Local reference
Suspicious dependency
Inferred
Mal-ecule
O(C)H(U)
Objectives
notable severity, 86% confident.
command-and-control/dropper/execution
Embedded string exceeds 3000 chars
baseline severity, 85% confident.
anti-static/obfuscation/code-metrics
Multiple long lines (>1000 chars)
component severity, 86% confident.
command-and-control/dropper/delivery
Regex component marker
component severity, 94% confident.
supply-chain/recon-exfil
Regex component marker
component severity, 80% confident.
supply-chain/trojanized/app
References JavaScript export boundary
Micro-behaviors
notable severity, 80% confident.
ui/window/manage
Opens browser window or tab
component severity, 70% confident.
data/text
WebP image format token
component severity, 100% confident.
fs/write
ADODB.Stream Open method call
Metadata
baseline severity, 95% confident.
lang
JavaScript or TypeScript basename
baseline severity, 100% confident.
lang/encoded
JavaScript file basename
baseline severity, 95% confident.
library
Webpack bundled JavaScript module
baseline severity, 100% confident.
package
HISTORY documentation reference
component severity, 90% confident.
file/text
Low string density in source
Identity
| SHA-256 | 4de30deb17766027648475ed0b8a0bfb2060a03eb54d80d781c568240b8c06eb |
|---|---|
| Filename | 9aa74a5d905f618e2fbf45ddadc9ca0a.js |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 21 May 2026 17:12 UTC |
|---|---|
| First analyzed | 24 May 2026 00:50 UTC |
| Last analyzed | 24 May 2026 00:50 UTC |
| Last updated | 24 May 2026 00:50 UTC |
Labeling
| Label | good |
|---|---|
| Label source | harvest |
| Traits version | 9ea7c |
Not seeing what you expected? Let us know