Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(Os₂Po₂)
Micro-behaviors
notable severity, 80% confident.
os/group
Resolve SID to account/group name
notable severity, 80% confident.
os/privilege
GetTokenInformation API
notable severity, 90% confident.
process/enumerate
Get first process from snapshot
notable severity, 90% confident.
process/info
Get module handle
baseline severity, 75% confident.
data/format
String formatting with format specifiers
baseline severity, 95% confident.
dylib
Windows GetProcAddress in source
baseline severity, 70% confident.
os/compat
Check if running under WoW64
Identity
| SHA-256 | 4dc7bfe92d5f014f215615173d0448b91c7d650ff5c7e9befad41068fca5b54c |
|---|---|
| Filename | getps.c |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 4 Jun 2026 23:20 UTC |
|---|---|
| First analyzed | 7 Jun 2026 01:43 UTC |
| Last analyzed | 7 Jun 2026 01:43 UTC |
| Last updated | 7 Jun 2026 01:43 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 318d5 |
Not seeing what you expected? Let us know