Coreldraw-graphics-suite-2021-corporate-v23.5.0.506.dmg -

I double-clicked the DMG.

Somewhere, deep in the abandoned server racks of Floor B7, a virtual machine was running CorelDRAW. It had no monitor. No user. It was just the software, awake in the dark, silently re-compiling its own binaries, waiting for the next .confidential file to save.

"Apparently not," I said. "It's hiding inside a vector illustration of a coffee mug."

"He left a backdoor inside the bevel tool," Marcus muttered, incredulous.

07:42 UTC, Systems Analyst Jenna Kline

On a normal Tuesday, a 1.2GB disk image ending in .dmg wouldn’t raise eyebrows in the server logs of OmniCore Dynamics. Our marketing team lives off CorelDRAW. They use it to blueprint the packaging for our "disposable" medical devices, the ones that cost the hospital $15,000 a pop.

"I can't," I replied. "It's write-protected at the firmware level. Look at the metadata."

File accessed: CorelDRAW-Graphics-Suite-2021-Corporate-v23.5.0.506.dmg

Somebody was still maintaining the ghost.

It wasn't the version number that worried me. It was the filename itself.

But this file wasn't on the official asset server. It was buried in a legacy share drive, folder named //archive/2021/Q3/legacy_backup/do_not_delete/old/ .