Benign Download

vbackdoor.c

old_ function prefix (hook backup)Read TCP connection table

SHA-256795f813fbc4e1f8f9955f60cba7c68f4a48655def7352b13c61519df382b0310

Evidence

old_ function prefix (hook backup) lines 30–35

30static int (*old_lxstat) (int ver, const char *file, struct stat * buf);
31static int (*old_lxstat64) (int ver, const char *file, struct stat64 * buf);
32static int (*old_open) (const char *pathname, int flags, mode_t mode);
33static int (*old_rmdir) (const char *pathname);
34static int (*old_unlink) (const char *pathname);
⋯1 line