717d574ab49230cd228c2c0fa25ca5f818bf894f2eae16c68d7843d7f81f6cc0

Analysis

max time kernel
150s
max time network
159s
platform
debian-9_mipsel
resource
debian9-mipsel-20240226-en
resource tags

arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
02-12-2024 18:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

PoshC2-master/Install.sh
Size

7KB
MD5

3aef055d6c7f1ea3df272ab04a3d1c30
SHA1

1678f0ce8c4255907863b6dc2001af9c8dda9cab
SHA256

2f58503876d531099611322e32df8c7cb2ed7ac64af667903563a5bef902d490
SHA512

97ef4cef9d08c9c09743363f929b9c9488c5ab753e360fc782c6bcd3a31843c55e25e99c59b0b514b1dcdc99088d6eff82e48e2d129e9d73f1b2671487b2a865
SSDEEP

192:BVfPntboZecs6lH2uL7t5r9+AmwWVrGfuEbU6j8e2op:LPn8L1TUEfp

Score

7^/10

credential_access defense_evasion discovery execution persistence

Malware Config

Signatures

Executes dropped EXE 2 IoCs

Processes:

preinstless.postinst

ioc	pid	Process
/var/lib/dpkg/tmp.ci/preinst	1010	preinst
/var/lib/dpkg/info/less.postinst	1046	less.postinst

OS Credential Dumping 1 TTPs 1 IoCs

Adversaries may attempt to dump credentials to use it in password cracking.

credential_access

/etc/passwd and /etc/shadow

T1003.008

Processes:

dpkg-preconfigure

description	ioc	Process
File opened for reading	/etc/shadow	dpkg-preconfigure

Deletes log files 1 TTPs 1 IoCs

Deletes log files on the system.

defense_evasion

Clear Linux or Mac System Logs

T1070.002

Processes:

apt-get

description	ioc	Process
File deleted	/var/log/apt/eipp.log.xz	apt-get

Modifies init.d 2 TTPs 1 IoCs

Adds/modifies system service, likely for persistence.

persistence

Boot or Logon Autostart Execution

T1547

RC Scripts

T1037.004

Processes:

dpkg

description	ioc	Process
File opened for modification	/etc/init.d/rsync.dpkg-new	dpkg

Write file to user bin folder 4 IoCs

persistence

Processes:

dpkg

description	ioc	Process
File opened for modification	/usr/bin/git.dpkg-new	dpkg
File opened for modification	/usr/bin/git-shell.dpkg-new	dpkg
File opened for modification	/usr/bin/git-upload-pack.dpkg-new	dpkg
File opened for modification	/usr/bin/rsync.dpkg-new	dpkg

Writes file to system bin folder 4 IoCs

Processes:

dpkg

description	ioc	Process
File opened for modification	/bin/less.dpkg-new	dpkg
File opened for modification	/bin/lesskey.dpkg-new	dpkg
File opened for modification	/bin/lessecho.dpkg-new	dpkg
File opened for modification	/bin/lesspipe.dpkg-new	dpkg

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

Processes:

dpkgdpkgapt-configapt-configdpkgdpkgsedgpgconfapt-configseddpkgdpkgapt-configdpkgapt-configapt-configdpkgsedapt-getapt-getdpkgdpkggpgvdpkgdpkghttpsdpkgdpkgtargpgvapt-configapt-configfindtardpkgidapt-configsedsedapt-configapt-configapt-configdpkgcpapt-configdpkgapt-configgpgconfdpkgseddpkgdpkgdpkgdpkgdpkgdpkgfindcpgpgvdpkgdpkg

description	ioc	Process
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/sys/crypto/fips_enabled	gpgconf
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd	apt-get
File opened for reading	/proc/sys/kernel/ngroups_max	apt-get
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/sys/crypto/fips_enabled	gpgv
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/sys/crypto/fips_enabled	https
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	tar
File opened for reading	/proc/sys/crypto/fips_enabled	gpgv
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	tar
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	id
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	apt-config
File opened for reading	/proc/sys/crypto/fips_enabled	gpgconf
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/sys/kernel/ngroups_max	apt-get
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	cp
File opened for reading	/proc/self/fd	gpgconf
File opened for reading	/proc/sys/crypto/fips_enabled	gpgv
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/filesystems	dpkg
File opened for reading	/proc/self/fd	gpgconf

System Network Configuration Discovery 1 TTPs 21 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

Processes:

dpkg-maintscript-helperbasenamelnbasenamebasenamedpkg-splitdpkg-splitdpkg-splitbasenamedpkg-maintscript-helperdpkg-splitdpkg-splitdpkg-splitdpkg-splitdpkg-splitdpkg-splitdpkg-splitdpkg-maintscript-helperdpkg-maintscript-helperdpkg-splitdpkg-split

pid	Process
1011	dpkg-maintscript-helper
1015	basename
1048	ln
1018	basename
1021	basename
1027	dpkg-split
1005	dpkg-split
1005	dpkg-split
1012	basename
1014	dpkg-maintscript-helper
1027	dpkg-split
1027	dpkg-split
1027	dpkg-split
1036	dpkg-split
1036	dpkg-split
1005	dpkg-split
1005	dpkg-split
1017	dpkg-maintscript-helper
1020	dpkg-maintscript-helper
1036	dpkg-split
1036	dpkg-split

Writes file to tmp directory 30 IoCs

Malware often drops required files in the /tmp directory.

Processes:

apt-getgpgvapt-keycpcpapt-keytouchapt-gettouchapt-key

description	ioc	Process
File opened for modification	/tmp/fileutl.message.3EW8kH	apt-get
File opened for modification	/tmp/fileutl.message.7IfYz4	apt-get
File opened for modification	/tmp/fileutl.message.kcn6jN	apt-get
File opened for modification	/tmp/apt.data.C1FRMm	gpgv
File opened for modification	/tmp/apt-key-gpghome.uZpPmyG5qQ/gpg.1.sh	apt-key
File opened for modification	/tmp/apt.conf.aYwPHA	gpgv
File opened for modification	/tmp/fileutl.message.ULQzFO	apt-get
File opened for modification	/tmp/apt.sig.vEk35j	gpgv
File opened for modification	/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.orig.gpg	cp
File opened for modification	/tmp/fileutl.message.Asysad	apt-get
File opened for modification	/tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.orig.gpg	cp
File opened for modification	/tmp/apt-key-gpghome.kAdVlF1Wpi/gpg.1.sh	apt-key
File opened for modification	/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg	apt-key
File opened for modification	/tmp/apt.conf.Es5xPj	gpgv
File opened for modification	/tmp/fileutl.message.ICQLum	apt-get
File opened for modification	/tmp/fileutl.message.WMqcmh	apt-get
File opened for modification	/tmp/fileutl.message.TCeFAX	apt-get
File opened for modification	/tmp/apt.conf.oLu9Fh	gpgv
File opened for modification	/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg	touch
File opened for modification	/tmp/fileutl.message.16S0QT	apt-get
File opened for modification	/tmp/fileutl.message.M4v5OJ	apt-get
File opened for modification	/tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.gpg	touch
File opened for modification	/tmp/fileutl.message.5tCndz	apt-get
File opened for modification	/tmp/apt.data.qMCYlr	gpgv
File opened for modification	/tmp/fileutl.message.X7gHR7	apt-get
File opened for modification	/tmp/fileutl.message.NIawoH	apt-get
File opened for modification	/tmp/fileutl.message.KQBH1K	apt-get
File opened for modification	/tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.gpg	apt-key
File opened for modification	/tmp/apt-key-gpghome.9qJmZ3bNhW/gpg.1.sh	apt-key
File opened for modification	/tmp/apt.sig.0wKG20	gpgv

Software Deployment Tools 1 TTPs 16 IoCs

Use software deployment tools to execute code.

execution

Software Deployment Tools

T1072

Processes:

dpkg-splitdpkg-maintscript-helperdpkgdpkg-maintscript-helperdpkgdpkg-splitdpkg-splitdpkgdpkgdpkg-splitdpkgapt-getdpkg-maintscript-helperdpkg-maintscript-helperdpkg-splitapt-get

pid	Process
996	dpkg-split
1011	dpkg-maintscript-helper
1013	dpkg
1017	dpkg-maintscript-helper
1019	dpkg
1027	dpkg-split
987	dpkg-split
1016	dpkg
1022	dpkg
1005	dpkg-split
1045	dpkg
735	apt-get
1014	dpkg-maintscript-helper
1020	dpkg-maintscript-helper
1036	dpkg-split
963	apt-get

/tmp/PoshC2-master/Install.sh
/tmp/PoshC2-master/Install.sh
1⤵
PID:722
- /usr/bin/id
  id -u
  2⤵
  - Reads runtime system information
  PID:729
- /usr/bin/dirname
  dirname /tmp/PoshC2-master/Install.sh
  2⤵
  PID:734
- /usr/bin/apt-get
  apt-get update
  2⤵
  - Reads runtime system information
  - Writes file to tmp directory
  - Software Deployment Tools
  PID:735
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:738
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:741
- - /usr/lib/apt/methods/https
    /usr/lib/apt/methods/https
    3⤵
    PID:743
- - /usr/lib/apt/methods/https
    /usr/lib/apt/methods/https
    3⤵
    - Reads runtime system information
    PID:747
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:750
- - /usr/lib/apt/methods/gpgv
    /usr/lib/apt/methods/gpgv
    3⤵
    PID:754
- - /usr/lib/apt/methods/gpgv
    /usr/lib/apt/methods/gpgv
    3⤵
    - Writes file to tmp directory
    PID:755
  - - /usr/bin/apt-key
      /usr/bin/apt-key --quiet --readonly verify --status-fd 3 /tmp/apt.sig.vEk35j /tmp/apt.data.C1FRMm
      4⤵
      Writes file to tmp directory
      PID:759
    - - /usr/bin/apt-config
        
        apt-config shell MASTER_KEYRING APT::Key::MasterKeyring
        5⤵
        Reads runtime system information
        
        PID:761
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:765
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring
        5⤵
        
        PID:767
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:770
    - - /usr/bin/apt-config
        
        apt-config shell REMOVED_KEYS APT::Key::RemovedKeys
        5⤵
        
        PID:771
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:772
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI
        5⤵
        
        PID:774
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:776
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring
        5⤵
        Reads runtime system information
        
        PID:778
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:780
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f
        5⤵
        
        PID:782
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:786
    - - /usr/bin/apt-config
        
        apt-config shell GPGV Apt::Key::gpgvcommand
        5⤵
        Reads runtime system information
        
        PID:789
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:792
    - - /bin/mktemp
        
        mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX
        5⤵
        
        PID:795
    - - /bin/chmod
        
        chmod 700 /tmp/apt-key-gpghome.uZpPmyG5qQ
        5⤵
        
        PID:797
    - - /bin/readlink
        
        readlink -f /tmp/apt-key-gpghome.uZpPmyG5qQ
        5⤵
        
        PID:798
    - - /bin/rm
        
        rm -f /tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg
        5⤵
        
        PID:799
    - - /usr/bin/touch
        
        touch /tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg
        5⤵
        Writes file to tmp directory
        
        PID:800
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d
        5⤵
        Reads runtime system information
        
        PID:801
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:804
    - - /bin/readlink
        
        readlink -f /etc/apt/trusted.gpg.d/
        5⤵
        
        PID:805
    - - /usr/bin/find
        
        find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"
        5⤵
        Reads runtime system information
        
        PID:807
    - - /usr/bin/sort
        
        sort
        5⤵
        
        PID:811
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg
        5⤵
        
        PID:814
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg
        5⤵
        
        PID:816
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg
        5⤵
        
        PID:818
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg
        5⤵
        
        PID:820
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg
        5⤵
        
        PID:823
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg
        5⤵
        
        PID:825
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg
        5⤵
        
        PID:827
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg
        5⤵
        
        PID:829
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg
        5⤵
        
        PID:831
    - - /bin/cp
        
        cp -a /tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg /tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.orig.gpg
        5⤵
        Reads runtime system information
        Writes file to tmp directory
        
        PID:832
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:835
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:839
    - - /usr/bin/gpgv
        
        gpgv --homedir /tmp/apt-key-gpghome.uZpPmyG5qQ --keyring /tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.vEk35j /tmp/apt.data.C1FRMm
        5⤵
        Reads runtime system information
        
        PID:840
    - - /usr/bin/gpgconf
        
        gpgconf --kill gpg-agent
        5⤵
        Reads runtime system information
        
        PID:841
      - /usr/bin/gpg-connect-agent
        
        gpg-connect-agent --no-autostart KILLAGENT
        6⤵
        
        PID:842
    - - /bin/rm
        
        rm -rf /tmp/apt-key-gpghome.uZpPmyG5qQ
        5⤵
        
        PID:843
  - - /usr/bin/apt-key
      /usr/bin/apt-key --quiet --readonly verify --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release
      4⤵
      Writes file to tmp directory
      PID:845
    - - /usr/bin/apt-config
        
        apt-config shell MASTER_KEYRING APT::Key::MasterKeyring
        5⤵
        
        PID:847
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:848
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring
        5⤵
        Reads runtime system information
        
        PID:849
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:850
    - - /usr/bin/apt-config
        
        apt-config shell REMOVED_KEYS APT::Key::RemovedKeys
        5⤵
        Reads runtime system information
        
        PID:851
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:852
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI
        5⤵
        Reads runtime system information
        
        PID:853
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:854
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Apt::GPGV::TrustedKeyring
        5⤵
        Reads runtime system information
        
        PID:855
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:856
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDFILE Dir::Etc::Trusted/f
        5⤵
        Reads runtime system information
        
        PID:857
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:858
    - - /usr/bin/apt-config
        
        apt-config shell GPGV Apt::Key::gpgvcommand
        5⤵
        Reads runtime system information
        
        PID:860
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:861
    - - /bin/mktemp
        
        mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX
        5⤵
        
        PID:862
    - - /bin/chmod
        
        chmod 700 /tmp/apt-key-gpghome.9qJmZ3bNhW
        5⤵
        
        PID:864
    - - /bin/readlink
        
        readlink -f /tmp/apt-key-gpghome.9qJmZ3bNhW
        5⤵
        
        PID:866
    - - /bin/rm
        
        rm -f /tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.gpg
        5⤵
        
        PID:867
    - - /usr/bin/touch
        
        touch /tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.gpg
        5⤵
        Writes file to tmp directory
        
        PID:868
    - - /usr/bin/apt-config
        
        apt-config shell TRUSTEDPARTS Dir::Etc::TrustedParts/d
        5⤵
        Reads runtime system information
        
        PID:869
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:872
    - - /bin/readlink
        
        readlink -f /etc/apt/trusted.gpg.d/
        5⤵
        
        PID:873
    - - /usr/bin/find
        
        find /etc/apt/trusted.gpg.d -mindepth 1 -maxdepth 1 "(" -name "*.gpg" -o -name "*.asc" ")"
        5⤵
        Reads runtime system information
        
        PID:875
    - - /usr/bin/sort
        
        sort
        5⤵
        
        PID:879
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-automatic.gpg
        5⤵
        
        PID:881
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-security-automatic.gpg
        5⤵
        
        PID:883
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-buster-stable.gpg
        5⤵
        
        PID:885
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg
        5⤵
        
        PID:888
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg
        5⤵
        
        PID:891
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg
        5⤵
        
        PID:893
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg
        5⤵
        
        PID:895
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg
        5⤵
        
        PID:897
    - - /bin/cat
        
        cat /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg
        5⤵
        
        PID:900
    - - /bin/cp
        
        cp -a /tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.gpg /tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.orig.gpg
        5⤵
        Reads runtime system information
        Writes file to tmp directory
        
        PID:901
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:905
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:908
    - - /usr/bin/gpgv
        
        gpgv --homedir /tmp/apt-key-gpghome.9qJmZ3bNhW --keyring /tmp/apt-key-gpghome.9qJmZ3bNhW/pubring.gpg --ignore-time-conflict --status-fd 3 /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release.gpg /var/lib/apt/lists/archive.debian.org_debian_dists_stretch_Release
        5⤵
        Reads runtime system information
        
        PID:909
    - - /usr/bin/gpgconf
        
        gpgconf --kill gpg-agent
        5⤵
        Reads runtime system information
        
        PID:912
      - /usr/bin/gpg-connect-agent
        
        gpg-connect-agent --no-autostart KILLAGENT
        6⤵
        
        PID:913
    - - /bin/rm
        
        rm -rf /tmp/apt-key-gpghome.9qJmZ3bNhW
        5⤵
        
        PID:915
  - - /usr/bin/apt-key
      /usr/bin/apt-key --quiet --readonly --keyring /usr/share/keyrings/nodesource.gpg verify --status-fd 3 /tmp/apt.sig.0wKG20 /tmp/apt.data.qMCYlr
      4⤵
      Writes file to tmp directory
      PID:918
    - - /usr/bin/apt-config
        
        apt-config shell MASTER_KEYRING APT::Key::MasterKeyring
        5⤵
        Reads runtime system information
        
        PID:921
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:923
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING APT::Key::ArchiveKeyring
        5⤵
        
        PID:924
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:927
    - - /usr/bin/apt-config
        
        apt-config shell REMOVED_KEYS APT::Key::RemovedKeys
        5⤵
        Reads runtime system information
        
        PID:928
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:931
    - - /usr/bin/apt-config
        
        apt-config shell ARCHIVE_KEYRING_URI APT::Key::ArchiveKeyringURI
        5⤵
        
        PID:932
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        
        PID:935
    - - /usr/bin/apt-config
        
        apt-config shell GPGV Apt::Key::gpgvcommand
        5⤵
        Reads runtime system information
        
        PID:937
      - /usr/bin/dpkg
        
        /usr/bin/dpkg --print-foreign-architectures
        6⤵
        Reads runtime system information
        
        PID:940
    - - /bin/mktemp
        
        mktemp --directory --tmpdir apt-key-gpghome.XXXXXXXXXX
        5⤵
        
        PID:941
    - - /bin/chmod
        
        chmod 700 /tmp/apt-key-gpghome.kAdVlF1Wpi
        5⤵
        
        PID:943
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:947
    - - /bin/sed
        
        sed -e "s#'#'\"'\"'#g"
        5⤵
        Reads runtime system information
        
        PID:951
    - - /usr/bin/gpgv
        
        gpgv --homedir /tmp/apt-key-gpghome.kAdVlF1Wpi --keyring /usr/share/keyrings/nodesource.gpg --ignore-time-conflict --status-fd 3 /tmp/apt.sig.0wKG20 /tmp/apt.data.qMCYlr
        5⤵
        Reads runtime system information
        
        PID:953
    - - /usr/bin/gpgconf
        
        gpgconf --kill gpg-agent
        5⤵
        
        PID:956
      - /usr/bin/gpg-connect-agent
        
        gpg-connect-agent --no-autostart KILLAGENT
        6⤵
        
        PID:957
    - - /bin/rm
        
        rm -rf /tmp/apt-key-gpghome.kAdVlF1Wpi
        5⤵
        
        PID:958
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:960
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:962
- /usr/bin/apt-get
  apt-get install -y git
  2⤵
  - Deletes log files
  - Reads runtime system information
  - Writes file to tmp directory
  - Software Deployment Tools
  PID:963
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:964
- - /usr/bin/dpkg
    /usr/bin/dpkg --print-foreign-architectures
    3⤵
    - Reads runtime system information
    PID:965
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:967
- - /usr/lib/apt/methods/http
    /usr/lib/apt/methods/http
    3⤵
    PID:968
- - /bin/sh
    /bin/sh -c "/usr/sbin/dpkg-preconfigure --apt || true"
    3⤵
    PID:970
  - - /usr/sbin/dpkg-preconfigure
      /usr/sbin/dpkg-preconfigure --apt
      4⤵
      OS Credential Dumping
      PID:971
    - - /usr/local/sbin/locale
        
        locale charmap
        5⤵
        
        PID:972
    - - /usr/local/bin/locale
        
        locale charmap
        5⤵
        
        PID:972
    - - /usr/sbin/locale
        
        locale charmap
        5⤵
        
        PID:972
    - - /usr/bin/locale
        
        locale charmap
        5⤵
        
        PID:972
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:973
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:974
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:975
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:976
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:977
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:978
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:979
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:980
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:981
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:982
    - - /bin/sh
        
        sh -c "stty -a 2>/dev/null"
        5⤵
        
        PID:983
      - /bin/stty
        
        stty -a
        6⤵
        
        PID:984
- - /usr/bin/dpkg
    /usr/bin/dpkg --assert-multi-arch
    3⤵
    - Reads runtime system information
    PID:985
- - /usr/bin/dpkg
    /usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb" "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb" /var/cache/apt/archives/less_481-2.1_mipsel.deb /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
    3⤵
    - Modifies init.d
    - Write file to user bin folder
    - Writes file to system bin folder
    - Reads runtime system information
    PID:986
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      PID:987
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      PID:987
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      PID:987
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      Software Deployment Tools
      PID:987
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:988
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:988
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:988
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:988
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:991
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:991
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:991
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:991
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:991
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:991
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      PID:992
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      PID:992
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      PID:992
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/liberror-perl_0.17024-1_all.deb
      4⤵
      PID:992
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:995
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:995
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:995
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:995
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:995
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:995
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      PID:996
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      PID:996
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      PID:996
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      Software Deployment Tools
      PID:996
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:997
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:997
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:997
  - - /usr/bin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:997
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1000
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1000
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1000
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1000
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1000
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        Reads runtime system information
        
        PID:1000
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      PID:1001
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      PID:1001
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      PID:1001
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git-man_1%3a2.11.0-3+deb9u7_all.deb"
      4⤵
      PID:1001
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1004
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1004
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1004
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1004
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1004
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1004
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      System Network Configuration Discovery
      PID:1005
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      System Network Configuration Discovery
      PID:1005
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      System Network Configuration Discovery
      PID:1005
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      System Network Configuration Discovery
      Software Deployment Tools
      PID:1005
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:1006
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:1006
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:1006
  - - /usr/bin/dpkg-deb
      dpkg-deb --control "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb" /var/lib/dpkg/tmp.ci
      4⤵
      PID:1006
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1009
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1009
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1009
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1009
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1009
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1009
  - - /var/lib/dpkg/tmp.ci/preinst
      /var/lib/dpkg/tmp.ci/preinst install
      4⤵
      Executes dropped EXE
      PID:1010
    - - /usr/bin/dpkg-maintscript-helper
        
        dpkg-maintscript-helper rm_conffile /etc/bash_completion.d/git "1:1.8.0-1~" -- install
        5⤵
        System Network Configuration Discovery
        Software Deployment Tools
        
        PID:1011
      - /usr/bin/basename
        
        basename /usr/bin/dpkg-maintscript-helper
        6⤵
        System Network Configuration Discovery
        
        PID:1012
      - /usr/bin/dpkg
        
        dpkg --validate-version -- "1:1.8.0-1~"
        6⤵
        Reads runtime system information
        Software Deployment Tools
        
        PID:1013
    - - /usr/bin/dpkg-maintscript-helper
        
        dpkg-maintscript-helper rm_conffile /etc/emacs/site-start.d/50git-core.el "1:1.7.4.1-2~" -- install
        5⤵
        System Network Configuration Discovery
        Software Deployment Tools
        
        PID:1014
      - /usr/bin/basename
        
        basename /usr/bin/dpkg-maintscript-helper
        6⤵
        System Network Configuration Discovery
        
        PID:1015
      - /usr/bin/dpkg
        
        dpkg --validate-version -- "1:1.7.4.1-2~"
        6⤵
        Reads runtime system information
        Software Deployment Tools
        
        PID:1016
    - - /usr/bin/dpkg-maintscript-helper
        
        dpkg-maintscript-helper dir_to_symlink /usr/share/doc/git/contrib/hooks ../../../git-core/contrib/hooks 1:1.7.7-1 -- install
        5⤵
        System Network Configuration Discovery
        Software Deployment Tools
        
        PID:1017
      - /usr/bin/basename
        
        basename /usr/bin/dpkg-maintscript-helper
        6⤵
        System Network Configuration Discovery
        
        PID:1018
      - /usr/bin/dpkg
        
        dpkg --validate-version -- 1:1.7.7-1
        6⤵
        Reads runtime system information
        Software Deployment Tools
        
        PID:1019
    - - /usr/bin/dpkg-maintscript-helper
        
        dpkg-maintscript-helper dir_to_symlink /usr/share/doc/git/contrib/emacs ../../../git-core/emacs "1:1.7.4~rc1-0.1" -- install
        5⤵
        System Network Configuration Discovery
        Software Deployment Tools
        
        PID:1020
      - /usr/bin/basename
        
        basename /usr/bin/dpkg-maintscript-helper
        6⤵
        System Network Configuration Discovery
        
        PID:1021
      - /usr/bin/dpkg
        
        dpkg --validate-version -- "1:1.7.4~rc1-0.1"
        6⤵
        Reads runtime system information
        Software Deployment Tools
        
        PID:1022
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      PID:1023
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      PID:1023
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      PID:1023
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile "/var/cache/apt/archives/git_1%3a2.11.0-3+deb9u7_mipsel.deb"
      4⤵
      PID:1023
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1026
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1026
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1026
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1026
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1026
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1026
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1027
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1027
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1027
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      System Network Configuration Discovery
      Software Deployment Tools
      PID:1027
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/less_481-2.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1028
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/less_481-2.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1028
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/less_481-2.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1028
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/less_481-2.1_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1028
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1031
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1031
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1031
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1031
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1031
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1031
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      PID:1032
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      PID:1032
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      PID:1032
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/less_481-2.1_mipsel.deb
      4⤵
      PID:1032
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1035
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1035
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1035
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1035
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1035
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1035
  - - /usr/local/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1036
  - - /usr/local/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1036
  - - /usr/sbin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      PID:1036
  - - /usr/bin/dpkg-split
      dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      System Network Configuration Discovery
      Software Deployment Tools
      PID:1036
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1037
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1037
  - - /usr/sbin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1037
  - - /usr/bin/dpkg-deb
      dpkg-deb --control /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb /var/lib/dpkg/tmp.ci
      4⤵
      PID:1037
    - - /usr/local/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1040
    - - /usr/local/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1040
    - - /usr/sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1040
    - - /usr/bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1040
    - - /sbin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1040
    - - /bin/tar
        
        tar -x -f - "--warning=no-timestamp"
        5⤵
        
        PID:1040
  - - /usr/local/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      PID:1041
  - - /usr/local/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      PID:1041
  - - /usr/sbin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      PID:1041
  - - /usr/bin/dpkg-deb
      dpkg-deb --fsys-tarfile /var/cache/apt/archives/rsync_3.1.2-1+deb9u2_mipsel.deb
      4⤵
      PID:1041
  - - /usr/local/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1044
  - - /usr/local/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1044
  - - /usr/sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1044
  - - /usr/bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1044
  - - /sbin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1044
  - - /bin/rm
      rm -rf -- /var/lib/dpkg/tmp.ci
      4⤵
      PID:1044
- - /usr/bin/dpkg
    /usr/bin/dpkg --status-fd 14 --configure --pending
    3⤵
    - Reads runtime system information
    - Software Deployment Tools
    PID:1045
  - - /var/lib/dpkg/info/less.postinst
      /var/lib/dpkg/info/less.postinst configure
      4⤵
      Executes dropped EXE
      PID:1046
    - - /bin/ln
        
        ln -s /bin/lessfile /usr/bin/lessfile
        5⤵
        
        PID:1047
    - - /bin/ln
        
        ln -s /bin/lesspipe /usr/bin/lesspipe
        5⤵
        System Network Configuration Discovery
        
        PID:1048
    - - /bin/ln
        
        ln -s /bin/lesskey /usr/bin/lesskey
        5⤵
        
        PID:1049
    - - /bin/ln
        
        ln -s /bin/lessecho /usr/bin/lessecho
        5⤵
        
        PID:1050
    - - /bin/ln
        
        ln -s /bin/less /usr/bin/less
        5⤵
        
        PID:1051
    - - /usr/bin/update-alternatives
        
        update-alternatives --quiet --install /usr/bin/pager pager /bin/less 77 --slave /usr/share/man/man1/pager.1.gz pager.1.gz /usr/share/man/man1/less.1.gz
        5⤵
        
        PID:1052
    - - /usr/bin/update-alternatives
        
        update-alternatives --quiet --remove pager /usr/bin/less
        5⤵
        
        PID:1053
  - - /usr/share/debconf/frontend
      /usr/share/debconf/frontend /var/lib/dpkg/info/less.postinst configure
      4⤵
      PID:1046

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Software Deployment Tools

T1072

Persistence

Boot or Logon Autostart Execution

T1547

Boot or Logon Initialization Scripts

T1037

RC Scripts

T1037.004

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Boot or Logon Initialization Scripts

T1037

RC Scripts

T1037.004

Defense Evasion

Indicator Removal

T1070

Clear Linux or Mac System Logs

T1070.002

Credential Access

OS Credential Dumping

T1003

/etc/passwd and /etc/shadow

T1003.008

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Software Deployment Tools

T1072

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/tmp/apt-key-gpghome.9qJmZ3bNhW/gpg.1.sh

Filesize
82B

MD5
f49136b441ff3c0c06873b2229ff1bc2

SHA1
2d238a12a61c63f422c89cd8decae4e05106c351

SHA256
cf5ee9ee006fb61aff3723616148f14164c14ac88cf71d97d349ba0a8e95cc16

SHA512
f11fcd95b13ac17a108be32ba77594aa9ae852c4d28c10663d99a075036de1df2a0f58fdb6bb330f29d72dced855e61a05975c82c903106b07166478da86ac49

Download Submit
/tmp/apt-key-gpghome.kAdVlF1Wpi/gpg.1.sh

Filesize
73B

MD5
b67eec294a99b2826e6380e50400efb9

SHA1
f692aed05a7300e93f312a2efa0da820d13bb78a

SHA256
cc159dd92a3828c99c3884da5eff5f5e44abcbd90d1f2d04dca6f2ae11ae88e2

SHA512
c11ab997476310ebb1b4980cf8ce85a221d995d869e34fda5f1cd08d7892bd582a19caec4ae7d6246dd651df369bbcef3008108bb8d4c0b5d381730795070b4f

Download Submit
/tmp/apt-key-gpghome.uZpPmyG5qQ/gpg.1.sh

Filesize
82B

MD5
64dfd00a027003681e6e37c40fb5aa04

SHA1
211610bda8d89400e7e921d7b17adba244078e17

SHA256
fac94228ec8166154c146294caf4a3cb9ea99bf0d1fd247b490e208efba03892

SHA512
c7bbb5979e79716f1d69c0dbe2f2194aacf1a93dad7828fc27bfcb52a3eb4b7ad6e0add09c06109baaee147a658efe95aeff8b05f542a865382fa4bcb4d734fa

Download Submit
/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg

Filesize
15KB

MD5
2713b38b3d7345961d8b80f4463483b8

SHA1
e6ec76aaebfea6a82f7984b57e07522a20365201

SHA256
389d00b5cbd2f69f32065448000a0607aec056e39af958f62e89c4c7e6228248

SHA512
ecee7b3045f49f7fa7443a8658602817bb2c8d2d07ae930536e3f2daaa5854903bf339af6c2fd4b02f8627f050ce360d2feddcf40569b58d304cfc459f418978

Download Submit
/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg

Filesize
18KB

MD5
760d3ab91f417958475b9a6342a5b92e

SHA1
137a06aea4b5c9e9ca11f0f5f1225da1c275c334

SHA256
42b348802c4290af6f9f30f984513f22fdd342ac3561ccb82957561a6b7c291f

SHA512
6cefcfae1c95c94b66b46d9242e62ddf7d7c65bd8d9bc9dc4e4c6230443ba33668ed160e1882f48a0b5daf59a46ccca09240ebe666017f059bd55e02fb1f2db6

Download Submit
/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg

Filesize
23KB

MD5
d63fbab9dfb826d53f7b3aaea45dbfb5

SHA1
59841d8e5423f788292af76d4350a948f4e25f53

SHA256
de329f1f48b751a7527f8ce3150452a4282ce69990e9318ab82d5b46b9f751ca

SHA512
20118f98c87eb60f0abafd5b4c2ffb4b1faf92777ee7402b98c0f5dc42d492c83f94d6903bdeee006187ac344a57afeaa84b54a973b483ff13e49773071d8198

Download Submit
/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg

Filesize
47KB

MD5
a4dc094481f22304cab5550218e6e4de

SHA1
f5886a324c0c026d0168656f23d1d898a0e43bd6

SHA256
eef8c4d7d518a986e4f1cfeec729b55369b863ed6b62a23cbe9d88aa56de5391

SHA512
0f040c957db3d500ba18315db33cca6eb18f9c80d952710f839833a73dd89b72e2e01178084c17348e312a427a6b9150937199b4912e71dfd1a7e2dd43723f68

Download Submit
/tmp/apt-key-gpghome.uZpPmyG5qQ/pubring.gpg

Filesize
7KB

MD5
b53e6ca4ed295fc38621315853f623d0

SHA1
45a416f014809735ec88854a3540c8e9e89eb102

SHA256
6246307cc0130f6bd52510a477960f7c7be431b25979d7e20a88dc2fac58ac93

SHA512
30b5d2571840c2319a4af3907afda8ab00cf2879c83aaee1048ca972c0d3ddbf7995a167a31b19c45195b636ab46e73b0534459c6ee79c557fac8bfc01d857ac

Download Submit
/tmp/apt.conf.oLu9Fh

Filesize
7KB

MD5
2e865de2c92475d628dc9eee272c7dd5

SHA1
a3f656004db7bf9f7c72114b422d5938239dd768

SHA256
507d06a19be907e372fcf41b270e6296d5386db1ba5c996862a7dda75057bcfe

SHA512
25eeb2dcfc9838f0f1b6599d447c034f2eacf55534e5841f19183216ed65ce2d2855031b41bf2f2e9425072956c03356cafad13869777510cee720bc8d7ec51c

Download Submit
/tmp/apt.data.C1FRMm

Filesize
56KB

MD5
fd96c8ce5d0ef18d63bbe9ae17bb2659

SHA1
76b284743d95d3546df9d85c09712c830a30f614

SHA256
ffc8a7a283b61633aac383ddf8f863df3f39ef241a07a4127f51a2495ef674b3

SHA512
2486acdfc102f8f8498d8db2f205915115444dd118507369044202dc9a97109b4c738a2faf16c1f5ce5e4452ae0af17ae4691ac3bf5e7c5e2db271c0f40a4cb2

Download Submit
/tmp/apt.sig.vEk35j

Filesize
1KB

MD5
70274ce622b0cc437ef7f0caddc9d232

SHA1
124513a3ad2eb5aafa9be0920681e3bb8625979b

SHA256
4055d2ccc7c4be062ed390944548206ece5ed7613eae114b9e53ef15f3905230

SHA512
fed0054da258bb4a99e8adac359322d9ecc67caeee872309ea7d9863db6a1ec2a55497100e31538f42b43b9efc997e779e3774c8a0c6b0206254d7252d8699c8

Download Submit
/var/cache/apt/archives/partial/git-man_1%3a2.11.0-3+deb9u7_all.deb

Filesize
1.4MB

MD5
598e45aaae9b4a1fa15c33e7654689b7

SHA1
95f84ed88514f6bc5804e275496c1c4fa366fdb6

SHA256
4cf18759a5c56c53d5492f221e3c85a887da926fd815e03aed66c1bad5ec8673

SHA512
d2b0f2f8057efb4b32108aded883bb5bdfe1da6295bd625ffd27284a3f3fc44a27388f2c8a1ff2b61395445fffa2610e59e70c19645aa78d0ca37d62094a271c

Download Submit
/var/cache/apt/archives/partial/git_1%3a2.11.0-3+deb9u7_mipsel.deb

Filesize
4.3MB

MD5
6225a211cd8dc5876d703879f98f0f42

SHA1
f319d79c3994e60cb668bf68ea8967f37a9206c5

SHA256
df132f740293d4657c74734651bf8558a1922a5d09fc7fcff2d0c4239b3df8dd

SHA512
95a030bfa68885f416dd45f83cd21270faf5bb0a66f468ef726717dd24bc563805701030909ef14ebfd2435d593b8cad590e88fc800278b4d9c64f9b664b147d

Download Submit
/var/cache/apt/archives/partial/less_481-2.1_mipsel.deb

Filesize
131KB

MD5
ee004882fcdd8e0794cdafdd7ab5259e

SHA1
9fe11217bf7a4bdfdab59751c6ed95108d6eeb81

SHA256
e42862840d02c6d34471f45199ee33c5220d7782f9d6e64503fd088cc459239d

SHA512
77bbd7b1fd1efdf08645e631bb0d869023fb283208e1057ee1c3af3991952b7a9ab3120f1ea82866980908eb4b766f856817a10d12d13026be47717a506a2846

Download Submit
/var/cache/apt/archives/partial/liberror-perl_0.17024-1_all.deb

Filesize
26KB

MD5
05d1cb65f1b07aacba5fd9d52c54887e

SHA1
0699e48805bf83614ec99817b4aa5402ca8cbe60

SHA256
d52c2cc940ff1c9b6d0c0bf81f8557084123ecb151377743fe06c0e13eb64674

SHA512
d13561cc6b45ecba687d9f4d243aa6febd3fd0a5cd7e2dba4b5c0545a4fb883d84fc263ce5cf41ce55a1076777c8d8aa7ce74f9a9ad89f9099c7601b9052f657

Download Submit
/var/cache/apt/archives/partial/rsync_3.1.2-1+deb9u2_mipsel.deb

Filesize
381KB

MD5
0aec2d13adc64f9a96126f0a811171f5

SHA1
082ce21e27513a992934b3f512bbfe85c3bb02a2

SHA256
2b786156418545214fb143528abd9028d19910726d7eb35b6f84c9c6f68eeb2d

SHA512
009b99651bcb4be65591bfc94ccaae6a5c1f97daf600abbbc1cf6eb993dbd3b3455660213179c6a3dc5bcabcc207f9fc116e1bcf576637ec67be5f908f2cf9db

Download Submit
/var/lib/dpkg/info/liberror-perl.list-new

Filesize
937B

MD5
d347abac79a7f2579d94f31c87c0a65b

SHA1
d61744faffb4d74ce3ac208fc892a7644f88dbb3

SHA256
752b698f6713559efdd16a675b569a908d5665da9e763ee967341297c08bef55

SHA512
a31638b6a120bc1121be1a06277f7f2f4c7e9338cc50bb0751d78393c79e6de29b307769c4f0fa2c9051bd935291f1299e7d5a986df7ea449a890971a0a83a26

Download Submit
/var/lib/dpkg/status-new

Filesize
410KB

MD5
5250f65889e48971bfacabfdbd3a0516

SHA1
a73bfc0ec3beb24e037b7d202ff0c14887fcf0a0

SHA256
154cc6dc8d6ef046fd915955764e248269653bdfc9827170474c9c82bd9ce758

SHA512
f0376645d776ac9dc3e4f667cccecf4b6b20c7e3c72295c6701fceca70f662d1506904acddabc46630dcf78330cd346bdde9369c56e61184db0e5b2c053e5ed1

Download Submit
/var/lib/dpkg/tmp.ci/conffiles

Filesize
34B

MD5
f8bcde8d5815c6ab7b38ec4d7adc77be

SHA1
59f6770ab038df3c93f32689cb5028b633918583

SHA256
c7b67f32c567923805185542b68654d0e1ba299384e4ee4e43bf818c84113e1d

SHA512
d54467938feedaf33fdd19b920a3b9c56c879b9d5bacbde560921223bf532fe6e91374f8f2fb217035ecc57b83942066bcfd1cf8b93971ff4f750c9f57b01bcf

Download Submit
/var/lib/dpkg/tmp.ci/conffiles

Filesize
37B

MD5
6b045e6c690f3548c601f711a45b6d26

SHA1
bbcd88dc2e810c8257f51552e55ec82cc2eb7789

SHA256
45da872de1019bb799b2389318e2014e6c0eea81025de69ec075ad9acdc85d22

SHA512
60fda2fd37aefb6ea9c32ee970c2413afca484c8cd18822552c65ebcb052b391907511533f4daf3768b2d85c30c24ece9c6a7fe25924348f0cf14ac7512c2380

Download Submit
/var/lib/dpkg/tmp.ci/control

Filesize
1KB

MD5
1b3ec872d3b501b5891871bd9a0f7245

SHA1
959e26b75783ed0779cf0dcd75519875d004e7db

SHA256
dbf65d4c0d7ddd53f63b586022634364b360bccf62bd90351b5b323d5a3d8f75

SHA512
1a3d0cae0882c508681b6223e70e0148be7f5be9433b3782b37343e9ddadc5ac36308436f96e1f405e717c9664c288173b6c47aed42377b3515102bb85725bb4

Download Submit
/var/lib/dpkg/tmp.ci/control

Filesize
1KB

MD5
b592dd9d552131c78645d602c12477cd

SHA1
14a8818e13b0285178f25225c224c051dcf4693d

SHA256
3bbb62d81cfe2a1545ed3944f374fc63a622bf3e2dffbbc3791470e44b0229b3

SHA512
d27f562a9f45716d3813aaf47f3e20a458e1f154fc2b491f17cad07c06b3ce7c5c27b3495fc399226f46547ca7e9d76be804123b0116959ace6284e06ac3f117

Download Submit
/var/lib/dpkg/tmp.ci/control

Filesize
1KB

MD5
8694050475fabf4688335533fa9e1572

SHA1
9d48b0b4da8c43e557e939deb175d6630dfc775a

SHA256
de0f403ac12a1a47ea43a67708d6565045ab788cf206c7365e7cfb47e6c0ecd0

SHA512
51f7089421a4d1812724812875dda2f10b980eb57b151ce7f7da16af95618072a4b1aed8b4976e754fd72c727f80cf712912f62fca7968bae9146e9df7d1dbcf

Download Submit
/var/lib/dpkg/tmp.ci/control

Filesize
1KB

MD5
320dce995a3e55635a7c88d814ecaf28

SHA1
5c65d81ffdf0a30ee92a6dc69fb3c9435b822cfd

SHA256
079f503eca7e1134c4dd5767c02a6de6545396e044fab743538128b564249a9e

SHA512
f62c38ef18079fc42d584de10c8756ce6cb58ae188b98b4cc9730cb8a972e6ce17c27a6852db7290fd159a8737275dbecf1265a8624902bf9ba2a382231007b8

Download Submit
/var/lib/dpkg/tmp.ci/control

Filesize
1KB

MD5
a00772d37939ca33fbdf10a333ea8aca

SHA1
78121b8ede83629f2fbb5c9ae67867e4b750de3c

SHA256
6a524e77219d480b43a818a9136ac5d63fe3212f5b3e275c4611fb3fd74a8914

SHA512
641dfaf2c4a865df420a11ab1f9af62dfc1dc263ac39d353198b67591b53d2d7323cdede00fa4b5ff53d46928aa11413867ac7ef9996bd71c7aa7dfaed0e30e3

Download Submit
/var/lib/dpkg/tmp.ci/md5sums

Filesize
1KB

MD5
391afde7188eee46670666fc759244ae

SHA1
4ba09a164262dd683ab70fe55a5f184cd2ae3e04

SHA256
5658b1ba2c806f6a679cbe240cf6dfd02ea83bd43768311a2d7d0ba6ad88daec

SHA512
5b2041666f7bcc5040f368f70359936107549905ee35a8c1e465ceb242d5df78a796d514ca9282b80167fd3ad20d02dd3a2adea415a2499e51b7fa83112b1071

Download Submit
/var/lib/dpkg/tmp.ci/md5sums

Filesize
11KB

MD5
d5ef5a9943b997cc48b151fda8a6a162

SHA1
8a3ada400270ad0955cd40189468f27d941ea1ce

SHA256
7955f0a99b33a1312761bde40d91d627a0474356b96abb97d6cbd6316a6392ff

SHA512
3de2eadcb78a19637c4edf53f29033781c37371b0a8663591fe58c9e00135d5ebf75710de961f8ef8a9544b9f4506db0741dddea70c73dd8a245084585df5a1e

Download Submit
/var/lib/dpkg/tmp.ci/md5sums

Filesize
37KB

MD5
9021c59e528d56a16e5d45b5eaab81aa

SHA1
c575b5d6c5af1d0ac8b53c2b6a51035573e21d0a

SHA256
bc766c7b7e432deab36084224102868312c616feffcf285e51c4110b6fd31066

SHA512
33d19d252003cf30cb01f439824082d6518d3915d3b08ea00b74710c10140c413591fd49debd829b4ce7542d3876a3f8eda8e2ba3d78913e0cfb465946673c69

Download Submit
/var/lib/dpkg/tmp.ci/md5sums

Filesize
838B

MD5
c62aa2d6f71c8413c8c25f92a36b3532

SHA1
bca8f227914023f0fd8bfa60bcf50b9b95fbc4f1

SHA256
423d2762fcb7d811ec04aabb08b958f3a68837ff6463b8cdce1c132b88cc623b

SHA512
a0f5c682086970daf8d3a9a91a5ef4efc6d1f8d8021f145360739ce13e22068490ac324a93eccd05a45cb534e40f50e224b31478d831931a81a86b9ce3ae4984

Download Submit
/var/lib/dpkg/tmp.ci/md5sums

Filesize
1KB

MD5
5f9e79a6b9c7964266c6f3182cb8718a

SHA1
2e1e03277fb2275b9c06554b3725b5860e86c32b

SHA256
6ef216e39088fcf70c06c26819b3a145a3357ffab35d84122c27fb8b0fbf40eb

SHA512
cd5490aad2afe3c132047b01092a2f94e2fb6db3a56ee9857ff515b11e67bbd72f2d9082d99597cac4419dc71d364e4cf366681f141b7b0923593043ae8fd022

Download Submit
/var/lib/dpkg/tmp.ci/postinst

Filesize
1KB

MD5
a144340ce4f4218c52d665516193c3bc

SHA1
4a6798bc4ab866173aa2bbb44c07ebebf7e9c09e

SHA256
6926c7b03daed7317aa614c4c3eb481bbbb4896432f25fb28ad61899248aa50f

SHA512
e7cdb1bd9440be9fcd9af8204729bcf487a3ddd385f0bb74ee4a7c407b18ad4f9ae2ec3d0cc13511759b9f1f8fa0d95aa73febca173d0d0691c94db124b436df

Download Submit
/var/lib/dpkg/tmp.ci/postinst

Filesize
1KB

MD5
bbd218f59c89970d78a8d19052bffb31

SHA1
87883860f75649d6162d70af08c609b769cce0af

SHA256
3a0b31306122b82282106ef294d2941762953af75d10efa0ea5c04a2af6d7430

SHA512
37c3ed27657ce4381d8aeaec01022f60807a76b47e75ef9789fee1997f1454356ce0b3e6ff52b1f1ca75399d68ced78078afae0689952cb70b90e9753c404128

Download Submit
/var/lib/dpkg/tmp.ci/postinst

Filesize
1007B

MD5
27f170b795c466217f52290bee2b6f95

SHA1
223ce665c7cdd87ce077318bf40039bbe55132b5

SHA256
c366689e8e2984fa8cd4ad651c3971992dd44944e15bfb83f3678a5daec73324

SHA512
cb39325e0fbdea991f0848b98265c6ac83cf4a30ddc237d536e0aafce1ec878a51449db26c7f76daa0cfa83e1bb794d6077b256a3e55788ee6acc56c11aae07b

Download Submit
/var/lib/dpkg/tmp.ci/postrm

Filesize
728B

MD5
11f6d88799ad06b7a6357812f1bfdd29

SHA1
7574b3985a1155f33b581bba094e0d22de58f1cb

SHA256
e8ba71f20147367d653fe354888054e42e8fac48f95c5ffedef67fe7117475c1

SHA512
ad0dc0c3e91771cc228b24235c240ed635616e3479bb030656023f97f12a7c98ad15824d7aa1938f523e4965d4267c739777fced40bbff633b58a7c07047420e

Download Submit
/var/lib/dpkg/tmp.ci/postrm

Filesize
183B

MD5
a336676df9361a3ab9e8619eb0dd02fc

SHA1
b4d32feccf1c74ecfdd5b559969e0b043095edd2

SHA256
7e5ec41025fb7943292f9a2a181b840035fd3503f37a8a0716f9bcbf5b7fda18

SHA512
6a29875fd53bca4fe345b937ae36810ab111e731700b6014f45d101527cc8af06caef729b08af51412bd760ac54b94f5e8ad2bd7ce4cd0a0d19d505ceb2f4f37

Download Submit
/var/lib/dpkg/tmp.ci/postrm

Filesize
494B

MD5
f599994a82cdb689378caa3f145687f6

SHA1
067f8a5fb12fcd4164bc8db6a4a4b20f8520b7a3

SHA256
cd30fc8bebd214c94b86f4034e47fdd41262e89acb22412620c94d3f4d4b19a0

SHA512
4707e0159ebb553b89e26858a96806c8e6e9da6fbf606d305da9ba7a72a42c2e3c62aebfc04f6e6c90054e73b8a2b48efa32f968c31ebcf5b24ca4269667b873

Download Submit
/var/lib/dpkg/tmp.ci/preinst

Filesize
2KB

MD5
9b5218a9d9a034c804207a72027249a0

SHA1
00a2ec491084ab139a300a34d6f48b66734207df

SHA256
62c0a71bce8a1bf8755ee9b0ec699ab04f53a1b72ab380ac13829db87d68c737

SHA512
96a094afd8d783e7e3eacc5f6a26f4ab90388ed287a3704a23bd0f24c07425ed06b37a020bb8d13a2c6a302f2e1b99bd75ca305f5a529d68678e88f8f695f617

Download Submit
/var/lib/dpkg/tmp.ci/prerm

Filesize
880B

MD5
6eb79a3f8c7d081976eaf37fd900bf1b

SHA1
44600a18ad18c3216f5a669c0173276fa9a590a5

SHA256
8d278e29087ae484d518bffb781f00722a7acca43b3437259206eb10837e979c

SHA512
0cd182f5c25be6e44d5e6393c3b0f07410b897973e3687de594eaf5f3a4df0b9b34a8b6082eb00656145549f8f38d733eac7318cbfb994ef4ade901c7e8bf443

Download Submit
/var/lib/dpkg/tmp.ci/prerm

Filesize
634B

MD5
23b195fc3232816136f5e5aa5d715154

SHA1
ef6ae6eea874aa00c226f0464586e5a7434a1720

SHA256
6d36d0fee57f5c713cf7855acac7bcea6a60b46c8066de1f0c7fc8b943a986ce

SHA512
dae2a803299e75e322b3e31d65f8e98942ba90793386e7ec9cd9547569832dc3df0937fb64896f6833f213c89539ef63c22f8ce07595b9612d0a8cfa045bbb1f

Download Submit
/var/lib/dpkg/updates/tmp.i

Filesize
4KB

MD5
008068310097dc8d2e7c6d17b013bab5

SHA1
ca526e27e22e66fe16b1343332b720e88be5a45a

SHA256
d40bd33349313c0631e69f5fa5e38df60d6506103b3097db0613b9450b0269be

SHA512
9d95bb6a08486fc54810dc1149b3dbf0610d1ab85a0d8be1988cd8fd7308f65ad26686fcaf46c4d132e69e3a5000bf8fa7273be5c1ec4282d0d917166a645ed3

Download Submit
/var/lib/dpkg/updates/tmp.i

Filesize
4KB

MD5
41d7286b2aa7438cc5cfcdc843e06293

SHA1
b6626b7834dd697b5d04a1a985c3a0761499e80d

SHA256
bcac95d852712d9c10494f532da6a1b3d3deed0959fd66f78ef64c2e32c5f8f2

SHA512
d883a737f2b5f671e7212c546fc6b6f1d7a55edf454915a98066b5e24dc45539e465424c2a2b5c393444443f8c00f36413c481f8067ed267181f53622dbb4e5e

Download Submit
/var/lib/dpkg/updates/tmp.i

Filesize
4KB

MD5
4ba450cc648478ea6757ca36cc785ae9

SHA1
6875a34f9c2dc478d62954343ae75a0404b0c7bb

SHA256
d78b43f582d98c8e05769a5c7e4e45d0571089bfaa841e190ac29ae2dac98651

SHA512
78f9de0029b9146b88d50973e97c8906113687f9e9ac01a2c23e6c8128d354889b622dfe3022785f4d88ced5de1880ea00754ca6ba14a1a5381453db53a60f3f

Download Submit
/var/lib/dpkg/updates/tmp.i

Filesize
4KB

MD5
6a438fab430c468a09f8526acf5be1f7

SHA1
70ed84f8440f27bbd2b1171889a735cd2841b079

SHA256
3af95ab25d4668768cc3318d4d584a03ee70cac53631ae97b247f1cc96db1c26

SHA512
4a05ab222330f5f236f9f8192f0e727a7cc355e560f2e274d1334f79f6409d06166be2e76653506d680a4745c07f9ce2a9c60bf5e298b862c2df608ce0c3a9d4

Download Submit
/var/lib/dpkg/updates/tmp.i

Filesize
4KB

MD5
f8ac58d8a6177a8fb5518a099297a87f

SHA1
19eeb09f53fd94889c71e39479ca8c426f0023f6

SHA256
b721d38536f49d2ee9acd373b89dad72046bdf57b584c435bdb6afe31e90847e

SHA512
2d725d2643b5471b4d4ab57c99062d0d54e2b0cb0e7e80519da181c4d438d91deb5f31a412e21900675fc07a9078a6f338d5745d0846fcc2ed70fb32ff60222b

Download Submit
/var/lib/dpkg/updates/tmp.i

Filesize
4KB

MD5
edae9b7299f2afc09258160786a4dada

SHA1
dd7aa0c8aa29e937efd88b9eb39811e1460b62b9

SHA256
cf7d2275d2effcc231f426e078582b9665c4a2407e267c9e25546220308dd569

SHA512
0e3341d862dde54e87b2cea0384cc79a4594f7a22a322d501fbb386559511cc8e6046bf134bc1496d04bddb80c8213dd0438368d3a5d20b82099a5a4c9cc30ff

Download Submit
/var/log/apt/eipp.log.xz

Filesize
18KB

MD5
571398a487928b1e5fb37f8df4e64841

SHA1
c361c316a1d892fa2d73a96927f9f611a38756da

SHA256
5c2eb7a941cc0e9e8671c710a4e2739d3845bc0700d1981402e0d7f08fa534da

SHA512
d310904fec036b3d7a25353c8502ad56abbaf51c7c8fdfff5b9648da137665ff07ce68f8ed1d47142bdf07b56799546c5f507224fea40e626434ee28fd04afa6

Download Submit