Benign Download

ffmpegthumbnailer

Dynamic library loading via dlopenCore dlopen/dlsym pattern

SHA-256786e72d4751cfa8f867e719a673318101a248e54e76ab3763dd4abafcbbe3eca

MaleculeH(Ds)

Evidence

libc characteristic cxa finalize 0xa32–0xa62

0xa3262635f73746172745f6d61696e005f5fbc_start_main.__
0xa426378615f66696e616c697a6500737472cxa_finalize.str
0xa526c656e006d656d636d70005f5f657272len.memcmp.__err
0xa626e6f5f6c6f636174696f6e00        no_location.    

Dynamic linker error handling 0xa70–0xac0

0xa7069736f6332335f737472746f6c005f5fisoc23_strtol.__
0xa80737461636b5f63686b5f6661696c006dstack_chk_fail.m
0xa90656d63707900646c6f70656e00646c65emcpy.dlopen.dle
0xaa072726f72006d656d6d6f766500736574rror.memmove.set
0xab06c6f63616c65006765746f7074006f70locale.getopt.op
0xac074617267                        targ            

Dynamic library unload 0xe22–0xe52

0xe224156466f726d6174436f6e7465787400AVFormatContext.
0xe32646c73796d00646c636c6f7365005f5adlsym.dlclose._Z
0xe424e313766666d7065677468756d626e61N17ffmpegthumbna
0xe52696c65723136566964656f5468      iler16VideoTh   

Usage: label (title case) 0x3ff8–0x4048

0x3ff800000000000000000100020000000000................
0x400855736167653a2066666d706567746875Usage: ffmpegthu
0x40186d626e61696c6572205b6f7074696f6embnailer [option
0x4028735d0a0a0000000020202d733c6e3e20s]......  -s<n> 
0x403820203a207468756d626e61696c207369  : thumbnail si
0x40487a65                            ze              

Short -h help flag 0x4270–0x42a0

0x42706e206e756d6265720a00000000000000n number........
0x428020202d682020202020203a2064697370  -h      : disp
0x42906c617920746869732068656c700a0000lay this help...
0x42a0626173                          bas             