1c91921b56615fb961ef37840abb9013e90e95a42f2ba83b61455732be0a353f
K₃(AmLi₁₂Te₂)O₁₀(XeErIPAlAs₇CCa₂Dy₂S)H₉(F₂₅Po₁₄Cm₅₅Cr₈Db₄₁Hf₂Os₁₉TiU₁₆)Md₉(Bi₃Bk₃LiPa₄PdPtSi)
netbsd · Index
Query analyzed artifacts from registries, marketplaces, and lab uploads — or see the latest 509 hostile catches in the fallout →
Files indexed
160,838,994+
dd2d79db211cb8954a5f3a1f0cf2eb27a4a9057387e012fdd0bf779901f983e3
K₃(AmLi₁₃Te₂)O₉(XeErPAlAs₇CDy₂IS)H₉(F₂₅Po₁₄Cm₅₃Cr₇Db₄₂Hf₂Os₁₉TiU₁₆)Md₉(Bi₃Bk₃LiPa₄PdPtSi)
55dca21faa3bf7cf455932e1467f2e2ec9162caeb28fe7fa13bf485bb666f653
H₂(F₂Os)Md₂(BiHe)
83%
Unusual version, complex binary
799112865ec06d07a286f2c1b05c5427a45ef93d3fcec5d164a9a0c262fdd71a
H₄(Cm₁₁F₂OsPo)Md₃(BiBkHe₂)
94%
Manual HTTP, staging path, fork
b5ab2c2ce83376a957ad0b34c9e50e6ccac8313f05e768d57436f89eb22c6c4b
K(Li₃)O₆(Xe₂As₃CErCo₂I)H₉(Cm₃₇CrDb₃₀F₂₂Hf₂Os₁₂Po₈TiU₁₀)Md₂(Pa)
99%
Insecure PHP config allows code execution
8eb76ad3b1b3d14c56611ccc910428141fe56160043819e6474160385f69665e
K₄(Am₃Li₉McTe₂)O₁₁(As₆C₂S₃Ca₂Dy₃Er₆EuIP₄PrXe₃)H₁₁(Cm₈₇Cr₂₁Db₄₁Ds₃F₆₆HfMg₃Os₆₇Po₇₀Ti₃U₅)Md₇(Bk₁₁In₂Pa₇Pd₂Pt)Th
80%
Foreignobject/Nov24obfuscation/syntax
4ab224f9bdd7b312e917ead2d6a3cb2c8763087bde86299ada872bf01e499d09
O₅(AsC₂PDyPr)H₈(Po₁₈Cm₂Db₄Ds₂F₂₄HfOs₈U)Md₄(Bi₂Bk)
80%
self-install/scriptexecution/batch
9fff48f350dbc6bb066594e94496defa195e8b55206d261ca5b2f989f6782a2d
33%
Provenance mismatch: go-flags vs mkcert
e2c763f861ada05c6150c32f804bca31c96a18b944320e0ee9bbf0d6c6075ad7
33%
registry mismatch
d36fdfb4ea1f4fe6da81837f201ac378457ecc9d27c2e5a2d96d5f21e28b9a2b
K₃(Am₄Li₃₂Te₅)O₁₂(As₈Ca₂Xe₅AlC₉CoDy₃ErEuI₂P₅S₁₂)H₁₁(Po₉₅Cm₁₁₆Cr₂₂Db₇₁Ds₄F₆₅Hf₃Mg₂Os₆₆Ti₇U₆)Md₁₁(ArBi₄Bk₁₄He₂In₂Pa₂₆PdPt₃Si₃)
80%
token/filescmd/injection
fd5b6a573da17a0b73abf5f07ad430c143b3c16a53d5168b18210bab6e3ad9ed
O(Eu)H₃(DbFU)Md₃(BiBkHe₂)
84%
Unusual exfil marker in library
fe3c71b0a22420657ca731bd6ca0f28e5aa075aa05197a27a5291ea7f76d8e60
O(Pr₂)H₈(Cm₈CrDb₂Ds₂F₁₀Os₃Po₁₅Ti)Md₃(BiPa)
99%
legitimate ksh93 package
af9c5e1c6ccb34c694a697b104072cee9758e05d0e26c93e59fc838e17003a24
O(Co)H₄(DbFHf₃Po₅)Md(He)
77%
X11 global key grab keylogger
73e6650fc9878759297406be0e64e5009d421dda1fc98708ee27a6ce5a3f535b
K(Li)H₅(Cm₇Cr₂DbFPo₄)Md₂(BiHe)
61%
Network sniffing and spoofing toolkit
eece84266329b8b2ae231cd6ecd1415a22535f8d4ab8ed7573e786d4f7eb06d1
K(Mc)H₂(F₃Po)Md₃(BiBkHe)
71%
Mirai malware family reference
8b7aab0d32bade064bc63d8c48395bc546dce7e68d7b46aa2eb0aa848aba78ee
Md(He)
33%
Stripped binary, unusual name
ea6ffc66ba327d5a992be1ad942a287568fd019d515a443bd1f9fadb0c971530
H₃(CmFPo₂)Md₃(BiBkHe₃)
97%
Embedded URLs, system calls
18bf32e59eb764b13da3c4fa70384926d7fa584cb31d2fe7f137a570633eeec1
O₉(P₇ErAlAsCDyI₂SXe)H₉(Cm₃₈Cr₂Db₁₅DsF₃₀HfOs₃₂Po₃₂U₄)Md₄(BiBk₃Pa)
66%
legitimate NUT software package
1b3f3846ad2c0a5f410178b6612765d59ee63db249eb6cfc332ace17f0a30898
K(Mc)O₃(AsCoEr₂)H₁₁(Cm₂₅CrDb₁₃Ds₂F₂₀Hf₄Mg₂Os₁₃Po₂₂TiU₅)Md₇(Pa₃Bi₄Bk₃Pd₂PmPt)
92%
legitimate ham radio software
2e1c6df7e3312e77c5f82788664cffc3a78d3bf60606c00039275e1d13c0ee4b
K₅(Mc₂Am₅GaLi₂₈Te₄)O₁₄(Er₂₀S₁₄Al₅As₁₆C₁₃Ca₉Dy₆I₉LaXe₁₀Co₂EuP₃Pr₂)H₁₂(F₈₀Os₈₆Po₉₅Br₃Cm₁₄₀Cr₁₉Db₈₁Ds₄Hf₇Mg₁₄Ti₅U₁₆)Md₁₃(Pa₂₈Bi₈Bk₁₁He₂InLiPd₃PmPt₇SiV)
66%
Legitimate open-source game build
836ae05c5a5933f9723c7be75fc54ee808c2dc724b002c879098a1b88ca4076c
O(C)H₆(Cm₇CrDbF₁₀OsPo₆)Md(Bi)
48%
Legitimate MH mail user agent package
5a24f62a610249d744cbd8d28ee399d8905db7222bf3bdbc8a8b4a76e597695f
O₅(Er₃As₃Dy₂I₃Pr)H₉(Cm₁₀CrDsF₁₁HfMgOs₆Po₁₅U)Md₄(Bi₃PdPt)
54%
metrics/structuralpdf/properties
e0a61ec1eb0f6786976ea47052694c8dba4779f8788a07649b5c50db95f1cde7
H₃(Cm₄F₃Po₄)Md(He₃)
80%
Binary with shell and network capabilities
3b6d25be07b987588640c742f99a70f8bfe45e081dbc84e3b2f2f0d9ed197e35
K(Te)O₃(As₂CS)H₆(Cm₂Cr₃Db₃F₂OsPo₈)Md₃(BkPa₅)
78%
Metasploit payload binaries
0bdf37de95896448fafc4cd92eb9635281badb7691bbdd72b2d3265b24b241fc
O(As)H(F)Md(He₂)
100%
RWX memory region indicates code execution
a9b2a8fee48f9d36fe32b60a0c338a3f9f4f65eba3269e797fe74279bf13967d
O(As)H₂(F₃Po)Md(He₂)
50%
Legitimate qmail configuration package
bac0ff7f8489712d7562dcc46238ab2a6a1d924f3ab80aebb53929d0e130529f
K(Te)O₃(PrS₂Xe)H₃(Cm₅DbPo₃)Md(Pt)
80%
Unexpected deinstall script in package
1329114587dfb295cd91050a482c5be92100f8b51374e6988104e0d5111f11a3
H₃(CmCr₂Db₄)Md(Pt)
80%
Insecure pickle deserialization in crypto module
d8f802c0ac53022414ac0b0c17a89b973d751588a4e797d9f42d75defbd46925
O₁₀(CLaPXe₂AlAs₂CaDyIS)H₁₀(Cm₄Cr₂Db₃DsF₈MgOs₂Po₁₀TiU)Md₅(BkHePaPt)
50%
Legitimate Python packaging tool source code
d1248239a85812cd32d9101cf69b6f0d3ee3113f6990059d6d67abdd7ddff2aa
O(La)H₅(Cm₇CrDb₂FPo)Md(Pt)
80%
Hardcoded API secrets in source
276265f7bf528f2e2ba89dcb52a681ef68d6d013f1372791624dfe6e84a4ea01
O₄(ErAsLaS)H₅(Cm₅Db₃FOsPo₃)Md₂(Pt)
50%
Legitimate Django package with standard features
6356816b77f4a4de7df02ca561b321595a6830d7f89ef1f2d035fcfdf72d19a1
O₆(As₃CDyErLaS₂)H₅(DsCm₄Db₈F₄Po₉)Md₄(He₂Pt)
50%
Legitimate Python SQLite wrapper package
05326299c32b9263f7478d5b162375d853e6a92fe9b54d4e17e0e210260a4ff1
O₂(CaDy)H₄(Cm₁₀DbF₂Po₂)Md₂(BiHe₂)
85%
FTP/HTTP proxy tunneling capabilities
90706d42daf2196f4b4744c6d3577c17d38b11aca8ff65f3eeb3d6259a196a7e
O(Er)H(Po)
50%
Archive contains escaping symlink
35b2abef3fc280031e0771a735f776fca9c273ff96707b7424dc4d5be9916439
K(Te)O₇(As₈C₅CaDyErPS)H₇(Cm₁₁F₈Cr₃Db₉Os₂Po₈U)Md₄(BkLi)
50%
Legitimate MRBS room booking software package
dbba2da74ab25a8741c052a648ed71b96f13efd2fe2b4b397221f40edabff3f6
O(As)
80%
Obfuscation detected in compiled file
346c51cf4f2177c3e2cda8a769d6c0d234b7ff7a74037812134cd89947213c2d
O₆(AsCCaSDy₂Er)H₁₀(Cm₁₃CrDbDs₂F₁₂HfMgOs₆Po₁₁Ti)Md(He)
50%
Legitimate NetBSD compatibility package
571b664a3222e8b1f89d1fbaa7e4fe5ba68979a511ac9d4d1a13a58767e7f6eb
O₂(CEr)H₄(Cm₇CrF₂Po₂)Md(He₃)
50%
False positive backdoor detection
5ee52a87374d04f7219cef8e13171fb21636545eb900ecaff32285e28b1ce334
O₃(Er₂CXe)H₆(Cm₅DbDsF₃HfPo₉)Md(He₂)
50%
Legitimate terminal emulator package
56c63f7ab078abf0bc14243efae2a5bc693a1fc240f2a32953184953ac00de90
O₂(Al₂Er)H₃(CmF₂Po)Md(He₂)
50%
Legitimate CPU identification library
e639849fcd00080dadce9c0820ca38156204b986de448b814185a77800193560
O(As)
80%
Obfuscation detected in compiled code
bdab37fdedfda82275a3069010d1bdfab2640bb1dfb6475b21a36cf1c2c4108d
O₂(AsC)H₄(Cm₇FOsPo₃)Md(He₃)
69a69285377526442f21c204130bafe1b3f8d361001904a4d684dbe81604e4da
O₃(As₃ErXe)H(Po₃)
50%
False positives in printer drivers
e64f29c99234648d3f969f8315bcffd69e329e58dd639ad5c08a8dbb0afe31a9
O₄(AsCCaXe)H₄(Cm₇F₂OsPo₂)Md₂(He₂Pt)
7ff20035489de8be497ed0f843f636de5b3e3dbb5608d7c7d03e889f9444ffa4
O₅(CAsCoErXe)H₂(FPo₂)Md
50%
Legitimate R package library files
0a3abfbc63f1e834a8768130de5d774aee7f75c895c9c2280145a9687fc4aaf9
K(Li)O(Xe)H₅(Cm₄Db₂FOsPo)Md₂(PaPt)
50%
Legitimate Python package with false positives
65ce036a5ae83b9b09fd105865688e8b9f8ddea53dd19257e65b02f25977d2fc
O(Dy)H₇(F₄CmCrDbOsPo₂U)
50%
Legitimate PEAR Log package
41185b9eee095edcbb355ed7f2fc7483473404418644381a22642e8711535d11
O(C)H₂(OsPo₂)Md(Pt)
50%
Legitimate Lua library code
afcc2d7d59eebd539c9f7530a71bfe8240e88c6188a59775e4ce2adb5b8a0f97
O₂(EuEr₂)H₃(Cm₁₂FOs)Md(He₂)
50%
Legitimate libevent library package
f93ac9a7a758d179d673cc3fc00dadcb0b2a12f565b05c6d836622a2228da78d
O₄(As₄C₂ErI)H₅(Cm₄DbF₃Os₂Po₃)Md₃(Bi₅Pt)
50%
Legitimate IGV software with standard libraries
95badd161231e6df2dca959d81060f8f523c14fd76192932cd36727feec21515
O₂(AsEr)H₄(F₃HfPo₂U)Md(He₃)
50%
Legitimate game package files
ae1cd1a80837eb0c63254b13cfbd04d695185e1055f01a779c6d5a216d1b5ecf
K(Li)O₇(As₄IAlCaDy₂ErLa)H₆(Cm₉CrDb₇F₃Os₂Po₇)Md₂(Pt)
50%
Legitimate CHIRP radio programming software
97928a735820c4942f8cb3d92d6057ceb8a991b79161adba5c1a9ffc660dbe5a
O₈(As₂C₈SCoEr₄EuPXe₂)H₇(Cm₆Ds₂F₁₃Os₇Po₂₀Ti₂U)Md₃(Bi)
50%
Official Apache Tomcat distribution
5297424a5419ae060b7f6410ba19a46ef1fa5eff364c953abd52339ab1c86bdb
O₄(AsCCoEr)H₃(FPo₇U)Md₂(BiHe)
50%
Legitimate window manager package
e1221fd84adaf23ca8f0ded492bd0f47b3ea29ca3ad705e48d2ebe0720576ce3
O(Co)H(F)Md₂(He₂)
50%
Stripped binary, encoded payload
2f81105983bf7f05fbc9b4349d0bcee0807097f204efdb259057a0761e645096
O₅(As₆CaDyErXe)H₄(DbCmF₃Po₆)
50%
Legitimate email client source code
5562621aa12efb5c5e6aa549ed4ccc240cbacc1223a599857d3491ea16161527
O₂(CEr)H₂(CmPo₃)
50%
Legitimate software package with false positives
24df47d1d98a31436e298056fdc5aae36a5a7fd999031710e535d0f45fce7704
O₂(AsC₂)H₄(Cm₉CrF₃Po₄)Md(He₂)
78853613b9a6873a30e1cc2417f738c330e75f887afdaf7b3d0800cb19ca515e
O₁₂(As₂CaEr₇I₄LaP₄SC₅Dy₂EuPrXe)H₅(Po₁₆Cm₈Db₂F₁₆Os₇)Md₃(BiPd)
50%
Legitimate CVS source code archive
5624321f0b1cc1eff6cab9ef08f25954ff64c51b33d4bf3b99484cf1edd8cfff
O₈(As₃Er₆I₂C₄CoDy₂EuXe)H₆(Cm₉CrDb₄F₁₂Os₅Po₁₄)Md₂(Pt)
50%
Legitimate Mutt email client source code
ccce95819884497570a75ab7547cabf61fba529a6d3816ed595f95f1c6278c05
O₆(I₂SC₃DyEr₃Xe)H₄(Cm₈F₉Os₃Po₇)Md₃(Bi₂BkHe)
50%
Legitimate amateur radio satellite tracking software
96f4ed82706a873bdade99a934a1a66431f146758837ed0f007e3c145649f780
O₆(As₃CoCEr₂PXe)H₄(Cm₅F₁₀Os₃Po₁₀)Md₂
50%
Legitimate Japanese input method source code
171de4c4f3443bc1211cc51df5caa0e082ffcdd33ab3ce261bc0a4cfe85d9b5e
O₉(Co₅AsC₈Er₅PDy₂ILaXe₃)H₈(Cm₁₈DbDs₂F₁₆Hf₂Os₆Po₂₃U)Md₂
50%
Legitimate terminal emulator source code
8f5589743f83add99a2394b916f5a24b1ddafcbb88de8249cee960a5a7569af1
O₃(AsErP)H₆(Cm₁₀DbDsF₃Po₄U)Md(He₂)
50%
Legitimate XMMS media player package
38c61a7267f90767d90b8fcdda96c7a629df26e06f7153084c773f3d6363f4f0
O(As)H₄(FOsPoU)Md(Pa)
80%
eval usage in viewer code
73efd5e68789e6b945424c355613bedbf943d2b129998a9dd69e02dcc3689b8e
H₂(F₂Po)Md(He₂)
80%
stripped binary uses system()
89ba4af86145e3738505f92fdd0ad58885123328b75fd58b1efb11a288f01e21
O₂(AsS)
50%
Hardcoded IP in firmware binary
5ce708e653f5e331530ba745eacf903bd52f4042ee6fbbe9b8681b46de8c798e
O(C)H₂(Cm₄F₂)Md(He₂)
80%
Binary contains network connection symbols
e39774ab361c291ba2b14b04da6248439e159fe2177fa451ab263d1fb973addc
O₅(S₅AlC₂Er₂P)H₅(Cm₆Db₂F₃Os₂Po₅)Md₂(Bk₂Pt)
85%
Hostile finding: Python setup.py trojan
330877549bfba537c4f0cccebdeed926bf9058c0af8632470587a10b7b555da0
O(C₂)H₃(Cm₆F₂Po₂)Md(He₂)
80%
Network binary with system calls
a40ce5bee7001fd7b42a40d284f6cd5837562a593d46414bdf5fcc49cd82475f
O(As)H₃(CmOsPo₂)Md(Pt)
80%
Shell exec for network config
8de6a229d0e0ae9a86a313348173e6472a8abde7c24f87f1dfced7a88257847c
O₃(C₂AlEr)Md₃(BiHe)
85%
Hardcoded Telegram bot token
3c3b028a23af42831c9a385aebae8349c51b211bff6fbd97dc7c4ef7cb6e5bee
O₂(IEr)H₂(F₂Po₃)Md₂(BiHe)
85%
Ransom note patterns detected
1ce959079ccf2d64209c194f72d63e565d9b8de8eb8bb0d6e10965cc744888b9
O₁₀(As₄PrAl₃C₈DyEr₅ILa₂PXe)H₈(Db₈Po₁₁Cm₂₅Cr₄Ds₂F₁₃Os₅U)Md₄(Bi₂HePt)
85%
Nested archive contains suspicious PHP files
b66a6242275503ec089eb7fd3e0c87e5f7cd3c954cc443190ba38e0b09731991
O₂(DyEr)H₂(F₂Po₂)Md(He₃)
85%
Hidden executable in /tmp
21bbb5d1e98e847ca2a2a3e42cb17c468cf67fc1018e1b5040a7dfb39a045557
O(As)H₂(DbF₂)Md(He₂)
85%
Malicious VBS embedded in archive
e50e7a9ef7a5c4f8c7b3e2d0f15a9261e1d5bda6ba9ebdc71be28f213c571f9b
O(As)H₃(CrMgPo₂)Md(He)
80%
Rust binary with crypto and obfuscation
5fac3dcdec4a68c017397b91471532baea3684504d9c3afa58276b6817c1d13f
O₂(CI)H₂(FPo)Md₂(He)
80%
Encoded payloads in documentation files
baa642c906576d4d98d041d0acb80d85dd6eff6e3c16a009b1abf1ccd2bc0a61
K₃(GaLi₂Mc)O₁₂(As₁₁Er₅IPrS₂AlC₂Co₂Dy₄EuPXe₃)H₁₀(HfMgCm₂₂Db₅Ds₃F₁₁Os₆Po₂₁TiU₃)Md₈(Pa₂Bi₄HePdPt₂Si₂)
50%
Legitimate physics engine source code
8a4f377f57637e415b2fdd93e0945e3652f9c25f53205aa0cad0198ed1537c37
O₄(Xe₂Er₂EuI)H₂(DbPo₃)
80%
False positive in image file
331d22b5dd33c6f961a77ba57e5abdd43946b2ebdeae5770ba66c46e356c020a
O₃(AsCCa)H₃(CmDbF₂)Md₂(Bi₂He)
80%
W+X segments indicate memory safety risk
f2c78d387b6e3065d3bb5e9612374db09c055bbb1c283250afb1bb60446beb3f
O(Er)H₂(DbPo₂)Md
80%
Shell script in font archive
ccba5421869429faad983ed940e2c244f2bb4601b32e7eea654a80b0f922f131
O₂(CoEr)H(Po₂)Md
80%
CTF flag grep in EPS
645def730427371cd85f4c748713c3b21e69e0d372019abf95f4f77c74cec355
O₂(CEr)H₂(F₄Po₃)Md(He)
85%
Embedded backdoor binary in archive
b31f1e424bb4ac34ae435af05b0f7683270ebc4ec81a1535b08094fe4ee79f31
O₄(C₂ErPXe)H₄(Cm₈F₃OsPo₅)Md(He₃)
80%
Binary contains telnet backdoor strings
ed211af2fd4b42d30b955aebb14ed70dc4167d20d6cc2aa6ad233ab07e06545f
O₃(Er₂As₃La)H₄(Cm₂CrDb₈Po₅)Md(He)
46%
Legitimate Python ORM package
3c13c180d0e9713cf5c010100f584e31c5e393d33c133a68dcb8342e1767c346
H₃(CmCr₂Db₄)Md(Pt)
80%
Pickle deserialization in crypto utility
04390ee095e7d720b9ac2fa0f00965799a9eea90df4b672765a66fe58749b5ce
O₃(Ca₃DyEu)H₅(Cm₁₂CrDb₃OsPo)Md(He₃)
85%
Malicious cloud credential harvesting code
45c5ec40e5c66b9679316935e0bea31db80ed8c1e92aff82d4485ea9f5802512
O(Er)H₄(Cm₃DbFPo₂)Md(He)
80%
Archive contains symlink escaping directory
2ee2a9439c906abd37670c438f18556159cc17f8eea8d4b9bf59f4e5bc8e7ac0
O₂(ErXe)H₃(Po₉F₃Os)Md(He₃)
80%
Symlink escape and dynamic eval
9cb936670daac3ec8aa7387ffd7e0d1c028ab6d11ff1d8bdbf0a3b92a4ae4e22
O(C)H₃(DbFPo₂)Md(He₂)
85%
Embedded shell stage in binary
1f9d8b15d57aac84c5a0d07b743d849d22c56b1395c4a01a66cebdd0daa67940
K(Li)O₅(ErCa₄C₂CoI₂)H₈(Cm₁₉Cr₅Db₂F₂MgOsPo₃U₃)Md₂(He)
85%
Finding claims embedded eBPF rootkit