Benign Download

tracepath.c

Legitimate source code with metadata

Encoded payload detected: base64Percent-encoded content decoded

SHA-2562144c68c64a11b534e921ee9f12fbd456f5f14d5e5647ab850ab18bda1532b29

URLhttps://github.com/iputils/iputils/blob/master/tracepath.c/

Evidence

Encoded payload detected: base64 line 156

156:206… data-pjax-transient="true"/><meta name="visitor-payload" content="eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDMzQ0OjM1RDc3OToxMjA4ODgyOjE4ODNFQkE6NkE2NjdGNjIiLCJ2aXNpdG9yX2lkIjoiNTk3MTUzNzczOTE3NTU5MTc3OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3J …

Percent-encoded content decoded lines 331–334

41… er-2 text-right d-lg-none gap-2 flex-justify-end">
        <a
          href="/login?return_to=https%3A%2F%2Fgithub.com%2Fiputils%2Fiputils%2Fblob%2Fmaster%2Ftracepath.c%2F"
          class="HeaderMenu-link HeaderMenu-button d-inlin …

GitHub web raw file URL lines 1332–1336

7… -data-router-enabled="true"
data-react-profiling="false"
1334>

<script type="application/json" data-target="react-app.embeddedData">{"payload":{"codeViewBlobRoute":{"csv":null,"csvError":null,"headerInfo":{"toc":null},"issueTemplate":null,"discussionTem …

Indexes argv[0] array element line 1336

1336:22344… g called using `tracepath4` or `tracepath6` symlinks */","\tif (argv[0][strlen(argv[0]) - 1] == '4')","\t\thints.ai_family = AF_INET;","\telse if (argv[0][strlen(argv[0]) - 1] == '6')","\t\thints.ai_ …