Benign alpine Download

compiler-rt 22.1.8-r0

Legitimate LLVM compiler runtime package

Code mentions syscall hookingRule evaluation timeout: micro-behaviors/fs/write/content::ext-vbs took 107450ms (limit: 90000ms)

SHA-25654aef124308d63bf26463293e25045be5449252c0e031ae340966d597fb61d0f

URLhttps://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/compiler-rt-22.1.8-r0.apk

MaleculeK(Mc)O₇(AlEr₄SAs₃DyEuXe)H₈(Cm₁₁DbDs₂F₇MgOs₄Po₇Ti)Md₃(Bi₂HePt)

Evidence

Rule evaluation timeout: objectives/discovery/network/enumeration::ssh-port-check-p22 took 106961ms (limit: 90000ms) 0x0–0x80

0x07f454c46020101000000000000000000.ELF............
0x1003003e00010000000000000000000000..>.............
0x20400000000000000070aa080000000000@.......p.......
0x3000000000400038000a0040001b001a00[email protected]...@.....
0x4001000000040000000000000000000000................
0x5000000000000000000000000000000000................
0x6090270100000000009027010000000000.'.......'......
0x7000100000000000000100000005000000................
0x8000300100000000000030010000000000.0.......0......

Binary process execution capability 0xc510–0xc540

0xc510797363616c6c5f7072655f696d706c5fyscall_pre_impl_
0xc52070697065005f5f73616e6974697a6572pipe.__sanitizer
0xc5305f73797363616c6c5f706f73745f696d_syscall_post_im
0xc540706c5f70                        pl_p            

Address to symbol lookup 0xfea5–0xfed5

0xfea57265706f72745f63616c6c6261636b00report_callback.
0xfeb5646c61646472005f5f73616e6974697adladdr.__sanitiz
0xfec565725f73746172745f7377697463685fer_start_switch_
0xfed5666962657200                    fiber.          

Forks process to run as detached daemon 0x15932–0x15972

0x1593267e848f302000f1f8400000000004157g.H...........AW
0x159424156534889fb67e8722b010048833800AVSH..g.r+..H.8.
0x159520f84830000004989c667e8bf88010049......I..g.....I
0x159628b0e48c1e10848c1f908488b40184c8d[email protected].
0x159723c0049                          <.I             

process_vm_writev for memory injection 0x25712–0x257b2

0x257122e0f1f8400000000000f1f440000c366...........D...f
0x257222e0f1f8400000000000f1f440000c366...........D...f
0x257322e0f1f8400000000000f1f440000c366...........D...f
0x257422e0f1f8400000000000f1f440000c366...........D...f
0x257522e0f1f8400000000000f1f440000c366...........D...f
0x257622e0f1f8400000000000f1f440000c366...........D...f
0x257722e0f1f8400000000000f1f4400004885...........D..H.
0x25782f60f84ff0100004889f048baffffffff.......H..H.....
0x25792ffffff814989f14921d14c89c948c1e9....I..I!.L..H..
0x257a2044c8b050e270600498b304801f14983.L...'..I.0H..I.
0x257b2c1                              .               

Showing the top 5 files — 6 more files (150 regions) not shown.

No evidence locations were recorded for this file. Raw result