Benign Download

hidden-dev-payload.sh

Hidden file in /devShell invokes touch timestamp utility
SHA-256f6d07c8bf6f66922fdfe070f26daed545027f3af7f271a960ea6be2cf2304751
MaleculeO(Er₂)H(F₃)

Evidence

Hidden file in /dev lines 1–5
1#!/bin/sh
2# Positive control: a genuine dot-file payload path under /dev must still
3# fire hidden-dev-file, including a renamed /dev/.incusx variant.
4echo secret > /dev/.hidden_payload
5touch /dev/.incusx

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.