Suspicious 85% Download

libzfsbootenv.so.1

ELF header tampering detected

ELF header tampering (overlap / count mismatch / multi-interp / dup names)
SHA-256393d26cbb0e17811a074ca19f20916fed3c2c284f85c869d413c62e1c5bfc71d
MaleculeO(As)Md₂(BiHe)

Evidence

ELF header tampering (overlap / count mismatch / multi-interp / dup names) 0x0–0x40
0x07f454c46020101060100000000000000.ELF............
0x1003003e00010000000000000000000000..>.............
0x2040000000000000000070000000000000@........p......
0x3000000000400038000400400020001e00[email protected]...@. ...
0x4001000000050000 .......
C++ ABI symbols cluster A 0x1769–0x1799
0x1769645f62797465007374726c656e005f5fd_byte.strlen.__
0x17796378615f66696e616c697a65006e766ccxa_finalize.nvl
0x17896973745f6164645f75696e743136006cist_add_uint16.l
0x17997a62655f6e766c6973745f66 zbe_nvlist_f

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.