Resubmissions
01-12-2022 05:10
221201-ftyd4sgb25 701-12-2022 05:07
221201-fr3wtafh72 501-12-2022 04:56
221201-fk21yafd47 501-12-2022 04:51
221201-fha5fafb33 501-12-2022 04:48
221201-ffdsjsae41 5Analysis
-
max time kernel
0s -
max time network
102s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
01-12-2022 04:51
Static task
static1
Behavioral task
behavioral1
Sample
malware
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
1 signatures
1800 seconds
General
-
Target
malware
-
Size
3.4MB
-
MD5
d8546fd0135eaf3180594270abcd3948
-
SHA1
cb9f0fae3e6654437a4fb9ff3242a1132a19efd2
-
SHA256
600742d27e01816bac78ba201954de81120a3750ba4447af2186c844a804787e
-
SHA512
111a8e5daeb71b110a7e17783f6d83a8895c0f3896455019709fa6b87a7866b4d1106924f72c5535d311bb177bbaa9b11972c0e4fa91883b180d79cda8348637
-
SSDEEP
98304:KwQw62m/oOzEdiEbn59MITjzXpBfMaNGm:Ef8D9MIT3B
Score
5/10
Malware Config
Signatures
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
Processes:
cutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutxargscutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutcutfindcutcutcutcutcutcutcutsedcutcutcutcutcutcutcutcutcutcutcutcutcutcutdescription ioc process /proc/16/cmdline /proc/16/cmdline cut /proc/18/cmdline /proc/18/cmdline cut /proc/79/cmdline /proc/79/cmdline cut /proc/115/cmdline /proc/115/cmdline cut /proc/332/cmdline /proc/332/cmdline cut /proc/cmdline /proc/cmdline cut /proc/bus/cmdline /proc/bus/cmdline cut /proc/13/cmdline /proc/13/cmdline cut /proc/370/cmdline /proc/370/cmdline cut /proc/29/cmdline /proc/29/cmdline cut /proc/350/cmdline /proc/350/cmdline cut /proc/8/cmdline /proc/8/cmdline cut /proc/11/cmdline /proc/11/cmdline cut /proc/17/cmdline /proc/17/cmdline cut /proc/swaps/cmdline /proc/swaps/cmdline cut /proc/1/cmdline /proc/1/cmdline cut /proc/20/cmdline /proc/20/cmdline cut /proc/27/cmdline /proc/27/cmdline cut /proc/127/cmdline /proc/127/cmdline cut /proc/self/fd /proc/self/fd xargs /proc/self/fd /proc/self/fd /proc/sys/cmdline /proc/sys/cmdline cut /proc/159/cmdline /proc/159/cmdline cut /proc/165/cmdline /proc/165/cmdline cut /proc/24/cmdline /proc/24/cmdline cut /proc/31/cmdline /proc/31/cmdline cut /proc/363/cmdline /proc/363/cmdline cut /proc/14/cmdline /proc/14/cmdline cut /proc/19/cmdline /proc/19/cmdline cut /proc/21/cmdline /proc/21/cmdline cut /proc/irq/cmdline /proc/irq/cmdline cut /proc/81/cmdline /proc/81/cmdline cut /proc/251/cmdline /proc/251/cmdline cut /proc/164/cmdline /proc/164/cmdline cut /proc/157/cmdline /proc/157/cmdline cut /proc/170/cmdline /proc/170/cmdline cut /proc/15/cmdline /proc/15/cmdline cut /proc/22/cmdline /proc/22/cmdline cut /proc/32/cmdline /proc/32/cmdline cut /proc/82/cmdline /proc/82/cmdline cut /proc/155/cmdline /proc/155/cmdline cut /proc/filesystems /proc/filesystems find /proc/2/cmdline /proc/2/cmdline cut /proc/6/cmdline /proc/6/cmdline cut /proc/25/cmdline /proc/25/cmdline cut /proc/35/cmdline /proc/35/cmdline cut /proc/36/cmdline /proc/36/cmdline cut /proc/160/cmdline /proc/160/cmdline cut /proc/166/cmdline /proc/166/cmdline cut /proc/filesystems /proc/filesystems sed /proc/acpi/cmdline /proc/acpi/cmdline cut /proc/3/cmdline /proc/3/cmdline cut /proc/169/cmdline /proc/169/cmdline cut /proc/342/cmdline /proc/342/cmdline cut /proc/156/cmdline /proc/156/cmdline cut /proc/167/cmdline /proc/167/cmdline cut /proc/168/cmdline /proc/168/cmdline cut /proc/thread-self/cmdline /proc/thread-self/cmdline cut /proc/4/cmdline /proc/4/cmdline cut /proc/80/cmdline /proc/80/cmdline cut /proc/7/cmdline /proc/7/cmdline cut /proc/161/cmdline /proc/161/cmdline cut /proc/192/cmdline /proc/192/cmdline cut /proc/158/cmdline /proc/158/cmdline cut
Processes
-
/tmp/malware/tmp/malware1⤵
-
/bin/shsh -c "find /proc -maxdepth 1 -mmin +0.2 -user \$(whoami) | xargs -I {} cut -b 1- {}/cmdline | sed 's/\\o0/ /g' | shuf -n 1 -"2⤵
-
/usr/bin/xargsxargs -I "{}" cut -b 1- "{}/cmdline"3⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/fs/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/fs/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/fs/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/fs/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/bus/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/bus/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/bus/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/bus/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/irq/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/irq/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/irq/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/irq/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/sys/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/sys/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/sys/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/sys/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/acpi/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/acpi/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/acpi/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/acpi/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/kmsg/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/kmsg/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/kmsg/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/kmsg/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/mtrr/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/mtrr/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/mtrr/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/mtrr/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/swaps/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/swaps/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/swaps/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/swaps/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/sysrq-trigger/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/sysrq-trigger/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/sysrq-trigger/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/sysrq-trigger/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/self/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/self/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/self/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/self/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/thread-self/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/thread-self/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/thread-self/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/thread-self/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/1/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/1/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/1/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/1/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/2/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/2/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/2/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/2/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/3/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/3/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/3/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/3/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/4/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/4/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/4/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/4/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/5/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/5/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/5/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/5/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/6/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/6/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/6/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/6/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/7/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/7/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/7/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/7/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/8/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/8/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/8/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/8/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/9/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/9/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/9/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/9/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/10/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/10/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/10/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/10/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/11/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/11/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/11/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/11/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/12/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/12/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/12/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/12/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/13/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/13/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/13/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/13/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/14/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/14/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/14/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/14/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/15/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/15/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/15/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/15/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/16/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/16/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/16/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/16/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/17/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/17/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/17/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/17/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/18/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/18/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/18/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/18/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/19/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/19/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/19/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/19/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/20/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/20/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/20/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/20/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/21/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/21/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/21/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/21/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/22/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/22/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/22/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/22/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/23/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/23/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/23/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/23/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/24/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/24/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/24/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/24/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/25/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/25/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/25/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/25/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/26/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/26/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/26/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/26/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/27/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/27/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/27/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/27/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/28/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/28/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/28/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/28/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/29/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/29/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/29/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/29/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/30/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/30/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/30/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/30/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/31/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/31/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/31/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/31/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/32/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/32/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/32/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/32/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/34/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/34/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/34/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/34/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/35/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/35/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/35/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/35/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/36/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/36/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/36/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/36/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/78/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/78/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/78/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/78/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/79/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/79/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/79/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/79/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/80/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/80/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/80/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/80/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/81/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/81/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/81/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/81/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/82/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/82/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/82/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/82/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/83/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/83/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/83/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/83/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/84/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/84/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/84/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/84/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/85/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/85/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/85/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/85/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/89/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/89/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/89/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/89/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/98/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/98/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/98/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/98/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/115/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/115/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/115/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/115/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/127/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/127/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/127/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/127/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/153/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/153/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/153/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/153/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/154/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/154/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/154/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/154/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/155/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/155/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/155/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/155/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/156/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/156/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/156/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/156/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/157/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/157/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/157/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/157/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/158/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/158/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/158/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/158/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/159/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/159/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/159/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/159/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/160/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/160/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/160/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/160/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/161/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/161/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/161/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/161/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/162/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/162/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/162/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/162/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/163/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/163/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/163/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/163/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/164/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/164/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/164/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/164/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/165/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/165/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/165/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/165/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/166/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/166/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/166/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/166/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/167/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/167/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/167/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/167/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/168/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/168/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/168/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/168/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/169/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/169/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/169/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/169/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/170/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/170/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/170/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/170/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/192/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/192/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/192/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/192/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/193/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/193/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/193/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/193/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/238/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/238/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/238/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/238/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/251/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/251/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/251/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/251/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/332/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/332/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/332/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/332/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/334/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/334/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/334/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/334/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/342/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/342/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/342/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/342/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/350/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/350/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/350/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/350/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/356/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/356/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/356/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/356/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/363/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/363/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/363/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/363/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/370/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/370/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/370/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/370/cmdline4⤵
- Reads runtime system information
-
/usr/local/sbin/cutcut -b 1- /proc/393/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/393/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/393/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/393/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/394/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/394/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/394/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/394/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/422/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/422/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/422/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/422/cmdline4⤵
-
/usr/local/sbin/cutcut -b 1- /proc/541/cmdline4⤵
-
/usr/local/bin/cutcut -b 1- /proc/541/cmdline4⤵
-
/usr/sbin/cutcut -b 1- /proc/541/cmdline4⤵
-
/usr/bin/cutcut -b 1- /proc/541/cmdline4⤵
-
/bin/sedsed "s/\\o0/ /g"3⤵
- Reads runtime system information
-
/usr/bin/shufshuf -n 1 -3⤵
-
/usr/bin/findfind /proc -maxdepth 1 -mmin +0.2 -user root3⤵
- Reads runtime system information
-
/usr/bin/whoamiwhoami1⤵