Open-source atomic malware analysis

Analyze another

rz_analysis.h

C
Verdict: BENIGN
Mal-ecule
O(Er₂)
Size 108.6 KB download
First seen 54 days ago
Analyzed 54 days ago
Code mentions syscall hooking: rz_analysis.h:0x8ff1
rz_analysis.h c
16 #include <rz_util.h>
17 #include <rz_bind.h>
18 #include <rz_syscall.h> Syscall instruction text marker
19 #include <rz_util/rz_set.h>
20 #include <rz_flag.h>
1003 *
1004 * This may be used by an analysis plugin to communicate how to initialize
1005 * variables/registers for a clean vm. Cleanup/action word: clean
1006 * Everything unspecified by this may be initialized to anything (for example
1007 * whatever contents the RzReg currently has).
1034 RZ_NULLABLE const char **reg_bindings;
1035 ut32 mem_key_size; ///< address size for memory 0, bound against IO
1036 RzPVector /*<RzILEffectLabel *>*/ labels; ///< global labels, primarily for syscall/hook callbacks Code mentions syscall hooking
1037 RZ_NULLABLE RzAnalysisILInitState *init_state; ///< optional, initial contents for variables/registers, etc.
1038 // more information might go in here, for example additional memories, etc.

Objectives

Identity

SHA-256 bb35325519110798f662fa10216aa810d120202d0f26b354a9e91edf0c024410
Filename rz_analysis.h

Origin

Source harvest

Timeline

First seen 27 Jun 2026 18:58 UTC
First analyzed 27 Jun 2026 19:10 UTC
Last analyzed 27 Jun 2026 19:10 UTC
Last updated 27 Jun 2026 19:10 UTC

Labeling

Label good
Label source harvest
Traits version 868bd