in ransomware/artifact.lua [1798:1837]
function globals.Canary(fullpath, content, force, hidden, system)
if fullpath == nil or content == nil then
return nil
end
if force == nil then
force = true
end
if hidden == nil then
hidden = false
end
if system == nil then
system = false
end
local namesList = utils.Split(fullpath, '\\')
if #namesList <= 2 then
return nil
end
local filename = namesList[#namesList]:lower()
local dirname = namesList[#namesList - 1]:lower()
local self = {}
self.force = force
self.hidden = hidden
self.system = system
self.fullpath = fullpath
self.filename = filename
self.dirname = dirname
self.content = content
return self
end