Benign Download

dd

Read file status and metadata (legacy 64-bit)

SHA-25604149e44fd326d0e69879c526fa14dc31e1f91a2a899fa792f9e4c878ebe334d

Evidence

Read file descriptor (read/pread) 0x9e9–0xa19

0x9e972006d61746368006e756d6265720069r.match.number.i
0x9f972656164007374617473007465726d00read.stats.term.
0xa09666c7368006372746e2e73005f5f7838flsh.crtn.s.__x8
0xa19362e6765                        6.ge            

Read file status and metadata (legacy 64-bit) 0xa82–0xac2

0xa826c6f6e67646f75626c655f7573656400longdouble_used.
0xa9266737461743634005f6564617461005ffstat64._edata._
0xaa25f737461636b5f63686b5f6661696c00_stack_chk_fail.
0xab27374726572726f720074657874646f6dstrerror.textdom
0xac261696e006f7074696e64005f6d636f  ain.optind._mco 

Write files 0xc41–0xc71

0xc41005f5f656e7669726f6e5f6c6f636b00.__environ_lock.
0xc51777269746500706572726f72006c7365write.perror.lse
0xc61656b3634006c6962636d647574696c73ek64.libcmdutils
0xc712e736f2e31                      .so.1           

usage: label (lowercase) 0x4068–0x4108

0x406865787065637465642025640a00000000expected %d.....
0x407875736167653a206464205b69663d6669usage: dd [if=fi
0x40886c655d205b6f663d66696c655d205b69le] [of=file] [i
0x409862733d6e7c6e6b7c6e627c6e786d5d20bs=n|nk|nb|nxm] 
0x40a85b6f62733d6e7c6e6b7c6e627c6e786d[obs=n|nk|nb|nxm
0x40b85d0a092020205b62733d6e7c6e6b7c6e]..   [bs=n|nk|n
0x40c8627c6e786d5d205b6362733d6e7c6e6bb|nxm] [cbs=n|nk
0x40d87c6e627c6e786d5d205b66696c65733d|nb|nxm] [files=
0x40e86e5d205b736b69703d6e5d0a09202020n] [skip=n]..   
0x40f85b697365656b3d6e5d205b6f7365656b[iseek=n] [oseek
0x41083d6e5d205b7365656b3d6e5d205b7374=n] [seek=n] [st