Benign vendor Download

frida

Legitimate Frida devkit headers

EMV payment transaction APDU markerCalls native buffer or string comparison API
SHA-2565369192a543be713b7d9c2fd885ae612e3b5ddcda390adad8854edc5b6fe7919

Evidence

Accesses argv[0] (Self path) frida-core.h · lines 17441–17447
17441 * @G_SPAWN_DO_NOT_REAP_CHILD: the child will not be automatically reaped;
17442 * you must use g_child_watch_add() yourself (or call waitpid() or handle
17443 * `SIGCHLD` yourself), or the child will become a zombie.
17444 * @G_SPAWN_SEARCH_PATH: `argv[0]` need not be an absolute path, it will be
17445 * looked for in the user's `PATH`.
17446 * @G_SPAWN_STDOUT_TO_DEV_NULL: the child's standard output will be discarded,
17447 * instead of going to the same location as the parent's standard output.
TXT record string reference frida-core.h · lines 32404–32410
32404 * GResolverRecordType:
32405 * @G_RESOLVER_RECORD_SRV: look up DNS SRV records for a domain
32406 * @G_RESOLVER_RECORD_MX: look up DNS MX records for a domain
32407 * @G_RESOLVER_RECORD_TXT: look up DNS TXT records for a name
32408 * @G_RESOLVER_RECORD_SOA: look up DNS SOA records for a zone
32409 * @G_RESOLVER_RECORD_NS: look up DNS NS records for a domain
32410 *
EMV payment transaction APDU marker frida-core.gir · lines 9337–9339
9337:69… TRAP_MACH_PORT_UNGUARD" value="-42" />
9338 <member name="mach_generate_activity_id" c:identifier="FRIDA_XNU_MACH_TRAP_MACH_GENERATE_ACTIVITY_ID" value="-43" />
9339 <member name="task_name_for_pid" c:identifier="FRIDA_XNU_MACH_TRAP_TASK_NAME_FOR_PID" value="-44 …
imports frida-core.h frida-core-example.c · lines 6–14
6:10… https://frida.re to learn more about Frida.
7 */
8
9#include "frida-core.h"
10
11#include <stdlib.h>
12#include <string.h>
13
14static void on_detached (FridaSession * session, FridaSessionDetachReason reason, FridaCrash * …
Calls native buffer or string comparison API frida-core-example.c · lines 166–174
166:62… ;
167
168 type = json_object_get_string_member (root, "type");
169 if (strcmp (type, "log") == 0)
170 {
171 const gchar * log_message;
172
173 log_message = json_object_get_string_member (root, "payload");
174 …

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.