Benign Download

news

Open filesSet file creation mask (umask)

SHA-256af2b0882f67c599af3b68fd6e59da518a0ca00d9995168ebfebe0117cc018916

Evidence

Uses opendir 0xd0b–0xd6b

0xd0b00667072696e7466006d616c6c6f6300.fprintf.malloc.
0xd1b676574656e76005f5f73746172745f63getenv.__start_c
0xd2b72745f636f6d70696c6572006f707473rt_compiler.opts
0xd3b77005f696e697400737472637079006fw._init.strcpy.o
0xd4b70656e6469720066636c6f7365006765pendir.fclose.ge
0xd5b746f7074006e6f707400726561645f64topt.nopt.read_d
0xd6b6972006e756d                    ir.num          

Set file creation mask (umask) 0xdc1–0xe61

0xdc1726f6e005f737461727400736f707400ron._start.sopt.
0xdd172656164646972005f5f667073746172readdir.__fpstar
0xde174006c6174655f6e65777300636c6f73t.late_news.clos
0xdf165646972006174657869740073747263edir.atexit.strc
0xe016174005f6d636f756e74007374726e63at._mcount.strnc
0xe116d70006e5f6c69737400756d61736b00mp.n_list.umask.
0xe215f5f6673725f696e69745f76616c7565__fsr_init_value
⋯4 more rows

Open files 0xee6–0xf46

0xee66f6e67646f75626c655f75736564005fongdouble_used._
0xef665786974005f5f6673720074696d655fexit.__fsr.time_
0xf06627566006673746174007369676e616cbuf.fstat.signal
0xf1600736c65657000616f707400666f7065.sleep.aopt.fope
0xf266e006368646972007072696e745f6974n.chdir.print_it
0xf36656d005f5f5f41726776005f50524f43em.___Argv._PROC
0xf4645445552455f4c                  EDURE_L         

usage: label (lowercase) 0x26f4–0x2744

0x26f42f1d05082f1d05082f1d0508ac1d0508/.../.../.......
0x270475736167653a206e657773205b2d615dusage: news [-a]
0x2714205b2d6e5d205b2d735d205b6974656d [-n] [-s] [item
0x2724735d0a006e6577733a206f7074696f6es]..news: option
0x27347320617265206d757475616c6c792065s are mutually e
0x27447863                            xc              