Benign Download

mdig

Open filesParse IP with inet_pton

SHA-256b27e58a3cce2cc6ec51f37b43f64186aa910250070f30112f91a4ec13df2ebb8

Evidence

Open files 0x21cc–0x21fc

0x21cc6e65745f64697361626c656970763600net_disableipv6.
0x21dc666f70656e005f5f78706734005f4459fopen.__xpg4._DY
0x21ec4e414d494300646e735f646973706174NAMIC.dns_dispat
0x21fc63686d6772                      chmgr           

Parse IP with inet_pton 0x230c–0x236c

0x230c6573745f676574726573706f6e736500est_getresponse.
0x231c696e65745f70746f6e00646e735f6469inet_pton.dns_di
0x232c7370617463686d67725f736574617661spatchmgr_setava
⋯4 more rows

in-addr.arpa reverse lookup 0x5d26–0x5d56

0x5d260f8e9600000048b92e696e2d61646472......H..in-addr
0x5d3648890848b9722e617270612e00488948H..H.r.arpa..H.H
0x5d4607e919fdffff488d95a0f9ffff4c89ee......H......L..
0x5d56bf1a000000e898ddffff83f801      .............   

Usage: label (title case) 0x8538–0x85d8

0x853800000000000000000100000000000000................
0x854855736167653a206d6469672040736572Usage: mdig @ser
0x8558766572207b676c6f62616c2d6f70747dver {global-opt}
0x856820686f73740a20202020202020202020 host.          
0x8578207b6c6f63616c2d6f70747d205b2068 {local-opt} [ h
0x85886f7374207b6c6f63616c2d6f70747d20ost {local-opt} 
0x85985b2e2e2e5d5d0a0a55736520226d6469[...]]..Use "mdi
0x85a867202d682220286f7220226d64696720g -h" (or "mdig 
0x85b82d68207c206d6f7265222920666f7220-h | more") for 
0x85c8636f6d706c657465206c697374206f66complete list of
0x85d8206f7074696f6e730a00000000000000 options........