Benign raspios Download

arm64-img/2026-10-06-raspios-trixie-arm64.img/2026-10-06-raspios-trixie-arm64.img.d/1.img.d/usr/bin

ELF directly depends on the dynamic loaderImports C environment-variable removal API
SHA-2567bee5b51344f0ef4109def17e31244e54c6e920e670e5071fb0dd80d0b4a7667

Evidence

libm exp import 0x4bda–0x4c9a
⋯3 more rows
0x4c0a646973706c61795f64657374726f7900display_destroy.
0x4c1a657870006c726f756e646600666d6f64exp.lroundf.fmod
0x4c2a007069786d616e5f726567696f6e3332.pixman_region32
⋯7 more rows
References POSIX pipe API 0x93ad–0x969d
⋯3 more rows
0x93dd00666f70656e363400706572726f7200.fopen64.perror.
0x93ed73657473696400636c6f636b5f676574setsid.clock_get
0x93fd74696d6500646367657474657874005ftime.dcgettext._
0x940d5f737461636b5f63686b5f6661696c00_stack_chk_fail.
0x941d5f5f7072696e74665f63686b00667265__printf_chk.fre
0x942d6164005f5f6173736572745f6661696cad.__assert_fail
0x943d00676574630073747264757000666e6d.getc.strdup.fnm
0x944d617463680073747273706e0073747272atch.strspn.strr
0x945d636872006d656d6d6f76650073747274chr.memmove.strt
0x946d6f6400737472746f6600776169746964od.strtof.waitid
0x947d00737472746f6c00666f726b00737472.strtol.fork.str
0x948d7369676e616c005f5f63747970655f62signal.__ctype_b
0x949d5f6c6f6300756e736574656e76007374_loc.unsetenv.st
0x94ad727374720066656f6600676574726c69rstr.feof.getrli
0x94bd6d69743634005f5f76736e7072696e74mit64.__vsnprint
0x94cd665f63686b0064757032006765747069f_chk.dup2.getpi
0x94dd64006f7074617267007265616c6c6f63d.optarg.realloc
0x94ed006765746c696e650065786563767000.getline.execvp.
0x94fd5f657869740062696e6474657874646f_exit.bindtextdo
0x950d6d61696e005f5f667072696e74665f63main.__fprintf_c
0x951d686b006c6f63616c65636f6e76005f5fhk.localeconv.__
0x952d6c6962635f73746172745f6d61696e00libc_start_main.
0x953d657865636c0073696770726f636d6173execl.sigprocmas
0x954d6b0073746465727200616c706861736fk.stderr.alphaso
⋯5 more rows
0x95ad5f66696e616c697a65007365746c6f63_finalize.setloc
0x95bd616c6500737472636872006674656c6cale.strchr.ftell
0x95cd00676574676964007374726572726f72.getgid.strerror
0x95dd006b696c6c00736574726c696d697436.kill.setrlimit6
0x95ed3400676574656e760063616c6c6f63004.getenv.calloc.
0x95fd6d656d636d700066636c6f7365006d65memcmp.fclose.me
⋯5 more rows
0x965d006d656d63707900737472636d700071.memcpy.strcmp.q
0x966d736f727400667365656b007374617436sort.fseek.stat6
0x967d34005f5f6572726e6f5f6c6f636174694.__errno_locati
0x968d6f6e0077726974650061626f72740067on.write.abort.g
0x969d65746f70745f6c6f6e67007069706500etopt_long.pipe.
References C fseek file-position API 0x144a0–0x14560
⋯3 more rows
0x144d020021fd61f2003d55f2403d5d00300f0 .... .._$......
0x144e011a243f910021d9120021fd61f2003d5..C..... .... ..
0x144f05f2403d5d00300f011a643f910221d91_$........C.."..
⋯7 more rows
128-byte null run in the code section 0x3a120–0x3a350
⋯3 more rows
0x3a150000400141f2003d5010040f9abffff17..... ....@.....
0x3a16000000000000000000000000000000000................
0x3a17000000000000000000000000000000000................
0x3a18000000000000000000000000000000000................
0x3a19000000000000000000000000000000000................
0x3a1a000000000000000000000000000000000................
0x3a1b000000000000000000000000000000000................
0x3a1c000000000000000000000000000000000................
0x3a1d000000000000000000000000000000000................
0x3a1e000000000000000000000000000000000................
0x3a1f000000000000000000000000000000000................
0x3a20000000000000000000000000000000000................
0x3a21000000000000000000000000000000000................
0x3a22000000000000000000000000000000000................
0x3a23000000000000000000000000000000000................
0x3a24000000000000000000000000000000000................
0x3a25000000000000000000000000000000000................
0x3a26000000000000000000000000000000000................
0x3a27000000000000000000000000000000000................
0x3a28000000000000000000000000000000000................
0x3a29000000000000000000000000000000000................
0x3a2a000000000000000000000000000000000................
0x3a2b000000000000000000000000000000000................
0x3a2c000000000000000000000000000000000................
0x3a2d000000000000000000000000000000000................
0x3a2e000000000000000000000000000000000................
⋯7 more rows
References the /bin/sh shell path 0x63898–0x63a08
0x638986f207069706528290000000000000000o pipe()........
0x638a85b25733a25645d20756e61626c652074[%s:%d] unable t
0x638b86f20666f726b2829206368696c640000o fork() child..
0x638c82f6465762f6e756c6c00000000000000/dev/null.......
0x638d85b25733a25645d206f70656e696e6720[%s:%d] opening
0x638e82f6465762f6e756c6c206661696c6564/dev/null failed
⋯8 more rows
0x6397820257300000000002d63000000000000 %s.....-c......
0x6398873680000000000002f62696e2f736800sh....../bin/sh.
0x639982e2e2f7372632f636f6d6d6f6e2f7374../src/common/st
⋯7 more rows

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.