Benign alpine Download

gnutls 3.8.13-r0

ELF omits compiler metadata (.comment)get_peers DHT operation

SHA-2568d3f3612145db8cd7feb83607187a60f809f06cfa3c2e74d310d58a6b053d54c

URLhttps://dl-cdn.alpinelinux.org/alpine/latest-stable/main/x86_64/gnutls-3.8.13-r0.apk

MaleculeK(Li)O(C)H₆(Cm₇Cr₆Db₃F₅OsU)Md₄(BiBkHePa₂)

Evidence

Uses recv socket call 0xe9f3–0xece3

⋯3 more rows
0xea236c735f6275666665725f636c65617200ls_buffer_clear.
0xea33676e75746c735f7265636f72645f7365gnutls_record_se
0xea436e6400676e75746c735f7265636f7264nd.gnutls_record
0xea535f73656e645f6561726c795f64617461_send_early_data
⋯7 more rows
0xead36e75746c735f7265636f72645f756e63nutls_record_unc
0xeae36f726b00676e75746c735f7265636f72ork.gnutls_recor
0xeaf3645f7265637600676e75746c735f7265d_recv.gnutls_re
0xeb03636f72645f726563765f73657100676ecord_recv_seq.gn
⋯9 more rows
0xeba3636f6465724d6178436f6d7072657373coderMaxCompress
0xebb3656453697a65005a5354445f636f6d70edSize.ZSTD_comp
0xebc372657373426f756e640042726f746c69ressBound.Brotli
0xebd3456e636f646572436f6d707265737300EncoderCompress.
0xebe35a5354445f636f6d7072657373005a53ZSTD_compress.ZS
0xebf354445f69734572726f7200756e636f6dTD_isError.uncom
0xec0370726573730042726f746c694465636fpress.BrotliDeco
0xec136465724465636f6d7072657373005a53derDecompress.ZS
0xec2354445f6465636f6d707265737300676eTD_decompress.gn
0xec3375746c735f68616e647368616b655f64utls_handshake_d
⋯11 more rows

References C fopen file-open API 0xf0f1–0xf1e1

⋯3 more rows
0xf12177007365637572655f676574656e7600w.secure_getenv.
0xf131666f70656e00676e75746c735f736573fopen.gnutls_ses
0xf14173696f6e5f6765745f6b65796c6f675fsion_get_keylog_
⋯10 more rows

Seeks to position in file 0xf30c–0xf45c

⋯3 more rows
0xf33c6f746f636f6c5f6765745f6e616d6500otocol_get_name.
0xf34c667365656b005f676e75746c735f6465fseek._gnutls_de
0xf35c6661756c745f7072696f726974795f73fault_priority_s
⋯16 more rows

Searches memory for byte substring 0xf9ce–0xfa8e

⋯3 more rows
0xf9fe36345f6465636f64655f66696e616c0064_decode_final.
0xfa0e6d656d6d656d00676e75746c735f7065memmem.gnutls_pe
0xfa1e6d5f6261736536345f6465636f646500m_base64_decode.
⋯7 more rows

Imports the POSIX connect API 0x107cc–0x10a3c

⋯3 more rows
0x107fc676f73745f7261770067657475696400gost_raw.getuid.
0x1080c67657470777569645f7200676e75746cgetpwuid_r.gnutl
0x1081c735f783530395f74727573745f6c6973s_x509_trust_lis
⋯5 more rows
0x1087c6561645f6d757465785f64657374726fead_mutex_destro
0x1088c790073656e646d736700736574736f63y.sendmsg.setsoc
0x1089c6b6f707400636f6e6e65637400676e75kopt.connect.gnu
0x108ac746c735f7472616e73706f72745f7365tls_transport_se
⋯7 more rows
0x1092c635f707573685f66756e6374696f6e00c_push_function.
0x1093c706f6c6c005f676e75746c735f756373poll._gnutls_ucs
0x1094c325f746f5f75746638007531365f746f2_to_utf8.u16_to
⋯15 more rows

No evidence locations were recorded for this file. Raw result