Malware Analysis Report

2024-10-16 06:13

Sample ID 240715-w8xdcstejq
Target 4ae76af609fd40ec79f51a52ebd17133_JaffaCakes118
SHA256 3760794251d850f1731d201373dd701975315b5a27b987ea497e7db446c50803
Tags
antivm
score
4/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral31

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral32

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
4/10

SHA256

3760794251d850f1731d201373dd701975315b5a27b987ea497e7db446c50803

Threat Level: Likely benign

The file 4ae76af609fd40ec79f51a52ebd17133_JaffaCakes118 was found to be: Likely benign.

Malicious Activity Summary

antivm

Checks CPU configuration

Writes file to tmp directory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-07-15 18:36

Signatures

N/A

Analysis: behavioral12

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/32/tsm]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/tsm

[/tmp/.rsync/c/lib/32/tsm]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral22

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-armhf-20240418-en

Max time kernel

18s

Command Line

[/tmp/.rsync/c/run]

Signatures

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /bin/cat N/A

Processes

/tmp/.rsync/c/run

[/tmp/.rsync/c/run]

/bin/grep

[grep name]

/bin/grep

[grep model]

/bin/cat

[cat /proc/cpuinfo]

/usr/bin/wc

[wc -l]

/bin/sleep

[sleep 15]

/tmp/.rsync/c/stop

[./stop]

/bin/sleep

[sleep 3]

/bin/sleep

[sleep 238]

Network

N/A

Files

N/A

Analysis: behavioral17

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2404-amd64-20240523-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/64/libpthread.so.0]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/libpthread.so.0

[/tmp/.rsync/c/lib/64/libpthread.so.0]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral18

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/64/libresolv-2.23.so]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/libresolv-2.23.so

[/tmp/.rsync/c/lib/64/libresolv-2.23.so]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral25

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu1804-amd64-20240611-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/slow]

Signatures

N/A

Processes

/tmp/.rsync/c/slow

[/tmp/.rsync/c/slow]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 185.125.188.61:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.129.91:443 tcp
US 151.101.129.91:443 tcp
GB 195.181.164.17:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 89.187.167.38:443 1527653184.rsc.cdn77.org tcp

Files

N/A

Analysis: behavioral27

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-mipsbe-20240611-en

Max time kernel

0s

Command Line

[/tmp/.rsync/c/slow]

Signatures

N/A

Processes

/tmp/.rsync/c/slow

[/tmp/.rsync/c/slow]

Network

N/A

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2404-amd64-20240523-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/32/libdl.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/libdl.so.2

[/tmp/.rsync/c/lib/32/libdl.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral10

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/.rsync/c/lib/32/libresolv-2.23.so]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/libresolv-2.23.so

[/tmp/.rsync/c/lib/32/libresolv-2.23.so]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral14

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/64/libdl.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/libdl.so.2

[/tmp/.rsync/c/lib/64/libdl.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral15

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/.rsync/c/lib/64/libnss_dns.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/libnss_dns.so.2

[/tmp/.rsync/c/lib/64/libnss_dns.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral16

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

ubuntu2404-amd64-20240523-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/.rsync/c/lib/64/libnss_files.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/libnss_files.so.2

[/tmp/.rsync/c/lib/64/libnss_files.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral24

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

debian9-mipsel-20240611-en

Max time kernel

135s

Command Line

[/tmp/.rsync/c/run]

Signatures

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /bin/cat N/A

Processes

/tmp/.rsync/c/run

[/tmp/.rsync/c/run]

/bin/grep

[grep model]

/bin/grep

[grep name]

/bin/cat

[cat /proc/cpuinfo]

/usr/bin/wc

[wc -l]

/bin/sleep

[sleep 15]

/tmp/.rsync/c/stop

[./stop]

/bin/sleep

[sleep 3]

/bin/sleep

[sleep 116]

/usr/bin/nohup

[nohup ./go]

/tmp/.rsync/c/go

[./go]

Network

N/A

Files

N/A

Analysis: behavioral31

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-mipsbe-20240611-en

Max time kernel

1s

Command Line

[/tmp/.rsync/c/tsm]

Signatures

N/A

Processes

/tmp/.rsync/c/tsm

[/tmp/.rsync/c/tsm]

/bin/readlink

[readlink -f /tmp/.rsync/c/tsm]

/usr/bin/dirname

[dirname /tmp/.rsync/c/tsm]

/bin/uname

[uname -m]

Network

N/A

Files

N/A

Analysis: behavioral32

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-mipsel-20240418-en

Max time kernel

0s

Command Line

[/tmp/.rsync/c/tsm]

Signatures

N/A

Processes

/tmp/.rsync/c/tsm

[/tmp/.rsync/c/tsm]

/bin/readlink

[readlink -f /tmp/.rsync/c/tsm]

/usr/bin/dirname

[dirname /tmp/.rsync/c/tsm]

/bin/uname

[uname -m]

Network

N/A

Files

N/A

Analysis: behavioral9

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:46

Platform

ubuntu2204-amd64-20240611-en

Max time kernel

0s

Command Line

[/tmp/.rsync/c/lib/32/libpthread.so.0]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/libpthread.so.0

[/tmp/.rsync/c/lib/32/libpthread.so.0]

Network

N/A

Files

N/A

Analysis: behavioral20

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/64/tsm]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/tsm

[/tmp/.rsync/c/lib/64/tsm]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-mipsel-20240418-en

Max time kernel

0s

Command Line

[/tmp/.rsync/c/slow]

Signatures

N/A

Processes

/tmp/.rsync/c/slow

[/tmp/.rsync/c/slow]

Network

N/A

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

ubuntu1804-amd64-20240508-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/.rsync/c/tsm]

Signatures

N/A

Processes

/tmp/.rsync/c/tsm

[/tmp/.rsync/c/tsm]

/bin/readlink

[readlink -f /tmp/.rsync/c/tsm]

/usr/bin/dirname

[dirname /tmp/.rsync/c/tsm]

/bin/uname

[uname -m]

/tmp/.rsync/c/lib/64/tsm

[/tmp/.rsync/c/lib/64/tsm --library-path /tmp/.rsync/c/lib/64/ /tmp/.rsync/c/tsm64]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 185.125.188.62:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.129.91:443 tcp
GB 89.187.167.2:443 tcp
US 151.101.129.91:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 89.187.167.39:443 1527653184.rsc.cdn77.org tcp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu1804-amd64-20240508-en

Max time kernel

147s

Max time network

131s

Command Line

[/tmp/.rsync/c/go]

Signatures

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A

Processes

/tmp/.rsync/c/go

[/tmp/.rsync/c/go]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 185.125.188.62:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.65.91:443 tcp
US 1.1.1.1:53 extensions.gnome.org udp
US 1.1.1.1:53 extensions.gnome.org udp
US 151.101.129.91:443 extensions.gnome.org tcp
GB 89.187.167.3:443 tcp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:44

Platform

ubuntu2404-amd64-20240523-en

Max time kernel

0s

Max time network

3s

Command Line

[/tmp/.rsync/c/lib/32/libc.so.6]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/libc.so.6

[/tmp/.rsync/c/lib/32/libc.so.6]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral7

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

ubuntu2204-amd64-20240611-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/32/libnss_dns.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/libnss_dns.so.2

[/tmp/.rsync/c/lib/32/libnss_dns.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral8

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2404-amd64-20240523-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/.rsync/c/lib/32/libnss_files.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/libnss_files.so.2

[/tmp/.rsync/c/lib/32/libnss_files.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/.rsync/c/lib/64/libc.so.6]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/libc.so.6

[/tmp/.rsync/c/lib/64/libc.so.6]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral19

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2404-amd64-20240523-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/.rsync/c/lib/64/libresolv.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/64/libresolv.so.2

[/tmp/.rsync/c/lib/64/libresolv.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral23

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-mipsbe-20240418-en

Max time kernel

72s

Command Line

[/tmp/.rsync/c/run]

Signatures

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /bin/cat N/A

Processes

/tmp/.rsync/c/run

[/tmp/.rsync/c/run]

/bin/grep

[grep name]

/bin/grep

[grep model]

/bin/cat

[cat /proc/cpuinfo]

/usr/bin/wc

[wc -l]

/bin/sleep

[sleep 15]

/tmp/.rsync/c/stop

[./stop]

/bin/sleep

[sleep 3]

/bin/sleep

[sleep 53]

/usr/bin/nohup

[nohup ./go]

/tmp/.rsync/c/go

[./go]

Network

N/A

Files

N/A

Analysis: behavioral30

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-armhf-20240611-en

Max time kernel

0s

Command Line

[/tmp/.rsync/c/tsm]

Signatures

N/A

Processes

/tmp/.rsync/c/tsm

[/tmp/.rsync/c/tsm]

/bin/readlink

[readlink -f /tmp/.rsync/c/tsm]

/usr/bin/dirname

[dirname /tmp/.rsync/c/tsm]

/bin/uname

[uname -m]

Network

N/A

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

debian9-armhf-20240418-en

Max time kernel

147s

Command Line

[/tmp/.rsync/c/go]

Signatures

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A

Processes

/tmp/.rsync/c/go

[/tmp/.rsync/c/go]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

Network

N/A

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

debian9-mipsbe-20240418-en

Max time kernel

147s

Command Line

[/tmp/.rsync/c/go]

Signatures

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A

Processes

/tmp/.rsync/c/go

[/tmp/.rsync/c/go]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

Network

N/A

Files

N/A

Analysis: behavioral21

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

ubuntu1804-amd64-20240508-en

Max time kernel

18s

Max time network

128s

Command Line

[/tmp/.rsync/c/run]

Signatures

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /bin/cat N/A

Processes

/tmp/.rsync/c/run

[/tmp/.rsync/c/run]

/usr/bin/wc

[wc -l]

/bin/grep

[grep name]

/bin/grep

[grep model]

/bin/cat

[cat /proc/cpuinfo]

/bin/sleep

[sleep 15]

/tmp/.rsync/c/stop

[./stop]

/bin/sleep

[sleep 3]

/bin/sleep

[sleep 159]

Network

Country Destination Domain Proto
GB 185.125.188.61:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.193.91:443 tcp
US 151.101.193.91:443 tcp
N/A 224.0.0.251:5353 udp
GB 89.187.167.7:443 tcp

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-mipsel-20240611-en

Max time kernel

149s

Command Line

[/tmp/.rsync/c/go]

Signatures

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A
File opened for modification /tmp/.rsync/c/v /usr/bin/touch N/A

Processes

/tmp/.rsync/c/go

[/tmp/.rsync/c/go]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf .out]

/bin/rm

[rm -rf /tmp/t*]

/usr/bin/touch

[touch v]

/bin/rm

[rm -rf p]

/bin/rm

[rm -rf ip]

/bin/rm

[rm -rf xtr*]

/bin/rm

[rm -rf a a.*]

/bin/rm

[rm -rf b b.*]

/usr/bin/timeout

[timeout 12h ./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/tmp/.rsync/c/tsm

[./tsm -t 302 -f 1 -s 8 -S 8 -p 0 -d 1 p ip]

/bin/sleep

[sleep 3]

Network

N/A

Files

N/A

Analysis: behavioral11

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:47

Platform

ubuntu2204-amd64-20240522.1-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/.rsync/c/lib/32/libresolv.so.2]

Signatures

N/A

Processes

/tmp/.rsync/c/lib/32/libresolv.so.2

[/tmp/.rsync/c/lib/32/libresolv.so.2]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral26

Detonation Overview

Submitted

2024-07-15 18:36

Reported

2024-07-15 18:48

Platform

debian9-armhf-20240611-en

Max time kernel

0s

Command Line

[/tmp/.rsync/c/slow]

Signatures

N/A

Processes

/tmp/.rsync/c/slow

[/tmp/.rsync/c/slow]

Network

N/A

Files

N/A