Open-source atomic malware analysis

Analyze another

tailwindcss v4.3.3

PE
Verdict: BENIGN
Bun FFI native loader APIs: tailwindcss-windows-x64.exe:0x5ae66f8
Indexed x64 function-table indirect call: tailwindcss-windows-x64.exe:0x153bc70
tailwindcss-windows-x64.exe pe
0x1613b1 fbff7f01000f83a1020000488d4dba4c ...........H.M.L
0x1613c1 89f24989d8e845c56d034881fbf17f01 ..I...E.m.H.....
0x1613d1 000f87c102000048b86167652e6a736f .......H.age.jso
0x1613e1 6e4889441dbf48b85c7061636b616765 nH.D..H.\package
0x1613f1 4889441dba488b0dd3a7a605488b15d4 H.D..H......H...
0x161401 a7a6054883c30d48898db87f01004889 ...H...H......H.
0x161411 95c07f0100488d45ba488985c87f0100 .....H.E.H......
0x161421 48899dd07f0100488d85b87f01004889 H......H......H.
0x161431 44242048c74424280200000041b9fe7f D$ H.D$(....A...
0x161441 01004d89e8e845a0f4ff4989d14983e9 ..M...E...I..I..
0x161451 0d0f822c0200004889d34939d10f8725 ...,...H..I9...%
0x161461 020000488b0d65a7a605488b1566a7a6 ...H..e...H..f..
0x161471 054989c0e95b0100004c89adf0 .I...[...L...
0x30380f 0c0083e901410f92c24584c974054584 .....A...E..t.E.
0x30381f d2749ea8070f85d30d00008b48f883e9 .t..........H...
0x30382f 010f82b20c00004189cd4589e84181e0 .......A..E..A..
0x30383f 83a97ac7460fb614004584d2746549b9 ..z.F....E..teI.
0x30384f 2e656e762e6c6f63660f1f8400000000 .env.locf.......
0x30385f 004180fa89752a4c8b50f04d89c349c1 .A...u*L.P.M..I.
0x30386f e3044b837c1a080a75174f8b141a4d39 ..K.|...u.O...M9
0x30387f 0a750e6641817a08616c0f84c7010000 .u.fA.z.al......
0x30388f 904589c241ffc24589e84521d0460fb6 .E..A..E..E!.F..
0x30389f 140083e901410f92c34584d274054584 .....A...E..t.E.
0x3038af db74aea8070f85430d00008b48f883e9 .t.....C....H...
0x3038bf 010f82220c00004189cb4589d84181e0 ..."...A..E..A..
0x3038cf 9c0c4b1d ..K.
0x395f75 39f30f92c184c80f859e3b00004c89e1 9.........;..L..
0x395f85 4889da4989f8e880794a034881fff27f H..I....yJ.H....
0x395f95 01000f83e720000048b86167652e6a73 ..... ..H.age.js
0x395fa5 6f6e4889460548b82f7061636b616765 onH.F.H./package
0x395fb5 4889064c8d7f0d4881fff17f01000f84 H..L...H........
0x395fc5 de20000042c6843c46aa06000065488b . ..B..<F....eH.
0x395fd5 042530000000488b4060488b40204c8b .%0...H.@`H.@ L.
0x395fe5 70480fb68424a00000008884243c0100 pH...$......$<..
0x395ff5 0066c784243d0100000000c684243f01 .f..$=.......$?.
0x396005 0000004c8dac24000c00004c89e94c89 ...L..$....L..L.
0x396015 f24d89e0e842d70b000fb7b424080c01 .M...B......$...
0x396025 006685f60f858b00000041b808000100 .f........A.....
0x396035 488d8c24000c03004c89eae8cb H..$....L....
0x153bc10 4883b990000000000f85ef000000488b H.............H.
0x153bc20 7c2450488b4718440fb748484981f9b1 |$PH.G.D..HHI...
0x153bc30 000000721d4983c1504881c608010000 ...r.I..PH......
0x153bc40 4889f131d24989f8e883e96400488b7c H..1.I.....d.H.|
0x153bc50 24500fb6442438483dff00000074154c $P..D$8H=....t.L
0x153bc60 8d05d2f27902488d4c2450488d542428 ....y.H.L$PH.T$(
0x153bc70 41ff14c0488b4c244048c74424400000 A...H.L$@H.D$@..Indexed x64 function-table indirect call
0x153bc80 00004885c9740bf08329027505e82e3e ..H..t...).u...>
0x153bc90 6d00488b4424684831e0488b0ddf4d67 m.H.D$hH1.H...Mg
0x153bca0 044839c10f858d0000004889f84883c4 .H9.......H..H..
0x153bcb0 705b5f5ec34889d9e8832830024883f8 p[_^.H....(0.H..
0x153bcc0 ff0f848dfeffff4885c0742848895c24 .......H..t(H.\$
0x153bcd0 284889442430488d4c2460488d542428 (H.D$0H.L$`H.T$(
0x153bce0 e85b3e6d00488b4424604889442440e9 .[>m.H.D$`H.D$@.
0x153bcf0 c0fefffff08305a4b9660402488d059d .........f..H...
0x153bd00 b966044889442440e9a7feffffe8ae8b .f.H.D$@........
0x153bd10 700084c00f8404ffffff31ff0fb64424 p.........1...D$
0x153bd20 38483dff0000000f8532ffffffe942ff 8H=......2....B.
0x153bd30 ffffe88dda2c02488b4c24 .....,.H.L$
0x5ae6638 75736976650001004163717569726553 usive...AcquireS
0x5ae6648 52574c6f636b53686172656400001400 RWLockShared....
0x5ae6658 416464566563746f7265644578636570 AddVectoredExcep
0x5ae6668 74696f6e48616e646c65720025004172 tionHandler.%.Ar
0x5ae6678 6546696c6541706973414e5349002700 eFileApisANSI.'.
0x5ae6688 41737369676e50726f63657373546f4a AssignProcessToJ
0x5ae6698 6f624f626a6563740000760042656769 obObject..v.Begi
0x5ae66a8 6e5570646174655265736f7572636557 nUpdateResourceW
0x5ae66b8 0000880043616e63656c496f00008900 ....CancelIo....
0x5ae66c8 43616e63656c496f457800008a004361 CancelIoEx....Ca
0x5ae66d8 6e63656c53796e6368726f6e6f757349 ncelSynchronousI
0x5ae66e8 6f009d00436c6f736548616e646c6500 o...CloseHandle.
0x5ae66f8 a200436c6f736550736575646f436f6e ..ClosePseudoConBun FFI native loader APIs
0x5ae6708 736f6c650000b100436f6d7061726553 sole....CompareS
0x5ae6718 7472696e67457800b200436f6d706172 tringEx...Compar
0x5ae6728 65537472696e674f7264696e616c0000 eStringOrdinal..
0x5ae6738 b300436f6d70617265537472696e6757 ..CompareStringW
0x5ae6748 0000b400436f6e6e6563744e616d6564 ....ConnectNamed
0x5ae6758 506970650000c500436f707946696c65 Pipe....CopyFile
0x5ae6768 5700d100437265617465446972656374 W...CreateDirect
0x5ae6778 6f72794578570000d400437265617465 oryExW....Create
0x5ae6788 4469726563746f7279570000d6004372 DirectoryW....Cr
0x5ae6798 656174654576656e74410000dc004372 eateEventA....Cr
0x5ae67a8 6561746546696c653200de0043726561 eateFile2...Crea
0x5ae67b8 746546696c654100df00437265617465 teFileA...Create
0x5ae67c8 46696c654d617070696e67410000e300 FileMappingA....
0x5ae67d8 43726561746546696c654d617070696e CreateFileMappin
0x5ae67e8 67570000e60043726561746546696c65 gW....CreateFile
0x5ae67f8 5700ea00437265617465486172644c69 W...CreateHardLi
0x5ae6808 6e6b5700eb00437265617465496f436f nkW...CreateIoCo
0x5ae6818 6d706c6574696f6e506f72740000ed00 mpletionPort....
0x5ae6828 4372656174654a6f624f626a65637441 CreateJobObjectA
0x5ae6838 0000ee004372656174654a6f624f626a ....CreateJobObj
0x5ae6848 656374570000f3004372656174654d75 ectW....CreateMu
0x5ae6858 746578410000f6004372656174654d75 texA....CreateMu
0x5ae6868 746578570000f7004372656174654e61 texW....CreateNa
0x5ae6878 6d656450697065410000f80043726561 medPipeA....Crea
0x5ae6888 74654e616d656450697065570000fa00 teNamedPipeW....
0x5ae6898 437265617465506970650000fd004372 CreatePipe....Cr
0x5ae68a8 6561746550726f636573734100000201 eateProcessA....
0x5ae68b8 43726561746550726f63657373570000 CreateProcessW..
0x5ae68c8 030143726561746550736575646f436f ..CreatePseudoCo
0x5ae68d8 6e736f6c650006014372656174655365 nsole...CreateSe
0x5ae68e8 6d6170686f72654100000d0143726561 maphoreA....Crea
0x5ae68f8 746553796d626f6c69634c696e6b5700 teSymbolicLinkW.
0x5ae6908 0f014372656174655468726561640000 ..CreateThread..
0x5ae6918 25014465627567427265616b00002801 %.DebugBreak..(.
0x5ae6928 4465636f6465506f696e746572002f01 DecodePointer./.

Loading traits…

Identity

SHA-256 e0e260ce048014e9268f6237ff18f8ccf02cef521cbd0ae04e82c2cdf7aa3955
Canonical SHA-256 60428fd7e3f60e1d21352aa1a11dd92e580be2871e3e1504df54f3d75c7afd4e
Filename tailwindcss-windows-x64.exe
Package tailwindcss
Version v4.3.3
PURL pkg:github/tailwindlabs/[email protected]

Timeline

First seen 16 Jul 2026 10:26 UTC
First analyzed 18 Jul 2026 06:56 UTC
Last analyzed 18 Jul 2026 06:56 UTC
Last updated 18 Jul 2026 06:56 UTC

Labeling

Label unknown
Label source forager
Traits version 32522