Benign xubuntu Download

RULES.md

Encoded payload detected: base64Encoded shell interpreter (unicode escapes)

SHA-256a8dca93ed0fd1672eeb4a20e5d65ef85e03145b8ad053c95518a7dba204b3d79

URLhttps://github.com/atomdrift-project/traits/blob/main/RULES.md

Evidence

Encoded payload detected: base64 line 156

156:204… data-pjax-transient="true"/><meta name="visitor-payload" content="eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFRDQ1OjJDRjIwRjo3NkMwRTI6OUU4OTkxOjZBNjYzQkFBIiwidmlzaXRvcl9pZCI6IjY3NjMyNzY4ODUzMDgwOTU0MDMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5 …

Contains common English function words lines 296–298

2… style>
/* Override primer focus outline color for marketing header dropdown links for better contrast */
[data-color-mode="light"] .HeaderMenu- …

Percent-encoded content decoded lines 331–334

41… er-2 text-right d-lg-none gap-2 flex-justify-end">
        <a
          href="/login?return_to=https%3A%2F%2Fgithub.com%2Fatomdrift-project%2Ftraits%2Fblob%2Fmain%2FRULES.md"
          class="HeaderMenu-link HeaderMenu-button d-inli …

Hides elements with CSS visibility:hidden lines 1132–1138

⋯4 lines
1136</a></li>
1137</ul>
1138    <div style="visibility:hidden;" data-view-component="true" class="UnderlineNav-actions js-responsive-underlinenav-overflow po …

Encoded shell interpreter (unicode escapes) line 1308

1308:20492… es for a generic capability from the wrong tier or directory — \u003ccode\u003epowershell.exe\u003c/code\u003e, \u003ccode\u003ecmd.exe\u003c/code\u003e, \u003ccode\u003eexec\u003c/code\u003e, \u003ccode\u003espawn\u003c/code\u003e, sockets, HTTP clients, registry writes, persistence surfaces …