Benign raspios Download

arm64-img/2026-09-15-raspios-trixie-arm64.img/2026-09-15-raspios-trixie-arm64.img.d/1.img.d/usr/bin

Shell command execution capabilityShell invokes mkdir command
SHA-256f23b100691a3ee009666c9cefaca9f900d36c985454b865983cf90df1b00657f
MaleculeH₂(FPo)

Evidence

Shell invokes mkdir command lines 1–18
1#!/bin/sh
2
3. /usr/bin/setup_env
4
5if [ -f "$HOME/.config/gtk-3.0/gtk.css" ] ; then
6 rm "$HOME/.config/gtk-3.0/gtk.css"
7 sync
8fi
9
10if [ ! -f "$HOME/.config/kanshi/config" ] ; then
11 mkdir -p "$HOME/.config/kanshi"
12 touch "$HOME/.config/kanshi/config"
13fi
⋯5 lines
Uses shell exec to replace process lines 18–25
18:31… pu_has_mmu ; then
19 export WLR_RENDERER=pixman
20 fi
21fi
22
23exec /usr/bin/labwc -m $@
24
25

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.