Benign arch download unavailable

kanata 1.12.0-1

“Bring the customizability of a QMK board to any keyboard near you”

Dominant resource-packed payloadAuthenticode chain CN: Francisco Lopes da Silva

SHA-256fe2b02c1543dd324680fda494610ff6ded8d5d5b9119f8e3787bf535a9023173

URLhttps://aur.archlinux.org/cgit/aur.git/snapshot/kanata.tar.gz

Evidence

Restart=always directive (extracted strings) kanata.service · lines 4–8

4[Service]
5Restart=always
6RestartSec=3
7ExecStart=/usr/bin/kanata --cfg %E/kanata.kbd
8Nice=-20

WantedBy=default.target directive kanata.service · lines 10–11

10[Install]
11WantedBy=default.target

Embedded absolute PDB path embedded:pe:keyboard.sys@0xbf78 · 0xfd0–0x1180

⋯13 more rows
0x10a08cdc130d5e2d4340abaa80a5763beee3....^[email protected];..
0x10b001000000633a5c6d795c70726f6a6563....c:\my\projec
0x10c074735c696e746572637e325c77696e64ts\interc~2\wind
0x10d06f77735c66696c746572735c6b657962ows\filters\keyb
0x10e06f6172645c6f626a6672655f776e6574oard\objfre_wnet
0x10f05f7838365c693338365c6b6579626f61_x86\i386\keyboa
0x110072642e70646200000000000000000000rd.pdb..........
0x111000000000000000000000000000000000................
⋯7 more rows

References a Windows DOS-device link path embedded:pe:keyboard.sys@0xbf78 · 0x11d0–0x12c0

⋯5 more rows
0x1220740069006f006e003000300000000000t.i.o.n.0.0.....
0x12305c0044006f0073004400650076006900\.D.o.s.D.e.v.i.
0x12406300650073005c0049006e0074006500c.e.s.\.I.n.t.e.
0x12507200630065007000740069006f006e00r.c.e.p.t.i.o.n.
⋯7 more rows

Writable executable binary section embedded:pe:keyboard.sys@0xbf78 · 0x19c0–0x1a90

⋯3 more rows
0x19f000000000000000000000000000000000................
0x1a000000000000008bff558bec83ec145356........U.....SV
0x1a10576a2c586a2e668945ec586a34668945Wj,Xj.f.E.Xj4f.E
0x1a20ee586a36668945f458c745f000300100.Xj6f.E.X.E..0..
⋯7 more rows

No evidence locations were recorded for this file. Raw result