Benign Download

04db3fc44c81886844ef47949d7f352953a6bf1be4866be1fb3e7e12c452e3ac

Ad-hoc code signatureGo ioutil.ReadFile

SHA-25604db3fc44c81886844ef47949d7f352953a6bf1be4866be1fb3e7e12c452e3ac

URLhttps://mb-api.abuse.ch/api/v1/

MaleculeK(Li)O₆(AsCaDy₃ILaPr)H₉(Cm₂₀Cr₅Db₇Ds₂F₉HfMgOs₇Po₈)Md₅(BiInPtSi₂)

Evidence

References the /bin/sh shell path 0x73ad08–0x73ae08

⋯3 more rows
0x73ad383a2077696e646f7773707974686f6e33: windowspython3
0x73ad482f62696e2f7368737461747573202f3a/bin/shstatus /:
0x73ad582f686f73747375636365737361707065/hostsuccessappe
⋯11 more rows

macOS sw_vers system-version query 0x73b0c0–0x73b180

⋯3 more rows
0x73b0f065796e6f6174696d6570726f74656374eynoatimeprotect
0x73b10073775f766572736c6f61645f75387661sw_versload_u8va
0x73b110725f6765747661725f7365746d61696er_getvar_setmain
⋯7 more rows

macOS hardware-model sysctl key 0x73b896–0x73b9c6

⋯3 more rows
0x73b8c6446563656d62657225214d6f6e746828December%!Month(
0x73b8d668772e6d6f64656c636f70793a202576hw.modelcopy: %v
0x73b8e666732e77726974656e65742e68747470fs.writenet.http
⋯14 more rows

References the sudo command path 0x73c696–0x73c826

⋯10 more rows
0x73c7366c6c65646675656c5f757365642f7573lledfuel_used/us
0x73c746722f7362696e7375646f5f6774666f64r/sbinsudo_gtfod
0x73c756697274795f636f7766696c655f636170irty_cowfile_cap
0x73c766732d6d6178646570746870616e69633as-maxdepthpanic:
0x73c776202576737569642d636f70792f646576 %vsuid-copy/dev
0x73c7862f6e756c6c3a2077726974653a202f62/null: write: /b
0x73c796696e2f646173682f62696e2f62617368in/dash/bin/bash
0x73c7a62f62696e2f7375646f2f7573722f6269/bin/sudo/usr/bi
0x73c7b66e2f2f7661722f6c69622f6175746f73n//var/lib/autos
⋯7 more rows

WebSocket class reference 0x73cc2c–0x73cd5c

⋯3 more rows
0x73cc5c2f6465762f70746d78257325642e2530/dev/ptmx%s%d.%0
0x73cc6c3964576562536f636b6574666f7277619dWebSocketforwa
0x73cc7c7264656462696e64696e67737b25732erdedbindings{%s.
⋯14 more rows