Benign go Download

github.com/kevinburke/justrun v1.1.1-0.20170517050741-0ebecc6b00c9

Legitimate Go file watcher tool

Creates a child process with Go exec.CommandCreates a directory tree with Go os.MkdirAll
SHA-256a2fba299fc627dca2208d8ec6a1c24ef9a815ea8fd8362c35760ac0a222ffaf2

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.