Method and device for determining ELF file execution action, equipment and medium

The invention discloses an ELF file execution action determination method and device, equipment and a medium, and relates to the technical field of data processing. The method comprises the steps that a target ELF file is acquired, and all sections of the target ELF file are loaded into a memory; decompressing sub-segments in the compressed and encrypted segment into a memory, and determining a first search result of the detection program in the code segment; determining a second lookup result of the shell program in the shell section; and determining an execution action of the target ELF file according to the first search result and the second search result. According to the scheme, the first search result is determined in the code segment, the second search result is determined in the shell segment, and then the execution action of the target ELF file is determined, so that a main program of the target ELF file is prevented from running away from a shell program, the difficulty of cracking and tampering the