Benign Download

ldap_cachemgr

setsid symbol textSet file creation mask (umask)

SHA-2569c0de7dabf74ef1f9ed24ef3674a0ebfa390c500a4afb859b3b8f0468bc8fc21

Evidence

Read file descriptor (read/pread) 0x1e16–0x1e46

0x1e1672656d6f76655f7365727665725f7468remove_server_th
0x1e267265616400746573745f736572766572read.test_server
0x1e365f6368616e6765006765746c6461705f_change.getldap_
0x1e467365745f                        set_            

Write files 0x20c0–0x2130

0x20c05f70635f7468756e6b2e647800737472_pc_thunk.dx.str
0x20d0647570006765746c6461705f72657661dup.getldap_reva
0x20e06c696461746500617465786974007374lidate.atexit.st
0x20f072636d70007772697465005f474c4f42rcmp.write._GLOB
0x2100414c5f4f46465345545f5441424c455fAL_OFFSET_TABLE_
⋯3 more rows

Set file creation mask (umask) 0x21a6–0x21f6

0x21a6734368616e6765006765747465787400sChange.gettext.
0x21b6756d61736b0070617573650075637265umask.pause.ucre
0x21c6645f676574706964007379736c6f6700d_getpid.syslog.
⋯3 more rows

Get effective user ID 0x2745–0x2785

0x2745005f44594e414d49430075637265645f._DYNAMIC.ucred_
0x27556765746575696400636f6e645f736967geteuid.cond_sig
0x27656e616c005f5f6e735f6c6461705f6572nal.__ns_ldap_er
0x27757232737472006368675f69735f63616cr2str.chg_is_cal
0x27856c6564                          led             

setsid symbol text 0x28ce–0x291e

0x28ce637265645f6765747072697673657400cred_getprivset.
0x28de736574736964006d757465785f756e6csetsid.mutex_unl
0x28ee6f636b00737472737472006765747469ock.strstr.getti
⋯3 more rows