Benign Download

decoy.applescript

AppleScript invokes the whoami commandBrowser cookies, logins, or credit cards
SHA-25639ba29457387495e7dac4c026a8c4bff643722dfc3a9c8b6556b22f2e6a72bad
MaleculeH₂(F₂Po₂)

Evidence

Chrome safe storage lines 1–4
1-- Static control: the service name is not an argument to shell execution.
2set serviceName to "Chrome Safe Storage"
3display dialog serviceName
4do shell script "whoami"

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.