Benign Download

linux.yaml

Composite catalog lists alternative rulesComposite catalog requires rule references
SHA-256b64aca51561786279a1816d98297c0904fc53294e1e2dec99b8374abb5d00652
MaleculeH(F)Md

Evidence

Top-level traits or composite_rules key lines 1–11
1defaults:
2 platforms: [unix]
3 for: [python, javascript]
4traits:
5 - id: process-fd-memfd-discovery
6 desc: Scans proc fd links for memfd descriptor
7 crit: notable
8 conf: 0.9
9 for: [scripts, elf, c, cpp, rust, go]
10 platforms: [linux]
11 # The behaviour is walking /proc/<pid>/fd an …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.