Benign windows Download

lefthook

Standard Go binary, no malicious indicators

PE content uses a non-PE filename extensionClaude Code settings path in binary

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.