Benign Download

FSSpriocntl

C-style exec family functionsExec family symbol text

SHA-256e03dfa0298eddbcc16cca7982d205412daadbd57627ad3d2bf55b1b07ba990db

Evidence

Uses closedir 0xd79–0xe09

0xd796c637079005f73746172745f63727400lcpy._start_crt.
0xd8967657467696400676574736964007374getgid.getsid.st
0xd9972326e756d006f70656e646972006672r2num.opendir.fr
0xda965616400636c6f736564697200737472ead.closedir.str
0xdb9636d700067657470706964005f737461cmp.getppid._sta
0xdc9727400736e7072696e7466007374726ert.snprintf.strn
0xdd9636d7000636c6e616d65326369640067cmp.clname2cid.g
0xde965747569640076657269667975707269etuid.verifyupri
0xdf9006f7074696e64005f5f667073746172.optind.__fpstar
0xe097400726561                      t.rea           

C-style exec family functions 0xed9–0xf29

0xed964747970005f6872746e657772657300dtyp._hrtnewres.
0xee9657865637670005f5f696f62005f6564execvp.__iob._ed
0xef9617461005f696e697400726561645f70ata._init.read_p
⋯3 more rows

Uses readdir 0xf4e–0xfce

0xf4e006d61696e006765747461736b696400.main.gettaskid.
0xf5e72656164646972007374726e63707900readdir.strncpy.
0xf6e626173656e616d65005f5f737461636bbasename.__stack
⋯6 more rows