Open-source atomic malware analysis

Analyze another

polgen

ELF
Verdict: BENIGN
Mal-ecule
H(F)Md₂(BiHe)
Size 14.2 KB download
First seen 89 days ago
Analyzed 79 days ago
Ecosystem archlinux

Objectives

component severity, 95% confident.
anti-static/obfuscation/code-metrics Generated file marker text
component severity, 94% confident.
evasion/kernel-hide Regex component marker

Micro-behaviors

notable severity, 75% confident.
fs/file File content manipulation (read/write/seek)
baseline severity, 80% confident.
dylib/library Compiler/project context token
baseline severity, 66% confident.
fs/file/write Write single bytes to file
baseline severity, 66% confident.
fs/path Reference to /lib64

Metadata

notable severity, 85% confident.
binary/anomaly ELF hardening profile suggests private
notable severity, 90% confident.
hardening No stack canary (stack smashing protection absent)
baseline severity, 100% confident.
binary Binary format is identified
baseline severity, 100% confident.
binary/linking ELF program interpreter metadata
baseline severity, 100% confident.
binary/metrics Binary has low average string entropy
baseline severity, 100% confident.
build ELF GNU build-id metadata
baseline severity, 100% confident.
unsigned Binary is not digitally signed
component severity, 90% confident.
binary/section Tiny C string section ratio

Identity

SHA-256 8cc4fe375ede12b4c4b50fef82badf0da46268fab7a125d8b1fbf45a68d4ea1f
Filename polgen

Origin

Source harvest
Ecosystem archlinux

Timeline

First seen 29 Apr 2026 19:22 UTC
First analyzed 10 May 2026 06:37 UTC
Last analyzed 10 May 2026 06:37 UTC
Last updated 10 May 2026 06:37 UTC

Labeling

Label good
Label source harvest
Traits version 51ad9