Benign Download

keylogin

Open filesTerminal password prompt

SHA-2569dc26159eb5c400f2b749ed27f3ef52a6560357a770787ba73934d88c0df8fc7

Evidence

Terminal password prompt 0xb52–0xba2

0xb5261005f737461727400737472636d7000a._start.strcmp.
0xb626765747569640072656e616d65006d65getuid.rename.me
0xb726d736574005f5f737461636b5f63686bmset.__stack_chk
0xb825f67756172640067657470617373005f_guard.getpass._
0xb925f6c6f6e67646f75626c655f75736564_longdouble_used
0xba2005f6d636f756e74006b65795f73    ._mcount.key_s  

Open files 0xc7c–0xcdc

0xc7c0066696c656e6f005f6e667373797300.fileno._nfssys.
0xc8c666f70656e0075736167650070657272fopen.usage.perr
0xc9c6f72006b65795f7365746e65745f6700or.key_setnet_g.
0xcac7374726c656e005f656e7669726f6e00strlen._environ.
0xcbc67657465756964005f73746172745f63geteuid._start_c
0xccc7274005f5f6e69735f6765745f6d6563rt.__nis_get_mec
0xcdc68616e69736d73                  hanisms         

usage: label (lowercase) 0x25c5–0x2615

0x25c56574206b657920696e746f2025730a00et key into %s..
0x25d52f6574632f2e726f6f746b65792e6261/etc/.rootkey.ba
0x25e56b0075736167653a202573205b2d725dk.usage: %s [-r]
0x25f50a002f6574632f2e726f6f746b657900../etc/.rootkey.
0x260550617373776f72643a0025732025640aPassword:.%s %d.
0x261500257320256400                  .%s %d.         