file_path

~/.local/state/<daemon>/{install.nonce,machine.id}

discovered 2026-06-23

Host state artifacts (install nonce + machine id) written by the Rust infostealer second stage (Amazon Inspector).

Campaigns

Linked packages

Read the full analysis →