Malware Analysis Report

2025-01-23 14:38

Sample ID 240831-xfrsvazblj
Target v7.82.0%20source%20code.zip
SHA256 1e47c2d3d60d2b438bdd4e4afef92ef94fc4b227ad3e00fc7d037eb995339468
Tags
antivm execution
score
4/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral32

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral31

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
4/10

SHA256

1e47c2d3d60d2b438bdd4e4afef92ef94fc4b227ad3e00fc7d037eb995339468

Threat Level: Likely benign

The file v7.82.0%20source%20code.zip was found to be: Likely benign.

Malicious Activity Summary

antivm execution

Reads CPU attributes

Checks CPU configuration

Enumerates kernel/hardware configuration

Reads runtime system information

Writes file to tmp directory

Command and Scripting Interpreter: JavaScript

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-31 18:48

Signatures

N/A

Analysis: behavioral22

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-armhf-20240611-en

Max time kernel

5s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Signatures

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /usr/bin/node N/A

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/bin/node N/A

Enumerates kernel/hardware configuration

Description Indicator Process Target
File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes /usr/bin/node N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/meminfo /usr/bin/node N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Network

N/A

Files

N/A

Analysis: behavioral12

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

debian9-armhf-20240418-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/post-commit

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Network

N/A

Files

N/A

Analysis: behavioral15

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

ubuntu1804-amd64-20240508-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/pre-commit

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Network

Country Destination Domain Proto
US 151.101.193.91:443 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.193.91:443 tcp
N/A 224.0.0.251:5353 udp
GB 89.187.167.9:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 89.187.167.38:443 1527653184.rsc.cdn77.org tcp

Files

N/A

Analysis: behavioral14

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsel-20240611-en

Max time kernel

1s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/post-commit

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Network

N/A

Files

N/A

Analysis: behavioral21

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

ubuntu1804-amd64-20240611-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Signatures

Enumerates kernel/hardware configuration

Description Indicator Process Target
File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes /usr/bin/node N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/meminfo /usr/bin/node N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.193.91:443 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.193.91:443 tcp
GB 89.187.167.3:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 84.17.50.9:443 1527653184.rsc.cdn77.org tcp

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsel-20240611-en

Max time kernel

150s

Max time network

83s

Command Line

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

Signatures

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/find N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/self/fd /usr/lib/apt/methods/gpgv N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/lib/apt/methods/https N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpgv N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/find N/A
File opened for reading /proc/self/fd /usr/bin/sudo N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpgconf N/A
File opened for reading /proc/self/fd /usr/bin/gpgconf N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpgconf N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpgv N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpg-connect-agent N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/self/fd /usr/bin/gpgconf N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpg-connect-agent N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg /usr/bin/apt-key N/A
File opened for modification /tmp/apt.conf.OMt4Jb /usr/lib/apt/methods/gpgv N/A
File opened for modification /tmp/fileutl.message.ggMTzp /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.89hKr2 /usr/bin/apt-get N/A
File opened for modification /tmp/apt.conf.XVZCIG /usr/lib/apt/methods/gpgv N/A
File opened for modification /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.gpg /usr/bin/touch N/A
File opened for modification /tmp/apt-key-gpghome.pQWDCH8xVn/gpg.1.sh /usr/bin/apt-key N/A
File opened for modification /tmp/fileutl.message.MvamMa /usr/bin/apt-get N/A
File opened for modification /tmp/apt-key-gpghome.TqqJwkTZVC/gpg.1.sh /usr/bin/apt-key N/A
File opened for modification /tmp/fileutl.message.NIpQrl /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.CrRbHe /usr/bin/apt-get N/A
File opened for modification /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.orig.gpg /bin/cp N/A
File opened for modification /tmp/apt.data.zoaIZG /usr/lib/apt/methods/gpgv N/A
File opened for modification /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg /usr/bin/touch N/A
File opened for modification /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.gpg /usr/bin/apt-key N/A
File opened for modification /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.orig.gpg /bin/cp N/A
File opened for modification /tmp/fileutl.message.gyYW6h /usr/bin/apt-get N/A
File opened for modification /tmp/apt.sig.aLaNic /usr/lib/apt/methods/gpgv N/A

Processes

/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sudo

[sudo apt-get update]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/usr/bin/apt-get

[apt-get update]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1skRHz-0000C2-Fh]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1skRHz-0000Bz-Fi]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/https

[/usr/lib/apt/methods/https]

/usr/lib/apt/methods/https

[/usr/lib/apt/methods/https]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/gpgv

[/usr/lib/apt/methods/gpgv]

/usr/lib/apt/methods/gpgv

[/usr/lib/apt/methods/gpgv]

/usr/bin/apt-key

[/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /tmp/apt.sig.aLaNic /tmp/apt.data.zoaIZG]

/usr/bin/apt-config

[apt-config shell MASTER_KEYRING APT::Key::MasterKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell REMOVED_KEYS APT::Key::RemovedKeys]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell GPGV Apt::Key::gpgvcommand]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/mktemp

[mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX]

/bin/chmod

[chmod 700 /tmp/apt-key-gpghome.TqqJwkTZVC]

/bin/readlink

[readlink -f /tmp/apt-key-gpghome.TqqJwkTZVC]

/bin/rm

[rm -f /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg]

/usr/bin/touch

[touch /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg]

/usr/bin/apt-config

[apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/readlink

[readlink -f /etc/apt/trusted.gpg.d/]

/usr/bin/find

[find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 ( -name *.gpg -o -name *.asc )]

/usr/bin/sort

[sort]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg]

/bin/cp

[cp -a /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.orig.gpg]

/bin/sed

[sed -e s#'#'"'"'#g]

/bin/sed

[sed -e s#'#'"'"'#g]

/usr/bin/gpgv

[gpgv --homedir /tmp/apt-key-gpghome.TqqJwkTZVC --keyring /tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.aLaNic /tmp/apt.data.zoaIZG]

/usr/bin/gpgconf

[gpgconf --kill gpg-agent]

/usr/bin/gpg-connect-agent

[gpg-connect-agent --no-autostart KILLAGENT]

/bin/rm

[rm -rf /tmp/apt-key-gpghome.TqqJwkTZVC]

/usr/bin/apt-key

[/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release]

/usr/bin/apt-config

[apt-config shell MASTER_KEYRING APT::Key::MasterKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell REMOVED_KEYS APT::Key::RemovedKeys]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell GPGV Apt::Key::gpgvcommand]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/mktemp

[mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX]

/bin/chmod

[chmod 700 /tmp/apt-key-gpghome.pQWDCH8xVn]

/bin/readlink

[readlink -f /tmp/apt-key-gpghome.pQWDCH8xVn]

/bin/rm

[rm -f /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.gpg]

/usr/bin/touch

[touch /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.gpg]

/usr/bin/apt-config

[apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/readlink

[readlink -f /etc/apt/trusted.gpg.d/]

/usr/bin/find

[find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 ( -name *.gpg -o -name *.asc )]

/usr/bin/sort

[sort]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg]

/bin/cp

[cp -a /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.gpg /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.orig.gpg]

/bin/sed

[sed -e s#'#'"'"'#g]

/bin/sed

[sed -e s#'#'"'"'#g]

/usr/bin/gpgv

[gpgv --homedir /tmp/apt-key-gpghome.pQWDCH8xVn --keyring /tmp/apt-key-gpghome.pQWDCH8xVn/pubring.gpg --ignore-time-conflict --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release]

/usr/bin/gpgconf

[gpgconf --kill gpg-agent]

/usr/bin/gpg-connect-agent

[gpg-connect-agent --no-autostart KILLAGENT]

/bin/rm

[rm -rf /tmp/apt-key-gpghome.pQWDCH8xVn]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-2 udp
US 1.1.1.1:53 _http._tcp.archive.debian.org udp
US 1.1.1.1:53 deb.nodesource.com udp
US 1.1.1.1:53 archive.debian.org udp
US 151.101.130.132:80 archive.debian.org tcp

Files

/var/spool/exim4/input/1skRHz-0000Bz-Fi-D

MD5 7d7c60284d6933a9184fc45f853f8cbc
SHA1 fc45c162d4e701d2dc41592c42cdb87be89a9581
SHA256 b32eb571f6f0927acf54e7c6d9a6fee9deafa9334db718a9e95b04061ccb52f7
SHA512 ae0e3bd9cf3c6d2da562694949c546d2f7f678389bc1331dc41f45093b0530c5fa1aa0f4440593812de7933b6aa3869174a956569b7aba863e44df5f96c99e43

/var/spool/exim4/input/1skRHz-0000C2-Fh-D

MD5 97b5aa59f862cff60e462f60782783d1
SHA1 ce790c8f231ab0a9e3b8e12ace1de79ab2b44ee9
SHA256 1f39c54908534bb3d404f4c0675fcc63a357b90b455531e214787881f4672cab
SHA512 fbf0a87376d14d2e405d4300ec4acfb48bbf10b566bedb97f1077786d12455a7a7413a862628b54acad8effd8ddaad207ec521c69b538c071c79520f4fab948d

/var/spool/exim4/input/hdr.746

MD5 06e90eb9e1e1134b389919d03e250498
SHA1 32bf300d2bd91baacffceb2d551bb0a283e233f3
SHA256 26dd40d516f1a9377027bb61041d0cf9803a064d73b8404e61d81c8adec11953
SHA512 0f661655052c9817b24102f1807ef7405181a3b3c361c3c9894c90776ba9236507f65e454d118d1d6878badc785bd4db55a5b61806f125192a734a69fa84856a

/var/spool/exim4/msglog/1skRHz-0000Bz-Fi

MD5 674a4494f44607fc05045336dfaeafdc
SHA1 8e63c4b51a029bf05882a2ca39e039397d88d720
SHA256 cae3d5b41304bb0f1b7cab4ad9e77d35f0c6ed89e13b1ec6b48cc37a6b3d6dff
SHA512 90a064cdf26e573cce8ca7edf3991f5e8c8c16978d247ca0c76b162b20d903fd2f27b10e8efb9a78c7774574a6c6e381a175ffad8f1150019495c8527a77aea2

/var/spool/exim4/msglog/1skRHz-0000C2-Fh

MD5 ac316f06842ba773896e9550ee6c60e5
SHA1 7160339e6908083cf131b7fd561a2924947c6681
SHA256 8fc2f50bfa1ac5c0c8e36029132613d17473bc7fdfca2019bbb23e7d0df5a97c
SHA512 e8733f7aa6a8c96598f4983900ab9e203e97abb3a1a3a0c1e241e84b3ff80e1cfaeb553c1af6f8c784f43332023eeccc96faf5c3261a8a993ff8dac1a947cc77

/var/mail/user

MD5 b3873cd1b2331798adda6b6e558dcb96
SHA1 2ddee9ff0895f55f9f2cb9dfb5927f1a7fe6196a
SHA256 9ba8fd0ac35886d7d101db9332966190529c159ef39c8bd12d8d4cc5590dead8
SHA512 4ba3fa4b1f3ed50280e0b33735349a3abb360eb13e75a806532c4cdc901e8d80a6f6736a0a1faef6f516e74cd04775d4df864901b13f8673402693eee1d84c5e

/var/spool/exim4/input/1skRHz-0000Bz-Fi-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1skRHz-0000Bz-Fi

MD5 a48d1f4e8b1e30d7a151bede68998e80
SHA1 311a22614581713ec8f989d24b4a889766eec715
SHA256 3f9f3b45d17dd0a42f80c54c7838bdece5a13e59a98034dc0f0cf861e8726de2
SHA512 f5a796f45bc9a73b7dcdde84a0fae88e5ab0676564b6739bced0108aa358162b80b9e370be18f02b9d5cc5237e033556a9f0b66418d53166d00fffd69c93ee0b

/var/mail/user

MD5 1e386f8ffea8f86adbe3bac2a3a65554
SHA1 095bbdd57ffb6606f336ea8b570f0ec4be41a1c7
SHA256 969bde259a33f8a5b5ef1577ba596d2ceed177f7231e5e7459914f1cdf81eeb4
SHA512 c458e8e1cae17efdd01f49ddd41a37020acfecc4295c3a57efb785a7f14148765188358607ce389a88584f8cbd8bf3838bd63daa616ed975dd6bdd8107b67637

/var/spool/exim4/msglog/1skRHz-0000C2-Fh

MD5 1c560dc7a07e910e97b0a7b2c0d98462
SHA1 1b0f7d3db4b8c8eb5f9ab637604650201226983e
SHA256 0c43900d5b7adbc66ced1e9d2f8e1a1ef25de0c74252516cd53132c89d266824
SHA512 8289a59ee49223de71994dc1cd61bb6e004d8d709908cce59689c4fbbd864d0f810218d3e628b828ecd7562ef0e2b2617d070b7439c58b16cb0531dc7a18d9d6

/tmp/apt.conf.XVZCIG

MD5 2e865de2c92475d628dc9eee272c7dd5
SHA1 a3f656004db7bf9f7c72114b422d5938239dd768
SHA256 507d06a19be907e372fcf41b270e6296d5386db1ba5c996862a7dda75057bcfe
SHA512 25eeb2dcfc9838f0f1b6599d447c034f2eacf55534e5841f19183216ed65ce2d2855031b41bf2f2e9425072956c03356cafad13869777510cee720bc8d7ec51c

/tmp/apt.data.zoaIZG

MD5 fd96c8ce5d0ef18d63bbe9ae17bb2659
SHA1 76b284743d95d3546df9d85c09712c830a30f614
SHA256 ffc8a7a283b61633aac383ddf8f863df3f39ef241a07a4127f51a2495ef674b3
SHA512 2486acdfc102f8f8498d8db2f205915115444dd118507369044202dc9a97109b4c738a2faf16c1f5ce5e4452ae0af17ae4691ac3bf5e7c5e2db271c0f40a4cb2

/tmp/apt.sig.aLaNic

MD5 70274ce622b0cc437ef7f0caddc9d232
SHA1 124513a3ad2eb5aafa9be0920681e3bb8625979b
SHA256 4055d2ccc7c4be062ed390944548206ece5ed7613eae114b9e53ef15f3905230
SHA512 fed0054da258bb4a99e8adac359322d9ecc67caeee872309ea7d9863db6a1ec2a55497100e31538f42b43b9efc997e779e3774c8a0c6b0206254d7252d8699c8

/tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg

MD5 b53e6ca4ed295fc38621315853f623d0
SHA1 45a416f014809735ec88854a3540c8e9e89eb102
SHA256 6246307cc0130f6bd52510a477960f7c7be431b25979d7e20a88dc2fac58ac93
SHA512 30b5d2571840c2319a4af3907afda8ab00cf2879c83aaee1048ca972c0d3ddbf7995a167a31b19c45195b636ab46e73b0534459c6ee79c557fac8bfc01d857ac

/tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg

MD5 2713b38b3d7345961d8b80f4463483b8
SHA1 e6ec76aaebfea6a82f7984b57e07522a20365201
SHA256 389d00b5cbd2f69f32065448000a0607aec056e39af958f62e89c4c7e6228248
SHA512 ecee7b3045f49f7fa7443a8658602817bb2c8d2d07ae930536e3f2daaa5854903bf339af6c2fd4b02f8627f050ce360d2feddcf40569b58d304cfc459f418978

/tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg

MD5 760d3ab91f417958475b9a6342a5b92e
SHA1 137a06aea4b5c9e9ca11f0f5f1225da1c275c334
SHA256 42b348802c4290af6f9f30f984513f22fdd342ac3561ccb82957561a6b7c291f
SHA512 6cefcfae1c95c94b66b46d9242e62ddf7d7c65bd8d9bc9dc4e4c6230443ba33668ed160e1882f48a0b5daf59a46ccca09240ebe666017f059bd55e02fb1f2db6

/tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg

MD5 d63fbab9dfb826d53f7b3aaea45dbfb5
SHA1 59841d8e5423f788292af76d4350a948f4e25f53
SHA256 de329f1f48b751a7527f8ce3150452a4282ce69990e9318ab82d5b46b9f751ca
SHA512 20118f98c87eb60f0abafd5b4c2ffb4b1faf92777ee7402b98c0f5dc42d492c83f94d6903bdeee006187ac344a57afeaa84b54a973b483ff13e49773071d8198

/tmp/apt-key-gpghome.TqqJwkTZVC/pubring.gpg

MD5 a4dc094481f22304cab5550218e6e4de
SHA1 f5886a324c0c026d0168656f23d1d898a0e43bd6
SHA256 eef8c4d7d518a986e4f1cfeec729b55369b863ed6b62a23cbe9d88aa56de5391
SHA512 0f040c957db3d500ba18315db33cca6eb18f9c80d952710f839833a73dd89b72e2e01178084c17348e312a427a6b9150937199b4912e71dfd1a7e2dd43723f68

/tmp/apt-key-gpghome.TqqJwkTZVC/gpg.1.sh

MD5 7c70b7c16d42c0a9ed60afd3a8b44bc7
SHA1 b6774d40ba2331f3638b8ae68fb9694c086c5070
SHA256 b0cfe0df8843583c9b2a57851e118b77bfe2f60b14eef9767a8433c7b38f60d2
SHA512 03071b071d0b915b1990890ff1df7f576d66809299a962ff42c6e8a0e3f1a67457469b2cc21372e7427374d5a842d2d50b6b1ad385e08457b18e028307887fc6

/tmp/apt-key-gpghome.pQWDCH8xVn/gpg.1.sh

MD5 c821c67a5367ce07d3dedc695b9d439b
SHA1 5bcc08b93dc4817f891102d686a96892dd1de018
SHA256 c2235b3af10aa0c8f72c8f249b2b7ed1b570a8509cb91f7b6c1cfabcb8b6681f
SHA512 3c39247539defa70bf0609c1953d61fcd095a378c66d611159a2b9af999e9d25e0c94e1e3e5d2e9c1d5ab117c59e07893a569ca9d03257958deff6d6c25ec9ce

Analysis: behavioral8

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-armhf-20240611-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/commit-msg

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Network

N/A

Files

N/A

Analysis: behavioral11

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

ubuntu1804-amd64-20240729-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/post-commit

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Network

Country Destination Domain Proto
GB 185.125.188.62:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.193.91:443 tcp
US 151.101.193.91:443 tcp
N/A 224.0.0.251:5353 udp
GB 89.187.167.38:443 tcp

Files

N/A

Analysis: behavioral5

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsbe-20240418-en

Max time kernel

150s

Max time network

172s

Command Line

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

Signatures

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/lib/apt/methods/https N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/cp N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpg-connect-agent N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpgv N/A
File opened for reading /proc/self/fd /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpgv N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/cp N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/sbin/sendmail N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/find N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/find N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/apt-get N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpgconf N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/filesystems /usr/bin/dpkg N/A
File opened for reading /proc/sys/crypto/fips_enabled /usr/bin/gpg-connect-agent N/A
File opened for reading /proc/self/fd /usr/bin/apt-get N/A
File opened for reading /proc/self/fd /usr/bin/sudo N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/gpgconf N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/apt-config N/A
File opened for reading /proc/self/fd /usr/bin/gpgconf N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/gpg.1.sh /usr/bin/apt-key N/A
File opened for modification /tmp/fileutl.message.DZeaMk /usr/bin/apt-get N/A
File opened for modification /tmp/apt.conf.5rcSNl /usr/lib/apt/methods/gpgv N/A
File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg /usr/bin/touch N/A
File opened for modification /tmp/fileutl.message.nCmiJS /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.Ajy2Ts /usr/bin/apt-get N/A
File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg /usr/bin/apt-key N/A
File opened for modification /tmp/fileutl.message.cWW1cy /usr/bin/apt-get N/A
File opened for modification /tmp/apt.sig.CAHpfW /usr/lib/apt/methods/gpgv N/A
File opened for modification /tmp/fileutl.message.k7zEzW /usr/bin/apt-get N/A
File opened for modification /tmp/apt.data.saHUio /usr/lib/apt/methods/gpgv N/A
File opened for modification /tmp/fileutl.message.KpUKrU /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.UDAE9r /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.QVH4k3 /usr/bin/apt-get N/A
File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg /usr/bin/touch N/A
File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg /usr/bin/apt-key N/A
File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/gpg.1.sh /usr/bin/apt-key N/A
File opened for modification /tmp/fileutl.message.CSzHa0 /usr/bin/apt-get N/A
File opened for modification /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.orig.gpg /bin/cp N/A
File opened for modification /tmp/fileutl.message.mXsppP /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.8KDM4c /usr/bin/apt-get N/A
File opened for modification /tmp/fileutl.message.fQQHRq /usr/bin/apt-get N/A
File opened for modification /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.orig.gpg /bin/cp N/A
File opened for modification /tmp/fileutl.message.0Vw2fd /usr/bin/apt-get N/A
File opened for modification /tmp/apt.conf.GfHFiy /usr/lib/apt/methods/gpgv N/A

Processes

/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sudo

[sudo apt-get update]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/usr/bin/apt-get

[apt-get update]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1skRHB-0000C0-FM]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1skRHB-0000C4-HI]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/https

[/usr/lib/apt/methods/https]

/usr/lib/apt/methods/https

[/usr/lib/apt/methods/https]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/gpgv

[/usr/lib/apt/methods/gpgv]

/usr/lib/apt/methods/gpgv

[/usr/lib/apt/methods/gpgv]

/usr/bin/apt-key

[/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /tmp/apt.sig.CAHpfW /tmp/apt.data.saHUio]

/usr/bin/apt-config

[apt-config shell MASTER_KEYRING APT::Key::MasterKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell REMOVED_KEYS APT::Key::RemovedKeys]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell GPGV Apt::Key::gpgvcommand]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/mktemp

[mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX]

/bin/chmod

[chmod 700 /tmp/apt-key-gpghome.w8ITN9dl0X]

/bin/readlink

[readlink -f /tmp/apt-key-gpghome.w8ITN9dl0X]

/bin/rm

[rm -f /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg]

/usr/bin/touch

[touch /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg]

/usr/bin/apt-config

[apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/readlink

[readlink -f /etc/apt/trusted.gpg.d/]

/usr/bin/find

[find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 ( -name *.gpg -o -name *.asc )]

/usr/bin/sort

[sort]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg]

/bin/cp

[cp -a /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.orig.gpg]

/bin/sed

[sed -e s#'#'"'"'#g]

/bin/sed

[sed -e s#'#'"'"'#g]

/usr/bin/gpgv

[gpgv --homedir /tmp/apt-key-gpghome.w8ITN9dl0X --keyring /tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.CAHpfW /tmp/apt.data.saHUio]

/usr/bin/gpgconf

[gpgconf --kill gpg-agent]

/usr/bin/gpg-connect-agent

[gpg-connect-agent --no-autostart KILLAGENT]

/bin/rm

[rm -rf /tmp/apt-key-gpghome.w8ITN9dl0X]

/usr/bin/apt-key

[/usr/bin/apt-key --quiet --readonly verify --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release]

/usr/bin/apt-config

[apt-config shell MASTER_KEYRING APT::Key::MasterKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell REMOVED_KEYS APT::Key::RemovedKeys]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/apt-config

[apt-config shell GPGV Apt::Key::gpgvcommand]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/mktemp

[mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX]

/bin/chmod

[chmod 700 /tmp/apt-key-gpghome.ZhEDiOTjGF]

/bin/readlink

[readlink -f /tmp/apt-key-gpghome.ZhEDiOTjGF]

/bin/rm

[rm -f /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg]

/usr/bin/touch

[touch /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg]

/usr/bin/apt-config

[apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/bin/readlink

[readlink -f /etc/apt/trusted.gpg.d/]

/usr/bin/find

[find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 ( -name *.gpg -o -name *.asc )]

/usr/bin/sort

[sort]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg]

/bin/cat

[cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg]

/bin/cp

[cp -a /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.orig.gpg]

/bin/sed

[sed -e s#'#'"'"'#g]

/bin/sed

[sed -e s#'#'"'"'#g]

/usr/bin/gpgv

[gpgv --homedir /tmp/apt-key-gpghome.ZhEDiOTjGF --keyring /tmp/apt-key-gpghome.ZhEDiOTjGF/pubring.gpg --ignore-time-conflict --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release]

/usr/bin/gpgconf

[gpgconf --kill gpg-agent]

/usr/bin/gpg-connect-agent

[gpg-connect-agent --no-autostart KILLAGENT]

/bin/rm

[rm -rf /tmp/apt-key-gpghome.ZhEDiOTjGF]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/bin/sudo

[sudo apt-get install build-essential libssl-dev git unzip -y]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/usr/bin/apt-get

[apt-get install build-essential libssl-dev git unzip -y]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1skRJN-0000FT-A2]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1skRJN-0000FW-Ab]

/usr/bin/dpkg

[/usr/bin/dpkg --print-foreign-architectures]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

/usr/lib/apt/methods/http

[/usr/lib/apt/methods/http]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 _http._tcp.archive.debian.org udp
US 1.1.1.1:53 archive.debian.org udp
US 1.1.1.1:53 deb.nodesource.com udp
US 151.101.130.132:80 archive.debian.org tcp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-1 udp
US 1.1.1.1:53 _http._tcp.archive.debian.org udp
US 1.1.1.1:53 archive.debian.org udp
US 151.101.2.132:80 archive.debian.org tcp

Files

/var/spool/exim4/input/1skRHB-0000C0-FM-D

MD5 2c70a16bf2d65bbf5a4281c599ec5246
SHA1 7b6346b3caa697090e6f65d22c113867daddbb65
SHA256 efbfcf2bcd519a4b212b5929416002865e11b034b5fba88f94ae383ed90799b2
SHA512 2e89cb0b3171e15f1f2820105991d953cdbb91cd00eb0688a7a9fa578efd0f7fdf649f9e0e7697bfd3cb7fdda8429fb1202c89d2b76c53d205da92699ca135f7

/var/spool/exim4/input/hdr.744

MD5 e5e0ccca93c942e92d4adaf60472cf72
SHA1 3fea140fee96bcbbfa23e0b675149970be9694f5
SHA256 bf0b783981af9127f2263a6b8a39626176adccdeda870bc7a2a4ad11045f4be9
SHA512 41e086e0b7c00ba18cc34b1ba946e6b4c77ec6e2e598c0260d0905d1e494a3268ac30f2d0f522503bbea86bb97b4b173adb40cf38bf2f8c8d4639425a1569c92

/var/spool/exim4/msglog/1skRHB-0000C0-FM

MD5 c3f8d4799c07c526a53678b4c2714a29
SHA1 a5cb0e84f71f8523ec96a6fa55e5ae8f796eaf01
SHA256 82a887e6aff7afa7764d871f6ed039b2cb73c825bf87cf7cb81f92b12e71f68e
SHA512 503dff5838d7e7cdc02556bac84ec8dcc4adfd3a5d424163c131277a6d58b4f674fd9193c44153d775ccabc0fb45e5e920eada9f24fe353c63ca44aa54699f21

/var/spool/exim4/input/1skRHB-0000C4-HI-D

MD5 9c1f40bfb6b2aca3b1b4a99e0838c7a5
SHA1 bb9b3ea738378f1139aa77d96e2b74b2bea7c647
SHA256 93fdbe1c69d0f2424f0e8096ab90d63bd5f7c785004e7d550685e6d49c08960e
SHA512 fa5a37cf59aa63dc8966eefc9b72fb1e220221effa2ffb8b9412344acb04a425e79314e6c8d722f01d43b4d85a7d98384df9e21cf2823958f76d31d653f81202

/var/spool/exim4/input/hdr.748

MD5 185a6d7d87cdf1250a0d04d522f625ca
SHA1 be746e54530cac36d27af9e31683ac80fd8dc74e
SHA256 74e5475397674f818491d4620a56ed29d25f7d4cbe8cc4cb9c6fa65010413e75
SHA512 03cfdc55728beb73b3a6cdef0e38cf883181be5dcdb3742073f9bb30a7807d0a46ace493e0df77d546a096a6d1d04bb1dfb2b1cc394d23ef36929502a6dcaf55

/var/spool/exim4/msglog/1skRHB-0000C4-HI

MD5 1c58ef55a54ae50b982e9b383b740c7c
SHA1 15d99868e15588f167ff706ac2f0439a5bae2f63
SHA256 d6c63ba0cdbfe2f8ca2cf3bdecf14399d83b7b934fceaf6d8cfa4a2616752ad7
SHA512 8c929aa3db267853b4403b571a605f8513df6301bb817e87cb16ad21fab19c711e64089847a647f1f93c9a374219484b048c5bb47500138d714bb2546690be40

/var/mail/user

MD5 200502dbf46964501c816b0229978f80
SHA1 8446fe54d627a253cb3ed4cb9af3310c02b22891
SHA256 8a7f6acb8194a90b93a14149e25920cf03f720767e8e7818b67c5c252fac3fbb
SHA512 00b0c7373995124bb35db4a8617f8e322b706b30e04e27286ef34240f5b8842bba45444af0a8f337f35cd7c0857a45a9539b39961463637d7b0376563e969266

/var/spool/exim4/input/1skRHB-0000C0-FM-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1skRHB-0000C0-FM

MD5 d4e466ba02cd16a7bd21a491cf7fe62a
SHA1 c769bbf5edcd660dd3edf234833d2f4ab3ac126f
SHA256 ee1682ef930716aff739c38d073011d8b39adb9c5b1c3cb55ee50c5fa58d9e03
SHA512 75a38a6672381839072c537c7d3bb69d3c4123bf47313237afea3b3c009f9ac933730a7c8825770e9654f5ffa6254200c7d2562e413c6e7d1fa56fef86662c95

/var/mail/user

MD5 e17e4c6c7ab7536d15e7fcadd9a2a157
SHA1 0e7207c0ef316cb1430360b332adb42f329eb51d
SHA256 da39c7b703ef081fddee26ac6cdacfd540d62d4348cea2d4ad0d0a92db473592
SHA512 ad89617479081be26c597262237ad82b9765eaf9f9e7f73144dbbe98135a1df93f3b8a37388aad5132ea62e4717984d117950968b10498ad5820143d828e5cab

/var/spool/exim4/msglog/1skRHB-0000C4-HI

MD5 497327c9e52430f5c07da7628e8dfebf
SHA1 74987b458a47b06a53b9f86f0b99077cfff961b6
SHA256 103a112974a824fb2fdfd77dfda16d0837b0e2f644902bbbbd37b0763be40812
SHA512 f810c9d4a52328f90626c2463f0e99434c20afd4387ded79add37fe29b964e6f80b3920afd50842b4867c973021d41fc70dd28c2f36ad8c17c7a18aadd19abbb

/tmp/apt.conf.GfHFiy

MD5 888b69612f796e76004b6312f7c07c5a
SHA1 8473a4114b60f4f93150e08c44f6908069943b43
SHA256 b84b8be5406657e163fd2333afc00de1b91df4837563bfe330f34e30402456e2
SHA512 76e05e08200975efbac0b1ebbc232135d35ad6b16bbe8b0238f01b6f9acf712a2479bf309aa81eb8eacfc3ee823a531b4e9b89cbf1364b1bf84c04abb90122bd

/tmp/apt.data.saHUio

MD5 fd96c8ce5d0ef18d63bbe9ae17bb2659
SHA1 76b284743d95d3546df9d85c09712c830a30f614
SHA256 ffc8a7a283b61633aac383ddf8f863df3f39ef241a07a4127f51a2495ef674b3
SHA512 2486acdfc102f8f8498d8db2f205915115444dd118507369044202dc9a97109b4c738a2faf16c1f5ce5e4452ae0af17ae4691ac3bf5e7c5e2db271c0f40a4cb2

/tmp/apt.sig.CAHpfW

MD5 70274ce622b0cc437ef7f0caddc9d232
SHA1 124513a3ad2eb5aafa9be0920681e3bb8625979b
SHA256 4055d2ccc7c4be062ed390944548206ece5ed7613eae114b9e53ef15f3905230
SHA512 fed0054da258bb4a99e8adac359322d9ecc67caeee872309ea7d9863db6a1ec2a55497100e31538f42b43b9efc997e779e3774c8a0c6b0206254d7252d8699c8

/tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg

MD5 b53e6ca4ed295fc38621315853f623d0
SHA1 45a416f014809735ec88854a3540c8e9e89eb102
SHA256 6246307cc0130f6bd52510a477960f7c7be431b25979d7e20a88dc2fac58ac93
SHA512 30b5d2571840c2319a4af3907afda8ab00cf2879c83aaee1048ca972c0d3ddbf7995a167a31b19c45195b636ab46e73b0534459c6ee79c557fac8bfc01d857ac

/tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg

MD5 2713b38b3d7345961d8b80f4463483b8
SHA1 e6ec76aaebfea6a82f7984b57e07522a20365201
SHA256 389d00b5cbd2f69f32065448000a0607aec056e39af958f62e89c4c7e6228248
SHA512 ecee7b3045f49f7fa7443a8658602817bb2c8d2d07ae930536e3f2daaa5854903bf339af6c2fd4b02f8627f050ce360d2feddcf40569b58d304cfc459f418978

/tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg

MD5 760d3ab91f417958475b9a6342a5b92e
SHA1 137a06aea4b5c9e9ca11f0f5f1225da1c275c334
SHA256 42b348802c4290af6f9f30f984513f22fdd342ac3561ccb82957561a6b7c291f
SHA512 6cefcfae1c95c94b66b46d9242e62ddf7d7c65bd8d9bc9dc4e4c6230443ba33668ed160e1882f48a0b5daf59a46ccca09240ebe666017f059bd55e02fb1f2db6

/tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg

MD5 d63fbab9dfb826d53f7b3aaea45dbfb5
SHA1 59841d8e5423f788292af76d4350a948f4e25f53
SHA256 de329f1f48b751a7527f8ce3150452a4282ce69990e9318ab82d5b46b9f751ca
SHA512 20118f98c87eb60f0abafd5b4c2ffb4b1faf92777ee7402b98c0f5dc42d492c83f94d6903bdeee006187ac344a57afeaa84b54a973b483ff13e49773071d8198

/tmp/apt-key-gpghome.w8ITN9dl0X/pubring.gpg

MD5 a4dc094481f22304cab5550218e6e4de
SHA1 f5886a324c0c026d0168656f23d1d898a0e43bd6
SHA256 eef8c4d7d518a986e4f1cfeec729b55369b863ed6b62a23cbe9d88aa56de5391
SHA512 0f040c957db3d500ba18315db33cca6eb18f9c80d952710f839833a73dd89b72e2e01178084c17348e312a427a6b9150937199b4912e71dfd1a7e2dd43723f68

/tmp/apt-key-gpghome.w8ITN9dl0X/gpg.1.sh

MD5 6715cb3a979fccbd6e5dcd32cb94614e
SHA1 28bf00b03b03acdefa2451ae15c5b4920a4f4560
SHA256 5291f6e2a6abff7c79ca2001c85ff0ba6f03763f265daccb7aee37101e37d2a3
SHA512 59e75998fb454c21f4215b46196bb29c7171bc6d2745ee891e0ef0c2e8d1db08734a9ba818664305f39f446e8566f45dd0355e9316df81625313283fc1cca9b4

/tmp/apt-key-gpghome.ZhEDiOTjGF/gpg.1.sh

MD5 6bb0225a10e34193afb246c62d55cd51
SHA1 05048b1658074fa5c5cb5b0b71264c83eb1c3894
SHA256 da2e463b67e1b77941377afe055ee9594621464be0ee1f8c80991aa8d5a0b220
SHA512 90b6ce70cafb77fbeea88afe7e2a5c11f55fdfb4326bf23d278c7d819d02f74553373c3d9d1ab1ecdd6812d0954ffebaac020c89a661fe890257db4d45e90693

/var/spool/exim4/input/1skRJN-0000FT-A2-D

MD5 b5f2b6f07400fe7799348cb9c09f4ee2
SHA1 1903f2e737174a02fdc9268c119d365794b87cdf
SHA256 ee853e82af0f6b9f96a1f45bc0061110ba50ff5108672a7b4d096a5acab40901
SHA512 f4e01e215e916310b5bfddabafe5c54c7dad3bee255b76066dd057232badaf6798c35be00180558dd1e8831f84061c4627814c4355efc69b14280b1750aaa7cd

/var/spool/exim4/input/1skRJN-0000FW-Ab-D

MD5 cdf22df2fdc2fbf6538ce5ca565381e7
SHA1 bfdefc3d0611477b21fd75ba2fd4adcc1a24a007
SHA256 dbc4a0b7d8ad05be9efa854603a492c108b9a59a547b8708b244d070964a01c6
SHA512 6e65a98a0d2499e6caacaf6f2263129a7c04aeadcc0be623e2c6ca36dd748c7d71852836f8d434de48c4087df184554c99abd2d20884f0a5f13b47e8245800f0

/var/spool/exim4/input/hdr.959

MD5 cb628dace90b7b02a25fa83ffe94941f
SHA1 a9fe56490a693ac831d61d9de5557174d5391ccc
SHA256 dd8642f16dd98f7db4f97f519e4bcea03ae228777d101ca4d38ee03e923a11ef
SHA512 68589751609999a3be0fee686d458616edd12cfabe88663560c86e5d80eb2c78580df90fe0e4cdef530b9e8e7b04d37b8d1ebe7df25efa3164b57d46bf606d14

/var/spool/exim4/msglog/1skRJN-0000FT-A2

MD5 fe7611953d668ba59b5028e8ccdc8f9f
SHA1 ba198a8d6304d598813a7a60e1fe9995a0a468b7
SHA256 8fbd51d2b0602899244c7cc8a8572ff0e2686b41bb8e1b02d66205f0d701b430
SHA512 e19519f96bf5abe1976c88a2c8810efd22dc4652bb3eb091e1776c9ed856fc0ca829ebba40e91b0cede5a71d9219a80a9f047d76f78da69c20312c1e88fef235

/var/spool/exim4/msglog/1skRJN-0000FW-Ab

MD5 e7c09cf408614ec21be1585cba32cfcf
SHA1 ecb55af9db73540a2e987ce6dd4ed1261a68c97a
SHA256 78a0ce1ae55c899907838420cde83452ba592416c9baf7c98b494f7f1e574d55
SHA512 f16af526d9b00240fe112204d24a77a1ee9cf9d5ad69cb17bcafad648494f47fdcedd8009b95c2a41187a91ab7a4940eb65a48d33f5fb47da0c603268f2bba65

/var/mail/user

MD5 701db273d75b08cb227739fb07b5d036
SHA1 bfd920241b1076ac4ea72afb37a7dba724e58279
SHA256 c7a9d710f37e77914b30578980602867b23c3865e94461fdfbbaf28c14c7dfa0
SHA512 4eb50787b3137e9f9b900f8f1bde460531eefa7ba41cd49eb20e63750a9376e6b47002c7bf56775cb823e03c98c2ecca565cdd9a61950d9bd8d25a08da23790a

/var/spool/exim4/msglog/1skRJN-0000FW-Ab

MD5 ca052f8d0802775252139a1d6826d17f
SHA1 1de239282303313d1df0961dce95176662361686
SHA256 4dca7091d83439e67d669dca52c0ca26c73d00adfb760332582ccfb919f3a208
SHA512 ba9a21b34842605b9e84517047e76d1da7ef1c3f399ff7e508759840cf70d2dbaccf3b00acfa0703de7d2461b6b2aa66f7bac54f2521cd0193671c4db71d3a01

/var/mail/user

MD5 a00161ef77bf0e3dccb87b95744c7912
SHA1 5a95ed029f2fbfa4d282367162c79f60090028ec
SHA256 a941240c35aacbc74f7ff53c56886ef16a695e7b7a16f6325b6667466f71f7d8
SHA512 c0d329777bfef5bf7dc88239cdfab73bb9d8b64ce87816ef773aade4c0c83aff7e7a902f9aee5bb3d4b9ef5c894078225d791cc2f96e14599129bfd2fbb8834e

/var/spool/exim4/msglog/1skRJN-0000FT-A2

MD5 6edfe6456b3d0da4954d1fd75eb67f63
SHA1 5c0e6a95650b85312d3238840d898954d094a6a3
SHA256 e918da635578afcc1e21e8f20962f05c9f1aa4b390e49f6c63c5036911273498
SHA512 4334063d8733e9e3da609e7a041cca973536644ebf1cab5f295025d15d3e92e7e33bc551b15ad8676324db78d2c653cf97469f6e97c25340b1e5df99959443b2

/var/cache/apt/archives/partial/liberror-perl_0.17024-1_all.deb

MD5 05d1cb65f1b07aacba5fd9d52c54887e
SHA1 0699e48805bf83614ec99817b4aa5402ca8cbe60
SHA256 d52c2cc940ff1c9b6d0c0bf81f8557084123ecb151377743fe06c0e13eb64674
SHA512 d13561cc6b45ecba687d9f4d243aa6febd3fd0a5cd7e2dba4b5c0545a4fb883d84fc263ce5cf41ce55a1076777c8d8aa7ce74f9a9ad89f9099c7601b9052f657

/var/cache/apt/archives/partial/git-man_1%3a2.11.0-3+deb9u7_all.deb

MD5 598e45aaae9b4a1fa15c33e7654689b7
SHA1 95f84ed88514f6bc5804e275496c1c4fa366fdb6
SHA256 4cf18759a5c56c53d5492f221e3c85a887da926fd815e03aed66c1bad5ec8673
SHA512 d2b0f2f8057efb4b32108aded883bb5bdfe1da6295bd625ffd27284a3f3fc44a27388f2c8a1ff2b61395445fffa2610e59e70c19645aa78d0ca37d62094a271c

/var/cache/apt/archives/partial/git_1%3a2.11.0-3+deb9u7_mips.deb

MD5 fb2fb600604f1756adf57ff1e73a6bcb
SHA1 cb78fdb5954b2c3f1d3ef2473b1632042195f80a
SHA256 85dd4f3d06025a2b0583e09a683c7b64918c3d9efd1375ad16d90c20c4a5b79b
SHA512 659c1207704798e681df454c7edfc862254ba1e133381b4bb78984352604c31a0cb64c3294c7f1305c4f8a21550186deabf50c296c39f6589b944829a6716a2c

Analysis: behavioral18

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsel-20240226-en

Max time kernel

19s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/pre-commit

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Network

N/A

Files

N/A

Analysis: behavioral26

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

debian9-armhf-20240729-en

Max time kernel

4s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Signatures

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /usr/bin/node N/A

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/bin/node N/A

Enumerates kernel/hardware configuration

Description Indicator Process Target
File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes /usr/bin/node N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/meminfo /usr/bin/node N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Network

N/A

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win7-20240704-en

Max time kernel

119s

Max time network

121s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect-router.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect-router.js

Network

N/A

Files

N/A

Analysis: behavioral4

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-armhf-20240611-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

Signatures

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A

Processes

/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sudo

[sudo apt-get update]

Network

N/A

Files

N/A

Analysis: behavioral20

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win10v2004-20240802-en

Max time kernel

148s

Max time network

156s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\bin\benchmark-bench.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\bin\benchmark-bench.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 133.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 107.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp

Files

N/A

Analysis: behavioral25

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

ubuntu1804-amd64-20240508-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Signatures

Enumerates kernel/hardware configuration

Description Indicator Process Target
File opened for reading /sys/fs/cgroup/memory/memory.limit_in_bytes /usr/bin/node N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/meminfo /usr/bin/node N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.193.91:443 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.193.91:443 tcp
GB 195.181.164.15:443 tcp

Files

N/A

Analysis: behavioral32

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win10v2004-20240802-en

Max time kernel

133s

Max time network

127s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 67.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 13.227.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win7-20240729-en

Max time kernel

120s

Max time network

123s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\.eslintrc.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\.eslintrc.js

Network

N/A

Files

N/A

Analysis: behavioral17

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsbe-20240611-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/pre-commit

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Network

N/A

Files

N/A

Analysis: behavioral27

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsbe-20240611-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Network

N/A

Files

N/A

Analysis: behavioral19

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win7-20240708-en

Max time kernel

117s

Max time network

122s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\bin\benchmark-bench.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\bin\benchmark-bench.js

Network

N/A

Files

N/A

Analysis: behavioral23

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsbe-20240729-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Network

N/A

Files

N/A

Analysis: behavioral30

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win10v2004-20240802-en

Max time kernel

148s

Max time network

151s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect-router.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect-router.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 150.171.28.10:443 g.bing.com tcp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 68.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 58.99.105.20.in-addr.arpa udp
US 8.8.8.8:53 19.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 25.173.189.20.in-addr.arpa udp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win10v2004-20240802-en

Max time kernel

144s

Max time network

154s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\.eslintrc.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\.eslintrc.js

Network

Country Destination Domain Proto
US 8.8.8.8:53 241.150.49.20.in-addr.arpa udp
US 8.8.8.8:53 23.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 183.59.114.20.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 92.12.20.2.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp

Files

N/A

Analysis: behavioral7

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

ubuntu1804-amd64-20240729-en

Max time kernel

0s

Max time network

128s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/commit-msg

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.129.91:443 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.129.91:443 tcp
GB 84.17.50.8:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 84.17.50.9:443 1527653184.rsc.cdn77.org tcp

Files

N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsbe-20240611-en

Max time kernel

17s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/post-commit

[/tmp/tsedio-tsed-59e79fd/.husky/post-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/post-commit]

Network

N/A

Files

N/A

Analysis: behavioral10

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsel-20240611-en

Max time kernel

1s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/commit-msg

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Network

N/A

Files

N/A

Analysis: behavioral24

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsel-20240418-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark-compare.js]

Network

N/A

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsel-20240611-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js

[/tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/local/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/usr/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/sbin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

/bin/node

[node /tmp/tsedio-tsed-59e79fd/benchmarks/bin/benchmark.js]

Network

N/A

Files

N/A

Analysis: behavioral31

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

win7-20240705-en

Max time kernel

119s

Max time network

122s

Command Line

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect.js

Signatures

Command and Scripting Interpreter: JavaScript

execution

Processes

C:\Windows\system32\wscript.exe

wscript.exe C:\Users\Admin\AppData\Local\Temp\tsedio-tsed-59e79fd\benchmarks\frameworks\connect.js

Network

N/A

Files

N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

ubuntu1804-amd64-20240508-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

Signatures

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A

Processes

/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh

[/tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/local/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/sbin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/bin/sh

[sh /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.github/workflows/install-wrk.sh]

/usr/bin/sudo

[sudo apt-get update]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.193.91:443 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.193.91:443 tcp
GB 195.181.164.20:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 89.187.167.38:443 1527653184.rsc.cdn77.org tcp

Files

N/A

Analysis: behavioral9

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:51

Platform

debian9-mipsbe-20240611-en

Max time kernel

1s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/commit-msg

[/tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/commit-msg]

Network

N/A

Files

N/A

Analysis: behavioral16

Detonation Overview

Submitted

2024-08-31 18:48

Reported

2024-08-31 18:50

Platform

debian9-armhf-20240729-en

Max time kernel

0s

Command Line

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Signatures

N/A

Processes

/tmp/tsedio-tsed-59e79fd/.husky/pre-commit

[/tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

/usr/bin/dirname

[dirname /tmp/tsedio-tsed-59e79fd/.husky/pre-commit]

Network

N/A

Files

N/A