Benign alpine Download

gnutls-utils 3.8.13-r0

Embedded PEM RSA private key blockRegex component marker

Evidence

Set socket options 0x1a79–0x1b49
0x1a7992010000000000080000000000000000................
0x1a8965786974007265616c6c6f63005f5f63exit.realloc.__c
0x1a9978615f66696e616c697a650073747273xa_finalize.strs
0x1aa97472005f49544d5f6465726567697374tr._ITM_deregist
⋯4 more rows
0x1af95f63686b5f6661696c00737464657272_chk_fail.stderr
0x1b090073747263707900736574736f636b6f.strcpy.setsocko
0x1b197074007374726361740061746f690073pt.strcat.atoi.s
0x1b2974726674696d6500666f70656e005f5ftrftime.fopen.__
0x1b39646572656769737465725f6672616d65deregister_frame
0x1b495f696e666f00736e7072696e74 _info.snprint
Parse IP with inet_pton 0x1b86–0x1be6
0x1b860073747264757000737072696e746600.strdup.sprintf.
0x1b96636f6e6e656374007374726c656e005fconnect.strlen._
0x1ba649544d5f7265676973746572544d436cITM_registerTMCl
0x1bb66f6e655461626c6500696e65745f7074oneTable.inet_pt
0x1bc66f6e006d656d6d656d005f5f6572726eon.memmem.__errn
0x1bd66f5f6c6f636174696f6e00737472636do_location.strcm
0x1be67000 p.
Uses _send socket call 0x1cdb–0x1d1b
0x1cdb636f6c5f6765745f76657273696f6e00col_get_version.
0x1ceb676e75746c735f7265636f72645f7365gnutls_record_se
0x1cfb6e6400676e75746c735f7072696f7269nd.gnutls_priori
0x1d0b74795f6465696e697400676e75746c73ty_deinit.gnutls
0x1d1b5f64 _d
Uses _recv socket call 0x24ad–0x24ed
0x24ad5f616c6572745f6765745f6e616d6500_alert_get_name.
0x24bd676e75746c735f7265636f72645f7265gnutls_record_re
0x24cd637600676e75746c735f636572746966cv.gnutls_certif
0x24dd69636174655f76657269666963617469icate_verificati
0x24ed6f6e on
Converts host to network short 0x2ad1–0x2ca1
0x2ad16500737472746f6c007365637572655fe.strtol.secure_
0x2ae1676574656e7600636c6f636b5f676574getenv.clock_get
0x2af174696d6500676d74696d655f7200736ftime.gmtime_r.so
0x2b01636b65740068746f6e73006761695f73cket.htons.gai_s
0x2b1174726572726f72006f7074696e640070trerror.optind.p
0x2b2169706500706572726f72007369676e61ipe.perror.signa
0x2b316c00666f726b00707574636861720073l.fork.putchar.s
0x2b41656c65637400737464696e0073747273elect.stdin.strs
0x2b51706e006c6f63616c74696d655f720067pn.localtime_r.g
0x2b61657461646472696e666f006765746e61etaddrinfo.getna
0x2b716d65696e666f006475703200756e7365meinfo.dup2.unse
0x2b8174656e760073687574646f776e007374tenv.shutdown.st
0x2b91646f7574006670757463006670757473dout.fputc.fputs
0x2ba100676574706173730074696d65676d00.getpass.timegm.
0x2bb172656d6f766500747a736574006f7074remove.tzset.opt
0x2bc1617267006765747365727662796e616darg.getservbynam
0x2bd16500616c61726d006765746f70745f6ce.alarm.getopt_l
0x2be16f6e6700657865637670006677726974ong.execvp.fwrit
0x2bf16500736967616374696f6e005f66696ee.sigaction._fin
0x2c0169006d6b74696d650066726565616464i.mktime.freeadd
⋯3 more rows
0x2c41766279706f72740076667072696e7466vbyport.vfprintf
0x2c51006e746f6873007265616c6c6f636172.ntohs.reallocar
0x2c61726179006c6962676e75746c732e736fray.libgnutls.so
⋯4 more rows

Showing the top 5 files — 2 more files (38 regions) not shown.

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.