Benign dotnet 40,387 installs Download

Soenneker.AutoFaker.Overrides.StreetAddresses 4.0.238

Legitimate NuGet package metadata

“An AutoFaker (AutoBogus) override for the DTO StreetAddress”

PE has no signature recordPE ProductVersion has SemVer git hash

SHA-256f8ad906e5f077e67afadf84ac868ad16429529721d4a110237ebefc7c64d3e40

URLhttps://api.nuget.org/v3-flatcontainer/soenneker.autofaker.overrides.streetaddresses/4.0.238/soenneker.autofaker.overrides.streetaddresses.4.0.238.nupkg

MaleculeH(Cm)Md₂(BiPa)

Evidence

.NET managed assembly 0x1e0–0x430

⋯20 more rows
0x320146f2500000a146f2600000a2a1e0228.o%....o&...*..(
0x3302700000a2a00000042534a4201000100'...*...BSJB....
0x340000000000c00000076342e302e333033........v4.0.303
⋯15 more rows

Hardcoded HTTP or WebSocket URL 0xd4d–0xe1d

⋯3 more rows
0xd7d6d65092e4e45542031302e301a010015me..NET 10.0....
0xd8d68747470733a2f2f736f656e6e656b65https://soenneke
0xd9d722e636f6d00000c01000752656c6561r.com......Relea
0xdad736500002a010025436f707972696768se..*..%Copyrigh
⋯7 more rows

PE version resource structure 0x11e0–0x12c0

⋯6 more rows
0x124000000000480000005840000030050000[email protected]...
0x125000000000000000003005340000005600........0.4...V.
0x126053005f00560045005200530049004f00S._.V.E.R.S.I.O.
0x12704e005f0049004e0046004f0000000000N._.I.N.F.O.....
⋯5 more rows

PE version metadata includes CompanyName 0x138a–0x162a

⋯3 more rows
0x13ba720065007300730000004c0016000100r.e.s.s...L.....
0x13ca43006f006d00700061006e0079004e00C.o.m.p.a.n.y.N.
0x13da61006d00650000000000680074007400a.m.e.....h.t.t.
0x13ea700073003a002f002f0073006f006500p.s.:././.s.o.e.
0x13fa6e006e0065006b00650072002e006300n.n.e.k.e.r...c.
0x140a6f006d00000084002e00010046006900o.m.........F.i.
0x141a6c006500440065007300630072006900l.e.D.e.s.c.r.i.
0x142a7000740069006f006e00000000005300p.t.i.o.n.....S.
⋯5 more rows
0x148a7300730065007300000034000a000100s.s.e.s...4.....
0x149a460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x14aa69006f006e000000000034002e003000i.o.n.....4...0.
0x14ba2e003200330038002e00300000008400..2.3.8...0.....
0x14ca3200010049006e007400650072006e002...I.n.t.e.r.n.
0x14da61006c004e0061006d00650000005300a.l.N.a.m.e...S.
⋯21 more rows

PE version metadata includes ProductVersion 0x1648–0x1798

⋯7 more rows
0x16b865007300730065007300000086003100e.s.s.e.s.....1.
0x16c80100500072006f006400750063007400..P.r.o.d.u.c.t.
0x16d8560065007200730069006f006e000000V.e.r.s.i.o.n...
0x16e834002e0030002e003200330038002b004...0...2.3.8.+.
0x16f866003200640030003800660065003500f.2.d.0.8.f.e.5.
0x170865003300340039003100360031003900e.3.4.9.1.6.1.9.
0x171864003500660063006300310064006500d.5.f.c.c.1.d.e.
⋯8 more rows

No evidence locations were recorded for this file. Raw result