Benign arch Download

dxvk-mingw 3.0.1-1

Shell command variable at a command boundaryCode mentions covert channels/communication
SHA-256e879d019ebc82458058951c7efe414d8c98f60eef216ee54ddb1779b25db11a6

Evidence

Read symbolic link target path lines 1–37
⋯5 lines
6
7# figure out where we are
8basedir="$(dirname "$(readlink -f "$0")")"
9
10# figure out which action to perform
⋯7 lines
18*)
19 echo "Unrecognized action: $action"
20 echo "Usage: $0 [install|uninstall] [--without-dxgi] [--symlink]"
21 exit 1
22esac
23
24# process arguments
25shift
26
27with_dxgi=true
28file_cmd="cp -v --reflink=auto"
29
30while (($# > 0)); do
⋯7 lines
Hidden path under HOME variable lines 50–61
50:11… ine_path/wine64"
51
52if [ -z "$WINEPREFIX" ]; then
53 WINEPREFIX="$HOME/.wine"
54fi
55
56# Wait for any existing wine processes in the current prefix to exit
57$wineserver -w
58
59# check wine prefix before invoking wine, so that we
60# don't accidentally create one if the user screws up
61if [ -n "$WINEPREFIX" ] && ! [ -f "$WI …
od command invoked with option flags lines 62–88
⋯13 lines
75 _W_file="$1"
76 # Assume ELF binaries for everything else
77 _W_ob_output="$(od -An -t x1 -j 0x12 -N 1 "${_W_file}" | tr -d "[:space:]")"
78 case "${_W_ob_output}" in
79 "3e") _W_file_arch="x86_64" ;;
80 "03"|"06") _W_file_arch="i386" ;;
81 *) _W_file_arch="" ;;
82 esac
⋯6 lines
Contains the grep command keyword lines 89–93
89:33… wine64")
90 if [ -f "$WINEPREFIX"/system.reg ]; then
91 arch="$(grep "^#arch=win" "$WINEPREFIX"/system.reg)"
92 arch="${arch##*=}"
93 elif [ "$wine_arch" == "x86_64" ] || [ "$wine64_arch" == "x86_ …
Redirect to /dev/null lines 110–117
110:13… -bit and 64-bit system32 path
111wine_ver="$($wineserver --version 2>&1 >/dev/null | grep Wine)"
112if [ -z "$wine_ver" ]; then
113 echo "$wineserver:"' Not a wine executable. Check your wine install.' >&2
⋯4 lines

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.