Soenneker.AutoFaker.Overrides.Documents.Document 4.0.1104

Legitimate NuGet package metadata

“An AutoFaker (AutoBogus) override for the base Document object”

Fetched github.com repository artifactPE has no signature record

Evidence

.NET managed assembly 0x1e0–0x430
⋯16 more rows
0x2e02100000a06732200000a6f2300000a2a!....s"...o#...*
0x2f01e02282400000a2a42534a4201000100..($...*BSJB....
0x300000000000c00000076342e302e333033........v4.0.303
⋯19 more rows
Hardcoded network URL with domain name 0xd9a–0xe6a
⋯3 more rows
0xdca6d65092e4e45542031302e301a010015me..NET 10.0....
0xdda68747470733a2f2f736f656e6e656b65https://soenneke
0xdea722e636f6d00000c01000752656c6561r.com......Relea
0xdfa736500002a010025436f707972696768se..*..%Copyrigh
⋯7 more rows
PE version resource structure 0x11e0–0x12c0
⋯6 more rows
0x12400000000048000000584000005e050000....H...X@..^...
0x125000000000000000005e05340000005600........^.4...V.
0x126053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x12704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows
PE version metadata includes CompanyName 0x131a–0x160a
⋯10 more rows
0x13ba20006f0062006a006500630074000000 .o.b.j.e.c.t...
0x13ca00004c001600010043006f006d007000..L.....C.o.m.p.
0x13da61006e0079004e0061006d0065000000a.n.y.N.a.m.e...
0x13ea0000680074007400700073003a002f00..h.t.t.p.s.:./.
0x13fa2f0073006f0065006e006e0065006b00/.s.o.e.n.n.e.k.
0x140a650072002e0063006f006d0000008a00e.r...c.o.m.....
0x141a31000100460069006c006500440065001...F.i.l.e.D.e.
0x142a73006300720069007000740069006f00s.c.r.i.p.t.i.o.
0x143a6e000000000053006f0065006e006e00n.....S.o.e.n.n.
⋯5 more rows
0x149a65006e0074000000000036000b000100e.n.t.....6.....
0x14aa460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x14ba69006f006e000000000034002e003000i.o.n.....4...0.
0x14ca2e0031003100300034002e0030000000..1.1.0.4...0...
0x14da00008a003500010049006e0074006500....5...I.n.t.e.
0x14ea72006e0061006c004e0061006d006500r.n.a.l.N.a.m.e.
0x14fa000053006f0065006e006e0065006b00..S.o.e.n.n.e.k.
⋯17 more rows
PE version metadata includes ProductVersion 0x166c–0x17bc
⋯7 more rows
0x16dc44006f00630075006d0065006e007400D.o.c.u.m.e.n.t.
0x16ec00000000880032000100500072006f00......2...P.r.o.
0x16fc64007500630074005600650072007300d.u.c.t.V.e.r.s.
0x170c69006f006e00000034002e0030002e00i.o.n...4...0...
0x171c31003100300034002b003700320033001.1.0.4.+.7.2.3.
0x172c340038003200330062003400320038004.8.2.3.b.4.2.8.
0x173c390065003000300065003500650064009.e.0.0.e.5.e.d.
0x174c360038006300620035006200330038006.8.c.b.5.b.3.8.
⋯7 more rows

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.