Local reference
Suspicious dependency
Inferred
Mal-ecule
H₃(Cm₃F₂Os)
Objectives
component severity, 82% confident.
command-and-control/channel/http
JFIF image response marker
component severity, 82% confident.
command-and-control/dropper/staging
.NET StringBuilder Append use
Micro-behaviors
notable severity, 90% confident.
communications/email
NNTP POST command
notable severity, 82% confident.
communications/http/client
System.Net.HttpWebRequest class usage
notable severity, 80% confident.
communications/http/url
URL targets .php endpoint
notable severity, 85% confident.
fs/enumerate
Directory.GetFiles enumeration
notable severity, 88% confident.
fs/read
Application executable self path
notable severity, 85% confident.
os/clipboard
Clipboard class or symbol reference
baseline severity, 86% confident.
fs/file/write
FileStream open for read
component severity, 90% confident.
data/text/keywords
Destructive delete verb
component severity, 84% confident.
data/text/llm
clipboard keyword (doc-context)
Metadata
baseline severity, 95% confident.
import
imports System
baseline severity, 95% confident.
import/dotnet::keystroke
imports Keystroke.API
baseline severity, 95% confident.
import/dotnet::system
imports System.IO
baseline severity, 95% confident.
import/dotnet::system/collections
imports System.Collections.Specialized
baseline severity, 95% confident.
import/dotnet::system/runtime
imports System.Runtime.InteropServices
baseline severity, 95% confident.
import/dotnet::system/windows
imports System.Windows.Forms
baseline severity, 95% confident.
import/dotnet::wk/libraries
imports WK.Libraries.SharpClipboardNS
baseline severity, 95% confident.
import/dotnet::wk/libraries/sharpclipboardns
imports WK.Libraries.SharpClipboardNS.SharpClipboard
component severity, 97% confident.
file/text
Validation vocabulary string
Identity
| SHA-256 | 2e3d0bd316fcb854e5f7d829b92ce42c3e7232e02afd0dec1fb4eacf9b0896c6 |
|---|---|
| Filename | Program.cs |
Origin
| Source | harvest |
|---|---|
| Feed | projects |
| Ecosystem | windows |
Timeline
| First seen | 7 May 2026 09:21 UTC |
|---|---|
| First analyzed | 9 May 2026 12:53 UTC |
| Last analyzed | 2 Jun 2026 00:50 UTC |
| Last updated | 2 Jun 2026 00:50 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | ed903 |
Not seeing what you expected? Let us know