itch.io

Virus total can probably tell you more than me here is what I found so far.

Matches rule Execution Of Script Located In Potentially Suspicious Directory by Joseliyo Sanchez, @Joseliyo_Jstnk at Sigma Integrated Rule Set (GitHub)

Detects executions of scripts located in potentially suspicious locations such as "/tmp" via a shell such as "bash", "sh", etc.

EventID:0

CommandLine:/bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh engrampa /tmp/Mushroom-Oasis-2.0-pc.zip

Image:/bin/sh