Hashtag

Windows process scanner that computes SHA-256 hashes of running executables and queries them against the MetaDefender API to detect potential threats.

Note: This project was originally developed as a university assignment, but I thought it could be useful for others working in cybersecurity, threat hunting, or malware analysis, so I'm sharing it publicly.

Installation

git clone https://github.com/Rizer0/hashtag.git
cd hashtag
cargo build --release

Usage

# Set API key (get one from https://metadefender.opswat.com/)
set MD_API_KEY=your_api_key

# Run scan
hashtag

Command-Line Options

Options:
  -a, --api-key <API_KEY>          MetaDefender API key (or set MD_API_KEY env var)
  -o, --output <FILE>              Export results to JSON files (creates 3 files: full, hashes-only, detections)
  -t, --threshold <THRESHOLD>      Detection threshold for high-risk classification [default: 10]
  -v, --verbose                    Show detailed progress (process enumeration, hashing, API queries)
  -c, --concurrent <CONCURRENT>    Number of concurrent API requests (1-20) [default: 5]
  -h, --help                       Print help

License

MIT