a68f48af05fe83fe687a76d26cfd697876caa2ae30035e963d8f28ab1b6dfe8a

Analysis

max time kernel
0s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
02/11/2026, 01:50

Target
dayflow-hrms/client/node_modules/.bin/esbuild
Size 816B
Sample261102-b9pdxset6w
SHA256 a68f48af05fe83fe687a76d26cfd697876caa2ae30035e963d8f28ab1b6dfe8a
MD5 97ff66b8338cca1ed757c1df2e4aa7da
SHA1 922cbd6a227d5980a90e4f92f763a33a4268031c
SHA512 cb16203b2e54eea2d0d3b17acd59050a263b5da4f452eb929da54acc6cd85c116e1883c08654d8b3c73d08314c3093e2a4db9411754379e581564279a69d82e4
TLSH
T107014C33A0944B30341C02E80D451026755973937CB9279AF88D7B082B9435CB1D2B8F
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/filesystems	sed

/tmp/dayflow-hrms/client/node_modules/.bin/esbuild
/tmp/dayflow-hrms/client/node_modules/.bin/esbuild
1⤵
PID:751
- /bin/sed
  sed -e "s,\\\\,/,g"
  2⤵
  - Reads runtime system information
  PID:756
- /usr/bin/dirname
  dirname /tmp/dayflow-hrms/client/node_modules/.bin/esbuild
  2⤵
  PID:753
- /bin/uname
  uname -a
  2⤵
  PID:757

/usr/local/sbin/node.exe
node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
1⤵
PID:751

/usr/local/bin/node.exe
node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
1⤵
PID:751

/usr/sbin/node.exe
node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
1⤵
PID:751

/usr/bin/node.exe
node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
1⤵
PID:751

/sbin/node.exe
node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
1⤵
PID:751

/bin/node.exe
node.exe /tmp/dayflow-hrms/client/node_modules/.bin/../esbuild/bin/esbuild
1⤵
PID:751