3 ms·

That can't be done without either changing the file size or being really obvious.

• acdha 3y ago
  Malware does that all the time - return different stat() results, change the contents for anything which isn’t execution, etc. It’s detectable but fundamentally you’re in a nasty race since the attacker can use the same tools you do.