Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
02/05/2024, 13:21
240502-qll18ahg3s 709/04/2024, 12:32
240409-pql2caac4v 809/04/2024, 11:57
240409-n41afsed37 708/04/2024, 11:38
240408-nr43wagb76 702/04/2024, 11:55
240402-n3f57ahb3s 727/03/2024, 13:16
240327-qhx93sga5v 725/03/2024, 07:32
240325-jczgmade81 713/03/2024, 10:09
240313-l6zetsag21 7Analysis
-
max time kernel
299s -
max time network
303s -
platform
ubuntu-20.04_amd64 -
resource
ubuntu2004-amd64-20240221-en -
resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system -
submitted
25/03/2024, 07:32
Static task
static1
Behavioral task
behavioral1
Sample
5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5
-
Size
8.1MB
-
MD5
e0efd46445731c6c35deffe8d9e47888
-
SHA1
219a2cc1df97fe0b51244f7238aa4114e858f1d0
-
SHA256
471c70b6764c6f719bab35b92678e323d53928a14617737a6fc994dc27d2a12e
-
SHA512
92a5438489316593f45f4afeca6e2a1654e75480f4670f58df5cb63091ec52dd8279b156a3949e2243dc350dbe31220b2ac433abb4250ddc238f70d295d1949d
-
SSDEEP
49152:az1q8M+srb/TIvO90dL3BmAFd4A64nsfJrYJaRM6CxN4+WqFottdpaCEy4SahdBV:auM2GebQyF66rNdvEoS5
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid 1478 -
Reads EFI boot settings 1 IoCs
Reads EFI boot settings from the efivars filesystem, may contain security secrets or sensitive data.
description ioc Process File opened for reading /sys/firmware/efi/efivars/SystemdOptions-8cf2644b-4b0b-428f-9387-6d876050dc67 journalctl -
Attempts to change immutable files 32 IoCs
Modifies inode attributes on the filesystem to allow changing of immutable files.
pid Process 3360 Process not Found 5429 Process not Found 6163 Process not Found 6854 Process not Found 6859 Process not Found 8241 Process not Found 1506 chattr 3255 Process not Found 3983 Process not Found 4705 Process not Found 5795 Process not Found 7545 Process not Found 2530 chattr 3250 Process not Found 6849 Process not Found 2338 chattr 4716 Process not Found 7550 Process not Found 8236 Process not Found 1505 chattr 3978 Process not Found 6158 Process not Found 7540 Process not Found 8213 Process not Found 1510 chattr 2433 chattr 3245 Process not Found 3988 Process not Found 4711 Process not Found 5434 Process not Found 5439 Process not Found 6168 Process not Found -
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo cat -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes 1 TTPs 60 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online free File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online uptime File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online free File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online uptime File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online uptime File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online free File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online uptime File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online free -
Enumerates kernel/hardware configuration 1 TTPs 2 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for reading /sys/firmware/efi/efivars/SystemdOptions-8cf2644b-4b0b-428f-9387-6d876050dc67 journalctl -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems id File opened for reading /proc/filesystems id File opened for reading /proc/filesystems Process not Found File opened for reading /proc/meminfo Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/1419/stat Process not Found File opened for reading /proc/filesystems id File opened for reading /proc/filesystems Process not Found File opened for reading /proc/1046/cmdline 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems id File opened for reading /proc/filesystems id File opened for reading /proc/filesystems id File opened for reading /proc/filesystems id File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems id File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/1422/cmdline Process not Found File opened for reading /proc/filesystems id File opened for reading /proc/955/cmdline 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/uptime Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/102/stat 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for reading /proc/18/cmdline Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/118/stat Process not Found File opened for reading /proc/filesystems id File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems id File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/1479/cmdline 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/853/cmdline 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for reading /proc/filesystems Process not Found File opened for reading /proc/self/auxv Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/1033/stat 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for reading /proc/uptime uptime File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/86/stat Process not Found File opened for reading /proc/1002/stat Process not Found -
Writes file to tmp directory 2 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/.ssh/authorized_keys 5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5 File opened for modification /tmp/.ssh/authorized_keys Process not Found
Processes
-
/tmp/5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_5/tmp/5fa7595c38e29ad36ff3ec76bf266f9c391510f773c7d8b43555db534332d763_patched_pkey_51⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1469 -
/usr/bin/unameuname -a2⤵PID:1482
-
-
/usr/bin/catcat /etc/issue2⤵PID:1483
-
-
/usr/bin/catcat /proc/cpuinfo2⤵
- Checks CPU configuration
PID:1484
-
-
/bin/sh/bin/sh -2⤵PID:1485
-
/usr/bin/whoamiwhoami3⤵PID:1487
-
-
-
/bin/sh/bin/sh -2⤵PID:1488
-
-
/usr/bin/uptimeuptime2⤵
- Reads CPU attributes
PID:1498
-
-
/bin/sh/bin/sh -2⤵PID:1503
-
/usr/bin/chattrchattr -ia .ssh/authorized_keys3⤵
- Attempts to change immutable files
PID:1505
-
-
-
/bin/sh/bin/sh -2⤵PID:1504
-
/usr/bin/chattrchattr -ia .ssh/authorized_keys3⤵
- Attempts to change immutable files
PID:1506
-
-
-
/bin/sh/bin/sh -2⤵PID:1513
-
/usr/bin/idid -n -u 03⤵PID:1514
-
-
-
/bin/sh/bin/sh -2⤵PID:1515
-
/usr/bin/idid -n -u 03⤵PID:1517
-
-
-
/usr/bin/catcat "/var/log/auth*"2⤵PID:1516
-
-
/usr/bin/zcatzcat "/var/log/auth*"2⤵PID:1518
-
-
/usr/local/sbin/gzipgzip -cd "/var/log/auth*"2⤵PID:1518
-
-
/usr/local/bin/gzipgzip -cd "/var/log/auth*"2⤵PID:1518
-
-
/usr/sbin/gzipgzip -cd "/var/log/auth*"2⤵PID:1518
-
-
/usr/bin/gzipgzip -cd "/var/log/auth*"2⤵PID:1518
-
-
/bin/sh/bin/sh -2⤵PID:1519
-
/usr/bin/catcat "~/.ssh/known_hosts"3⤵PID:1521
-
-
-
/bin/sh/bin/sh -2⤵PID:1520
-
/usr/bin/idid -n -u 03⤵PID:1522
-
-
-
/bin/sh/bin/sh -2⤵PID:1523
-
/usr/bin/grepgrep -E "(scp|ssh)"3⤵PID:1525
-
-
-
/bin/sh/bin/sh -2⤵PID:1526
-
/usr/bin/idid -n -u 03⤵PID:1527
-
-
-
/bin/sh/bin/sh -2⤵PID:1528
-
/usr/bin/idid -n -u 03⤵PID:1529
-
-
-
/bin/sh/bin/sh -2⤵PID:1530
-
/usr/bin/idid -n -u 03⤵PID:1531
-
-
-
/bin/sh/bin/sh -2⤵PID:1532
-
/usr/bin/idid -n -u 03⤵PID:1533
-
-
-
/bin/sh/bin/sh -2⤵PID:1534
-
/usr/bin/idid -n -u 03⤵PID:1535
-
-
-
/bin/sh/bin/sh -2⤵PID:1536
-
/usr/bin/idid -n -u 03⤵PID:1537
-
-
-
/bin/sh/bin/sh -2⤵PID:1538
-
/usr/bin/idid -n -u 03⤵PID:1539
-
-
-
/bin/sh/bin/sh -2⤵PID:1540
-
/usr/bin/idid -n -u 03⤵PID:1541
-
-
-
/bin/sh/bin/sh -2⤵PID:1544
-
/usr/bin/idid -n -u 03⤵PID:1545
-
-
-
/bin/sh/bin/sh -2⤵PID:1547
-
/usr/bin/idid -n -u 03⤵PID:1548
-
-
-
/bin/sh/bin/sh -2⤵PID:1549
-
/usr/bin/idid -n -u 03⤵PID:1550
-
-
-
/bin/sh/bin/sh -2⤵PID:1551
-
/usr/bin/idid -n -u 03⤵PID:1552
-
-
-
/bin/sh/bin/sh -2⤵PID:1555
-
/usr/bin/idid -n -u 03⤵PID:1556
-
-
-
/bin/sh/bin/sh -2⤵PID:1559
-
/usr/bin/idid -n -u 03⤵PID:1561
-
-
-
/bin/sh/bin/sh -2⤵PID:1563
-
/usr/bin/idid -n -u 03⤵PID:1564
-
-
-
/bin/sh/bin/sh -2⤵PID:1567
-
/usr/bin/idid -n -u 03⤵PID:1568
-
-
-
/bin/sh/bin/sh -2⤵PID:1570
-
/usr/bin/idid -n -u 03⤵PID:1572
-
-
-
/bin/sh/bin/sh -2⤵PID:1574
-
/usr/bin/idid -n -u 03⤵PID:1576
-
-
-
/bin/sh/bin/sh -2⤵PID:1579
-
/usr/bin/idid -n -u 03⤵PID:1581
-
-
-
/bin/sh/bin/sh -2⤵PID:1583
-
/usr/bin/idid -n -u 03⤵PID:1585
-
-
-
/bin/sh/bin/sh -2⤵PID:1588
-
/usr/bin/idid -n -u 03⤵PID:1589
-
-
-
/bin/sh/bin/sh -2⤵PID:1590
-
/usr/bin/idid -n -u 03⤵PID:1591
-
-
-
/bin/sh/bin/sh -2⤵PID:1592
-
/usr/bin/idid -n -u 03⤵PID:1593
-
-
-
/bin/sh/bin/sh -2⤵PID:1594
-
/usr/bin/idid -n -u 03⤵PID:1595
-
-
-
/bin/sh/bin/sh -2⤵PID:1596
-
/usr/bin/idid -n -u 03⤵PID:1597
-
-
-
/bin/sh/bin/sh -2⤵PID:1598
-
/usr/bin/idid -n -u 03⤵PID:1599
-
-
-
/bin/sh/bin/sh -2⤵PID:1600
-
/usr/bin/idid -n -u 03⤵PID:1601
-
-
-
/bin/sh/bin/sh -2⤵PID:1604
-
/usr/bin/idid -n -u 03⤵PID:1605
-
-
-
/bin/sh/bin/sh -2⤵PID:1609
-
/usr/bin/idid -n -u 03⤵PID:1611
-
-
-
/bin/sh/bin/sh -2⤵PID:1617
-
/usr/bin/idid -n -u 03⤵PID:1620
-
-
-
/bin/sh/bin/sh -2⤵PID:1622
-
/usr/bin/idid -n -u 03⤵PID:1623
-
-
-
/bin/sh/bin/sh -2⤵PID:1624
-
/usr/bin/idid -n -u 03⤵PID:1625
-
-
-
/bin/sh/bin/sh -2⤵PID:1626
-
/usr/bin/idid -n -u 1233⤵PID:1627
-
-
-
/bin/sh/bin/sh -2⤵PID:1628
-
/usr/bin/idid -n -u 03⤵PID:1629
-
-
-
/bin/sh/bin/sh -2⤵PID:1630
-
/usr/bin/idid -n -u 03⤵PID:1631
-
-
-
/bin/sh/bin/sh -2⤵PID:1632
-
/usr/bin/idid -n -u 03⤵PID:1633
-
-
-
/bin/sh/bin/sh -2⤵PID:1634
-
/usr/bin/idid -n -u 03⤵PID:1635
-
-
-
/bin/sh/bin/sh -2⤵PID:1636
-
/usr/bin/idid -n -u 03⤵PID:1637
-
-
-
/bin/sh/bin/sh -2⤵PID:1638
-
/usr/bin/idid -n -u 03⤵PID:1641
-
-
-
/bin/sh/bin/sh -2⤵PID:1649
-
/usr/bin/idid -n -u 03⤵PID:1652
-
-
-
/bin/sh/bin/sh -2⤵PID:1659
-
/usr/bin/idid -n -u 03⤵PID:1663
-
-
-
/bin/sh/bin/sh -2⤵PID:1668
-
/usr/bin/idid -n -u 03⤵PID:1669
-
-
-
/bin/sh/bin/sh -2⤵PID:1870
-
/usr/bin/idid -n -u 03⤵PID:1871
-
-
-
/bin/sh/bin/sh -2⤵PID:1874
-
/usr/bin/idid -n -u 03⤵PID:1875
-
-
-
/bin/sh/bin/sh -2⤵PID:1896
-
/usr/bin/idid -n -u 03⤵PID:1897
-
-
-
/bin/sh/bin/sh -2⤵PID:1901
-
/usr/bin/idid -n -u 03⤵PID:1904
-
-
-
/bin/sh/bin/sh -2⤵PID:1907
-
/usr/bin/idid -n -u 03⤵PID:1909
-
-
-
/bin/sh/bin/sh -2⤵PID:1914
-
/usr/bin/idid -n -u 03⤵PID:1915
-
-
-
/bin/sh/bin/sh -2⤵PID:1923
-
/usr/bin/idid -n -u 03⤵PID:1930
-
-
-
/bin/sh/bin/sh -2⤵PID:1936
-
/usr/bin/idid -n -u 03⤵PID:1944
-
-
-
/bin/sh/bin/sh -2⤵PID:1955
-
/usr/bin/idid -n -u 03⤵PID:1957
-
-
-
/bin/sh/bin/sh -2⤵PID:1965
-
/usr/bin/idid -n -u 03⤵PID:1967
-
-
-
/bin/sh/bin/sh -2⤵PID:1972
-
/usr/bin/idid -n -u 03⤵PID:1974
-
-
-
/bin/sh/bin/sh -2⤵PID:1977
-
/usr/bin/idid -n -u 03⤵PID:1979
-
-
-
/bin/sh/bin/sh -2⤵PID:1998
-
/usr/bin/idid -n -u 03⤵PID:2002
-
-
-
/bin/sh/bin/sh -2⤵PID:2005
-
/usr/bin/idid -n -u 03⤵PID:2011
-
-
-
/bin/sh/bin/sh -2⤵PID:2024
-
/usr/bin/idid -n -u 03⤵PID:2030
-
-
-
/bin/sh/bin/sh -2⤵PID:2033
-
/usr/bin/idid -n -u 03⤵PID:2038
-
-
-
/bin/sh/bin/sh -2⤵PID:2043
-
/usr/bin/idid -n -u 03⤵PID:2047
-
-
-
/bin/sh/bin/sh -2⤵PID:2065
-
/usr/bin/idid -n -u 03⤵PID:2066
-
-
-
/bin/sh/bin/sh -2⤵PID:2067
-
/usr/bin/idid -n -u 03⤵PID:2068
-
-
-
/bin/sh/bin/sh -2⤵PID:2069
-
/usr/bin/idid -n -u 03⤵PID:2071
-
-
-
/bin/sh/bin/sh -2⤵PID:2072
-
/usr/bin/idid -n -u 03⤵PID:2073
-
-
-
/bin/sh/bin/sh -2⤵PID:2074
-
/usr/bin/idid -n -u 03⤵PID:2076
-
-
-
/bin/sh/bin/sh -2⤵PID:2077
-
/usr/bin/idid -n -u 03⤵PID:2078
-
-
-
/bin/sh/bin/sh -2⤵PID:2079
-
/usr/bin/idid -n -u 03⤵PID:2080
-
-
-
/bin/sh/bin/sh -2⤵PID:2082
-
/usr/bin/idid -n -u 03⤵PID:2083
-
-
-
/bin/sh/bin/sh -2⤵PID:2085
-
/usr/bin/idid -n -u 03⤵PID:2086
-
-
-
/bin/sh/bin/sh -2⤵PID:2087
-
/usr/bin/idid -n -u 03⤵PID:2088
-
-
-
/bin/sh/bin/sh -2⤵PID:2089
-
/usr/bin/idid -n -u 03⤵
- Reads runtime system information
PID:2091
-
-
-
/bin/sh/bin/sh -2⤵PID:2092
-
/usr/bin/idid -n -u 03⤵PID:2094
-
-
-
/bin/sh/bin/sh -2⤵PID:2096
-
/usr/bin/idid -n -u 03⤵PID:2097
-
-
-
/bin/sh/bin/sh -2⤵PID:2100
-
/usr/bin/idid -n -u 03⤵PID:2101
-
-
-
/bin/sh/bin/sh -2⤵PID:2104
-
/usr/bin/idid -n -u 03⤵PID:2105
-
-
-
/bin/sh/bin/sh -2⤵PID:2106
-
/usr/bin/idid -n -u 03⤵PID:2107
-
-
-
/bin/sh/bin/sh -2⤵PID:2109
-
/usr/bin/idid -n -u 03⤵PID:2110
-
-
-
/bin/sh/bin/sh -2⤵PID:2112
-
/usr/bin/idid -n -u 03⤵PID:2113
-
-
-
/bin/sh/bin/sh -2⤵PID:2115
-
/usr/bin/idid -n -u 03⤵PID:2117
-
-
-
/bin/sh/bin/sh -2⤵PID:2122
-
/usr/bin/idid -n -u 03⤵PID:2123
-
-
-
/bin/sh/bin/sh -2⤵PID:2125
-
/usr/bin/idid -n -u 03⤵PID:2127
-
-
-
/bin/sh/bin/sh -2⤵PID:2130
-
/usr/bin/idid -n -u 03⤵PID:2132
-
-
-
/bin/sh/bin/sh -2⤵PID:2134
-
/usr/bin/idid -n -u 03⤵PID:2135
-
-
-
/bin/sh/bin/sh -2⤵PID:2281
-
/usr/bin/idid -n -u 03⤵PID:2283
-
-
-
/bin/sh/bin/sh -2⤵PID:2285
-
/usr/bin/idid -n -u 03⤵PID:2288
-
-
-
/bin/sh/bin/sh -2⤵PID:2292
-
/usr/bin/idid -n -u 03⤵PID:2293
-
-
-
/bin/sh/bin/sh -2⤵PID:2295
-
/usr/bin/idid -n -u 03⤵PID:2296
-
-
-
/bin/sh/bin/sh -2⤵PID:2297
-
/usr/bin/idid -n -u 03⤵PID:2298
-
-
-
/bin/sh/bin/sh -2⤵PID:2301
-
/usr/bin/idid -n -u 03⤵PID:2302
-
-
-
/bin/sh/bin/sh -2⤵PID:2304
-
/usr/bin/idid -n -u 03⤵PID:2306
-
-
-
/bin/sh/bin/sh -2⤵PID:2308
-
/usr/bin/idid -n -u 03⤵PID:2309
-
-
-
/bin/sh/bin/sh -2⤵PID:2310
-
/usr/bin/idid -n -u 03⤵PID:2311
-
-
-
/bin/sh/bin/sh -2⤵PID:2312
-
/usr/bin/idid -n -u 03⤵PID:2313
-
-
-
/bin/sh/bin/sh -2⤵PID:2314
-
/usr/bin/idid -n -u 03⤵PID:2315
-
-
-
/bin/sh/bin/sh -2⤵PID:2316
-
/usr/bin/idid -n -u 03⤵
- Reads runtime system information
PID:2317
-
-
-
/bin/sh/bin/sh -2⤵PID:2318
-
/usr/bin/idid -n -u 03⤵PID:2319
-
-
-
/bin/sh/bin/sh -2⤵PID:2320
-
/usr/bin/idid -n -u 03⤵PID:2321
-
-
-
/bin/sh/bin/sh -2⤵PID:2322
-
/usr/bin/idid -n -u 03⤵PID:2323
-
-
-
/bin/sh/bin/sh -2⤵PID:2324
-
/usr/bin/idid -n -u 03⤵PID:2325
-
-
-
/bin/sh/bin/sh -2⤵PID:2326
-
/usr/bin/idid -n -u 03⤵PID:2327
-
-
-
/bin/sh/bin/sh -2⤵PID:2328
-
/usr/bin/idid -n -u 03⤵PID:2329
-
-
-
/bin/sh/bin/sh -2⤵PID:2330
-
/usr/bin/idid -n -u 03⤵PID:2331
-
-
-
/bin/sh/bin/sh -2⤵PID:2332
-
/usr/bin/idid -n -u 03⤵PID:2333
-
-
-
/usr/bin/freefree -h2⤵
- Reads CPU attributes
PID:2334
-
-
/usr/bin/uptimeuptime2⤵
- Reads CPU attributes
- Reads runtime system information
PID:2335
-
-
/bin/sh/bin/sh -2⤵PID:2336
-
-
/bin/sh/bin/sh -2⤵PID:2337
-
/usr/bin/chattrchattr -ia .ssh/authorized_keys3⤵
- Attempts to change immutable files
PID:2338
-
-
-
/usr/bin/freefree -h2⤵
- Reads CPU attributes
PID:2429
-
-
/bin/sh/bin/sh -2⤵PID:2431
-
-
/bin/sh/bin/sh -2⤵PID:2707
-
/usr/bin/idid -n -u 03⤵PID:2708
-
-
-
/bin/sh/bin/sh -2⤵PID:2709
-
/usr/bin/idid -n -u 03⤵PID:2710
-
-
-
/bin/sh/bin/sh -2⤵PID:2711
-
/usr/bin/idid -n -u 1013⤵PID:2712
-
-
-
/bin/sh/bin/sh -2⤵PID:2713
-
/usr/bin/idid -n -u 03⤵PID:2714
-
-
-
/bin/sh/bin/sh -2⤵PID:2715
-
/usr/bin/idid -n -u 03⤵PID:2716
-
-
-
/bin/sh/bin/sh -2⤵PID:2717
-
/usr/bin/idid -n -u 03⤵PID:2718
-
-
-
/bin/sh/bin/sh -2⤵PID:2719
-
/usr/bin/idid -n -u 03⤵PID:2720
-
-
-
/bin/sh/bin/sh -2⤵PID:2721
-
/usr/bin/idid -n -u 03⤵PID:2722
-
-
-
/bin/sh/bin/sh -2⤵PID:2723
-
/usr/bin/idid -n -u 03⤵
- Reads runtime system information
PID:2724
-
-
-
/bin/sh/bin/sh -2⤵PID:2725
-
/usr/bin/idid -n -u 03⤵PID:2726
-
-
-
/bin/sh/bin/sh -2⤵PID:2727
-
/usr/bin/idid -n -u 03⤵PID:2728
-
-
-
/bin/sh/bin/sh -2⤵PID:2729
-
/usr/bin/idid -n -u 03⤵PID:2730
-
-
-
/bin/sh/bin/sh -2⤵PID:2731
-
/usr/bin/idid -n -u 03⤵PID:2732
-
-
-
/bin/sh/bin/sh -2⤵PID:2733
-
/usr/bin/idid -n -u 03⤵PID:2734
-
-
-
/bin/sh/bin/sh -2⤵PID:2735
-
/usr/bin/idid -n -u 03⤵PID:2736
-
-
-
/bin/sh/bin/sh -2⤵PID:2737
-
/usr/bin/idid -n -u 03⤵PID:2738
-
-
-
/bin/sh/bin/sh -2⤵PID:2739
-
/usr/bin/idid -n -u 03⤵PID:2740
-
-
-
/bin/sh/bin/sh -2⤵PID:2741
-
/usr/bin/idid -n -u 03⤵PID:2742
-
-
-
/bin/sh/bin/sh -2⤵PID:2743
-
/usr/bin/idid -n -u 03⤵PID:2744
-
-
-
/bin/sh/bin/sh -2⤵PID:2745
-
/usr/bin/idid -n -u 03⤵PID:2746
-
-
-
/bin/sh/bin/sh -2⤵PID:2747
-
/usr/bin/idid -n -u 03⤵PID:2748
-
-
-
/bin/sh/bin/sh -2⤵PID:2749
-
/usr/bin/idid -n -u 03⤵PID:2750
-
-
-
/bin/sh/bin/sh -2⤵PID:2751
-
/usr/bin/idid -n -u 03⤵PID:2752
-
-
-
/bin/sh/bin/sh -2⤵PID:2753
-
/usr/bin/idid -n -u 03⤵PID:2754
-
-
-
/bin/sh/bin/sh -2⤵PID:2755
-
/usr/bin/idid -n -u 03⤵PID:2756
-
-
-
/bin/sh/bin/sh -2⤵PID:2757
-
/usr/bin/idid -n -u 03⤵PID:2758
-
-
-
/bin/sh/bin/sh -2⤵PID:2759
-
/usr/bin/idid -n -u 03⤵PID:2760
-
-
-
/bin/sh/bin/sh -2⤵PID:2761
-
/usr/bin/idid -n -u 03⤵PID:2762
-
-
-
/bin/sh/bin/sh -2⤵PID:2763
-
/usr/bin/idid -n -u 03⤵PID:2764
-
-
-
/bin/sh/bin/sh -2⤵PID:2765
-
/usr/bin/idid -n -u 03⤵PID:2766
-
-
-
/bin/sh/bin/sh -2⤵PID:2767
-
/usr/bin/idid -n -u 03⤵
- Reads runtime system information
PID:2768
-
-
-
/bin/sh/bin/sh -2⤵PID:2769
-
/usr/bin/idid -n -u 03⤵PID:2770
-
-
-
/bin/sh/bin/sh -2⤵PID:2771
-
/usr/bin/idid -n -u 03⤵PID:2772
-
-
-
/bin/sh/bin/sh -2⤵PID:2773
-
/usr/bin/idid -n -u 03⤵PID:2774
-
-
-
/bin/sh/bin/sh -2⤵PID:2775
-
/usr/bin/idid -n -u 1193⤵PID:2776
-
-
-
/bin/sh/bin/sh -2⤵PID:2777
-
/usr/bin/idid -n -u 1163⤵PID:2778
-
-
-
/bin/sh/bin/sh -2⤵PID:2779
-
/usr/bin/idid -n -u 1163⤵PID:2780
-
-
-
/bin/sh/bin/sh -2⤵PID:2781
-
/usr/bin/idid -n -u 03⤵PID:2782
-
-
-
/bin/sh/bin/sh -2⤵PID:2783
-
/usr/bin/idid -n -u 03⤵PID:2784
-
-
-
/bin/sh/bin/sh -2⤵PID:2785
-
/usr/bin/idid -n -u 03⤵PID:2786
-
-
-
/bin/sh/bin/sh -2⤵PID:2787
-
/usr/bin/idid -n -u 03⤵PID:2788
-
-
-
/bin/sh/bin/sh -2⤵PID:2789
-
/usr/bin/idid -n -u 03⤵PID:2790
-
-
-
/bin/sh/bin/sh -2⤵PID:2791
-
/usr/bin/idid -n -u 03⤵
- Reads runtime system information
PID:2792
-
-
-
/bin/sh/bin/sh -2⤵PID:2793
-
/usr/bin/idid -n -u 03⤵PID:2794
-
-
-
/bin/sh/bin/sh -2⤵PID:2795
-
/usr/bin/idid -n -u 03⤵PID:2796
-
-
-
/bin/sh/bin/sh -2⤵PID:2797
-
/usr/bin/idid -n -u 03⤵PID:2798
-
-
-
/bin/sh/bin/sh -2⤵PID:2799
-
/usr/bin/idid -n -u 03⤵PID:2800
-
-
-
/bin/sh/bin/sh -2⤵PID:2801
-
/usr/bin/idid -n -u 03⤵PID:2802
-
-
-
/bin/sh/bin/sh -2⤵PID:2803
-
/usr/bin/idid -n -u 03⤵PID:2804
-
-
-
/bin/sh/bin/sh -2⤵PID:2805
-
/usr/bin/idid -n -u 03⤵PID:2806
-
-
-
/bin/sh/bin/sh -2⤵PID:2807
-
/usr/bin/idid -n -u 03⤵PID:2808
-
-
-
/bin/sh/bin/sh -2⤵PID:2809
-
/usr/bin/idid -n -u 03⤵PID:2810
-
-
-
/bin/sh/bin/sh -2⤵PID:2811
-
/usr/bin/idid -n -u 03⤵PID:2812
-
-
-
/bin/sh/bin/sh -2⤵PID:2813
-
/usr/bin/idid -n -u 03⤵PID:2814
-
-
-
/bin/sh/bin/sh -2⤵PID:2815
-
/usr/bin/idid -n -u 03⤵PID:2816
-
-
-
/bin/sh/bin/sh -2⤵PID:2817
-
/usr/bin/idid -n -u 03⤵PID:2818
-
-
-
/bin/sh/bin/sh -2⤵PID:2819
-
/usr/bin/idid -n -u 03⤵PID:2820
-
-
-
/bin/sh/bin/sh -2⤵PID:2821
-
/usr/bin/idid -n -u 03⤵PID:2822
-
-
-
/bin/sh/bin/sh -2⤵PID:2823
-
/usr/bin/idid -n -u 03⤵PID:2824
-
-
-
/bin/sh/bin/sh -2⤵PID:2825
-
/usr/bin/idid -n -u 03⤵PID:2826
-
-
-
/bin/sh/bin/sh -2⤵PID:2827
-
/usr/bin/idid -n -u 03⤵PID:2828
-
-
-
/bin/sh/bin/sh -2⤵PID:2829
-
/usr/bin/idid -n -u 03⤵PID:2830
-
-
-
/bin/sh/bin/sh -2⤵PID:2831
-
/usr/bin/idid -n -u 03⤵PID:2832
-
-
-
/bin/sh/bin/sh -2⤵PID:2833
-
/usr/bin/idid -n -u 03⤵PID:2834
-
-
-
/bin/sh/bin/sh -2⤵PID:2835
-
/usr/bin/idid -n -u 03⤵PID:2836
-
-
-
/bin/sh/bin/sh -2⤵PID:2837
-
/usr/bin/idid -n -u 03⤵PID:2838
-
-
-
/bin/sh/bin/sh -2⤵PID:2839
-
/usr/bin/idid -n -u 03⤵PID:2840
-
-
-
/bin/sh/bin/sh -2⤵PID:2841
-
/usr/bin/idid -n -u 03⤵PID:2842
-
-
-
/bin/sh/bin/sh -2⤵PID:2843
-
/usr/bin/idid -n -u 03⤵PID:2844
-
-
-
/bin/sh/bin/sh -2⤵PID:2845
-
/usr/bin/idid -n -u 03⤵PID:2846
-
-
-
/bin/sh/bin/sh -2⤵PID:2847
-
/usr/bin/idid -n -u 03⤵PID:2848
-
-
-
/bin/sh/bin/sh -2⤵PID:2849
-
/usr/bin/idid -n -u 03⤵PID:2850
-
-
-
/bin/sh/bin/sh -2⤵PID:2851
-
/usr/bin/idid -n -u 03⤵PID:2852
-
-
-
/bin/sh/bin/sh -2⤵PID:2853
-
/usr/bin/idid -n -u 03⤵PID:2854
-
-
-
/bin/sh/bin/sh -2⤵PID:2855
-
/usr/bin/idid -n -u 03⤵PID:2856
-
-
-
/bin/sh/bin/sh -2⤵PID:2857
-
/usr/bin/idid -n -u 03⤵PID:2858
-
-
-
/bin/sh/bin/sh -2⤵PID:2859
-
/usr/bin/idid -n -u 03⤵PID:2860
-
-
-
/bin/sh/bin/sh -2⤵PID:2861
-
/usr/bin/idid -n -u 03⤵PID:2862
-
-
-
/bin/sh/bin/sh -2⤵PID:2863
-
/usr/bin/idid -n -u 03⤵PID:2864
-
-
-
/bin/sh/bin/sh -2⤵PID:2865
-
/usr/bin/idid -n -u 03⤵PID:2866
-
-
-
/bin/sh/bin/sh -2⤵PID:2867
-
/usr/bin/idid -n -u 03⤵PID:2868
-
-
-
/bin/sh/bin/sh -2⤵PID:2869
-
/usr/bin/idid -n -u 03⤵PID:2870
-
-
-
/bin/sh/bin/sh -2⤵PID:2871
-
/usr/bin/idid -n -u 03⤵PID:2872
-
-
-
/bin/sh/bin/sh -2⤵PID:2873
-
/usr/bin/idid -n -u 03⤵PID:2874
-
-
-
/bin/sh/bin/sh -2⤵PID:2875
-
/usr/bin/idid -n -u 03⤵PID:2876
-
-
-
/bin/sh/bin/sh -2⤵PID:2877
-
/usr/bin/idid -n -u 03⤵PID:2878
-
-
-
/bin/sh/bin/sh -2⤵PID:2879
-
/usr/bin/idid -n -u 03⤵PID:2880
-
-
-
/bin/sh/bin/sh -2⤵PID:2881
-
/usr/bin/idid -n -u 03⤵PID:2882
-
-
-
/bin/sh/bin/sh -2⤵PID:2883
-
/usr/bin/idid -n -u 03⤵PID:2884
-
-
-
/bin/sh/bin/sh -2⤵PID:2885
-
/usr/bin/idid -n -u 03⤵PID:2886
-
-
-
/bin/sh/bin/sh -2⤵PID:2887
-
/usr/bin/idid -n -u 03⤵PID:2888
-
-
-
/bin/sh/bin/sh -2⤵PID:2889
-
/usr/bin/idid -n -u 03⤵PID:2890
-
-
-
/bin/sh/bin/sh -2⤵PID:2891
-
/usr/bin/idid -n -u 03⤵PID:2892
-
-
-
/bin/sh/bin/sh -2⤵PID:2893
-
/usr/bin/idid -n -u 03⤵PID:2894
-
-
-
/bin/sh/bin/sh -2⤵PID:2895
-
/usr/bin/idid -n -u 03⤵PID:2896
-
-
-
/bin/sh/bin/sh -2⤵PID:2897
-
/usr/bin/idid -n -u 03⤵PID:2898
-
-
-
/bin/sh/bin/sh -2⤵PID:2899
-
/usr/bin/idid -n -u 03⤵PID:2900
-
-
-
/bin/sh/bin/sh -2⤵PID:2901
-
/usr/bin/idid -n -u 03⤵PID:2902
-
-
-
/bin/sh/bin/sh -2⤵PID:2903
-
/usr/bin/idid -n -u 03⤵PID:2904
-
-
-
/bin/sh/bin/sh -2⤵PID:2905
-
/usr/bin/idid -n -u 03⤵PID:2906
-
-
-
/bin/sh/bin/sh -2⤵PID:2907
-
/usr/bin/idid -n -u 03⤵PID:2908
-
-
-
/bin/sh/bin/sh -2⤵PID:2909
-
/usr/bin/idid -n -u 03⤵PID:2910
-
-
-
/bin/sh/bin/sh -2⤵PID:2911
-
/usr/bin/idid -n -u 03⤵PID:2912
-
-
-
/bin/sh/bin/sh -2⤵PID:2913
-
/usr/bin/idid -n -u 03⤵PID:2914
-
-
-
/bin/sh/bin/sh -2⤵PID:2915
-
/usr/bin/idid -n -u 03⤵PID:2916
-
-
-
/bin/sh/bin/sh -2⤵PID:2917
-
/usr/bin/idid -n -u 03⤵PID:2918
-
-
-
/bin/sh/bin/sh -2⤵PID:2919
-
/usr/bin/idid -n -u 03⤵PID:2920
-
-
-
/bin/sh/bin/sh -2⤵PID:2921
-
/usr/bin/idid -n -u 03⤵PID:2922
-
-
-
/bin/sh/bin/sh -2⤵PID:2923
-
/usr/bin/idid -n -u 03⤵PID:2924
-
-
-
/bin/sh/bin/sh -2⤵PID:2925
-
/usr/bin/idid -n -u 03⤵PID:2926
-
-
-
/bin/sh/bin/sh -2⤵PID:2927
-
/usr/bin/idid -n -u 03⤵PID:2928
-
-
-
/bin/sh/bin/sh -2⤵PID:2929
-
/usr/bin/idid -n -u 03⤵PID:2930
-
-
-
/bin/sh/bin/sh -2⤵PID:2931
-
/usr/bin/idid -n -u 03⤵PID:2932
-
-
-
/bin/sh/bin/sh -2⤵PID:2933
-
/usr/bin/idid -n -u 03⤵PID:2934
-
-
-
/bin/sh/bin/sh -2⤵PID:2935
-
/usr/bin/idid -n -u 03⤵PID:2936
-
-
-
/bin/sh/bin/sh -2⤵PID:2937
-
/usr/bin/idid -n -u 03⤵PID:2938
-
-
-
/bin/sh/bin/sh -2⤵PID:2939
-
/usr/bin/idid -n -u 03⤵PID:2940
-
-
-
/bin/sh/bin/sh -2⤵PID:2941
-
/usr/bin/idid -n -u 03⤵PID:2942
-
-
-
/bin/sh/bin/sh -2⤵PID:2943
-
/usr/bin/idid -n -u 03⤵
- Reads runtime system information
PID:2944
-
-
-
/bin/sh/bin/sh -2⤵PID:2945
-
/usr/bin/idid -n -u 03⤵PID:2946
-
-
-
/bin/sh/bin/sh -2⤵PID:2947
-
/usr/bin/idid -n -u 03⤵PID:2948
-
-
-
/bin/sh/bin/sh -2⤵PID:2949
-
/usr/bin/idid -n -u 03⤵PID:2950
-
-
-
/bin/sh/bin/sh -2⤵PID:2951
-
/usr/bin/idid -n -u 03⤵PID:2952
-
-
-
/bin/sh/bin/sh -2⤵PID:2953
-
/usr/bin/idid -n -u 03⤵PID:2954
-
-
-
/bin/sh/bin/sh -2⤵PID:2955
-
/usr/bin/idid -n -u 03⤵PID:2956
-
-
-
/bin/sh/bin/sh -2⤵PID:2957
-
/usr/bin/idid -n -u 1233⤵PID:2958
-
-
-
/bin/sh/bin/sh -2⤵PID:2959
-
/usr/bin/idid -n -u 03⤵PID:2960
-
-
-
/bin/sh/bin/sh -2⤵PID:2961
-
/usr/bin/idid -n -u 03⤵PID:2962
-
-
-
/bin/sh/bin/sh -2⤵PID:2963
-
/usr/bin/idid -n -u 03⤵PID:2964
-
-
-
/bin/sh/bin/sh -2⤵PID:2965
-
/usr/bin/idid -n -u 03⤵PID:2966
-
-
-
/bin/sh/bin/sh -2⤵PID:2967
-
/usr/bin/idid -n -u 03⤵PID:2968
-
-
-
/bin/sh/bin/sh -2⤵PID:2969
-
/usr/bin/idid -n -u 03⤵PID:2970
-
-
-
/bin/sh/bin/sh -2⤵PID:2971
-
/usr/bin/idid -n -u 03⤵PID:2972
-
-
-
/bin/sh/bin/sh -2⤵PID:2973
-
/usr/bin/idid -n -u 03⤵PID:2974
-
-
-
/bin/sh/bin/sh -2⤵PID:2975
-
/usr/bin/idid -n -u 03⤵PID:2976
-
-
-
/bin/sh/bin/sh -2⤵PID:2977
-
/usr/bin/idid -n -u 03⤵PID:2978
-
-
-
/bin/sh/bin/sh -2⤵PID:2979
-
/usr/bin/idid -n -u 03⤵PID:2980
-
-
-
/bin/sh/bin/sh -2⤵PID:2981
-
/usr/bin/idid -n -u 03⤵PID:2982
-
-
-
/bin/sh/bin/sh -2⤵PID:2983
-
/usr/bin/idid -n -u 03⤵PID:2984
-
-
-
/bin/sh/bin/sh -2⤵PID:2985
-
/usr/bin/idid -n -u 03⤵PID:2986
-
-
-
/bin/sh/bin/sh -2⤵PID:2987
-
/usr/bin/idid -n -u 03⤵PID:2988
-
-
-
/bin/sh/bin/sh -2⤵PID:2989
-
/usr/bin/idid -n -u 03⤵PID:2990
-
-
-
/bin/sh/bin/sh -2⤵PID:2991
-
/usr/bin/idid -n -u 03⤵PID:2992
-
-
-
/bin/sh/bin/sh -2⤵PID:2993
-
/usr/bin/idid -n -u 03⤵PID:2994
-
-
-
/bin/sh/bin/sh -2⤵PID:2995
-
/usr/bin/idid -n -u 03⤵PID:2996
-
-
-
/bin/sh/bin/sh -2⤵PID:2997
-
/usr/bin/idid -n -u 03⤵PID:2998
-
-
-
/bin/sh/bin/sh -2⤵PID:2999
-
/usr/bin/idid -n -u 03⤵PID:3000
-
-
-
/bin/sh/bin/sh -2⤵PID:3001
-
/usr/bin/idid -n -u 03⤵PID:3002
-
-
-
/bin/sh/bin/sh -2⤵PID:3003
-
/usr/bin/idid -n -u 03⤵PID:3004
-
-
-
/bin/sh/bin/sh -2⤵PID:3005
-
/usr/bin/idid -n -u 03⤵PID:3006
-
-
-
/bin/sh/bin/sh -2⤵PID:3007
-
/usr/bin/idid -n -u 03⤵PID:3008
-
-
-
/bin/sh/bin/sh -2⤵PID:3009
-
/usr/bin/idid -n -u 03⤵PID:3010
-
-
-
/bin/sh/bin/sh -2⤵PID:3011
-
/usr/bin/idid -n -u 03⤵PID:3012
-
-
-
/bin/sh/bin/sh -2⤵PID:3013
-
/usr/bin/idid -n -u 03⤵PID:3014
-
-
-
/bin/sh/bin/sh -2⤵PID:3015
-
/usr/bin/idid -n -u 03⤵PID:3016
-
-
-
/bin/sh/bin/sh -2⤵PID:3017
-
/usr/bin/idid -n -u 03⤵PID:3018
-
-
-
/bin/sh/bin/sh -2⤵PID:3019
-
/usr/bin/idid -n -u 03⤵PID:3020
-
-
-
/bin/sh/bin/sh -2⤵PID:3021
-
/usr/bin/idid -n -u 03⤵PID:3022
-
-
-
/bin/sh/bin/sh -2⤵PID:3023
-
/usr/bin/idid -n -u 03⤵PID:3024
-
-
-
/bin/sh/bin/sh -2⤵PID:3025
-
/usr/bin/idid -n -u 03⤵PID:3026
-
-
-
/bin/sh/bin/sh -2⤵PID:3027
-
/usr/bin/idid -n -u 03⤵PID:3028
-
-
-
/bin/sh/bin/sh -2⤵PID:3029
-
/usr/bin/idid -n -u 03⤵PID:3030
-
-
-
/bin/sh/bin/sh -2⤵PID:3031
-
/usr/bin/idid -n -u 03⤵PID:3032
-
-
-
/bin/sh/bin/sh -2⤵PID:3033
-
/usr/bin/idid -n -u 03⤵
- Reads runtime system information
PID:3034
-
-
-
/bin/sh/bin/sh -2⤵PID:3035
-
/usr/bin/idid -n -u 03⤵PID:3036
-
-
-
/bin/sh/bin/sh -2⤵PID:3037
-
/usr/bin/idid -n -u 03⤵PID:3038
-
-
-
/bin/sh/bin/sh -2⤵PID:3039
-
/usr/bin/idid -n -u 03⤵PID:3040
-
-
-
/bin/sh/bin/sh -2⤵PID:3041
-
/usr/bin/idid -n -u 03⤵PID:3042
-
-
-
/bin/sh/bin/sh -2⤵PID:3043
-
/usr/bin/idid -n -u 03⤵PID:3044
-
-
-
/bin/sh/bin/sh -2⤵PID:3045
-
/usr/bin/idid -n -u 03⤵PID:3046
-
-
-
/bin/sh/bin/sh -2⤵PID:3047
-
/usr/bin/idid -n -u 03⤵PID:3048
-
-
-
/bin/sh/bin/sh -2⤵PID:3049
-
/usr/bin/idid -n -u 03⤵PID:3050
-
-
-
/bin/sh/bin/sh -2⤵PID:3051
-
/usr/bin/idid -n -u 03⤵PID:3052
-
-
-
/bin/sh/bin/sh -2⤵PID:3053
-
/usr/bin/idid -n -u 03⤵PID:3054
-
-
-
/bin/sh/bin/sh -2⤵PID:3055
-
/usr/bin/idid -n -u 03⤵PID:3056
-
-
-
/bin/sh/bin/sh -2⤵PID:3057
-
/usr/bin/idid -n -u 03⤵PID:3058
-
-
-
/bin/sh/bin/sh -2⤵PID:3059
-
/usr/bin/idid -n -u 03⤵PID:3060
-
-
-
/bin/sh/bin/sh -2⤵PID:3061
-
/usr/bin/idid -n -u 03⤵PID:3062
-
-
-
/bin/sh/bin/sh -2⤵PID:3063
-
/usr/bin/idid -n -u 03⤵PID:3064
-
-
-
/bin/sh/bin/sh -2⤵PID:3065
-
/usr/bin/idid -n -u 03⤵PID:3066
-
-
-
/bin/sh/bin/sh -2⤵PID:3067
-
/usr/bin/idid -n -u 1013⤵PID:3068
-
-
-
/bin/sh/bin/sh -2⤵PID:3069
-
/usr/bin/idid -n -u 03⤵PID:3070
-
-
-
/bin/sh/bin/sh -2⤵PID:3071
-
/usr/bin/idid -n -u 03⤵PID:3072
-
-
-
/bin/sh/bin/sh -2⤵PID:3073
-
/usr/bin/idid -n -u 03⤵PID:3074
-
-
-
/bin/sh/bin/sh -2⤵PID:3075
-
/usr/bin/idid -n -u 03⤵PID:3076
-
-
-
/bin/sh/bin/sh -2⤵PID:3077
-
/usr/bin/idid -n -u 03⤵PID:3078
-
-
-
/bin/sh/bin/sh -2⤵PID:3079
-
/usr/bin/idid -n -u 03⤵PID:3080
-
-
-
/bin/sh/bin/sh -2⤵PID:3081
-
/usr/bin/idid -n -u 03⤵PID:3082
-
-
-
/bin/sh/bin/sh -2⤵PID:3083
-
/usr/bin/idid -n -u 03⤵PID:3084
-
-
-
/bin/sh/bin/sh -2⤵PID:3085
-
/usr/bin/idid -n -u 03⤵PID:3086
-
-
-
/bin/sh/bin/sh -2⤵PID:3087
-
/usr/bin/idid -n -u 03⤵PID:3088
-
-
-
/bin/sh/bin/sh -2⤵PID:3089
-
/usr/bin/idid -n -u 03⤵PID:3090
-
-
-
/bin/sh/bin/sh -2⤵PID:3091
-
/usr/bin/idid -n -u 03⤵PID:3092
-
-
-
/bin/sh/bin/sh -2⤵PID:3093
-
/usr/bin/idid -n -u 03⤵PID:3094
-
-
-
/bin/sh/bin/sh -2⤵PID:3095
-
/usr/bin/idid -n -u 03⤵PID:3096
-
-
-
/bin/sh/bin/sh -2⤵PID:3097
-
/usr/bin/idid -n -u 03⤵PID:3098
-
-
-
/bin/sh/bin/sh -2⤵PID:3099
-
/usr/bin/idid -n -u 03⤵PID:3100
-
-
-
/bin/sh/bin/sh -2⤵PID:3101
-
/usr/bin/idid -n -u 03⤵PID:3102
-
-
-
/bin/sh/bin/sh -2⤵PID:3103
-
/usr/bin/idid -n -u 03⤵PID:3104
-
-
-
/bin/sh/bin/sh -2⤵PID:3105
-
/usr/bin/idid -n -u 03⤵PID:3106
-
-
-
/bin/sh/bin/sh -2⤵PID:3107
-
/usr/bin/idid -n -u 03⤵PID:3108
-
-
-
/bin/sh/bin/sh -2⤵PID:3109
-
/usr/bin/idid -n -u 03⤵PID:3110
-
-
-
/bin/sh/bin/sh -2⤵PID:3111
-
/usr/bin/idid -n -u 03⤵PID:3112
-
-
-
/bin/sh/bin/sh -2⤵PID:3113
-
/usr/bin/idid -n -u 03⤵PID:3114
-
-
-
/bin/sh/bin/sh -2⤵PID:3115
-
/usr/bin/idid -n -u 03⤵PID:3116
-
-
-
/bin/sh/bin/sh -2⤵PID:3117
-
/usr/bin/idid -n -u 03⤵PID:3118
-
-
-
/bin/sh/bin/sh -2⤵PID:3119
-
-
/usr/bin/freefree -h1⤵
- Reads CPU attributes
PID:1495
-
/bin/sh/bin/sh -1⤵PID:1496
-
/usr/bin/idid -n -u 02⤵PID:1497
-
-
/bin/sh/bin/sh -1⤵PID:1499
-
/bin/sh/bin/sh -1⤵PID:1500
-
/bin/sh/bin/sh -1⤵PID:1507
-
/usr/bin/chattrchattr +ia .ssh/authorized_keys2⤵
- Attempts to change immutable files
PID:1510
-
-
/usr/bin/journalctljournalctl -S "@0" -u sshd1⤵
- Reads EFI boot settings
- Enumerates kernel/hardware configuration
PID:1508
-
/bin/sh/bin/sh -1⤵PID:1509
-
/usr/bin/idid -n -u 02⤵PID:1512
-
-
/bin/sh/bin/sh -1⤵PID:1642
-
/usr/bin/idid -n -u 02⤵PID:1643
-
-
/bin/sh/bin/sh -1⤵PID:1645
-
/usr/bin/idid -n -u 02⤵PID:1646
-
-
/bin/sh/bin/sh -1⤵PID:1647
-
/usr/bin/idid -n -u 02⤵PID:1648
-
-
/bin/sh/bin/sh -1⤵PID:1676
-
/usr/bin/idid -n -u 02⤵PID:1678
-
-
/bin/sh/bin/sh -1⤵PID:1684
-
/usr/bin/idid -n -u 02⤵PID:1688
-
-
/bin/sh/bin/sh -1⤵PID:1696
-
/usr/bin/idid -n -u 02⤵PID:1697
-
-
/bin/sh/bin/sh -1⤵PID:1703
-
/usr/bin/idid -n -u 02⤵PID:1705
-
-
/bin/sh/bin/sh -1⤵PID:1711
-
/usr/bin/idid -n -u 02⤵PID:1712
-
-
/bin/sh/bin/sh -1⤵PID:1719
-
/usr/bin/idid -n -u 02⤵PID:1724
-
-
/bin/sh/bin/sh -1⤵PID:1727
-
/usr/bin/idid -n -u 02⤵PID:1728
-
-
/bin/sh/bin/sh -1⤵PID:1737
-
/usr/bin/idid -n -u 02⤵PID:1745
-
-
/bin/sh/bin/sh -1⤵PID:1755
-
/usr/bin/idid -n -u 02⤵PID:1759
-
-
/bin/sh/bin/sh -1⤵PID:1760
-
/usr/bin/idid -n -u 02⤵PID:1763
-
-
/bin/sh/bin/sh -1⤵PID:1767
-
/usr/bin/idid -n -u 02⤵PID:1768
-
-
/bin/sh/bin/sh -1⤵PID:1769
-
/usr/bin/idid -n -u 02⤵PID:1770
-
-
/bin/sh/bin/sh -1⤵PID:1772
-
/usr/bin/idid -n -u 1212⤵PID:1775
-
-
/bin/sh/bin/sh -1⤵PID:1777
-
/usr/bin/idid -n -u 02⤵PID:1779
-
-
/bin/sh/bin/sh -1⤵PID:1782
-
/usr/bin/idid -n -u 02⤵PID:1783
-
-
/bin/sh/bin/sh -1⤵PID:1785
-
/usr/bin/idid -n -u 02⤵PID:1787
-
-
/bin/sh/bin/sh -1⤵PID:1789
-
/usr/bin/idid -n -u 02⤵PID:1790
-
-
/bin/sh/bin/sh -1⤵PID:1792
-
/usr/bin/idid -n -u 02⤵PID:1795
-
-
/bin/sh/bin/sh -1⤵PID:1797
-
/usr/bin/idid -n -u 02⤵PID:1798
-
-
/bin/sh/bin/sh -1⤵PID:1801
-
/usr/bin/idid -n -u 02⤵PID:1802
-
-
/bin/sh/bin/sh -1⤵PID:1805
-
/usr/bin/idid -n -u 02⤵PID:1806
-
-
/bin/sh/bin/sh -1⤵PID:1812
-
/usr/bin/idid -n -u 02⤵PID:1815
-
-
/bin/sh/bin/sh -1⤵PID:1816
-
/usr/bin/idid -n -u 02⤵PID:1818
-
-
/bin/sh/bin/sh -1⤵PID:1827
-
/usr/bin/idid -n -u 02⤵
- Reads runtime system information
PID:1836
-
-
/bin/sh/bin/sh -1⤵PID:1844
-
/usr/bin/idid -n -u 02⤵PID:1846
-
-
/bin/sh/bin/sh -1⤵PID:1850
-
/usr/bin/idid -n -u 02⤵PID:1853
-
-
/bin/sh/bin/sh -1⤵PID:1854
-
/usr/bin/idid -n -u 02⤵PID:1855
-
-
/bin/sh/bin/sh -1⤵PID:1860
-
/usr/bin/idid -n -u 02⤵PID:1861
-
-
/bin/sh/bin/sh -1⤵PID:1863
-
/usr/bin/idid -n -u 02⤵PID:1865
-
-
/bin/sh/bin/sh -1⤵PID:1867
-
/usr/bin/idid -n -u 02⤵PID:1868
-
-
/bin/sh/bin/sh -1⤵PID:1878
-
/usr/bin/idid -n -u 02⤵PID:1879
-
-
/bin/sh/bin/sh -1⤵PID:1883
-
/usr/bin/idid -n -u 02⤵PID:1884
-
-
/bin/sh/bin/sh -1⤵PID:1890
-
/usr/bin/idid -n -u 02⤵PID:1892
-
-
/bin/sh/bin/sh -1⤵PID:1981
-
/usr/bin/idid -n -u 02⤵PID:1983
-
-
/bin/sh/bin/sh -1⤵PID:1985
-
/usr/bin/idid -n -u 02⤵PID:1987
-
-
/bin/sh/bin/sh -1⤵PID:1991
-
/usr/bin/idid -n -u 02⤵PID:1996
-
-
/bin/sh/bin/sh -1⤵PID:2014
-
/usr/bin/idid -n -u 02⤵PID:2016
-
-
/bin/sh/bin/sh -1⤵PID:2019
-
/usr/bin/idid -n -u 02⤵PID:2021
-
-
/bin/sh/bin/sh -1⤵PID:2051
-
/usr/bin/idid -n -u 02⤵PID:2052
-
-
/bin/sh/bin/sh -1⤵PID:2054
-
/usr/bin/idid -n -u 02⤵PID:2055
-
-
/bin/sh/bin/sh -1⤵PID:2056
-
/usr/bin/idid -n -u 02⤵PID:2057
-
-
/bin/sh/bin/sh -1⤵PID:2059
-
/usr/bin/idid -n -u 02⤵PID:2060
-
-
/bin/sh/bin/sh -1⤵PID:2061
-
/usr/bin/idid -n -u 1012⤵PID:2063
-
-
/bin/sh/bin/sh -1⤵PID:2139
-
/usr/bin/idid -n -u 02⤵PID:2140
-
-
/bin/sh/bin/sh -1⤵PID:2142
-
/usr/bin/idid -n -u 02⤵PID:2144
-
-
/bin/sh/bin/sh -1⤵PID:2146
-
/usr/bin/idid -n -u 02⤵PID:2147
-
-
/bin/sh/bin/sh -1⤵PID:2151
-
/usr/bin/idid -n -u 02⤵PID:2152
-
-
/bin/sh/bin/sh -1⤵PID:2156
-
/usr/bin/idid -n -u 02⤵PID:2157
-
-
/bin/sh/bin/sh -1⤵PID:2158
-
/usr/bin/idid -n -u 02⤵PID:2159
-
-
/bin/sh/bin/sh -1⤵PID:2162
-
/usr/bin/idid -n -u 02⤵PID:2163
-
-
/bin/sh/bin/sh -1⤵PID:2165
-
/usr/bin/idid -n -u 02⤵PID:2166
-
-
/bin/sh/bin/sh -1⤵PID:2168
-
/usr/bin/idid -n -u 1192⤵PID:2170
-
-
/bin/sh/bin/sh -1⤵PID:2171
-
/usr/bin/idid -n -u 1162⤵PID:2172
-
-
/bin/sh/bin/sh -1⤵PID:2174
-
/usr/bin/idid -n -u 1162⤵PID:2175
-
-
/bin/sh/bin/sh -1⤵PID:2176
-
/usr/bin/idid -n -u 02⤵PID:2177
-
-
/bin/sh/bin/sh -1⤵PID:2178
-
/usr/bin/idid -n -u 02⤵PID:2179
-
-
/bin/sh/bin/sh -1⤵PID:2182
-
/usr/bin/idid -n -u 02⤵PID:2184
-
-
/bin/sh/bin/sh -1⤵PID:2185
-
/usr/bin/idid -n -u 02⤵PID:2186
-
-
/bin/sh/bin/sh -1⤵PID:2188
-
/usr/bin/idid -n -u 02⤵PID:2189
-
-
/bin/sh/bin/sh -1⤵PID:2191
-
/usr/bin/idid -n -u 02⤵PID:2192
-
-
/bin/sh/bin/sh -1⤵PID:2194
-
/usr/bin/idid -n -u 02⤵PID:2195
-
-
/bin/sh/bin/sh -1⤵PID:2196
-
/usr/bin/idid -n -u 02⤵PID:2198
-
-
/bin/sh/bin/sh -1⤵PID:2199
-
/usr/bin/idid -n -u 02⤵PID:2200
-
-
/bin/sh/bin/sh -1⤵PID:2202
-
/usr/bin/idid -n -u 02⤵PID:2203
-
-
/bin/sh/bin/sh -1⤵PID:2205
-
/usr/bin/idid -n -u 02⤵PID:2206
-
-
/bin/sh/bin/sh -1⤵PID:2208
-
/usr/bin/idid -n -u 02⤵PID:2210
-
-
/bin/sh/bin/sh -1⤵PID:2212
-
/usr/bin/idid -n -u 02⤵PID:2213
-
-
/bin/sh/bin/sh -1⤵PID:2214
-
/usr/bin/idid -n -u 02⤵PID:2216
-
-
/bin/sh/bin/sh -1⤵PID:2217
-
/usr/bin/idid -n -u 02⤵
- Reads runtime system information
PID:2218
-
-
/bin/sh/bin/sh -1⤵PID:2220
-
/usr/bin/idid -n -u 02⤵PID:2222
-
-
/bin/sh/bin/sh -1⤵PID:2223
-
/usr/bin/idid -n -u 02⤵PID:2224
-
-
/bin/sh/bin/sh -1⤵PID:2226
-
/usr/bin/idid -n -u 02⤵PID:2227
-
-
/bin/sh/bin/sh -1⤵PID:2229
-
/usr/bin/idid -n -u 02⤵PID:2230
-
-
/bin/sh/bin/sh -1⤵PID:2231
-
/usr/bin/idid -n -u 02⤵PID:2232
-
-
/bin/sh/bin/sh -1⤵PID:2235
-
/usr/bin/idid -n -u 02⤵PID:2236
-
-
/bin/sh/bin/sh -1⤵PID:2238
-
/usr/bin/idid -n -u 02⤵
- Reads runtime system information
PID:2239
-
-
/bin/sh/bin/sh -1⤵PID:2241
-
/usr/bin/idid -n -u 02⤵PID:2242
-
-
/bin/sh/bin/sh -1⤵PID:2245
-
/usr/bin/idid -n -u 02⤵PID:2246
-
-
/bin/sh/bin/sh -1⤵PID:2247
-
/usr/bin/idid -n -u 02⤵PID:2249
-
-
/bin/sh/bin/sh -1⤵PID:2250
-
/usr/bin/idid -n -u 02⤵PID:2251
-
-
/bin/sh/bin/sh -1⤵PID:2254
-
/usr/bin/idid -n -u 02⤵PID:2255
-
-
/bin/sh/bin/sh -1⤵PID:2257
-
/usr/bin/idid -n -u 02⤵PID:2260
-
-
/bin/sh/bin/sh -1⤵PID:2263
-
/usr/bin/idid -n -u 02⤵PID:2265
-
-
/bin/sh/bin/sh -1⤵PID:2267
-
/usr/bin/idid -n -u 02⤵PID:2270
-
-
/bin/sh/bin/sh -1⤵PID:2273
-
/usr/bin/idid -n -u 02⤵PID:2274
-
-
/bin/sh/bin/sh -1⤵PID:2277
-
/usr/bin/idid -n -u 02⤵PID:2279
-
-
/usr/bin/uptimeuptime1⤵
- Reads CPU attributes
PID:2430
-
/bin/sh/bin/sh -1⤵PID:2432
-
/usr/bin/chattrchattr -ia .ssh/authorized_keys2⤵
- Attempts to change immutable files
PID:2433
-
-
/usr/bin/freefree -h1⤵
- Reads CPU attributes
PID:2526
-
/usr/bin/uptimeuptime1⤵
- Reads CPU attributes
PID:2527
-
/bin/sh/bin/sh -1⤵PID:2528
-
/bin/sh/bin/sh -1⤵PID:2529
-
/usr/bin/chattrchattr -ia .ssh/authorized_keys2⤵
- Attempts to change immutable files
PID:2530
-
-
/bin/sh/bin/sh -1⤵PID:2531
-
/usr/bin/idid -n -u 02⤵PID:2532
-
-
/bin/sh/bin/sh -1⤵PID:2533
-
/usr/bin/idid -n -u 02⤵PID:2534
-
-
/bin/sh/bin/sh -1⤵PID:2535
-
/usr/bin/idid -n -u 02⤵PID:2536
-
-
/bin/sh/bin/sh -1⤵PID:2537
-
/usr/bin/idid -n -u 02⤵PID:2538
-
-
/bin/sh/bin/sh -1⤵PID:2539
-
/usr/bin/idid -n -u 02⤵PID:2540
-
-
/bin/sh/bin/sh -1⤵PID:2541
-
/usr/bin/idid -n -u 02⤵PID:2542
-
-
/bin/sh/bin/sh -1⤵PID:2543
-
/usr/bin/idid -n -u 02⤵PID:2544
-
-
/bin/sh/bin/sh -1⤵PID:2545
-
/usr/bin/idid -n -u 02⤵PID:2546
-
-
/bin/sh/bin/sh -1⤵PID:2547
-
/usr/bin/idid -n -u 02⤵PID:2548
-
-
/bin/sh/bin/sh -1⤵PID:2549
-
/usr/bin/idid -n -u 02⤵PID:2550
-
-
/bin/sh/bin/sh -1⤵PID:2551
-
/usr/bin/idid -n -u 02⤵PID:2552
-
-
/bin/sh/bin/sh -1⤵PID:2553
-
/usr/bin/idid -n -u 02⤵PID:2554
-
-
/bin/sh/bin/sh -1⤵PID:2555
-
/usr/bin/idid -n -u 02⤵PID:2556
-
-
/bin/sh/bin/sh -1⤵PID:2557
-
/usr/bin/idid -n -u 02⤵PID:2558
-
-
/bin/sh/bin/sh -1⤵PID:2559
-
/usr/bin/idid -n -u 02⤵PID:2560
-
-
/bin/sh/bin/sh -1⤵PID:2561
-
/usr/bin/idid -n -u 02⤵PID:2562
-
-
/bin/sh/bin/sh -1⤵PID:2563
-
/usr/bin/idid -n -u 02⤵PID:2564
-
-
/bin/sh/bin/sh -1⤵PID:2565
-
/usr/bin/idid -n -u 02⤵PID:2566
-
-
/bin/sh/bin/sh -1⤵PID:2567
-
/usr/bin/idid -n -u 02⤵PID:2568
-
-
/bin/sh/bin/sh -1⤵PID:2569
-
/usr/bin/idid -n -u 02⤵PID:2570
-
-
/bin/sh/bin/sh -1⤵PID:2571
-
/usr/bin/idid -n -u 02⤵PID:2572
-
-
/bin/sh/bin/sh -1⤵PID:2573
-
/usr/bin/idid -n -u 02⤵PID:2574
-
-
/bin/sh/bin/sh -1⤵PID:2575
-
/usr/bin/idid -n -u 02⤵PID:2576
-
-
/bin/sh/bin/sh -1⤵PID:2577
-
/usr/bin/idid -n -u 02⤵PID:2578
-
-
/bin/sh/bin/sh -1⤵PID:2579
-
/usr/bin/idid -n -u 02⤵PID:2580
-
-
/bin/sh/bin/sh -1⤵PID:2581
-
/usr/bin/idid -n -u 02⤵PID:2582
-
-
/bin/sh/bin/sh -1⤵PID:2583
-
/usr/bin/idid -n -u 02⤵PID:2584
-
-
/bin/sh/bin/sh -1⤵PID:2585
-
/usr/bin/idid -n -u 02⤵PID:2586
-
-
/bin/sh/bin/sh -1⤵PID:2587
-
/usr/bin/idid -n -u 02⤵PID:2588
-
-
/bin/sh/bin/sh -1⤵PID:2589
-
/usr/bin/idid -n -u 02⤵PID:2590
-
-
/bin/sh/bin/sh -1⤵PID:2591
-
/usr/bin/idid -n -u 02⤵PID:2592
-
-
/bin/sh/bin/sh -1⤵PID:2593
-
/usr/bin/idid -n -u 02⤵PID:2594
-
-
/bin/sh/bin/sh -1⤵PID:2595
-
/usr/bin/idid -n -u 02⤵PID:2596
-
-
/bin/sh/bin/sh -1⤵PID:2597
-
/usr/bin/idid -n -u 02⤵PID:2598
-
-
/bin/sh/bin/sh -1⤵PID:2599
-
/usr/bin/idid -n -u 02⤵PID:2600
-
-
/bin/sh/bin/sh -1⤵PID:2601
-
/usr/bin/idid -n -u 02⤵PID:2602
-
-
/bin/sh/bin/sh -1⤵PID:2603
-
/usr/bin/idid -n -u 1232⤵PID:2604
-
-
/bin/sh/bin/sh -1⤵PID:2605
-
/usr/bin/idid -n -u 02⤵PID:2606
-
-
/bin/sh/bin/sh -1⤵PID:2607
-
/usr/bin/idid -n -u 02⤵PID:2608
-
-
/bin/sh/bin/sh -1⤵PID:2609
-
/usr/bin/idid -n -u 02⤵PID:2610
-
-
/bin/sh/bin/sh -1⤵PID:2611
-
/usr/bin/idid -n -u 02⤵PID:2612
-
-
/bin/sh/bin/sh -1⤵PID:2613
-
/usr/bin/idid -n -u 02⤵PID:2614
-
-
/bin/sh/bin/sh -1⤵PID:2615
-
/usr/bin/idid -n -u 02⤵PID:2616
-
-
/bin/sh/bin/sh -1⤵PID:2617
-
/usr/bin/idid -n -u 02⤵PID:2618
-
-
/bin/sh/bin/sh -1⤵PID:2619
-
/usr/bin/idid -n -u 02⤵PID:2620
-
-
/bin/sh/bin/sh -1⤵PID:2621
-
/usr/bin/idid -n -u 02⤵PID:2622
-
-
/bin/sh/bin/sh -1⤵PID:2623
-
/usr/bin/idid -n -u 02⤵PID:2624
-
-
/bin/sh/bin/sh -1⤵PID:2625
-
/usr/bin/idid -n -u 02⤵PID:2626
-
-
/bin/sh/bin/sh -1⤵PID:2627
-
/usr/bin/idid -n -u 02⤵PID:2628
-
-
/bin/sh/bin/sh -1⤵PID:2629
-
/usr/bin/idid -n -u 02⤵PID:2630
-
-
/bin/sh/bin/sh -1⤵PID:2631
-
/usr/bin/idid -n -u 02⤵PID:2632
-
-
/bin/sh/bin/sh -1⤵PID:2633
-
/usr/bin/idid -n -u 02⤵PID:2634
-
-
/bin/sh/bin/sh -1⤵PID:2635
-
/usr/bin/idid -n -u 02⤵PID:2636
-
-
/bin/sh/bin/sh -1⤵PID:2637
-
/usr/bin/idid -n -u 02⤵PID:2638
-
-
/bin/sh/bin/sh -1⤵PID:2639
-
/usr/bin/idid -n -u 02⤵PID:2640
-
-
/bin/sh/bin/sh -1⤵PID:2641
-
/usr/bin/idid -n -u 02⤵PID:2642
-
-
/bin/sh/bin/sh -1⤵PID:2643
-
/usr/bin/idid -n -u 02⤵PID:2644
-
-
/bin/sh/bin/sh -1⤵PID:2645
-
/usr/bin/idid -n -u 02⤵
- Reads runtime system information
PID:2646
-
-
/bin/sh/bin/sh -1⤵PID:2647
-
/usr/bin/idid -n -u 02⤵PID:2648
-
-
/bin/sh/bin/sh -1⤵PID:2649
-
/usr/bin/idid -n -u 02⤵PID:2650
-
-
/bin/sh/bin/sh -1⤵PID:2651
-
/usr/bin/idid -n -u 02⤵PID:2652
-
-
/bin/sh/bin/sh -1⤵PID:2653
-
/usr/bin/idid -n -u 02⤵PID:2654
-
-
/bin/sh/bin/sh -1⤵PID:2655
-
/usr/bin/idid -n -u 02⤵PID:2656
-
-
/bin/sh/bin/sh -1⤵PID:2657
-
/usr/bin/idid -n -u 02⤵PID:2658
-
-
/bin/sh/bin/sh -1⤵PID:2659
-
/usr/bin/idid -n -u 02⤵PID:2660
-
-
/bin/sh/bin/sh -1⤵PID:2661
-
/usr/bin/idid -n -u 02⤵PID:2662
-
-
/bin/sh/bin/sh -1⤵PID:2663
-
/usr/bin/idid -n -u 02⤵PID:2664
-
-
/bin/sh/bin/sh -1⤵PID:2665
-
/usr/bin/idid -n -u 02⤵PID:2666
-
-
/bin/sh/bin/sh -1⤵PID:2667
-
/usr/bin/idid -n -u 02⤵PID:2668
-
-
/bin/sh/bin/sh -1⤵PID:2669
-
/usr/bin/idid -n -u 02⤵PID:2670
-
-
/bin/sh/bin/sh -1⤵PID:2671
-
/usr/bin/idid -n -u 02⤵PID:2672
-
-
/bin/sh/bin/sh -1⤵PID:2673
-
/usr/bin/idid -n -u 02⤵PID:2674
-
-
/bin/sh/bin/sh -1⤵PID:2675
-
/usr/bin/idid -n -u 02⤵PID:2676
-
-
/bin/sh/bin/sh -1⤵PID:2677
-
/usr/bin/idid -n -u 02⤵PID:2678
-
-
/bin/sh/bin/sh -1⤵PID:2679
-
/usr/bin/idid -n -u 02⤵PID:2680
-
-
/bin/sh/bin/sh -1⤵PID:2681
-
/usr/bin/idid -n -u 02⤵PID:2682
-
-
/bin/sh/bin/sh -1⤵PID:2683
-
/usr/bin/idid -n -u 02⤵PID:2684
-
-
/bin/sh/bin/sh -1⤵PID:2685
-
/usr/bin/idid -n -u 02⤵PID:2686
-
-
/bin/sh/bin/sh -1⤵PID:2687
-
/usr/bin/idid -n -u 02⤵PID:2688
-
-
/bin/sh/bin/sh -1⤵PID:2689
-
/usr/bin/idid -n -u 02⤵PID:2690
-
-
/bin/sh/bin/sh -1⤵PID:2691
-
/usr/bin/idid -n -u 02⤵PID:2692
-
-
/bin/sh/bin/sh -1⤵PID:2693
-
/usr/bin/idid -n -u 02⤵PID:2694
-
-
/bin/sh/bin/sh -1⤵PID:2695
-
/usr/bin/idid -n -u 02⤵PID:2696
-
-
/bin/sh/bin/sh -1⤵PID:2697
-
/usr/bin/idid -n -u 02⤵PID:2698
-
-
/bin/sh/bin/sh -1⤵PID:2699
-
/usr/bin/idid -n -u 02⤵PID:2700
-
-
/bin/sh/bin/sh -1⤵PID:2701
-
/usr/bin/idid -n -u 02⤵PID:2702
-
-
/bin/sh/bin/sh -1⤵PID:2703
-
/usr/bin/idid -n -u 02⤵PID:2704
-
-
/bin/sh/bin/sh -1⤵PID:2705
-
/usr/bin/idid -n -u 02⤵PID:2706
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
381B
MD59da18d38b6dd4c4aa84642378d63fa89
SHA1c5a976691e4b5963b5e760044f22cc9685268db6
SHA25643062900b2539d8d1f67f30fa7042c56b53541f63875b5f0de5d8fbde0e0a8bf
SHA512222b20b5b2ff8956c13dbac1f8d3f81435613b751913d65f4c4082ea9c1a7c8ae91be17a24ef4ae0c708bfe09daab552bb209615714d70acfaaed89c536c71b3