Benign Download

PeiBackdoor.c

Code explicitly mentions malware/backdoorQuoted hidden-dotfile path literal

SHA-25624eccd145507fbf70e982d14b1922cb0183557de2d26bbcf18a6b05bcde247a2

Evidence

Quoted hidden-dotfile path literal line 29

29#pragma section(".conf", read, write)

Code explicitly mentions malware/backdoor lines 54–56

54    // backdoor image base (might be set by infector)
55    0
56};