Benign Download

libOniFile.so.0

FORTIFY_SOURCE memcpy bounds checkRead file status and metadata (legacy 64-bit)
SHA-256e91e409efd4fbeac2e6a92c430b637b67377287e46af8c83ac9c9fdd7f4d6e5b
MaleculeH(F)Md(He)

Evidence

C++ ABI symbols cluster A 0xf90–0xfe0
0xf9072544d436c6f6e655461626c65005f5frTMCloneTable.__
0xfa06378615f66696e616c697a65006d656dcxa_finalize.mem
0xfb0637079005f5f737461636b5f63686b5fcpy.__stack_chk_
⋯3 more rows
FORTIFY_SOURCE memcpy bounds check 0x1065–0x1095
0x106576005f5a6e616d005f5a6e776d005f5fv._Znam._Znwm.__
0x10756d656d6370795f63686b007374726c65memcpy_chk.strle
0x10856e007374726e637079005f556e77696en.strncpy._Unwin
0x1095645f526573756d65005f d_Resume._
Read file descriptor (read/pread) 0x10d0–0x1140
0x10d0775f6c656e67746800737472636d7000w_length.strcmp.
0x10e075736c656570006f70656e3634005f5fusleep.open64.__
0x10f06572726e6f5f6c6f636174696f6e0072errno_location.r
0x1100656164006c7365656b363400636c6f73ead.lseek64.clos
0x111065005f5a646150766d00636c6f636b5fe._ZdaPvm.clock_
⋯3 more rows
Write files 0x16be–0x16ee
0x16be7072696e74665f63686b007075747300printf_chk.puts.
0x16ce7772697465005f5f7870675f62617365write.__xpg_base
0x16de6e616d6500707468726561645f636f6ename.pthread_con
0x16ee645f646573 d_des
Read file status and metadata (legacy 64-bit) 0x17cc–0x183c
0x17cc78617474725f64657374726f79005f5fxattr_destroy.__
0x17dc6378615f6174657869740073656d6374cxa_atexit.semct
0x17ec6c00756e6c696e6b005f5f7265616c70l.unlink.__realp
0x17fc6174685f63686b006c6f63616c74696dath_chk.localtim
0x180c65007374726674696d65006765747069e.strftime.getpi
0x181c6400737461743634006d6b6469720070d.stat64.mkdir.p
0x182c7468726561645f636f6e645f696e6974thread_cond_init
0x183c005f5f6378615f707572655f7669 .__cxa_pure_vi

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.