GlobalProtect.exe
Curated Deep API Trace evidence for GlobalProtect.exe. Collection is partial and the source assessment is inconclusive; this is not a malware verdict.
Analysis Results
Validate supported evidence packages from API Trace, Live Protection, and Payload & Memory Analyzer, correlate independent evidence, require analyst approval, and export a redacted offline HTML/PDF executive report with hashes, evidence links, contradictions, and collection gaps. It does not scan, contain, upload evidence, or make an automatic malware verdict.
Reports & Evidence
2
Curated Deep API Trace evidence for GlobalProtect.exe. Collection is partial and the source assessment is inconclusive; this is not a malware verdict.
Full sanitized non-binary Deep API Trace and Payload & Memory Analyzer evidence for CallNotes.exe. Coverage is partial and supports analyst review; it is not a malware verdict.
Clear or change the filters to view other published packages.
Security, privacy, and evidence limits
Observed and Allowed do not mean safe. AlertOnly means review is required. Detected means a configured confirmed source matched. Quarantined means supported file containment succeeded.
Preserve reports, manifests, checksums, collection gaps, and analyst notes.