Benign alpine Download

fontconfig 2.18.1-r0

ELF binary has trailing overlay dataFile starts with
SHA-256cfcf5797950a89d75355b1777bd7d1fed1026e2c18c63587fd79ef79fb22969c
URLhttps://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/fontconfig-2.18.1-r0.apk
MaleculeO(Er)H₂(CmF₂)Md₂(BiHe)

Evidence

Repeated RWX protection constant bytes 0x1650–0x1680
0x165000000000000000000000000000000000................
0x166007000000200000000000000000000000.... ...........
0x167000000000000000006213000012000000........b.......
0x168000000000 ....
Delete files 0x332f–0x33df
0x332f6341746f6d6963437265617465006664cAtomicCreate.fd
0x333f6f70656e00756e6c696e6b0067657470open.unlink.getp
0x334f69640066636c6f7365005f5f6572726eid.fclose.__errn
⋯9 more rows
Read file status and metadata (core) 0x344c–0x34ec
0x344c61645f6d757465785f756e6c6f636b00ad_mutex_unlock.
0x345c667374617400676574656e7600737472fstat.getenv.str
0x346c746f756c6c0073746465727200737472toull.stderr.str
0x347c6572726f720066707574730072656164error.fputs.read
0x348c00466344697243616368654372656174.FcDirCacheCreat
⋯6 more rows
chmod syscall 0x35af–0x360f
0x35af00466343616368654e756d466f6e7400.FcCacheNumFont.
0x35bf6677726974650063686d6f6400466343fwrite.chmod.FcC
0x35cf6163686543726561746554616746696cacheCreateTagFil
⋯4 more rows
Accept API symbol text 0x34bd4–0x34c04
0x34bd46572000000000000000000000d000000er..............
0x34be461636365707400000000000000000000accept..........
0x34bf40e00000064656661756c740000000000....default.....
0x34c04000000000f00 ......

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.