Benign Download

bdiff

C-style exec family functionsExec family symbol text
SHA-2562742d4e3ef40f9b12f7d16d51c6cfb988efe6420ef166a180dc2ee3ced18ce74
MaleculeH(Po)Md(He)

Evidence

C-style exec family functions 0xa60–0xa90
0xa60696e7466005f656e64005f5f66737200intf._end.__fsr.
0xa70657865636c70005f5f5f417267760066execlp.___Argv.f
0xa8070757473005f5f73746172745f637274puts.__start_crt
0xa905f636f6d7069 _compi
/tmp/ path component 0x3260–0x3290
0x326000000000000000000000000001000000................
0x32702f746d702f6264585858585858000000/tmp/bdXXXXXX...
0x32802f7573722f62696e2f64696666000000/usr/bin/diff...
0x329000000000000000000000000000 .............

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.