JFIFxxC      C  " }!1AQa"q2#BR$3br %&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz w!1AQaq"2B #3RbrELF>@@8 @@@@XXI<I<@@hcd0088800hhhDDStd88800PtdQtdRtdPcPc/lib64/ld-linux-x86-64.so.2 GNUGNUU\D8SUfWQGNUEEHKem( 8gUa2 yfo uQ^Vk 6-t.F(*7:Cg<ry=E * i":R" X`n@_PJQh__libc_start_main__cxa_finalizeputchar__printf_chkexitstrcmpgetenvoptindoptargoptoptopterrmemmovestderr__fprintf_chkfwritestdoutstrlen__vsnprintf_chkfputsmallocfflush__stack_chk_failpthread_mutex_lockpthread_mutex_unlockstrncmpstrchr__memcpy_chkreallocstrdupfopen64fgetsstrpbrkfclosestrrchr__errno_location__isoc23_strtollstrcasecmpcalloc__isoc23_strtol__snprintf_chkstrstrremovestdinfeoffread__sprintf_chkaccessctime_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTablejson_tokener_parsejson_object_putjson_object_get_stringjson_object_object_get_excurl_formfreecurl_easy_cleanupcurl_easy_strerrorcurl_slist_free_allcurl_global_cleanupcurl_easy_initcurl_easy_setoptcurl_easy_performcurl_slist_appendcurl_global_initcurl_easy_getinfocurl_formaddcli_regfreecl_retdbdircli_regexeccl_cvdheadcl_cvdfreecli_gentempcli_regcomplibjson-c.so.5libcurl.so.4libclamav.so.12libc.so.6CLAMAV_PUBLICCLAMAV_PRIVATEJSONC_0.14CURL_OPENSSL_4GLIBC_2.34GLIBC_2.38GLIBC_2.4GLIBC_2.3.4GLIBC_2.2.5   0Ӈ_ E  BJ  ii ti ui %` Ȝ؜0@HXx Н؝ 0@`hx#О8 @P`ȟП(8X`p Ƞ08HXx(ȡء2 90PXhCxJQ(0@Pp( xZcУs}(HX P`pؤ (8Hhpȥإ@HXhЦئ 0`hx 8@P ȨШ,(B8X`pKOȩT08HXx[Ȫت_ iPXhu(0@px Ь (H P`pح (8hpȮ0c@HXxc Яد 0!`hx%:-8@P5?ȱбL( (S8X`palxȲ08HXx`  ȳس  0PXhx  (0@Pp8 xе+>HP`ITض` (8fHhpvȷط @HXhиظ 0@`hxй8@P`Ⱥк(8"X`p17;ػ7A 708HEh7xK7ȼؼO7 S@7PXhW7[н7_o(08@Pp` xȾо H PXp "ؿX " *(0FHh pxO Ye(py @HPXhx8 (0`Xhpxcc !H25H8@_HbPlw X`hHx08@Xx@"&+9>0PpXL`)xR\QU(X08hPpxw\p{w(HHPXQ  (20HhPp2x%x.8< @HPUXbh2p({ (@`hpx228(@2H``2 l  #84HMX!`MhYpi"z#2X# 0#8@HX$x$%%  $P`&X0`@hGx&OWP(`i(@)08sPp)x2*8+(H+PX`p@,.2(E /(0Y8oHh`/px/(02 @0HPXh8122 ((07@`@3h2pGxX32k 428`4@2HP`42 552 0(K8X5`hhpp@6y6078@HXxH88x9 0P :X`hx:&2;2@L(<0Y8J@`P"p=xm"?&]rh@q(HAPzX`p"B"C" D(08H"hEpx*"F9<JGY]h @IHtPxXh(JKM (0@"`Nh&p(P%pQ9I8R@]Hn`R2 SPT 8"XT`hU2pU0V8@XxxV!(W4XJ0PYXh^iv(08@PpxH PX`Ol8Zl Z;) Z()0@h8\pOxc\^q_} @`_HPh_(ab (``bhpbHcc 8@,H1cCLcE^(d| l(xHXd`hpexe0e8@Hx8f#f2f0P0gX`AhRxg2Zh2gq(h0Y8{@Ppix2Pi2i(HiP2X`!pHj25Qj2 4(20 8"Hh kp2x2CV@HPjz (@`hpxk28@Hk)Pno6o HXo`hY0pHqbxqjqjqxq |0q8|@XhxPst2uP8wX`wyy"+(xz058Lpxzx5V8|}h}tFHPtXzpȀ  (0Hhpx{w@HPhJ"q (]@`hp8@H``@ 8"X`h08E8D F@HPJ    ( 08@HPX`hpx !"#$%&'()*+, -(.0/80@1H2P3X4`5h6p7x9:;<=>?@ABCHH_HtH5]%]@hfhfhfhfhfhfhfhrfhbfh Rfh Bfh 2fh "fh fhfhfhfhfhfhfhfhfhfhrfhbfhRfhBfh2fh"fhfhfhfh fh!fh"fh#fh$fh%fh&fh'rfh(bfh)Rfh*Bfh+2fh,"fh-fh.fh/fh0fh1fh2fh3fh4fh5fh6fh7rfh8bfh9Rfh:Bfh;2fh<"fh=fh>fh?f%[fD%YfD%~YfD%vYfD%nYfD%fYfD%^YfD%VYfD%NYfD%FYfD%>YfD%6YfD%.YfD%&YfD%YfD%YfD%YfD%YfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%XfD%~XfD%vXfD%nXfD%fXfD%^XfD%VXfD%NXfD%FXfD%>XfD%6XfD%.XfD%&XfD%XfD%XfD%XfD%XfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfD%WfDUHAWAVAUAATISHHdH%(HE1HDžHDžDž0HDž8Dž HDž(DžHDžHHH@1HHL 6HLXH߹1Hھ"'Hƅw HDžE1L57HƅHDžHDžLLDN(HcH>@L=VƅL=VHVHVHqVHHaVHmDHHDM;uHL2DžHj =3VA H1TY HL%s&H'HHVHVHE1H H1P'H1H0+NH1H1'-'H1H H1LoNH<B L8MLH5 6eHHvH5 6MHyH"HH\IH HI)IMHH3HHH[HLHB+LIE1L8H(10HH HIDhIcHHHHHLHL!51HA9 H\i L'1L-L1PHھ&'1HHLDhIcHHHHH>HM1HLo4A9EH1 HIAL''1HHx-'H1HbLoNH1PH1 'H:H\ LRH8&HHA HH53%IH/HHL`-LH L)HHHHHHHHGHLHHH5WIHA HHǾ"'1< =Q 1TL LHMHHH 2HAH1L-2RjHL#Y^IH ARHL1jAHJH y2HH#A[H a2IXM VHMjHA1L-32HL2#_AXIH PHLjHA1L-2HL"IXZMH APHL1jAHL-1[HL"AZA[IH= QHLjHA1L-1HLP"^_IH ASHL1jHAL-O1HL"IXZM LAPL1jAHL}MA 1$HLH :2PH501''LHI1]'L1H WG('L1H1LAYAZDž LCH1HHLoHcH8Ht1H81H5&010#IHHtHH¾&'1PL1L 0jHAH /L*MA1$HLH /1I$ALHH /XZ WLA1jHL )0H *0LAL1$LH 0H\AL1$LH /H+$L &2AH /HL1ZYL .ARL1jHAH .LLA1$HL 1H [CAL1$HL {1H _.aL''1LLxL'1HOTbL('1HLL1ҾoN1;LA[A\DžLH 1LxHHHcLH1JHHr H5-IH H5-Hm H5-Lf H5-1DžE1-H5O1E1E1H1DžHt HMtLAHHtHHtHlMtL_H8HtyE1E1L8D0H(HtTHHtCHtH6MtL)MttL3L HEdH+%(He[A\A]A^A_]HH5}K1jA?-1IHH5L*HLHHtqH=2I-H ILIHt,E1IM9sHLL]HuH L8LH5)1H5K1H1)uwH=HH15'H5#K1iHQ1E1H5)H1LDžiH5J1*qH5vI1E1E1Dž1E1A HH5(H1E1H5KHPuHPH'1HH1PH5K1E1E1YH1DžwH5J1.[H5JI1I<$I HHWIHI'$I|$Ht Ht#Md$8MI<$HtHuA|$ tMt$LLL3HHD HHcLp LIHHǾ1IH &LLL1IH &LLwHHN%H5b&1L1H5QL1DžE1H5H1H5HjH80H5f.H=a>HZ>H9tH>Ht H=1>H5*>H)HH?HHHtH=HtfD=->u+UH==Ht H==d>]wUHSH HjHwH591H=Q9H=9 .Hڿ1H57 H=9H=9H=9H=:~H=7:rH={:fH=:ZH=:N H= ;81!HUHAUIATSHHG@Ht.H8Ht IE@H<HHuHfI]0Ht5H{t`H;H{H{Lc0HLHuI}I}I}I]8LHtI두H[0f.H[A\A]]@UHATSHHt;IfDH;Ht LhtH{Ht LSt H[8HuH[A\]ff.UHAWAVIAUATAH=dSHH(H1A++=;D-+;Ht;IcHLL HcLE<D=A;ubf.:A?=[;HcA<8DE9}D%:H(D[A\A]A^A_]fHtPA9u= ;:tAW;HcL€:cx:z:AE2:D9 :E1A:AAG|:OE9IcHH8-9+-GDfHA9H-uHztLHD 9MMAD9Lc s9LcJ4DMLfAAH~MD)LUHLMLMLUMHINTHIE9LVE9|H~H=09H E1H7DUA:DUȋ=j9D-8A:t A?IcHcHÀ<8*9AD-8fEA:t&A+A-D1$AN+ 1-DH=Q8H E1H/Hc8=8LILHDc8VAD-7ADDGA-tEf.AH=7AD-l77f+EV1A:DEA)AD-$7kJD AD-7H\7OAAD-69AH67D-6e7$ A -[fDUHSHH=H(HtH¾Q'1HQuH[]H 6X[H=$5]fDUHAWAVAAUATISHH0H8L@LHt))P)`)p)])e)m)u)}dH%(H1HELL=5HH DžDž0HIHPH1۹DHH9sWA<%uHAHWHH4HHH.fD/wH HfDHHFH@HH5L=Y3L1H^LHHIHtKHCHLyL=2L1HLDHDžLf.UHAWAVAAUATISHH0H8L@LHt))P)`)p)])e)m)u)}dH%(H1HEL1HH ADžDž0HNHLxHuoHL9sOA<%uHA"WHhLHHc@,H EHL,AE5IuHtlAE0EHHωHzHE111L,HxxAEIHhLHH@$A(RHyMt(H/LHHAHBLiHyA$A Mn"LHA~xMy@1HL1HgLIA8"HtdG&.HHHH@@HHHHI9wIMu IE1HAHH1A H5LAtH5qLtH5LE1A뉾HHHHIMtLHHxLxHHI@uRH %"H=M&L PCREMatchLimit are superfluous. WARNING: setting this limit too high may severely impact performance.This option sets the maximum filesize for which PCRE subsigs will be executed. Files exceeding this limit will not have PCRE subsigs executed unless a subsig is encompassed to a smaller buffer. Negative values are not allowed. Setting this value to zero disables the limit. WARNING: setting this limit too high or disabling it may severely impact performance.This option specifies a directory or mount point which should be scanned on access. The mount point specified, or the mount point containing the specified directory will be watched, but only notifications will occur. If any directories are specified, this option will preempt the DDD system. It can also be used multiple times.This option specifies a directory (including all files and directories inside it), which should be scanned on access. This option can be used multiple times.This option allows excluding directories from on-access scanning. It can be used multiple times. Only works with DDD system.Use this option to exclude the root UID (0) and allow any processes run under root to access all watched files without triggering scans.With this option you can exclude specific UIDs. Processes with these UIDs will be able to access all files. This option can be used multiple times (one per line). Using a value of 0 on any line will disable this option entirely. To exclude the root UID please enable the OnAccessExcludeRootUID option.This option allows exclusions via user names when using the on-access scanning client. It can be used multiple times.Files larger than this value will not be scanned in on access.This option toggles the dynamic directory determination system for on-access scanning (Linux only).This option changes fanotify behavior to prevent access attempts on malicious files instead of simply notifying the user (On Access scan only).Enables extra scanning and notification after catching certain inotify events. Only works with the DDD system enabled.Max amount of time (in milliseconds) that the OnAccess client should spend for every connect, send, and receive attempt when communicating with clamd via curl (5s default)Max number of scanning threads to allocate to the OnAccess thread pool at startup--these threads are the ones responsible for creating a connection with the daemon and kicking off scanning after an event has been processed. To prevent clamonacc from consuming all clamd's resources keep this lower than clamd's max threads. Default is 5Number of times the OnAccess client will retry a failed scan due to connection problems (or other issues). Defaults to no retries.When using prevention, if this option is turned on, any errors that occur during scanning will result in the event attempt being denied. This could potentially lead to unwanted system behaviour with certain configurations, so the client defaults to off and allowing access events in case of error.When started by root freshclam will drop privileges and switch to the user defined in this option.This option defined how many times daily freshclam should check for a database update.Use DNS to verify the virus database version. FreshClam uses DNS TXT records to verify the versions of the database and software itself. With this directive you can change the database verification domain. WARNING: Please don't change it unless you're configuring freshclam to use your own database verification domain.DatabaseMirror specifies to which mirror(s) freshclam should connect. You should have at least one entry: database.clamav.net.This option allows you to easily point freshclam to private mirrors. If PrivateMirror is set, freshclam does not attempt to use DNS to determine whether its databases are out-of-date, instead it will use the If-Modified-Since request or directly check the headers of the remote database files. For each database, freshclam first attempts to download the CLD file. If that fails, it tries to download the CVD file. This option overrides DatabaseMirror, DNSDatabaseInfo and Scripted Updates. It can be used multiple times to provide fall-back mirrors.mirror1.mynetwork.com mirror2.mynetwork.comThis option defines how many attempts freshclam should make before giving up.With this option you can control scripted updates. It's highly recommended to keep them enabled.With this option enabled, freshclam will attempt to load new databases into memory to make sure they are properly handled by libclamav before replacing the old ones. Tip: This feature uses a lot of RAM. If your system has limited RAM and you are actively running ClamD or ClamScan during the update, then you may need to set `TestDatabases no`.By default freshclam will keep the local databases (.cld) uncompressed to make their handling faster. With this option you can enable the compression. The change will take effect with the next database update.Include an optional signature databases (opt-in). This option can be used multiple times.Exclude a standard signature database (opt-out). This option can be used multiple times.With this option you can provide custom sources (http:// or file://) for database files. This option can be used multiple times.http://myserver.com/mysigs.ndb file:///mnt/nfs/local.hdbIf you're behind a proxy, please enter its address here.A user name for the HTTP proxy authentication.A password for the HTTP proxy authentication.If your servers are behind a firewall/proxy which does a User-Agent filtering you can use this option to force the use of a different User-Agent header.Send the RELOAD command to clamd after a successful update.Run a command after a successful database update. Use EXIT_1 to return 1 after successful database update.Run a command when a database update error occurs.Run a command when freshclam reports an outdated version. In the command string %v will be replaced with the new version number.With this option you can provide a client address for the database downloading. Useful for multi-homed systems.Timeout in seconds when connecting to database server.Timeout in seconds when reading from database server. 0 means no timeout.This option enables downloading of bytecode.cvd, which includes additional detection mechanisms and improvements to the ClamAV engine.Disable authenticode certificate chain verification in PE files.Deprecated option to download signatures derived from the Google Safe Browsing API. See https://blog.clamav.net/2020/06/the-future-of-clamav-safebrowsing.html for more details.Deprecated option to set the max-scantime. The value is in milliseconds.Deprecated option to alert on broken PE and ELF executable files.Deprecated option to enable heuristic alerts (e.g. "Heuristics.")PhishingAlwaysBlockSSLMismatchDeprecated option to alert on SSL mismatches in URLs, even if they're not in the database. This feature can lead to false positives.Deprecated option to alert on cloaked URLs, even if they're not in the database. This feature can lead to false positives.Deprecated option to alert on raw DMG image files containing partition intersections.Deprecated option to alert on encrypted archives and documents (encrypted .zip, .7zip, .rar, .pdf).Initialize a supplementary group access (the process must be started by root).Define the clamd socket to connect to for scanning. This option is mandatory! Syntax: ClamdSocket unix:path ClamdSocket tcp:host:port The first syntax specifies a local unix socket (needs an absolute path) e.g.: ClamdSocket unix:/run/clamav/clamd.sock The second syntax specifies a tcp local or remote tcp socket: the host can be a hostname or an ip address; the ":port" field is only required for IPv6 addresses, otherwise it defaults to 3310 ClamdSocket tcp:192.168.0.1 This option can be repeated several times with different sockets or even with the same socket: clamd servers will be selected in a round-robin fashion.Define the interface through which we communicate with sendmail. This option is mandatory! Possible formats are: [[unix|local]:]/path/to/file - to specify a unix domain socket; inet:port@[hostname|ip-address] - to specify an ipv4 socket; inet6:port@[hostname|ip-address] - to specify an ipv6 socket./tmp/clamav-milter.sock inet:7357Define the group ownership for the (unix) milter socket.Sets the permissions on the (unix) milter socket to the specified mode.Messages originating from these hosts/networks will not be scanned This option takes a host(name)/mask pair in CIRD notation and can be repeated several times. If "/mask" is omitted, a host is assumed. To specify a locally originated, non-smtp, email use the keyword "local".local 192.168.0.0/24 1111:2222:3333::/48^(Accept|Reject|Defer|Blackhole|Quarantine)$Action to be performed on clean messages (mostly useful for testing). The following actions are available: Accept: the message is accepted for delivery Reject: immediately refuse delivery (a 5xx error is returned to the peer) Defer: return a temporary failure message (4xx) to the peer Blackhole: like Accept but the message is sent to oblivion Quarantine: like Accept but message is quarantined instead of being deliveredAction to be performed on error conditions (this includes failure to allocate data structures, no scanners available, network timeouts, unknown scanner replies and the like. The following actions are available: Accept: the message is accepted for delivery; Reject: immediately refuse delivery (a 5xx error is returned to the peer); Defer: return a temporary failure message (4xx) to the peer.This option allows you to set a specific rejection reason for infected messages and it's therefore only useful together with "OnInfected Reject" The string "%v", if present, will be replaced with the virus name.If this option is set to "Replace" (or "Yes"), an "X-Virus-Scanned" and an "X-Virus-Status" headers will be attached to each processed message, possibly replacing existing headers. If it is set to Add, the X-Virus headers are added possibly on top of the existing ones. Note that while "Replace" can potentially break DKIM signatures, "Add" may confuse procmail and similar filters.When AddHeader is in use, this option allows you to set the reported hostname. This may be desirable in order to avoid leaking internal names. If unset the real machine name is used.Execute a command when an infected message is processed. The following parameters are passed to the invoked program in this order: virus name, queue id, sender, destination, subject, message id, message date. Note #1: this requires MTA macroes to be available (see LogInfected below) Note #2: the process is invoked in the context of clamav-milter Note #3: clamav-milter will wait for the process to exit. Be quick or fork to avoid unnecessary delays in email delivery/usr/local/bin/my_infected_message_handlerChroot to the specified directory. Chrooting is performed just after reading the config file and before dropping privileges.This option specifies a file which contains a list of basic POSIX regular expressions. Addresses (sent to or from - see below) matching these regexes will not be scanned. Optionally each line can start with the string "From:" or "To:" (note: no whitespace after the colon) indicating if it is, respectively, the sender or recipient that is to be allowed. If the field is missing, "To:" is assumed. Lines starting with #, : or ! are ignored.Messages from authenticated SMTP users matching this extended POSIX regular expression (egrep-like) will not be scanned. As an alternative, a file containing a plain (not regex) list of names (one per line) can be specified using the prefix "file:". e.g. SkipAuthenticated file:/etc/good_guys Note: this is the AUTH login name!SkipAuthenticated ^(tom|dick|henry)$This option allows you to tune what is logged when a message is infected. Possible values are Off (the default - nothing is logged), Basic (minimal info logged), Full (verbose info logged) Note: For this to work properly in sendmail, make sure the msg_id, mail_addr, rcpt_addr and i macroes are available in eom. In other words add a line like: Milter.macros.eom={msg_id}, {mail_addr}, {rcpt_addr}, i to your .cf file. Alternatively use the macro: define(`confMILTER_MACROS_EOM', `{msg_id}, {mail_addr}, {rcpt_addr}, i') Postfix should be working fine with the default settings.This option allows you to tune what is logged when no threat is found in a scanned message. See LogInfected for possible values and caveats. Useful in debugging but drastically increases the log size.This option affects the behaviour of LogInfected, LogClean and VirusAction when a message with multiple recipients is scanned: If SupportMultipleRecipients is off (the default) then one single log entry is generated for the message and, in case the message is determined to be malicious, the command indicated by VirusAction is executed just once. In both cases only the last recipient is reported. If SupportMultipleRecipients is on: then one line is logged for each recipient and the command indicated by VirusAction is also executed once for each recipient. Note: although it's probably a good idea to enable this option, the default value is currently set to off for legacy reasons.&6666666x&6666666666666h&X&66666666H&68&66666 6; $ $$d=T>D?0$@\@TEEtIM84NlNOzRx <&D$4@FJ w?9*3$"\(t 8=AC A( >JC BJ A >RAC CJ ,>AC DGK C $(CZAC At A [ ,PCAC DGK F ,dGAC DGK H 0J.EC I F P H (KEC BJ^ F $TLAC GR A ,8LAC DIEKo A ,h,!1EC FJKY A ` hcc V+)#v: :(: d(29mCJQz( Zdcsr}X fipwo  ,B K O T  [ _ i u   b       u  i lc fc   ! % :d -c 5r ? L ( Sdacl@xn@g@f` t i pc r Ts8 a+t>IT`fv"17;7A7E7K7O7S7W7[7_o  `  l  "X "*F O Ye(pyxp8-Xc#c ! H25H _blwHx@"@&+9>pL) R\xQUXhw\xp{dwHQ 2P2% x.X8<Ub 2p({F22(2`2 l #4M!MYi' "z #2X# #$$ % % $ `&0@G &OW P(`i @)s)2 * 8+ + @, .2(E /Yo `//(02 0 81 2 2(7 @32GX 32k 42 `42 42 5 520K 5hp @6y 6 7 H8 8 x9 : :&2 ;2@L <YJ`" =m"@ ?&]r h@q' Az" B" C" D"@ E*" F9<J2 GY]hd Itx (J K M"@ N&(P%pQ9IR]nR2 SPT"PTU2pUVxV!(W4XJY^Wiev   l Oul8Zl c Z;)Z)@8\Oc\^q_}`__(ab`bbHcc ,1cCLcE^(d|lxdexeea8f#f2<f0gAR g2Zh2gqhY{ i2 Pi2 i i2! Hj25Q j2 42 " k22CVjz k2k)Pno6oHoY0pHqbxqjqjqxq|q|Pst2u8wwyy"+xz5Lxz5V8|}h}tFtzȀ {wJ"q]`@" <o0  x X@ ooHoooP0@P`pР 0@P`pС 0@P`pТ 0@P`pУ /usr/lib/debug/.dwz/x86_64-linux-gnu/clamav.debug]J G\tsTf0a6555cce44af3853c206b71a556604575195.debug /.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.data.bss.gnu_debugaltlink.gnu_debuglink 880&hh$9 GoDQ 8Y0 0 xaonoHH}@BXX 00@@@@3<< ^ 0@   F `4/