d4a81c2dd56e685af3f8cf5428a0f47b
Hash
- MD5: d4a81c2dd56e685af3f8cf5428a0f47b
- SHA1: 13becb8f0ca8a022cc3630a732b6115ff992bd1c
- SHA256: b2954c945b51dbd6fa88ac72338b7fbf76dec7d9909ceada9d36b21330842c97
- First Seen: 2026-05-28
- Last Seen: 2026-05-28
-
1
Related Reports
-
0
Related IOCs
Additional Information
VirusTotal
{
"data": {
"id": "b2954c945b51dbd6fa88ac72338b7fbf76dec7d9909ceada9d36b21330842c97",
"type": "file",
"links": {
"self": "https://www.virustotal.com/api/v3/files/b2954c945b51dbd6fa88ac72338b7fbf76dec7d9909ceada9d36b21330842c97"
},
"attributes": {
"tags": [
"elf",
"64bits"
],
"names": [
"77b750c2a573ecbbb23ab642eb1474dff03fee331b10185d0d5a5b1c1c4afd00",
"MicrosoftSystem64-linux"
],
"elf_info": {
"build_id": "60ce51fbda3036749b0de656005abae18f2b3572",
"interp": "/lib64/ld-linux-x86-64.so.2",
"header": {
"type": "EXEC (Executable file)",
"hdr_version": "1 (current)",
"num_prog_headers": 15,
"obj_version": "0x1",
"machine": "Advanced Micro Devices X86-64",
"num_section_headers": 44,
"os_abi": "UNIX - Linux",
"abi_version": 0,
"entrypoint": 12392560,
"data": "2's complement, little endian",
"class": "ELF64"
},
"shared_libraries": [
"libdl.so.2",
"libstdc++.so.6",
"libm.so.6",
"libgcc_s.so.1",
"libpthread.so.0",
"libc.so.6",
"ld-linux-x86-64.so.2"
],
"export_list": [
{
"name": "_ZNSt16_Sp_counted_baseILN9__gnu_cxx12_Lock_policyE2EE15_M_weak_releaseEv",
"type": "FUNC"
},
{
"name": "PEM_read_bio_X509_PUBKEY",
"type": "FUNC"
},
{
"name": "_ZN2v88internal7Factory27NewClosureFeedbackCellArrayEi",
"type": "FUNC"
},
{
"name": "_ZN2v88internal30TorqueGeneratedJSBoundFunctionINS0_15JSBoundFunctionENS0_42JSFunctionOrBoundFunctio",
"type": "FUNC"
},
{
"name": "_ZN6icu_7514MessagePattern12parseMessageEiii22UMessagePatternArgTypeP11UParseErrorR10UErrorCode",
"type": "FUNC"
},
{
"name": "_ZN2v88internal15WasmTableObject4GrowEPNS0_7IsolateENS0_6HandleIS1_EEjNS4_INS0_6ObjectEEE",
"type": "FUNC"
},
{
"name": "_ZN6icu_7516CollationWeights15getWeightRangesEjj",
"type": "FUNC"
},
{
"name": "_ZN6icu_7517StringTrieBuilder14BranchHeadNode19markRightEdgesFirstEi",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler26MachineOperatorGlobalCache29UnalignedStorekWord16OperatorD0Ev",
"type": "FUNC"
},
{
"name": "_ZN12v8_inspector10toV8StringEPN2v87IsolateERKNS_10StringViewE",
"type": "FUNC"
},
{
"name": "_ZN6icu_7531FormattedValueStringBuilderImplD2Ev",
"type": "FUNC"
},
{
"name": "_ZNK2v88internal8compiler6MapRef12IsForeignMapEv",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler17StateValuesAccess8iterator7AdvanceEv",
"type": "FUNC"
},
{
"name": "_ZN6icu_7516JapaneseCalendar21getDefaultMonthInYearEiR10UErrorCode",
"type": "FUNC"
},
{
"name": "ossl_c2i_ASN1_INTEGER",
"type": "FUNC"
},
{
"name": "_ZTVN4node9inspector8protocol14UberDispatcherE",
"type": "OBJECT"
},
{
"name": "_ZN2v88internal8compiler26MachineOperatorGlobalCache40Word64AtomicExchangeUint64NormalOperatorD0Ev",
"type": "FUNC"
},
{
"name": "_ZN4node6crypto9CryptoJobINS0_10HmacTraitsEE3RunERKN2v820FunctionCallbackInfoINS4_5ValueEEE",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler19JSIntrinsicLoweringD1Ev",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler16WasmGraphBuilder5StartEj",
"type": "FUNC"
},
{
"name": "_ZNK4node11IsolateData8SelfSizeEv",
"type": "FUNC"
},
{
"name": "_ZTVN2v88internal8compiler29SimplifiedOperatorGlobalCache17BigIntAddOperatorE",
"type": "OBJECT"
},
{
"name": "_ZNSt6vectorIN2v88internal18SharedFunctionInfoESaIS2_EE17_M_realloc_insertIJS2_EEEvN9__gnu_cxx17__no",
"type": "FUNC"
},
{
"name": "_ZN6icu_7512ChoiceFormatD0Ev",
"type": "FUNC"
},
{
"name": "_ZN4node3url11BindingData16UpdateComponentsERKN3ada14url_componentsENS2_6scheme4typeE",
"type": "FUNC"
},
{
"name": "_ZN2v88internal3Map13CopyWithFieldEPNS0_7IsolateENS0_6HandleIS1_EENS4_INS0_4NameEEENS4_INS0_9FieldTy",
"type": "FUNC"
},
{
"name": "_ZN2v88internal13RegExpCapture6ToNodeEPNS0_10RegExpTreeEiPNS0_14RegExpCompilerEPNS0_10RegExpNodeE",
"type": "FUNC"
},
{
"name": "napi_create_buffer_copy",
"type": "FUNC"
},
{
"name": "_ZN2v88internal12DeserializerINS0_12LocalIsolateEE17VisitRootPointersENS0_4RootEPKcNS0_14FullObjectS",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler26MachineOperatorGlobalCache45ProtectedLoadTransformS256Load32SplatOperatorD",
"type": "FUNC"
},
{
"name": "_ZN2v88internal23GetCurrentStackPositionEv",
"type": "FUNC"
},
{
"name": "v8dbg_parent_FixedIntegerArray__ByteArray",
"type": "OBJECT"
},
{
"name": "_ZNK2v88internal8compiler10ObjectData14IsAccessorInfoEv",
"type": "FUNC"
},
{
"name": "_ZTVN2v88internal8compiler26MachineOperatorGlobalCache16F64x2MulOperatorE",
"type": "OBJECT"
},
{
"name": "_ZN4node10cares_wrap9QueryWrapINS0_11CnameTraitsEE8CallbackEPviiPhi",
"type": "FUNC"
},
{
"name": "_ZN2v88internal21SmallOrderedHashTableINS0_19SmallOrderedHashMapEE6HasKeyEPNS0_7IsolateENS0_6HandleI",
"type": "FUNC"
},
{
"name": "_ZN2v88internal11interpreter17BytecodeGenerator24ControlScopeForIteration7ExecuteENS2_12ControlScope",
"type": "FUNC"
},
{
"name": "_ZNK4node12shadow_realm11ShadowRealm28prepare_stack_trace_callbackEv",
"type": "FUNC"
},
{
"name": "_ZTVN2v88internal8compiler9Operator1INS1_17FeedbackParameterENS1_9OpEqualToIS3_EENS1_6OpHashIS3_EEEE",
"type": "OBJECT"
},
{
"name": "_ZN2v88internal8compiler25CommonOperatorGlobalCache11PhiOperatorILNS0_21MachineRepresentationE9ELi4E",
"type": "FUNC"
},
{
"name": "_ZN2v88internal12PrintIsolateEPvPKcz",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler11SpillPlacer17FirstBackwardPassEv",
"type": "FUNC"
},
{
"name": "_ZTVN2v88internal8compiler26MachineOperatorGlobalCache34ProtectedLoadTaggedPointerOperatorE",
"type": "OBJECT"
},
{
"name": "_ZN4node11IsolateData9SerializeEPN2v815SnapshotCreatorE",
"type": "FUNC"
},
{
"name": "_ZN2v88internal51Builtin_TemporalPlainYearMonthPrototypeMonthsInYearEiPmPNS0_7IsolateE",
"type": "FUNC"
},
{
"name": "SSL_set_record_padding_callback",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler19InstructionSelector20VisitF32x4RelaxedMinEPNS1_4NodeE",
"type": "FUNC"
},
{
"name": "ossl_err_load_CT_strings",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8baseline16BaselineCompiler17VisitForInPrepareEv",
"type": "FUNC"
},
{
"name": "_ZNK6icu_756number4impl22MutablePatternModifier12needsPluralsEv",
"type": "FUNC"
},
{
"name": "_ZNO6icu_756number23NumberFormatterSettingsINS0_26UnlocalizedNumberFormatterEE12adoptPerUnitEPNS_11M",
"type": "FUNC"
},
{
"name": "_ZNK2v88internal8compiler9ObjectRef30AsObjectBoilerplateDescriptionEv",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler26MachineOperatorGlobalCache40StorekCompressedFullWriteBarrierOperatorD0Ev",
"type": "FUNC"
},
{
"name": "b2i_RSA_PVK_bio_ex",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler29SimplifiedOperatorGlobalCache15CheckIfOperatorILNS0_16DeoptimizeReasonE30E",
"type": "FUNC"
},
{
"name": "ares_dns_record_create",
"type": "FUNC"
},
{
"name": "d2i_NETSCAPE_CERT_SEQUENCE",
"type": "FUNC"
},
{
"name": "ucol_equal_75",
"type": "FUNC"
},
{
"name": "OBJ_find_sigid_by_algs",
"type": "FUNC"
},
{
"name": "EVP_PKEY_CTX_get_dh_kdf_md",
"type": "FUNC"
},
{
"name": "_ZN6icu_7514TimeZoneFormatC2ERKS0_",
"type": "FUNC"
},
{
"name": "_ZN6icu_7518UnicodeSetIteratorC2ERKNS_10UnicodeSetE",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler5Typer7Visitor14JSModulusTyperENS1_4TypeES4_PS2_",
"type": "FUNC"
},
{
"name": "_ZN6icu_7513LikelySubtags17initLikelySubtagsER10UErrorCode",
"type": "FUNC"
},
{
"name": "CTLOG_new_from_base64_ex",
"type": "FUNC"
},
{
"name": "_ZN2v88internal16FeedbackIteratorC1EPKNS0_13FeedbackNexusE",
"type": "FUNC"
},
{
"name": "_ZN2v88internal12ReadOnlyHeapC2EPS1_PNS0_13ReadOnlySpaceE",
"type": "FUNC"
},
{
"name": "_ZN2v88internal8compiler29SimplifiedOperatorGlobalCache31CheckedBigIntToBigInt64OperatorD1Ev",
"type": "FUNC"
},
{
"name": "_ZN6icu_756number31UnlocalizedNumberRangeFormatterC1ERKNS0_28NumberRangeFormatterSettingsIS1_EE",
"type": "FUNC"
},
{
"name": "_ZN2v87Isolate27RemoveNearHeapLimitCallbackEPFmPvmmEm",
"type": "FUNC"
}
],
"import_list": [
{
"name": "mlock",
"type": "FUNC"
},
{
"name": "pthread_join",
"type": "FUNC"
},
{
"name": "telldir",
"type": "FUNC"
},
{
"name": "msync",
"type": "FUNC"
},
{
"name": "_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6assignEPKc",
"type": "FUNC"
},
{
"name": "rewind",
"type": "FUNC"
},
{
"name": "_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9push_backEc",
"type": "FUNC"
},
{
"name": "llround",
"type": "FUNC"
},
{
"name": "open64",
"type": "FUNC"
},
{
"name": "dlsym",
"type": "FUNC"
},
{
"name": "_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate",
"type": "FUNC"
},
{
"name": "setbuf",
"type": "FUNC"
},
{
"name": "strdup",
"type": "FUNC"
},
{
"name": "lchown",
"type": "FUNC"
},
{
"name": "_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4swapERS4_",
"type": "FUNC"
},
{
"name": "readv",
"type": "FUNC"
},
{
"name": "fdopen",
"type": "FUNC"
},
{
"name": "feof",
"type": "FUNC"
},
{
"name": "uname",
"type": "FUNC"
},
{
"name": "__lxstat64",
"type": "FUNC"
},
{
"name": "__isoc99_sscanf",
"type": "FUNC"
},
{
"name": "symlink",
"type": "FUNC"
},
{
"name": "_ZdlPvm",
"type": "FUNC"
},
{
"name": "epoll_ctl",
"type": "FUNC"
},
{
"name": "access",
"type": "FUNC"
},
{
"name": "ioctl",
"type": "FUNC"
},
{
"name": "_ZSt24__throw_out_of_range_fmtPKcz",
"type": "FUNC"
},
{
"name": "isalpha",
"type": "FUNC"
},
{
"name": "inotify_rm_watch",
"type": "FUNC"
},
{
"name": "memmove",
"type": "FUNC"
},
{
"name": "_ZNSt6locale7classicEv",
"type": "FUNC"
},
{
"name": "fcntl64",
"type": "FUNC"
},
{
"name": "pwritev64",
"type": "FUNC"
},
{
"name": "__ctype_b_loc",
"type": "FUNC"
},
{
"name": "strncpy",
"type": "FUNC"
},
{
"name": "toupper",
"type": "FUNC"
},
{
"name": "localtime_r",
"type": "FUNC"
},
{
"name": "sendfile64",
"type": "FUNC"
},
{
"name": "__assert_fail",
"type": "FUNC"
},
{
"name": "pthread_mutex_destroy",
"type": "FUNC"
},
{
"name": "_ZSt24__throw_invalid_argumentPKc",
"type": "FUNC"
},
{
"name": "__xpg_strerror_r",
"type": "FUNC"
},
{
"name": "remove",
"type": "FUNC"
},
{
"name": "syscall",
"type": "FUNC"
},
{
"name": "mkstemp64",
"type": "FUNC"
},
{
"name": "gnu_get_libc_version",
"type": "FUNC"
},
{
"name": "tmpfile",
"type": "FUNC"
},
{
"name": "pthread_setspecific",
"type": "FUNC"
},
{
"name": "_ZNSt13basic_filebufIcSt11char_traitsIcEE5closeEv",
"type": "FUNC"
},
{
"name": "unlink",
"type": "FUNC"
},
{
"name": "_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7replaceEmmPKcm",
"type": "FUNC"
},
{
"name": "_ZNSt8__detail15_List_node_base7_M_hookEPS0_",
"type": "FUNC"
},
{
"name": "_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE5rfindEPKcmm",
"type": "FUNC"
},
{
"name": "ftell",
"type": "FUNC"
},
{
"name": "mkdir",
"type": "FUNC"
},
{
"name": "geteuid",
"type": "FUNC"
},
{
"name": "lseek",
"type": "FUNC"
},
{
"name": "openlog",
"type": "FUNC"
},
{
"name": "atan2",
"type": "FUNC"
},
{
"name": "readlink",
"type": "FUNC"
},
{
"name": "memset",
"type": "FUNC"
},
{
"name": "sscanf",
"type": "FUNC"
},
{
"name": "dlclose",
"type": "FUNC"
},
{
"name": "getuid",
"type": "FUNC"
},
{
"name": "fputs",
"type": "FUNC"
},
{
"name": "sin",
"type": "FUNC"
},
{
"name": "__cxa_thread_atexit",
"type": "FUNC"
},
{
"name": "pthread_cond_destroy",
"type": "FUNC"
},
{
"name": "_ZSt16__throw_bad_castv",
"type": "FUNC"
},
{
"name": "_ZdaPv",
"type": "FUNC"
}
],
"section_list": [
{
"name": "",
"section_type": "NULL",
"virtual_address": 0,
"physical_offset": 0,
"size": 0,
"flags": ""
},
{
"name": ".interp",
"section_type": "PROGBITS",
"virtual_address": 4195152,
"physical_offset": 848,
"size": 28,
"flags": "A"
},
{
"name": ".note.gnu.build-id",
"section_type": "NOTE",
"virtual_address": 218562560,
"physical_offset": 84344832,
"size": 36,
"flags": "A"
},
{
"name": ".note.ABI-tag",
"section_type": "NOTE",
"virtual_address": 218562596,
"physical_offset": 84344868,
"size": 32,
"flags": "A"
},
{
"name": ".gnu.hash",
"section_type": "GNU_HASH",
"virtual_address": 4195248,
"physical_offset": 944,
"size": 498804,
"flags": "A"
},
{
"name": ".dynsym",
"section_type": "DYNSYM",
"virtual_address": 4694056,
"physical_offset": 499752,
"size": 1824768,
"flags": "A"
},
{
"name": ".dynstr",
"section_type": "STRTAB",
"virtual_address": 6518824,
"physical_offset": 2324520,
"size": 5375586,
"flags": "A"
},
{
"name": ".gnu.version",
"section_type": "VERSYM",
"virtual_address": 11894410,
"physical_offset": 7700106,
"size": 152064,
"flags": "A"
},
{
"name": ".gnu.version_r",
"section_type": "VERNEED",
"virtual_address": 12046480,
"physical_offset": 7852176,
"size": 704,
"flags": "A"
},
{
"name": ".rela.dyn",
"section_type": "RELA",
"virtual_address": 12047184,
"physical_offset": 7852880,
"size": 1368,
"flags": "A"
},
{
"name": ".rela.plt",
"section_type": "RELA",
"virtual_address": 12048552,
"physical_offset": 7854248,
"size": 11928,
"flags": "AI"
},
{
"name": ".init",
"section_type": "PROGBITS",
"virtual_address": 12062720,
"physical_offset": 7868416,
"size": 32,
"flags": "AX"
},
{
"name": ".plt",
"section_type": "PROGBITS",
"virtual_address": 12062752,
"physical_offset": 7868448,
"size": 7968,
"flags": "AX"
},
{
"name": ".text",
"section_type": "PROGBITS",
"virtual_address": 12075008,
"physical_offset": 7876608,
"size": 28042576,
"flags": "AX"
},
{
"name": "lpstub",
"section_type": "PROGBITS",
"virtual_address": 41943040,
"physical_offset": 35921920,
"size": 482,
"flags": "AX"
},
{
"name": ".fini",
"section_type": "PROGBITS",
"virtual_address": 41943524,
"physical_offset": 35922404,
"size": 13,
"flags": "AX"
},
{
"name": ".rodata",
"section_type": "PROGBITS",
"virtual_address": 41947136,
"physical_offset": 35926016,
"size": 44660328,
"flags": "A"
},
{
"name": ".eh_frame_hdr",
"section_type": "PROGBITS",
"virtual_address": 86607464,
"physical_offset": 80586344,
"size": 616068,
"flags": "A"
},
{
"name": ".eh_frame",
"section_type": "PROGBITS",
"virtual_address": 87223536,
"physical_offset": 81202416,
"size": 2808840,
"flags": "A"
},
{
"name": ".gcc_except_table",
"section_type": "PROGBITS",
"virtual_address": 90032376,
"physical_offset": 84011256,
"size": 262,
"flags": "A"
},
{
"name": ".tdata",
"section_type": "PROGBITS",
"virtual_address": 90037800,
"physical_offset": 84012584,
"size": 4,
"flags": "WAT"
},
{
"name": ".tbss",
"section_type": "NOBITS",
"virtual_address": 90037808,
"physical_offset": 84012588,
"size": 248,
"flags": "WAT"
},
{
"name": ".init_array",
"section_type": "INIT_ARRAY",
"virtual_address": 90037808,
"physical_offset": 84012592,
"size": 6528,
"flags": "WA"
},
{
"name": ".fini_array",
"section_type": "FINI_ARRAY",
"virtual_address": 90044336,
"physical_offset": 84019120,
"size": 16,
"flags": "WA"
},
{
"name": ".data.rel.ro",
"section_type": "PROGBITS",
"virtual_address": 90044352,
"physical_offset": 84019136,
"size": 1376,
"flags": "WA"
},
{
"name": ".dynamic",
"section_type": "DYNAMIC",
"virtual_address": 90045728,
"physical_offset": 84020512,
"size": 592,
"flags": "WA"
},
{
"name": ".got",
"section_type": "PROGBITS",
"virtual_address": 90046320,
"physical_offset": 84021104,
"size": 4216,
"flags": "WA"
},
{
"name": ".data",
"section_type": "PROGBITS",
"virtual_address": 90050560,
"physical_offset": 84025344,
"size": 124096,
"flags": "WA"
},
{
"name": ".bss",
"section_type": "NOBITS",
"virtual_address": 90174656,
"physical_offset": 84149440,
"size": 187344,
"flags": "WA"
},
{
"name": ".comment",
"section_type": "PROGBITS",
"virtual_address": 0,
"physical_offset": 84149440,
"size": 91,
"flags": "MS"
},
{
"name": ".gnu.build.attributes",
"section_type": "NOTE",
"virtual_address": 90370192,
"physical_offset": 84149532,
"size": 1148,
"flags": ""
},
{
"name": ".shstrtab",
"section_type": "STRTAB",
"virtual_address": 0,
"physical_offset": 84150680,
"size": 307,
"flags": ""
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84344900,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84344936,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84344972,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345012,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345032,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345076,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345120,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345164,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345184,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345204,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 0,
"physical_offset": 84345224,
"size": 36,
"flags": "A"
},
{
"name": "",
"section_type": "NOTE",
"virtual_address": 218562976,
"physical_offset": 84345248,
"size": 783920,
"flags": "A"
}
],
"segment_list": [
{
"segment_type": "PHDR",
"resources": []
},
{
"segment_type": "INTERP",
"resources": [
".interp"
]
},
{
"segment_type": "LOAD",
"resources": [
".interp",
".gnu.hash",
".dynsym",
".dynstr",
".gnu.version",
".gnu.version_r",
".rela.dyn",
".rela.plt"
]
},
{
"segment_type": "LOAD",
"resources": [
".init",
".plt"
]
},
{
"segment_type": "LOAD",
"resources": [
".text"
]
},
{
"segment_type": "LOAD",
"resources": [
"lpstub",
".fini"
]
},
{
"segment_type": "LOAD",
"resources": [
".rodata",
".eh_frame_hdr",
".eh_frame",
".gcc_except_table"
]
},
{
"segment_type": "LOAD",
"resources": [
".tdata",
".tbss",
".init_array",
".fini_array",
".data.rel.ro",
".dynamic",
".got",
".data",
".bss"
]
},
{
"segment_type": "LOAD",
"resources": [
".note.gnu.build-id",
".note.ABI-tag"
]
},
{
"segment_type": "DYNAMIC",
"resources": []
},
{
"segment_type": "NOTE",
"resources": [
".note.gnu.build-id",
".note.ABI-tag"
]
},
{
"segment_type": "TLS",
"resources": [
".tdata",
".tbss"
]
},
{
"segment_type": "GNU_EH_FRAME",
"resources": [
".eh_frame_hdr"
]
},
{
"segment_type": "GNU_STACK",
"resources": []
},
{
"segment_type": "GNU_RELRO",
"resources": [
".tdata",
".tbss",
".init_array",
".fini_array",
".data.rel.ro",
".dynamic",
".got"
]
}
]
},
"detectiteasy": {
"filetype": "ELF64",
"values": [
{
"info": "EXEC AMD64-64",
"type": "Operation system",
"name": "Unix"
},
{
"info": "EXEC AMD64-64",
"version": "2.9",
"type": "Library",
"name": "GLIBC"
},
{
"info": "EXEC AMD64-64",
"version": "3.X",
"type": "Compiler",
"name": "gcc"
}
]
},
"ssdeep": "1572864:NuC93VNJXmspnFvw4mP8xqmFP70lbpLDKXFS:bDTnFvw4m0xqmFP70lNLuXFS",
"size": 85134080,
"unique_sources": 1,
"magic": "ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=60ce51fbda3036749b0de656005abae18f2b3572, for GNU/Linux 3.2.0, stripped",
"total_votes": {
"harmless": 0,
"malicious": 0
},
"tlsh": "T108189E0762E70C94F6F799304AEB43635232FC267E35A5AB324C57352FB3AE04565B22",
"sha1": "13becb8f0ca8a022cc3630a732b6115ff992bd1c",
"last_analysis_date": 1779381828,
"last_modification_date": 1779447381,
"last_submission_date": 1779381828,
"meaningful_name": "MicrosoftSystem64-linux",
"md5": "d4a81c2dd56e685af3f8cf5428a0f47b",
"last_analysis_stats": {
"malicious": 1,
"suspicious": 0,
"undetected": 62,
"harmless": 0,
"timeout": 0,
"confirmed-timeout": 0,
"failure": 0,
"type-unsupported": 12
},
"reputation": 0,
"magika": "ELF",
"type_tag": "elf",
"sha256": "b2954c945b51dbd6fa88ac72338b7fbf76dec7d9909ceada9d36b21330842c97",
"type_description": "ELF",
"telfhash": "t1b544e7a1492cdf47c871ba64fdfcba16428506d6bb54fed06fe4c12c4b40c8f62a25b9",
"times_submitted": 1,
"vhash": "b605b57bfd882834d6bdac2e047cc275",
"last_analysis_results": {
"Bkav": {
"method": "blacklist",
"engine_name": "Bkav",
"engine_version": "8.2.40(8338)",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Lionic": {
"method": "blacklist",
"engine_name": "Lionic",
"engine_version": "8.16",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"MicroWorld-eScan": {
"method": "blacklist",
"engine_name": "MicroWorld-eScan",
"engine_version": "14.0.409.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"ClamAV": {
"method": "blacklist",
"engine_name": "ClamAV",
"engine_version": "1.5.2.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"CMC": {
"method": "blacklist",
"engine_name": "CMC",
"engine_version": "2.4.2022.1",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"CAT-QuickHeal": {
"method": "blacklist",
"engine_name": "CAT-QuickHeal",
"engine_version": "22.00",
"engine_update": "20260520",
"category": "undetected",
"result": null
},
"Skyhigh": {
"method": "blacklist",
"engine_name": "Skyhigh",
"engine_version": "v2021.2.0+4045",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"ALYac": {
"method": "blacklist",
"engine_name": "ALYac",
"engine_version": "2.0.0.10",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Malwarebytes": {
"method": "blacklist",
"engine_name": "Malwarebytes",
"engine_version": "3.1.0.235",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Zillya": {
"method": "blacklist",
"engine_name": "Zillya",
"engine_version": "2.0.0.5606",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Sangfor": {
"method": "blacklist",
"engine_name": "Sangfor",
"engine_version": "2.22.3.0",
"engine_update": "20260518",
"category": "undetected",
"result": null
},
"K7AntiVirus": {
"method": "blacklist",
"engine_name": "K7AntiVirus",
"engine_version": "14.53.59577",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"K7GW": {
"method": "blacklist",
"engine_name": "K7GW",
"engine_version": "14.53.59577",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"CrowdStrike": {
"method": "blacklist",
"engine_name": "CrowdStrike",
"engine_version": "1.0",
"engine_update": "20230417",
"category": "undetected",
"result": null
},
"VirIT": {
"method": "blacklist",
"engine_name": "VirIT",
"engine_version": "9.5.1212",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Symantec": {
"method": "blacklist",
"engine_name": "Symantec",
"engine_version": "1.22.0.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"ESET-NOD32": {
"method": "blacklist",
"engine_name": "ESET-NOD32",
"engine_version": "18.2.18.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"TrendMicro-HouseCall": {
"method": "blacklist",
"engine_name": "TrendMicro-HouseCall",
"engine_version": "24.550.0.1002",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Avast": {
"method": "blacklist",
"engine_name": "Avast",
"engine_version": "23.9.8494.0",
"engine_update": "20260515",
"category": "undetected",
"result": null
},
"Cynet": {
"method": "blacklist",
"engine_name": "Cynet",
"engine_version": "4.0.3.4",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Kaspersky": {
"method": "blacklist",
"engine_name": "Kaspersky",
"engine_version": "22.0.1.28",
"engine_update": "20260521",
"category": "malicious",
"result": "HEUR:Trojan-PSW.Script.Agent.gen"
},
"BitDefender": {
"method": "blacklist",
"engine_name": "BitDefender",
"engine_version": "7.2",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"NANO-Antivirus": {
"method": "blacklist",
"engine_name": "NANO-Antivirus",
"engine_version": "1.0.170.26895",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"SUPERAntiSpyware": {
"method": "blacklist",
"engine_name": "SUPERAntiSpyware",
"engine_version": "5.6.0.1032",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Tencent": {
"method": "blacklist",
"engine_name": "Tencent",
"engine_version": "1.0.0.1",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Emsisoft": {
"method": "blacklist",
"engine_name": "Emsisoft",
"engine_version": "2024.8.0.61147",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"F-Secure": {
"method": "blacklist",
"engine_name": "F-Secure",
"engine_version": "18.10.1547.307",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"DrWeb": {
"method": "blacklist",
"engine_name": "DrWeb",
"engine_version": "7.0.75.2070",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"VIPRE": {
"method": "blacklist",
"engine_name": "VIPRE",
"engine_version": "6.0.0.35",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"TrendMicro": {
"method": "blacklist",
"engine_name": "TrendMicro",
"engine_version": "24.550.0.1002",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"McAfeeD": {
"method": "blacklist",
"engine_name": "McAfeeD",
"engine_version": "1.2.0.14532",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"CTX": {
"method": "blacklist",
"engine_name": "CTX",
"engine_version": "2024.8.29.1",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Sophos": {
"method": "blacklist",
"engine_name": "Sophos",
"engine_version": "3.5.1.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"SentinelOne": {
"method": "blacklist",
"engine_name": "SentinelOne",
"engine_version": "7.6.2.19",
"engine_update": "20260324",
"category": "undetected",
"result": null
},
"Avast-Mobile": {
"method": "blacklist",
"engine_name": "Avast-Mobile",
"engine_version": "260521-00",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Jiangmin": {
"method": "blacklist",
"engine_name": "Jiangmin",
"engine_version": "16.0.100",
"engine_update": "20260520",
"category": "undetected",
"result": null
},
"Varist": {
"method": "blacklist",
"engine_name": "Varist",
"engine_version": "6.6.1.3",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Avira": {
"method": "blacklist",
"engine_name": "Avira",
"engine_version": "8.3.3.24",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Antiy-AVL": {
"method": "blacklist",
"engine_name": "Antiy-AVL",
"engine_version": "3.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Kingsoft": {
"method": "blacklist",
"engine_name": "Kingsoft",
"engine_version": "None",
"engine_update": "20260520",
"category": "undetected",
"result": null
},
"Microsoft": {
"method": "blacklist",
"engine_name": "Microsoft",
"engine_version": "1.1.26040.8",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Gridinsoft": {
"method": "blacklist",
"engine_name": "Gridinsoft",
"engine_version": "1.0.245.174",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Xcitium": {
"method": "blacklist",
"engine_name": "Xcitium",
"engine_version": "38666",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Arcabit": {
"method": "blacklist",
"engine_name": "Arcabit",
"engine_version": "2025.0.0.23",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"ViRobot": {
"method": "blacklist",
"engine_name": "ViRobot",
"engine_version": "2014.3.20.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"ZoneAlarm": {
"method": "blacklist",
"engine_name": "ZoneAlarm",
"engine_version": "6.25-116106940",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"GData": {
"method": "blacklist",
"engine_name": "GData",
"engine_version": "GD:27.44624AVA:64.31283",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Google": {
"method": "blacklist",
"engine_name": "Google",
"engine_version": "1779379292",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"AhnLab-V3": {
"method": "blacklist",
"engine_name": "AhnLab-V3",
"engine_version": "3.30.0.10666",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Acronis": {
"method": "blacklist",
"engine_name": "Acronis",
"engine_version": "1.2.0.121",
"engine_update": "20240328",
"category": "undetected",
"result": null
},
"VBA32": {
"method": "blacklist",
"engine_name": "VBA32",
"engine_version": "5.6.1",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"TACHYON": {
"method": "blacklist",
"engine_name": "TACHYON",
"engine_version": "2026-05-21.02",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Ikarus": {
"method": "blacklist",
"engine_name": "Ikarus",
"engine_version": "6.4.16.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Zoner": {
"method": "blacklist",
"engine_name": "Zoner",
"engine_version": "2.2.2.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Rising": {
"method": "blacklist",
"engine_name": "Rising",
"engine_version": "25.0.0.28",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Yandex": {
"method": "blacklist",
"engine_name": "Yandex",
"engine_version": "5.5.2.24",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"TrellixENS": {
"method": "blacklist",
"engine_name": "TrellixENS",
"engine_version": "6.0.6.653",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"huorong": {
"method": "blacklist",
"engine_name": "huorong",
"engine_version": "4d5a467:4d5a467:beb3574:beb3574",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"MaxSecure": {
"method": "blacklist",
"engine_name": "MaxSecure",
"engine_version": "1.0.0.1",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"Fortinet": {
"method": "blacklist",
"engine_name": "Fortinet",
"engine_version": "7.0.48.0",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"AVG": {
"method": "blacklist",
"engine_name": "AVG",
"engine_version": "23.9.8494.0",
"engine_update": "20260515",
"category": "undetected",
"result": null
},
"Panda": {
"method": "blacklist",
"engine_name": "Panda",
"engine_version": "4.6.4.2",
"engine_update": "20260521",
"category": "undetected",
"result": null
},
"alibabacloud": {
"method": "blacklist",
"engine_name": "alibabacloud",
"engine_version": "2.2.0",
"engine_update": "20250321",
"category": "undetected",
"result": null
},
"SymantecMobileInsight": {
"method": "blacklist",
"engine_name": "SymantecMobileInsight",
"engine_version": "2.0",
"engine_update": "20260123",
"category": "type-unsupported",
"result": null
},
"BitDefenderFalx": {
"method": "blacklist",
"engine_name": "BitDefenderFalx",
"engine_version": "2.0.936",
"engine_update": "20260520",
"category": "type-unsupported",
"result": null
},
"DeepInstinct": {
"method": "blacklist",
"engine_name": "DeepInstinct",
"engine_version": "5.0.0.8",
"engine_update": "20260516",
"category": "type-unsupported",
"result": null
},
"Elastic": {
"method": "blacklist",
"engine_name": "Elastic",
"engine_version": "4.0.261",
"engine_update": "20260513",
"category": "type-unsupported",
"result": null
},
"APEX": {
"method": "blacklist",
"engine_name": "APEX",
"engine_version": "6.780",
"engine_update": "20260519",
"category": "type-unsupported",
"result": null
},
"Paloalto": {
"method": "blacklist",
"engine_name": "Paloalto",
"engine_version": "0.9.0.1003",
"engine_update": "20260521",
"category": "type-unsupported",
"result": null
},
"Trapmine": {
"method": "blacklist",
"engine_name": "Trapmine",
"engine_version": "4.0.12.0",
"engine_update": "20260504",
"category": "type-unsupported",
"result": null
},
"Alibaba": {
"method": "blacklist",
"engine_name": "Alibaba",
"engine_version": "0.3.0.5",
"engine_update": "20190527",
"category": "type-unsupported",
"result": null
},
"Webroot": {
"method": "blacklist",
"engine_name": "Webroot",
"engine_version": "1.9.0.8",
"engine_update": "20250227",
"category": "type-unsupported",
"result": null
},
"Cylance": {
"method": "blacklist",
"engine_name": "Cylance",
"engine_version": "3.0.0.0",
"engine_update": "20260521",
"category": "type-unsupported",
"result": null
},
"tehtris": {
"method": "blacklist",
"engine_name": "tehtris",
"engine_version": null,
"engine_update": "20260521",
"category": "type-unsupported",
"result": null
},
"Trustlook": {
"method": "blacklist",
"engine_name": "Trustlook",
"engine_version": "1.0",
"engine_update": "20260521",
"category": "type-unsupported",
"result": null
}
},
"trid": [
{
"file_type": "ELF Executable and Linkable format (Linux)",
"probability": 50.1
},
{
"file_type": "ELF Executable and Linkable format (generic)",
"probability": 49.8
}
],
"first_seen_itw_date": 1779381823,
"first_submission_date": 1779381828,
"filecondis": {
"dhash": "00003c1e2d262600",
"raw_md5": "543c2b63f1a8d208803d1c9879886992"
},
"type_tags": [
"executable",
"linux",
"elf"
]
}
}
}