Open-source atomic malware analysis

Analyze another

xmllint

ELF
Verdict: SUSPICIOUS
AI ELF with writable executable segment
Mal-ecule
H(F)Md₂(BiHe)
Size 121.7 KB download unavailable
First seen 31 days ago
Analyzed 31 days ago
ELF has W+X loadable segment: xmllint:0x0
xmllint elf
0x0 7f454c46010101060100000000000000 .ELF............ELF has W+X loadable segment
0x10 02000300010000004044050834000000 ........@D..4...
0x20 24e20100000000003400200006002800 $.......4. ...(.
0x30 1e001c00060000003400000034000508 ........4...4...
0x40 00000000c000 ......
0x203d 736800786d6c58506174684576616c00 sh.xmlXPathEval.
0x204d 66777269746500786d6c446562756744 fwrite.xmlDebugDWrite files
0x205d 756d70537472696e6700786d6c52656c umpString.xmlRel
0x206d 61784e475661 axNGVa
0x23b0 65616446696c65005f6d636f756e7400 eadFile._mcount.
0x23c0 667075746300786d6c4765744e6f6465 fputc.xmlGetNode
0x23d0 5061746800667265616400786d6c4e65 Path.fread.xmlNeRead stream (fread)
0x23e0 77446f634e6f646500786d6c50617273 wDocNode.xmlPars
0x23f0 6544544400786d6c4e6f eDTD.xmlNo
0x2a5a 446f63756d656e74005f656461746100 Document._edata.
0x2a6a 73746174363400786d6c446562756744 stat64.xmlDebugDRead file status and metadata (legacy 64-bit)
0x2a7a 756d70446f63756d656e744865616400 umpDocumentHead.
0x2a8a 786d6c4e6577 xmlNew
0xc9e0 66207468652070617273696e670a0000 f the parsing...
0xc9f0 092d2d76657273696f6e203a20646973 .--version : disVersion information string
0xca00 706c6179207468652076657273696f6e play the version
0xca10 206f66207468652058 of the X

Micro-behaviors

Metadata

Identity

SHA-256 b2660abfd8d178d25fd038ffb608aef40450cda1c351386c0e1c586aaa30b86a
Filename xmllint

Origin

Source harvest

Timeline

First seen 28 Jun 2026 03:44 UTC
First analyzed 28 Jun 2026 04:10 UTC
Last analyzed 28 Jun 2026 04:10 UTC
Last updated 28 Jun 2026 04:10 UTC

Labeling

Label good
Label source harvest
Traits version 868bd