1990a0005ec6cd1b0cbfaa53cb51f27622f17e14df230215cb9921e1b2552a47

General

Target

linpeas.sh
Size

840KB
MD5

33e636d874eaf8399edac7f496e2742d
SHA1

2e9c7da04209866bb954fb37779a182e07bba67d
SHA256

1990a0005ec6cd1b0cbfaa53cb51f27622f17e14df230215cb9921e1b2552a47
SHA512

bc8d93964f4ad682331fb99b05d07bcd78c132d35458169dd1cbacccef0c0acc6d99efc656d318685ed812846bfb9f414f6c3ec664a5fc41f922f441c55fa5ad
SSDEEP

6144:AGtG23KlUK0LZqV8FxkZ5zPulEdHqZ7rhhVbGdQ3CPlHMpsgdce2Nkba/Jp5IsTR:Ci4x+DzgK/Dbyw3/eqEPF

Score

6^/10

antivm

Malware Config

Signatures

Checks hardware identifiers (DMI) 1 TTPs 2 IoCs
Checks DMI information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

description ioc process

File opened for reading /sys/class/dmi/id/product_name
File opened for reading /sys/class/dmi/id/sys_vendor
Enumerates running processes
Discovers information about currently running processes on the system
Reads hardware information 1 TTPs 1 IoCs
Accesses system info like serial numbers, manufacturer names etc.

System Information Discovery
T1082

Processes:

find

description ioc process

File opened for reading /sys/devices/virtual/dmi/id/power find

description	ioc	process
File opened for reading	/sys/class/dmi/id/product_name
File opened for reading	/sys/class/dmi/id/sys_vendor

description	ioc	process
File opened for reading	/sys/devices/virtual/dmi/id/power	find

Reads network interface configuration 2 TTPs 12 IoCs

Fetches information about one or more active network interfaces.

System Network Configuration Discovery

T1016

System Network Connections Discovery

T1049

Processes:

find

description	ioc	process
File opened for reading	/sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits	find
File opened for reading	/sys/devices/virtual/net/lo/power	find
File opened for reading	/sys/devices/virtual/net/lo/queues/tx-0	find
File opened for reading	/sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits	find
File opened for reading	/sys/devices/virtual/net/lo/queues/rx-0	find
File opened for reading	/sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues	find
File opened for reading	/sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0	find
File opened for reading	/sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0	find
File opened for reading	/sys/devices/virtual/net/lo/statistics	find
File opened for reading	/sys/devices/virtual/net/lo/queues	find
File opened for reading	/sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics	find
File opened for reading	/sys/devices/pci0000:00/0000:00:03.0/net/ens3/power	find

Checks CPU configuration 1 TTPs 2 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

grep

description ioc process

File opened for reading /proc/cpuinfo grep
File opened for reading /proc/cpuinfo

description	ioc	process
File opened for reading	/proc/cpuinfo	grep
File opened for reading	/proc/cpuinfo

Reads CPU attributes 1 TTPs 24 IoCs

System Information Discovery

T1082

Processes:

finduptimeps

description	ioc	process
File opened for reading	/sys/devices/system/cpu/cpu0/hotplug	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2/power	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index0/power	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3	find
File opened for reading	/sys/devices/system/cpu/online	uptime
File opened for reading	/sys/devices/system/cpu/cpu0	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index0	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/power	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index1	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3/power	find
File opened for reading	/sys/devices/system/cpu/hotplug	find
File opened for reading	/sys/devices/system/cpu/power	find
File opened for reading	/sys/devices/system/cpu/smt	find
File opened for reading	/sys/devices/system/cpu/vulnerabilities	find
File opened for reading	/sys/devices/system/cpu/cpu0/microcode	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2	find
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index1/power	find
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/cpuidle	find
File opened for reading	/sys/devices/system/cpu/microcode	find
File opened for reading	/sys/devices/system/cpu/cpufreq	find
File opened for reading	/sys/devices/system/cpu/cpu0/power	find
File opened for reading	/sys/devices/system/cpu/cpu0/topology	find

Enumerates kernel/hardware configuration 1 TTPs 64 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

Processes:

findfind

description	ioc	process
File opened for reading	/sys/kernel/debug/tracing/events/sched/sched_stat_runtime	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_enter_setitimer	find
File opened for reading	/sys/devices/platform/PNP0103:00/power	find
File opened for reading	/sys/devices/pci0000:00/0000:00:04.0/ata5/ata_port	find
File opened for reading	/sys/kernel/debug/tracing/events/mce/mce_record	find
File opened for reading	/sys/kernel/debug/opp	find
File opened for reading	/sys/class/spi_slave	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_exit_sysinfo	find
File opened for reading	/sys/kernel/debug/tracing/events/vsyscall/emulate_vsyscall	find
File opened for reading	/sys/fs/cgroup/unified/system.slice/systemd-udevd.service	find
File opened for reading	/sys/module/mac_hid	find
File opened for reading	/sys/kernel/tracing	find
File opened for reading	/sys/kernel/debug/tracing/events/ras/arm_event	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_enter_rmdir	find
File opened for reading	/sys/devices/pnp0/00:04/tty/ttyS0/power	find
File opened for reading	/sys/devices/platform/serial8250/tty/ttyS1/power	find
File opened for reading	/sys/devices/virtual/ppp	find
File opened for reading	/sys/devices/virtual/tty/tty38/power	find
File opened for reading	/sys/module	find
File opened for reading	/sys/module/rcupdate/parameters	find
File opened for reading	/sys/kernel/slab/:A-0000208	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_enter_accept4	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_exit_getpgrp	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_exit_rt_sigsuspend	find
File opened for reading	/sys/kernel/debug/block/loop6/hctx0	find
File opened for reading	/sys/class/rtc	find
File opened for reading	/sys/devices/virtual/tty/tty48/power	find
File opened for reading	/sys/fs/cgroup/cpu,cpuacct	find
File opened for reading	/sys/module/virtio_gpu/sections	find
File opened for reading	/sys/kernel/debug/tracing/events/ext4/ext4_journalled_write_end	find
File opened for reading	/sys/kernel/debug/tracing/events/filelock/fcntl_setlk	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_exit_process_vm_readv	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_enter_arch_prctl	find
File opened for reading	/sys/devices/pci0000:00/0000:00:04.0/ata5/link5/dev5.0/power	find
File opened for reading	/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:00/power	find
File opened for reading	/sys/module/cpuidle/parameters	find
File opened for reading	/sys/module/x_tables/sections	find
File opened for reading	/sys/kernel/debug/tracing/events/block/block_bio_queue	find
File opened for reading	/sys/kernel/debug/tracing/events/ext4/ext4_mb_release_inode_pa	find
File opened for reading	/sys/module/hid_generic	find
File opened for reading	/sys/kernel/irq/26	find
File opened for reading	/sys/kernel/debug/tracing/events/rcu	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_enter_syncfs	find
File opened for reading	/sys/firmware	find
File opened for reading	/sys/kernel/debug/tracing/events/exceptions/page_fault_user	find
File opened for reading	/sys/power	find
File opened for reading	/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a/power	find
File opened for reading	/sys/module/ppp_generic/parameters	find
File opened for reading	/sys/kernel/debug/tracing/events/sched/sched_stat_blocked	find
File opened for reading	/sys/devices	find
File opened for reading	/sys/kernel/debug/tracing/events/compaction/mm_compaction_end	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_enter_eventfd	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_exit_get_mempolicy	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_exit_setuid	find
File opened for reading	/sys/devices/platform/serial8250/tty/ttyS16/power	find
File opened for reading	/sys/devices/platform/i8042/serio0/input/input1/capabilities	find
File opened for reading	/sys/devices/virtual/block/loop0/mq/0/cpu0	find
File opened for reading	/sys/bus/pci_express/devices	find
File opened for reading	/sys/devices/platform/serial8250/tty/ttyS22	find
File opened for reading	/sys/devices/virtual/bdi/0:48	find
File opened for reading	/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0a/power	find
File opened for reading	/sys/kernel/slab/:0000256	find
File opened for reading	/sys/kernel/debug/tracing/events/migrate/mm_numa_migrate_ratelimit	find
File opened for reading	/sys/kernel/debug/tracing/events/syscalls/sys_enter_shmctl	find

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

pssedfind

description	ioc	process
File opened for reading	/proc/1263/stat	ps
File opened for reading	/proc/sys/net/ipv6/conf/ens3/force_tllao
File opened for reading	/proc/sys/net/ipv4/tcp_l3mdev_accept
File opened for reading	/proc/sys/fs/lease-break-time
File opened for reading	/proc/20/cmdline	ps
File opened for reading	/proc/sys/kernel/seccomp
File opened for reading	/proc/sys/kernel/sched_child_runs_first
File opened for reading	/proc/sys/net/ipv6/ip_nonlocal_bind
File opened for reading	/proc/sys/dev/cdrom/autoeject
File opened for reading	/proc/sys/net/ipv4/conf/ens3/medium_id
File opened for reading	/proc/sys/net/ipv4/tcp_workaround_signed_windows
File opened for reading	/proc/sys/net/ipv4/icmp_ratemask
File opened for reading	/proc/1292/status	ps
File opened for reading	/proc/sys/kernel/panic
File opened for reading	/proc/sys/kernel/unknown_nmi_panic
File opened for reading	/proc/sys/kernel/hotplug
File opened for reading	/proc/1043
File opened for reading	/proc/1080/cmdline	ps
File opened for reading	/proc/sys/net/ipv4/conf
File opened for reading	/proc/sys/vm/page-cluster
File opened for reading	/proc/sys/kernel/seccomp/actions_logged
File opened for reading	/proc/sys/net/ipv4/icmp_msgs_per_sec
File opened for reading	/proc/sys/net/ipv4/tcp_no_metrics_save
File opened for reading	/proc/172
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/sys/net/ipv6/conf/lo/use_oif_addrs_only
File opened for reading	/proc/sys/net/ipv4/conf/lo/src_valid_mark
File opened for reading	/proc/sys/net/ipv6/neigh/default/mcast_resolicit
File opened for reading	/proc/sys/net/ipv4/fwmark_reflect
File opened for reading	/proc/sys/net/ipv6/conf/default/mldv2_unsolicited_report_interval
File opened for reading	/proc/sys/net/ipv4/conf/all/promote_secondaries
File opened for reading	/proc/sys/net/ipv6/neigh/lo/proxy_qlen
File opened for reading	/proc/676/status	ps
File opened for reading	/proc/sys/dev/parport/parport0/autoprobe0
File opened for reading	/proc/sys/kernel/dmesg_restrict
File opened for reading	/proc/sys/net/ipv6/neigh/lo/unres_qlen_bytes
File opened for reading	/proc/sys/net/ipv6/conf/all/ndisc_tclass
File opened for reading	/proc/1131/cmdline	ps
File opened for reading	/proc/sys/net/ipv4/conf/lo/proxy_arp_pvlan
File opened for reading	/proc/sys/vm/oom_kill_allocating_task
File opened for reading	/proc/sys/net/ipv6/conf/default/use_tempaddr
File opened for reading	/proc/sys/net/ipv4/conf/all/arp_filter
File opened for reading	/proc/sys/net/ipv6/fwmark_reflect
File opened for reading	/proc/sys/net/ipv6/conf/all/disable_ipv6
File opened for reading	/proc/80	find
File opened for reading	/proc/sys/fs/dentry-state
File opened for reading	/proc/sys/net/ipv4/conf/all/medium_id
File opened for reading	/proc/sys/net/ipv4/neigh/ens3/gc_stale_time
File opened for reading	/proc/sys/kernel/nmi_watchdog
File opened for reading	/proc/sys/dev/cdrom/debug
File opened for reading	/proc/sys/fs/mqueue/msgsize_default
File opened for reading	/proc/sys/net/ipv4/conf/ens3/force_igmp_version
File opened for reading	/proc/80/cmdline	ps
File opened for reading	/proc/27/attr/current
File opened for reading	/proc/sys/net/ipv4/neigh/ens3/proxy_qlen
File opened for reading	/proc/sys/dev/mac_hid
File opened for reading	/proc/sys/fs/pipe-max-size
File opened for reading	/proc/sys/net/ipv4/conf/all/arp_accept
File opened for reading	/proc/sys/net/ipv4/neigh/ens3/app_solicit
File opened for reading	/proc/sys/kernel/warn_limit
File opened for reading	/proc/sys/vm/stat_refresh
File opened for reading	/proc/1190/stat	ps
File opened for reading	/proc/sys/kernel/sched_tunable_scaling
File opened for reading	/proc/sys/net/ipv4/tcp_app_win

Writes file to tmp directory 64 IoCs

Malware often drops required files in the /tmp directory.

Processes:

bash

description	ioc	process
File opened for modification	/tmp/sh-thd.Zv32iz	bash
File opened for modification	/tmp/sh-thd.dzp2x1	bash
File opened for modification	/tmp/sh-thd.OezBio	bash
File opened for modification	/tmp/sh-thd.TZIb1M	bash
File opened for modification	/tmp/sh-thd.g9lhVM	bash
File opened for modification	/tmp/sh-thd.hPZ0wp	bash
File opened for modification	/tmp/sh-thd.tm8Yjd	bash
File opened for modification	/tmp/sh-thd.sVeIc8	bash
File opened for modification	/tmp/sh-thd.MhoQlx	bash
File opened for modification	/tmp/sh-thd.YSxoPW	bash
File opened for modification	/tmp/sh-thd.dlXQSX	bash
File opened for modification	/tmp/sh-thd.lXDbCd	bash
File opened for modification	/tmp/sh-thd.Hw8LxL	bash
File opened for modification	/tmp/sh-thd.exV61l	bash
File opened for modification	/tmp/sh-thd.yBwAUf	bash
File opened for modification	/tmp/sh-thd.RTdzAa	bash
File opened for modification	/tmp/sh-thd.zynLYG	bash
File opened for modification	/tmp/sh-thd.0Jk5FG	bash
File opened for modification	/tmp/sh-thd.sCyHuO	bash
File opened for modification	/tmp/sh-thd.3JYosF	bash
File opened for modification	/tmp/sh-thd.mGMwC7	bash
File opened for modification	/tmp/sh-thd.ivFrfi	bash
File opened for modification	/tmp/sh-thd.onBZPz	bash
File opened for modification	/tmp/sh-thd.m2DHmZ	bash
File opened for modification	/tmp/sh-thd.FhVCFA	bash
File opened for modification	/tmp/sh-thd.YVHsnH	bash
File opened for modification	/tmp/sh-thd.hfRpPA	bash
File opened for modification	/tmp/sh-thd.dlP5Uy	bash
File opened for modification	/tmp/sh-thd.6Rmskq	bash
File opened for modification	/tmp/sh-thd.VpWxE0	bash
File opened for modification	/tmp/sh-thd.ftTLVL	bash
File opened for modification	/tmp/sh-thd.YfSo56	bash
File opened for modification	/tmp/sh-thd.CmfnhP	bash
File opened for modification	/tmp/sh-thd.DWTwIg	bash
File opened for modification	/tmp/sh-thd.zwyOe3	bash
File opened for modification	/tmp/sh-thd.n4LBx3	bash
File opened for modification	/tmp/sh-thd.UwceCd	bash
File opened for modification	/tmp/sh-thd.zHAK0K	bash
File opened for modification	/tmp/sh-thd.qYuuME	bash
File opened for modification	/tmp/sh-thd.oLWRen	bash
File opened for modification	/tmp/sh-thd.fCrsqC	bash
File opened for modification	/tmp/sh-thd.kH1TcR	bash
File opened for modification	/tmp/sh-thd.MTVNIK	bash
File opened for modification	/tmp/sh-thd.GwT0nc	bash
File opened for modification	/tmp/sh-thd.Nq854N	bash
File opened for modification	/tmp/sh-thd.UEcx8a	bash
File opened for modification	/tmp/sh-thd.RFAAfy	bash
File opened for modification	/tmp/sh-thd.0uMNJX	bash
File opened for modification	/tmp/sh-thd.e5RKVr	bash
File opened for modification	/tmp/sh-thd.TVBnmy	bash
File opened for modification	/tmp/sh-thd.HY3sKw	bash
File opened for modification	/tmp/sh-thd.MEyD84	bash
File opened for modification	/tmp/sh-thd.tPzLqU	bash
File opened for modification	/tmp/sh-thd.uloA5D	bash
File opened for modification	/tmp/sh-thd.XoVzmy	bash
File opened for modification	/tmp/sh-thd.J49Gs3	bash
File opened for modification	/tmp/sh-thd.2cRfs9	bash
File opened for modification	/tmp/sh-thd.ARTK3c	bash
File opened for modification	/tmp/sh-thd.RDoNOG	bash
File opened for modification	/tmp/sh-thd.NHb6JK	bash
File opened for modification	/tmp/sh-thd.LnaV2b	bash
File opened for modification	/tmp/sh-thd.wVwt8y	bash
File opened for modification	/tmp/sh-thd.9bFHd9	bash
File opened for modification	/tmp/sh-thd.fobnIy	bash

/tmp/linpeas.sh
/tmp/linpeas.sh
1⤵
PID:1477

/usr/bin/id
/usr/bin/id -u
2⤵
PID:1479

/bin/grep
grep -q Darwin
2⤵
PID:1482

/bin/uname
uname
2⤵
PID:1481

/bin/grep
grep -q Darwin
2⤵
PID:1484

/usr/bin/uname
/usr/bin/uname
2⤵
PID:1483

/usr/bin/tr
tr -d "\\n"
2⤵
PID:1487

/bin/grep
grep -c processor /proc/cpuinfo
2⤵
- Checks CPU configuration
PID:1488

/bin/bash
/bin/bash -c "printf ' \\e[38;2;26;43;21m▄\\e[38;2;58;91;50m▄\\e[48;2;116;117;116m\\e[38;2;68;119;56m▄\\e[48;2;98;98;98m\\e[38;2;86;143;70m▄\\e[48;2;98;98;98m\\e[38;2;100;153;87m▄\\e[48;2;63;65;63m\\e[38;2;102;164;86m▄\\e[48;2;46;49;44m\\e[38;2;98;168;79m▄\\e[48;2;43;45;43m\\e[38;2;91;155;75m▄\\e[48;2;61;62;61m\\e[38;2;78;137;63m▄\\e[48;2;102;101;102m\\e[38;2;64;112;52m▄\\e[0m\\e[38;2;38;67;32m▄\\e[38;2;20;35;16m▄\\e[38;2;10;20;8m▄\\e[38;2;15;21;13m▄\\e[0m \\e[38;2;49;80;41m▄\\e[38;2;73;133;59m▄\\e[48;2;20;21;20m\\e[38;2;91;163;72m▄\\e[48;2;14;27;12m\\e[38;2;96;174;76m▄\\e[48;2;51;92;41m\\e[38;2;98;177;78m▄\\e[48;2;86;155;68m\\e[38;2;98;177;78m▄\\e[48;2;96;173;77m\\e[38;2;98;177;78m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;178;78m\\e[38;2;98;177;78m▄\\e[48;2;97;175;76m\\e[38;2;98;177;78m▄\\e[48;2;93;168;74m\\e[38;2;98;177;78m▄\\e[48;2;99;163;83m\\e[38;2;97;177;77m▄\\e[48;2;99;151;86m\\e[38;2;98;177;78m▄\\e[48;2;35;57;29m\\e[38;2;98;176;78m▄\\e[48;2;19;21;19m\\e[38;2;94;169;75m▄\\e[0m\\e[38;2;70;125;56m▄\\e[0m \\e[38;2;42;65;36m▄\\e[38;2;62;106;52m▄\\e[48;2;94;95;94m\\e[38;2;86;152;70m▄\\e[48;2;57;72;53m\\e[38;2;96;174;77m▄\\e[48;2;57;96;47m\\e[38;2;98;177;78m▄\\e[48;2;78;136;62m\\e[38;2;98;177;78m▄\\e[48;2;95;167;76m\\e[38;2;98;177;78m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;77m▄\\e[48;2;98;177;78m\\e[38;2;91;165;72m▄\\e[48;2;98;177;78m\\e[38;2;76;137;60m▄\\e[48;2;98;177;78m\\e[38;2;54;97;42m▄\\e[48;2;99;179;79m\\e[38;2;39;71;30m▄\\e[48;2;100;181;79m\\e[38;2;35;60;30m▄\\e[48;2;101;181;81m\\e[38;2;42;66;37m▄\\e[48;2;100;177;80m\\e[38;2;52;73;45m▄\\e[48;2;95;175;76m\\e[38;2;47;75;40m▄\\e[48;2;94;178;73m\\e[38;2;41;75;33m▄\\e[48;2;98;179;78m\\e[38;2;42;73;34m▄\\e[48;2;99;180;79m\\e[38;2;40;70;33m▄\\e[48;2;99;179;78m\\e[38;2;44;75;36m▄\\e[48;2;97;177;77m\\e[38;2;55;93;46m▄\\e[48;2;97;176;77m\\e[38;2;65;113;52m▄\\e[48;2;98;177;78m\\e[38;2;79;141;63m▄\\e[48;2;98;177;78m\\e[38;2;93;166;75m▄\\e[48;2;98;177;78m\\e[38;2;99;177;79m▄\\e[48;2;98;177;78m\\e[38;2;97;177;78m▄\\e[48;2;98;177;78m\\e[38;2;97;177;78m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;94;170;75m\\e[38;2;98;177;78m▄\\e[48;2;71;128;56m\\e[38;2;98;177;78m▄\\e[48;2;34;56;28m\\e[38;2;97;175;77m▄\\e[48;2;64;66;64m\\e[38;2;78;140;62m▄\\e[0m \\e[48;2;66;112;54m\\e[38;2;98;177;78m▄\\e[48;2;80;133;66m\\e[38;2;98;177;78m▄\\e[48;2;95;162;76m\\e[38;2;98;177;78m▄\\e[48;2;96;171;76m\\e[38;2;98;177;78m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;97;176;77m▄\\e[48;2;98;177;78m\\e[38;2;96;174;76m▄\\e[48;2;98;177;78m\\e[38;2;74;130;59m▄\\e[48;2;98;176;78m\\e[38;2;32;49;27m▄\\e[48;2;95;166;76m\\e[38;2;18;29;15m▄\\e[48;2;73;126;59m\\e[38;2;65;113;53m▄\\e[48;2;40;62;34m\\e[38;2;107;209;83m▄\\e[48;2;23;43;19m\\e[38;2;77;220;42m▄\\e[48;2;32;72;22m\\e[38;2;72;218;36m▄\\e[48;2;55;155;30m\\e[38;2;73;217;37m▄\\e[48;2;71;203;38m\\e[38;2;73;217;37m▄\\e[48;2;79;212;46m\\e[38;2;73;218;37m▄\\e[48;2;81;216;48m\\e[38;2;73;218;37m▄\\e[48;2;82;220;48m\\e[38;2;73;218;37m▄\\e[48;2;79;221;44m\\e[38;2;73;218;37m▄\\e[48;2;76;219;40m\\e[38;2;73;218;37m▄\\e[48;2;76;218;40m\\e[38;2;73;218;37m▄\\e[48;2;75;213;41m\\e[38;2;73;218;37m▄\\e[48;2;79;203;48m\\e[38;2;73;218;37m▄\\e[48;2;76;175;52m\\e[38;2;73;218;37m▄\\e[48;2;52;127;33m\\e[38;2;73;218;37m▄\\e[48;2;29;75;18m\\e[38;2;73;217;37m▄\\e[48;2;19;45;12m\\e[38;2;73;218;36m▄\\e[48;2;45;74;38m\\e[38;2;65;196;33m▄\\e[48;2;76;127;62m\\e[38;2;44;132;24m▄\\e[48;2;90;158;72m\\e[38;2;16;45;10m▄\\e[48;2;97;175;77m\\e[38;2;28;50;22m▄\\e[48;2;98;177;78m\\e[38;2;80;145;64m▄\\e[48;2;98;177;78m\\e[38;2;97;175;77m▄\\e[48;2;98;177;78m\\e[38;2;97;176;77m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78m▄\\e[48;2;98;177;78m\\e[38;2;98;177;77m▄\\e[48;2;97;173;78m\\e[38;2;98;177;78m▄\\e[48;2;69;114;56m\\e[38;2;98;177;78m▄\\e[48;2;30;38;28m\\e[38;2;103;179;83m▄\\e[0m\\e[38;2;99;149;87m▄\\e[0m \\e[48;2;98;177;78m\\e[38;2;98;177;77m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;178;78m▄\\e[48;2;98;177;78m\\e[38;2;98;178;78m▄\\e[48;2;98;177;78m\\e[38;2;83;150;66m▄\\e[48;2;98;177;78m\\e[38;2;44;80;34m▄\\e[48;2;99;179;78m\\e[38;2;33;49;28m▄\\e[48;2;87;159;69m\\e[38;2;68;97;61m▄\\e[48;2;46;84;37m\\e[38;2;87;165;68m▄\\e[48;2;25;37;21m\\e[38;2;83;208;52m▄\\e[48;2;59;131;42m\\e[38;2;73;219;37m▄\\e[48;2;74;199;43m\\e[38;2;74;223;37m▄\\e[48;2;72;213;38m\\e[38;2;67;204;35m▄\\e[48;2;73;218;37m\\e[38;2;55;171;29m▄\\e[48;2;72;218;36m\\e[38;2;59;136;22m▄\\e[48;2;72;218;36m\\e[38;2;103;132;15m▄\\e[48;2;73;219;37m\\e[38;2;149;133;9m▄\\e[48;2;72;220;37m\\e[38;2;168;130;7m▄\\e[48;2;73;220;37m\\e[38;2;167;118;5m▄\\e[48;2;72;218;37m\\e[38;2;106;78;4m▄\\e[48;2;69;210;36m\\e[38;2;93;69;4m▄\\e[48;2;66;199;34m\\e[38;2;173;117;4m▄\\e[48;2;63;192;32m\\e[38;2;177;119;4m▄\\e[48;2;62;186;32m\\e[38;2;173;116;4m▄\\e[48;2;61;186;31m\\e[38;2;176;115;4m▄\\e[48;2;63;191;32m\\e[38;2;174;115;4m▄\\e[48;2;67;202;34m\\e[38;2;170;113;4m▄\\e[48;2;70;213;36m\\e[38;2;180;118;3m▄\\e[48;2;72;219;37m\\e[38;2;175;117;4m▄\\e[48;2;73;220;37m\\e[38;2;154;120;7m▄\\e[48;2;73;220;37m\\e[38;2;80;94;11m▄\\e[48;2;73;219;37m\\e[38;2;48;93;15m▄\\e[48;2;73;218;37m\\e[38;2;41;112;19m▄\\e[48;2;72;215;36m\\e[38;2;45;144;25m▄\\e[48;2;64;192;32m\\e[38;2;63;191;32m▄\\e[48;2;32;99;16m\\e[38;2;73;218;37m▄\\e[48;2;21;41;16m\\e[38;2;72;210;38m▄\\e[48;2;38;66;30m\\e[38;2;67;177;41m▄\\e[48;2;79;141;63m\\e[38;2;53;123;36m▄\\e[48;2;98;178;78m\\e[38;2;32;57;25m▄\\e[48;2;98;179;77m\\e[38;2;25;46;20m▄\\e[48;2;97;177;77m\\e[38;2;56;100;46m▄\\e[48;2;98;177;78m\\e[38;2;93;165;75m▄\\e[48;2;97;176;77m\\e[38;2;100;181;80m▄\\e[48;2;98;177;77m\\e[38;2;97;176;76m▄\\e[48;2;97;176;78m\\e[38;2;98;177;78m▄\\e[48;2;99;174;79m\\e[38;2;98;177;78m▄\\e[0m \\e[48;2;98;178;78m\\e[38;2;46;76;38m▄\\e[48;2;100;178;80m\\e[38;2;50;69;45m▄\\e[48;2;99;176;80m\\e[38;2;35;46;33m▄\\e[48;2;82;148;65m\\e[38;2;7;9;6m▄\\e[48;2;64;117;50m\\e[38;2;35;54;30m▄\\e[48;2;42;77;34m\\e[38;2;52;107;39m▄\\e[48;2;26;46;21m\\e[38;2;80;194;52m▄\\e[48;2;34;71;26m\\e[38;2;73;216;38m▄\\e[48;2;54;133;35m\\e[38;2;67;192;32m▄\\e[48;2;81;199;52m\\e[38;2;81;158;23m▄\\e[48;2;80;218;46m\\e[38;2;100;110;11m▄\\e[48;2;66;199;33m\\e[38;2;152;98;2m▄\\e[48;2;60;157;26m\\e[38;2;220;129;1m▄\\e[48;2;80;128;18m\\e[38;2;251;145;0m▄\\e[48;2;120;110;9m\\e[38;2;255;147;0m▄\\e[48;2;154;106;4m\\e[38;2;255;147;0m▄\\e[48;2;181;114;2m\\e[38;2;255;147;0m▄\\e[48;2;230;134;0m\\e[38;2;255;147;0m▄\\e[48;2;251;144;0m\\e[38;2;255;147;0m▄\\e[48;2;254;146;0m\\e[38;2;255;147;0m▄\\e[48;2;255;147;0m \\e[48;2;163;94;0m\\e[38;2;134;78;0m▄\\e[48;2;2;1;0m\\e[38;2;58;33;0m▄\\e[48;2;13;7;0m\\e[38;2;133;76;0m▄\\e[48;2;64;38;0m\\e[38;2;12;7;0m▄\\e[48;2;250;144;0m\\e[38;2;234;135;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;249;146;0m\\e[38;2;255;147;0m▄\\e[48;2;239;143;2m\\e[38;2;255;147;0m▄\\e[48;2;223;131;1m\\e[38;2;255;147;0m▄\\e[48;2;192;120;2m\\e[38;2;255;147;0m▄\\e[48;2;130;96;5m\\e[38;2;255;147;0m▄\\e[48;2;82;88;9m\\e[38;2;255;148;0m▄\\e[48;2;62;104;15m\\e[38;2;247;147;1m▄\\e[48;2;49;132;22m\\e[38;2;212;134;3m▄\\e[48;2;57;165;32m\\e[38;2;144;95;3m▄\\e[48;2;53;117;38m\\e[38;2;74;61;8m▄\\e[48;2;50;97;39m\\e[38;2;47;60;21m▄\\e[48;2;35;56;29m\\e[38;2;47;81;33m▄\\e[48;2;17;22;15m\\e[38;2;20;34;19m▄\\e[48;2;31;50;26m\\e[38;2;48;73;42m▄\\e[48;2;55;90;47m\\e[38;2;37;56;33m▄\\e[48;2;78;132;64m\\e[38;2;21;31;18m▄\\e[48;2;95;167;78m\\e[38;2;18;26;16m▄\\e[0m \\e[48;2;48;74;43m\\e[38;2;51;78;45m▄\\e[48;2;48;74;43m\\e[38;2;50;76;44m▄\\e[48;2;46;71;42m\\e[38;2;12;17;11m▄\\e[48;2;32;54;28m\\e[38;2;45;93;35m▄\\e[48;2;58;112;46m\\e[38;2;26;45;17m▄\\e[48;2;55;130;37m\\e[38;2;121;83;5m▄\\e[48;2;57;133;27m\\e[38;2;232;138;0m▄\\e[48;2;101;96;8m\\e[38;2;253;146;0m▄\\e[48;2;200;118;1m\\e[38;2;254;147;0m▄\\e[48;2;248;144;0m\\e[38;2;255;147;0m▄\\e[48;2;254;147;0m\\e[38;2;255;147;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;173;100;0m\\e[38;2;210;122;0m▄\\e[48;2;172;100;0m\\e[38;2;76;44;0m▄\\e[48;2;214;123;0m\\e[38;2;153;88;0m▄\\e[48;2;36;21;0m\\e[38;2;162;94;0m▄\\e[48;2;201;116;0m\\e[38;2;20;12;0m▄\\e[48;2;254;147;0m\\e[38;2;238;137;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;255;147;0m▄\\e[48;2;241;143;1m\\e[38;2;255;147;0m▄\\e[48;2;213;125;0m\\e[38;2;255;147;0m▄\\e[48;2;117;73;3m\\e[38;2;252;147;1m▄\\e[48;2;25;36;21m\\e[38;2;94;69;18m▄\\e[48;2;50;77;44m\\e[38;2;39;59;33m▄\\e[48;2;51;78;45m \\e[48;2;51;78;44m\\e[38;2;51;78;45m▄\\e[0m \\e[48;2;51;78;45m\\e[38;2;50;76;44m▄\\e[48;2;40;58;34m\\e[38;2;43;36;13m▄\\e[48;2;38;37;6m\\e[38;2;240;143;2m▄\\e[48;2;149;95;6m\\e[38;2;254;147;0m▄\\e[48;2;226;134;1m\\e[38;2;255;147;0m▄\\e[48;2;253;146;0m\\e[38;2;255;147;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;243;140;0m▄\\e[48;2;116;67;0m\\e[38;2;90;52;0m▄\\e[48;2;237;137;0m\\e[38;2;254;147;0m▄\\e[48;2;248;143;0m\\e[38;2;255;147;0m▄\\e[48;2;250;144;0m\\e[38;2;255;147;0m▄\\e[48;2;45;25;0m\\e[38;2;191;110;0m▄\\e[48;2;64;36;0m\\e[38;2;32;18;0m▄\\e[48;2;245;141;0m\\e[38;2;152;87;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;255;147;0m▄\\e[48;2;230;140;6m\\e[38;2;254;147;0m▄\\e[48;2;25;21;7m\\e[38;2;143;86;2m▄\\e[48;2;48;74;42m\\e[38;2;39;60;34m▄\\e[48;2;51;78;45m \\e[0m \\e[48;2;41;63;37m\\e[38;2;40;47;23m▄\\e[48;2;119;70;1m\\e[38;2;230;135;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;180;104;0m\\e[38;2;120;68;0m▄\\e[48;2;135;78;0m\\e[38;2;158;91;0m▄\\e[48;2;255;147;0m\\e[38;2;250;145;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;146;0m▄\\e[48;2;252;145;0m\\e[38;2;209;120;0m▄\\e[48;2;54;31;0m\\e[38;2;61;35;0m▄\\e[48;2;94;54;0m\\e[38;2;159;91;0m▄\\e[48;2;254;146;0m\\e[38;2;244;140;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;240;144;1m\\e[38;2;255;147;0m▄\\e[48;2;36;40;18m\\e[38;2;70;49;6m▄\\e[48;2;50;78;45m\\e[38;2;45;69;40m▄\\e[0m \\e[48;2;65;48;9m\\e[38;2;98;64;6m▄\\e[48;2;255;149;0m\\e[38;2;255;147;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;254;146;0m▄\\e[48;2;225;130;0m\\e[38;2;175;100;0m▄\\e[48;2;210;120;0m\\e[38;2;253;146;0m▄\\e[48;2;209;121;0m\\e[38;2;254;147;0m▄\\e[48;2;86;49;0m\\e[38;2;189;109;0m▄\\e[48;2;254;146;0m\\e[38;2;142;81;0m▄\\e[48;2;255;147;0m\\e[38;2;102;59;0m▄\\e[48;2;199;115;0m\\e[38;2;69;40;0m▄\\e[48;2;244;141;0m\\e[38;2;238;138;0m▄\\e[48;2;253;146;0m\\e[38;2;184;105;0m▄\\e[48;2;200;115;0m\\e[38;2;231;134;0m▄\\e[48;2;253;147;0m\\e[38;2;254;146;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;149;98;7m\\e[38;2;215;132;5m▄\\e[48;2;35;54;32m\\e[38;2;31;42;22m▄\\e[0m \\e[48;2;133;82;3m\\e[38;2;153;89;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;255;146;0m▄\\e[48;2;255;147;0m\\e[38;2;255;146;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;148;0m▄\\e[48;2;255;147;0m\\e[38;2;248;147;0m▄\\e[48;2;254;147;0m\\e[38;2;242;142;0m▄\\e[48;2;204;116;0m\\e[38;2;224;131;0m▄\\e[48;2;200;115;0m\\e[38;2;205;124;1m▄\\e[48;2;199;115;0m\\e[38;2;175;109;2m▄\\e[48;2;172;100;0m\\e[38;2;157;102;2m▄\\e[48;2;168;97;0m\\e[38;2;172;114;3m▄\\e[48;2;206;119;0m\\e[38;2;156;115;5m▄\\e[48;2;215;125;0m\\e[38;2;138;111;7m▄\\e[48;2;180;105;0m\\e[38;2;121;105;8m▄\\e[48;2;233;136;0m\\e[38;2;120;109;8m▄\\e[48;2;254;148;0m\\e[38;2;116;111;9m▄\\e[48;2;254;148;0m\\e[38;2;112;111;10m▄\\e[48;2;255;148;0m\\e[38;2;130;121;10m▄\\e[48;2;254;148;0m\\e[38;2;103;105;10m▄\\e[48;2;254;148;0m\\e[38;2;99;99;9m▄\\e[48;2;254;148;0m\\e[38;2;106;98;8m▄\\e[48;2;254;148;0m\\e[38;2;106;96;8m▄\\e[48;2;255;148;0m\\e[38;2;118;98;7m▄\\e[48;2;255;147;0m\\e[38;2;123;101;7m▄\\e[48;2;255;147;0m\\e[38;2;129;99;6m▄\\e[48;2;255;147;0m\\e[38;2;141;100;5m▄\\e[48;2;255;147;0m\\e[38;2;166;111;4m▄\\e[48;2;255;147;0m\\e[38;2;189;122;4m▄\\e[48;2;255;147;0m\\e[38;2;217;131;1m▄\\e[48;2;255;147;0m\\e[38;2;248;145;0m▄\\e[48;2;255;147;0m\\e[38;2;250;148;0m▄\\e[48;2;255;147;0m\\e[38;2;254;149;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;249;147;1m\\e[38;2;254;147;0m▄\\e[48;2;47;44;15m\\e[38;2;81;54;7m▄\\e[0m \\e[48;2;163;95;0m\\e[38;2;176;103;0m▄\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;147;0m▄\\e[48;2;255;147;0m\\e[38;2;250;144;0m▄\\e[48;2;255;147;0m\\e[38;2;238;146;1m▄\\e[48;2;254;147;0m\\e[38;2;170;117;4m▄\\e[48;2;252;147;0m\\e[38;2;78;65;5m▄\\e[48;2;239;144;1m\\e[38;2;36;71;11m▄\\e[48;2;220;136;2m\\e[38;2;41;122;21m▄\\e[48;2;193;124;2m\\e[38;2;59;179;31m▄\\e[48;2;178;119;4m\\e[38;2;69;210;35m▄\\e[48;2;129;104;6m\\e[38;2;73;219;37m▄\\e[48;2;67;87;10m\\e[38;2;73;219;37m▄\\e[48;2;61;106;15m\\e[38;2;73;218;37m▄\\e[48;2;52;126;21m\\e[38;2;73;218;37m▄\\e[48;2;52;150;25m\\e[38;2;73;218;37m▄\\e[48;2;58;177;30m\\e[38;2;73;218;37m▄\\e[48;2;63;194;33m\\e[38;2;73;218;37m▄\\e[48;2;66;204;34m\\e[38;2;73;218;37m▄\\e[48;2;69;212;36m\\e[38;2;73;218;37m▄\\e[48;2;72;217;36m\\e[38;2;73;218;37m▄\\e[48;2;72;219;37m\\e[38;2;73;218;37m▄\\e[48;2;73;220;37m\\e[38;2;73;218;37m▄\\e[48;2;73;220;37m\\e[38;2;73;218;37m▄\\e[48;2;73;220;37m\\e[38;2;73;218;37m▄\\e[48;2;73;220;37m\\e[38;2;73;218;37m▄\\e[48;2;73;220;37m\\e[38;2;73;218;37m▄\\e[48;2;74;220;37m\\e[38;2;73;218;37m▄\\e[48;2;73;220;37m\\e[38;2;73;218;37m▄\\e[48;2;73;219;37m\\e[38;2;73;218;37m▄\\e[48;2;72;214;36m\\e[38;2;73;218;37m▄\\e[48;2;68;207;35m\\e[38;2;73;218;37m▄\\e[48;2;65;197;34m\\e[38;2;73;218;37m▄\\e[48;2;61;185;32m\\e[38;2;73;218;37m▄\\e[48;2;51;157;27m\\e[38;2;73;218;37m▄\\e[48;2;41;125;21m\\e[38;2;73;218;37m▄\\e[48;2;40;106;18m\\e[38;2;73;218;37m▄\\e[48;2;75;92;10m\\e[38;2;73;218;37m▄\\e[48;2;76;85;10m\\e[38;2;73;219;37m▄\\e[48;2;112;94;7m\\e[38;2;72;216;36m▄\\e[48;2;162;113;5m\\e[38;2;64;194;33m▄\\e[48;2;219;131;0m\\e[38;2;50;152;26m▄\\e[48;2;231;138;1m\\e[38;2;30;65;14m▄\\e[48;2;252;147;0m\\e[38;2;106;71;5m▄\\e[48;2;97;61;4m\\e[38;2;30;31;7m▄\\e[0m \\e[48;2;186;108;0m\\e[38;2;185;108;0m▄\\e[48;2;255;147;0m\\e[38;2;254;148;0m▄\\e[48;2;255;147;0m\\e[38;2;247;144;0m▄\\e[48;2;255;147;0m\\e[38;2;188;113;1m▄\\e[48;2;255;147;0m\\e[38;2;110;100;8m▄\\e[48;2;248;147;0m\\e[38;2;72;136;20m▄\\e[48;2;206;124;1m\\e[38;2;62;175;29m▄\\e[48;2;115;81;4m\\e[38;2;67;204;34m▄\\e[48;2;55;92;13m\\e[38;2;72;217;36m▄\\e[48;2;60;157;26m\\e[38;2;73;218;37m▄\\e[48;2;66;195;32m\\e[38;2;73;218;37m▄\\e[48;2;70;212;35m\\e[38;2;73;218;37m▄\\e[48;2;72;215;36m\\e[38;2;73;218;37m▄\\e[48;2;73;217;36m\\e[38;2;73;218;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;210;37m\\e[38;2;71;214;37m▄\\e[48;2;58;142;37m\\e[38;2;57;136;37m▄\\e[48;2;51;109;39m\\e[38;2;54;109;40m▄\\e[48;2;36;76;26m\\e[38;2;38;71;31m▄\\e[0m \\e[48;2;73;63;12m\\e[38;2;24;46;20m▄\\e[48;2;89;67;7m\\e[38;2;54;120;38m▄\\e[48;2;67;119;19m\\e[38;2;66;192;35m▄\\e[48;2;61;177;29m\\e[38;2;73;217;37m▄\\e[48;2;71;213;36m\\e[38;2;73;218;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;214;35m\\e[38;2;42;129;21m▄\\e[48;2;43;131;22m\\e[38;2;4;10;2m▄\\e[48;2;37;111;19m\\e[38;2;4;10;2m▄\\e[48;2;60;180;30m\\e[38;2;7;22;3m▄\\e[48;2;73;218;37m\\e[38;2;62;187;31m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;72;217;36m▄\\e[48;2;69;208;35m\\e[38;2;20;61;10m▄\\e[48;2;43;129;22m\\e[38;2;4;11;2m▄\\e[48;2;38;116;19m\\e[38;2;3;8;1m▄\\e[48;2;64;192;32m\\e[38;2;19;57;10m▄\\e[48;2;73;218;37m\\e[38;2;73;219;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;214;36m\\e[38;2;71;213;36m▄\\e[48;2;55;130;37m\\e[38;2;55;123;38m▄\\e[48;2;54;108;41m\\e[38;2;56;110;44m▄\\e[48;2;35;60;30m\\e[38;2;35;57;30m▄\\e[0m \\e[48;2;37;68;29m\\e[38;2;38;61;33m▄\\e[48;2;58;132;39m\\e[38;2;62;134;45m▄\\e[48;2;64;179;36m\\e[38;2;55;129;37m▄\\e[48;2;72;217;36m\\e[38;2;71;210;36m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;27;82;14m\\e[38;2;59;178;30m▄\\e[48;2;4;11;3m\\e[38;2;3;9;1m▄\\e[48;2;0;0;0m\\e[38;2;8;18;4m▄\\e[48;2;1;3;1m\\e[38;2;4;12;2m▄\\e[48;2;36;112;19m\\e[38;2;54;163;27m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;70;210;36m\\e[38;2;72;217;36m▄\\e[48;2;4;11;1m\\e[38;2;9;28;4m▄\\e[48;2;0;0;0m\\e[38;2;6;16;3m▄\\e[48;2;1;3;1m\\e[38;2;6;15;3m▄\\e[48;2;13;39;6m\\e[38;2;32;94;15m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;70;207;36m\\e[38;2;67;196;36m▄\\e[48;2;52;110;38m \\e[48;2;57;101;47m\\e[38;2;56;90;47m▄\\e[48;2;36;55;31m\\e[38;2;38;58;33m▄\\e[0m \\e[48;2;40;63;35m\\e[38;2;43;67;38m▄\\e[48;2;61;117;48m\\e[38;2;45;80;38m▄\\e[48;2;54;114;39m\\e[38;2;52;110;38m▄\\e[48;2;64;177;36m\\e[38;2;59;150;37m▄\\e[48;2;72;217;36m\\e[38;2;72;214;36m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;73;218;37m▄\\e[48;2;61;182;30m\\e[38;2;73;218;37m▄\\e[48;2;45;135;22m\\e[38;2;73;218;37m▄\\e[48;2;58;174;29m\\e[38;2;73;218;37m▄\\e[48;2;72;217;36m\\e[38;2;73;218;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;212;35m\\e[38;2;72;216;36m▄\\e[48;2;34;101;17m\\e[38;2;11;32;5m▄\\e[48;2;34;101;17m\\e[38;2;1;2;1m▄\\e[48;2;34;98;18m\\e[38;2;1;3;1m▄\\e[48;2;35;101;18m\\e[38;2;1;1;1m▄\\e[48;2;35;100;17m\\e[38;2;1;3;1m▄\\e[48;2;57;170;29m\\e[38;2;56;168;28m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;72;218;36m▄\\e[48;2;66;197;33m\\e[38;2;72;217;36m▄\\e[48;2;46;139;23m\\e[38;2;73;217;37m▄\\e[48;2;54;163;27m\\e[38;2;72;217;37m▄\\e[48;2;71;212;36m\\e[38;2;72;217;36m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;37m\\e[38;2;70;204;36m▄\\e[48;2;60;158;37m\\e[38;2;53;122;37m▄\\e[48;2;52;103;38m\\e[38;2;52;104;40m▄\\e[48;2;33;54;28m\\e[38;2;21;34;18m▄\\e[48;2;46;70;41m\\e[38;2;49;76;44m▄\\e[0m \\e[48;2;49;76;44m\\e[38;2;51;78;45m▄\\e[48;2;32;51;28m\\e[38;2;43;65;37m▄\\e[48;2;61;125;45m\\e[38;2;81;124;71m▄\\e[48;2;54;124;38m\\e[38;2;53;113;40m▄\\e[48;2;68;202;36m\\e[38;2;60;156;37m▄\\e[48;2;73;218;37m\\e[38;2;72;215;36m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;216;37m▄\\e[48;2;73;217;37m\\e[38;2;93;205;61m▄\\e[48;2;79;213;44m\\e[38;2;121;189;95m▄\\e[48;2;85;210;51m\\e[38;2;132;184;108m▄\\e[48;2;82;211;47m\\e[38;2;121;191;93m▄\\e[48;2;73;217;37m\\e[38;2;85;210;52m▄\\e[48;2;73;218;37m\\e[38;2;73;217;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;37;111;20m\\e[38;2;71;214;36m▄\\e[48;2;1;2;0m\\e[38;2;44;128;22m▄\\e[48;2;2;4;2m\\e[38;2;15;39;8m▄\\e[48;2;1;1;1m\\e[38;2;29;82;14m▄\\e[48;2;13;37;7m\\e[38;2;68;204;34m▄\\e[48;2;70;210;35m\\e[38;2;73;218;37m▄\\e[48;2;73;217;37m\\e[38;2;73;218;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;217;37m\\e[38;2;74;216;38m▄\\e[48;2;82;211;47m\\e[38;2;118;191;90m▄\\e[48;2;100;200;70m\\e[38;2;132;185;108m▄\\e[48;2;103;201;72m\\e[38;2;127;187;101m▄\\e[48;2;98;203;67m\\e[38;2;125;189;100m▄\\e[48;2;85;209;52m\\e[38;2;116;192;88m▄\\e[48;2;73;217;37m\\e[38;2;80;211;44m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;68;200;35m▄\\e[48;2;63;170;35m\\e[38;2;54;125;36m▄\\e[48;2;51;103;38m\\e[38;2;51;99;38m▄\\e[48;2;49;101;36m\\e[38;2;22;45;17m▄\\e[48;2;30;47;26m\\e[38;2;45;69;39m▄\\e[48;2;51;78;45m \\e[0m \\e[48;2;51;78;45m \\e[48;2;49;75;43m\\e[38;2;51;78;45m▄\\e[48;2;30;38;27m\\e[38;2;39;59;35m▄\\e[48;2;63;123;49m\\e[38;2;71;110;62m▄\\e[48;2;54;121;37m\\e[38;2;56;119;40m▄\\e[48;2;68;198;37m\\e[38;2;60;158;37m▄\\e[48;2;73;218;37m\\e[38;2;71;216;36m▄\\e[48;2;73;217;37m\\e[38;2;73;216;38m▄\\e[48;2;91;206;58m\\e[38;2;110;196;81m▄\\e[48;2;122;191;95m\\e[38;2;126;188;100m▄\\e[48;2;128;186;102m\\e[38;2;130;187;104m▄\\e[48;2;140;180;116m\\e[38;2;128;187;103m▄\\e[48;2;126;188;100m\\e[38;2;106;197;76m▄\\e[48;2;96;202;64m\\e[38;2;75;215;39m▄\\e[48;2;73;217;37m\\e[38;2;72;218;36m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;74;220;37m\\e[38;2;73;218;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;74;217;38m\\e[38;2;73;217;37m▄\\e[48;2;114;194;86m\\e[38;2;76;215;40m▄\\e[48;2;142;178;121m\\e[38;2;94;205;62m▄\\e[48;2;150;176;129m\\e[38;2;109;196;81m▄\\e[48;2;142;180;120m\\e[38;2;95;203;63m▄\\e[48;2;116;193;88m\\e[38;2;76;214;41m▄\\e[48;2;78;213;44m\\e[38;2;73;217;37m▄\\e[48;2;73;218;37m\\e[38;2;73;217;37m▄\\e[48;2;73;218;37m\\e[38;2;67;196;36m▄\\e[48;2;71;209;37m\\e[38;2;60;154;36m▄\\e[48;2;59;152;36m\\e[38;2;57;138;37m▄\\e[48;2;52;110;38m\\e[38;2;56;130;37m▄\\e[48;2;51;104;38m\\e[38;2;30;71;21m▄\\e[48;2;20;31;17m\\e[38;2;45;69;39m▄\\e[48;2;50;78;44m\\e[38;2;51;78;45m▄\\e[48;2;51;78;45m \\e[0m \\e[48;2;51;78;45m\\e[38;2;28;43;24m▄\\e[48;2;51;78;45m\\e[38;2;43;64;38m▄\\e[48;2;51;78;45m\\e[38;2;52;79;46m▄\\e[48;2;34;53;30m\\e[38;2;46;71;41m▄\\e[48;2;64;124;48m\\e[38;2;49;106;36m▄\\e[48;2;53;115;38m\\e[38;2;57;124;40m▄\\e[48;2;63;175;36m\\e[38;2;55;126;38m▄\\e[48;2;73;217;37m\\e[38;2;66;186;36m▄\\e[48;2;89;208;56m\\e[38;2;73;217;37m▄\\e[48;2;111;195;82m\\e[38;2;75;215;40m▄\\e[48;2;109;197;80m\\e[38;2;74;216;38m▄\\e[48;2;85;209;52m\\e[38;2;73;218;36m▄\\e[48;2;73;216;37m\\e[38;2;73;218;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;217;37m\\e[38;2;73;218;37m▄\\e[48;2;73;217;37m\\e[38;2;73;218;37m▄\\e[48;2;73;217;36m\\e[38;2;73;218;37m▄\\e[48;2;73;218;37m\\e[38;2;71;214;36m▄\\e[48;2;71;212;36m\\e[38;2;63;172;36m▄\\e[48;2;63;174;35m\\e[38;2;57;138;37m▄\\e[48;2;58;146;36m\\e[38;2;57;137;38m▄\\e[48;2;58;139;37m\\e[38;2;57;138;37m▄\\e[48;2;58;138;37m\\e[38;2;54;128;35m▄\\e[48;2;50;117;34m\\e[38;2;20;44;14m▄\\e[48;2;20;32;17m\\e[38;2;39;61;34m▄\\e[48;2;51;77;44m\\e[38;2;45;69;40m▄\\e[48;2;51;78;45m\\e[38;2;45;69;40m▄\\e[48;2;51;78;45m\\e[38;2;49;75;43m▄\\e[0m \\e[48;2;84;151;67m\\e[38;2;98;177;78m▄\\e[48;2;43;80;34m\\e[38;2;98;177;78m▄\\e[48;2;22;39;19m\\e[38;2;98;178;78m▄\\e[48;2;43;67;38m\\e[38;2;81;148;64m▄\\e[48;2;40;70;33m\\e[38;2;44;78;36m▄\\e[48;2;54;127;36m\\e[38;2;21;47;15m▄\\e[48;2;55;120;39m\\e[38;2;54;117;39m▄\\e[48;2;56;133;37m\\e[38;2;59;133;40m▄\\e[48;2;71;211;36m\\e[38;2;61;164;37m▄\\e[48;2;73;217;36m\\e[38;2;71;211;36m▄\\e[48;2;73;218;37m\\e[38;2;72;218;36m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;217;37m▄\\e[48;2;73;218;37m\\e[38;2;72;217;36m▄\\e[48;2;73;218;37m\\e[38;2;67;203;34m▄\\e[48;2;68;194;37m\\e[38;2;40;116;21m▄\\e[48;2;58;142;36m\\e[38;2;8;21;5m▄\\e[48;2;49;120;31m\\e[38;2;6;10;5m▄\\e[48;2;25;59;16m\\e[38;2;73;108;65m▄\\e[48;2;15;33;11m\\e[38;2;95;157;79m▄\\e[48;2;12;25;9m\\e[38;2;97;175;77m▄\\e[48;2;21;32;19m\\e[38;2;99;179;79m▄\\e[48;2;23;35;19m\\e[38;2;98;178;78m▄\\e[48;2;20;34;17m\\e[38;2;98;178;78m▄\\e[48;2;13;24;11m\\e[38;2;98;178;78m▄\\e[48;2;16;26;14m\\e[38;2;98;177;78m▄\\e[0m \\e[48;2;97;176;77m\\e[38;2;58;103;46m▄\\e[48;2;98;177;78m\\e[38;2;94;170;75m▄\\e[48;2;98;177;78m\\e[38;2;99;179;79m▄\\e[48;2;98;177;78m\\e[38;2;97;176;77m▄\\e[48;2;97;176;77m\\e[38;2;98;177;78m▄\\e[48;2;91;165;72m\\e[38;2;98;177;78m▄\\e[48;2;55;100;44m\\e[38;2;98;177;78m▄\\e[48;2;15;27;10m\\e[38;2;92;168;73m▄\\e[48;2;24;46;18m\\e[38;2;76;138;61m▄\\e[48;2;73;154;53m\\e[38;2;54;96;43m▄\\e[48;2;74;213;39m\\e[38;2;24;48;18m▄\\e[48;2;74;222;37m\\e[38;2;20;55;11m▄\\e[48;2;73;217;37m\\e[38;2;31;91;16m▄\\e[48;2;73;218;37m\\e[38;2;49;145;24m▄\\e[48;2;73;218;37m\\e[38;2;68;201;35m▄\\e[48;2;73;218;37m\\e[38;2;73;217;37m▄\\e[48;2;73;218;37m\\e[38;2;74;220;37m▄\\e[48;2;73;218;37m\\e[38;2;73;219;37m▄\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;220;37m▄\\e[48;2;73;218;37m\\e[38;2;72;214;37m▄\\e[48;2;73;218;37m\\e[38;2;63;187;32m▄\\e[48;2;72;217;36m\\e[38;2;41;120;22m▄\\e[48;2;74;222;36m\\e[38;2;21;52;13m▄\\e[48;2;67;203;34m\\e[38;2;39;62;34m▄\\e[48;2;40;117;21m\\e[38;2;64;103;54m▄\\e[48;2;14;43;7m\\e[38;2;72;126;57m▄\\e[48;2;4;12;2m\\e[38;2;87;156;69m▄\\e[48;2;25;45;21m\\e[38;2;97;174;78m▄\\e[48;2;71;124;57m\\e[38;2;99;177;80m▄\\e[48;2;97;168;78m\\e[38;2;94;170;75m▄\\e[48;2;96;175;77m\\e[38;2;103;177;84m▄\\e[48;2;98;176;79m\\e[38;2;109;183;90m▄\\e[48;2;100;178;80m\\e[38;2;112;185;94m▄\\e[48;2;100;177;80m\\e[38;2;111;184;92m▄\\e[48;2;99;177;80m\\e[38;2;107;182;89m▄\\e[48;2;98;177;78m\\e[38;2;105;182;85m▄\\e[48;2;98;177;78m\\e[38;2;103;180;83m▄\\e[48;2;98;177;78m\\e[38;2;99;177;79m▄\\e[0m \\e[38;2;54;79;47m▀\\e[38;2;72;123;60m▀\\e[48;2;97;176;78m\\e[38;2;65;87;60m▄\\e[48;2;98;177;78m\\e[38;2;73;130;59m▄\\e[48;2;98;177;78m\\e[38;2;91;165;72m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;96;172;77m\\e[38;2;98;177;78m▄\\e[48;2;82;147;65m\\e[38;2;98;177;78m▄\\e[48;2;66;116;52m\\e[38;2;98;177;78m▄\\e[48;2;46;78;38m\\e[38;2;98;177;78m▄\\e[48;2;27;51;20m\\e[38;2;98;177;78m▄\\e[48;2;28;60;20m\\e[38;2;94;169;74m▄\\e[48;2;28;67;19m\\e[38;2;86;155;69m▄\\e[48;2;34;96;19m\\e[38;2;69;123;54m▄\\e[48;2;42;126;21m\\e[38;2;48;86;39m▄\\e[48;2;51;148;27m\\e[38;2;36;64;28m▄\\e[48;2;55;164;28m\\e[38;2;26;46;20m▄\\e[48;2;60;180;30m\\e[38;2;23;39;18m▄\\e[48;2;62;186;31m\\e[38;2;21;40;17m▄\\e[48;2;61;181;31m\\e[38;2;19;36;16m▄\\e[48;2;67;176;40m\\e[38;2;18;32;14m▄\\e[48;2;63;173;35m\\e[38;2;23;36;19m▄\\e[48;2;56;168;29m\\e[38;2;27;42;23m▄\\e[48;2;53;160;27m\\e[38;2;29;45;24m▄\\e[48;2;44;133;22m\\e[38;2;30;53;25m▄\\e[48;2;34;102;17m\\e[38;2;52;89;43m▄\\e[48;2;20;60;10m\\e[38;2;88;148;71m▄\\e[48;2;24;47;19m\\e[38;2;97;171;78m▄\\e[48;2;34;62;27m\\e[38;2;98;177;78m▄\\e[48;2;55;99;44m\\e[38;2;98;177;78m▄\\e[48;2;80;144;64m\\e[38;2;98;177;78m▄\\e[48;2;99;176;79m\\e[38;2;98;177;78m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;99;177;79m▄\\e[48;2;99;177;79m\\e[38;2;96;172;76m▄\\e[48;2;99;175;79m\\e[38;2;85;151;68m▄\\e[48;2;95;169;76m\\e[38;2;72;121;60m▄\\e[48;2;109;180;92m\\e[38;2;37;57;32m▄\\e[48;2;100;159;85m\\e[38;2;38;41;36m▄\\e[48;2;72;107;62m\\e[38;2;74;74;74m▄\\e[0m\\e[38;2;44;65;38m▀\\e[38;2;31;48;27m▀\\e[38;2;31;48;26m▀\\e[38;2;31;52;25m▀\\e[38;2;41;71;34m▀\\e[38;2;59;97;50m▀\\e[0m \\e[38;2;95;106;94m▀\\e[38;2;81;137;65m▀\\e[38;2;91;166;73m▀\\e[48;2;95;174;76m\\e[38;2;61;73;59m▄\\e[48;2;98;177;78m\\e[38;2;33;66;26m▄\\e[48;2;98;177;78m\\e[38;2;81;143;65m▄\\e[48;2;98;177;78m\\e[38;2;102;182;81m▄\\e[48;2;98;177;78m\\e[38;2;97;176;77m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;178;78m\\e[38;2;98;177;78m▄\\e[48;2;98;179;78m\\e[38;2;98;177;78m▄\\e[48;2;98;179;78m\\e[38;2;98;177;78m▄\\e[48;2;99;179;78m\\e[38;2;98;177;78m▄\\e[48;2;98;179;78m\\e[38;2;98;177;78m▄\\e[48;2;98;178;78m\\e[38;2;98;177;78m▄\\e[48;2;98;178;78m\\e[38;2;98;177;78m▄\\e[48;2;98;178;78m\\e[38;2;98;177;78m▄\\e[48;2;98;179;78m\\e[38;2;98;177;78m▄\\e[48;2;97;177;77m\\e[38;2;98;177;78m▄\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78m▄\\e[48;2;98;177;78m\\e[38;2;99;179;78m▄\\e[48;2;98;177;78m\\e[38;2;93;169;74m▄\\e[48;2;98;177;78m\\e[38;2;56;106;44m▄\\e[48;2;96;174;77m\\e[38;2;16;31;13m▄\\e[48;2;68;126;54m\\e[38;2;58;58;58m▄\\e[0m\\e[38;2;28;50;23m▀\\e[38;2;20;22;20m▀\\e[0m \\e[38;2;41;52;39m▀\\e[38;2;39;76;30m▀\\e[38;2;73;136;57m▀\\e[48;2;90;162;72m\\e[38;2;96;100;95m▄\\e[48;2;99;175;79m\\e[38;2;60;69;58m▄\\e[48;2;98;177;78m\\e[38;2;46;59;43m▄\\e[48;2;98;177;78m\\e[38;2;32;51;27m▄\\e[48;2;98;178;78m\\e[38;2;28;50;23m▄\\e[48;2;98;178;78m\\e[38;2;28;55;22m▄\\e[48;2;98;178;78m\\e[38;2;35;64;28m▄\\e[48;2;98;177;78m\\e[38;2;41;75;33m▄\\e[48;2;98;177;78m\\e[38;2;50;89;41m▄\\e[48;2;98;177;77m\\e[38;2;54;89;45m▄\\e[48;2;98;177;77m\\e[38;2;53;89;44m▄\\e[48;2;98;177;78m\\e[38;2;49;86;39m▄\\e[48;2;98;177;78m\\e[38;2;45;83;36m▄\\e[48;2;98;177;78m\\e[38;2;40;74;32m▄\\e[48;2;98;177;78m\\e[38;2;35;64;28m▄\\e[48;2;98;178;78m\\e[38;2;39;60;33m▄\\e[48;2;90;163;71m\\e[38;2;55;61;53m▄\\e[0m\\e[38;2;53;97;41m▀\\e[38;2;24;44;19m▀\\e[38;2;36;41;35m▀\\e[0m '"
2⤵
PID:1489

/bin/sed
sed "s,LEGEND,[1;4m&[0m,"
2⤵
PID:1491

/bin/sed
sed "s,RED/YELLOW,[1;31;103m&[0m,"
2⤵
PID:1493

/bin/sed
sed "s,RED,[1;31m&[0m,"
2⤵
PID:1495

/bin/sed
sed "s,LightCyan,[1;96m&[0m,"
2⤵
PID:1500

/bin/sed
sed "s,Blue,[1;34m&[0m,"
2⤵
PID:1502

/bin/sed
sed "s,Green,[1;32m&[0m,"
2⤵
PID:1504

/bin/sed
sed "s,LightMagenta,[1;95m&[0m,"
2⤵
PID:1506

/bin/sed
sed "s,YOU ARE ALREADY ROOT!!!,[1;31;103m&[0m,"
2⤵
PID:1508

/bin/sleep
sleep 3
2⤵
PID:1509

/usr/bin/whoami
whoami
2⤵
PID:1528

/usr/bin/id
id -u root
2⤵
PID:1527

/usr/bin/cut
cut -d " " -f5
2⤵
PID:1531

/bin/grep
grep "^/"
2⤵
PID:1532

/usr/bin/tr
tr "\\n" "|"
2⤵
PID:1533

/bin/cat
cat /proc/self/mountinfo
2⤵
PID:1534

/bin/grep
grep -E "\\W/\\W"
2⤵
PID:1538

/bin/grep
grep -v "#"
2⤵
PID:1537

/bin/cat
cat /etc/fstab
2⤵
PID:1536

/usr/bin/awk
awk "{print \$1}"
2⤵
PID:1539

/bin/grep
grep "^/"
2⤵
PID:1542

/bin/grep
grep -Ev "swap|/cdrom|/floppy|/dev/shm"
2⤵
PID:1543

/usr/bin/awk
awk "{print \$1}"
2⤵
PID:1544

/bin/grep
grep -Ev "/sys|/proc|/dev|/dev/pts|/run|/|/sys/kernel/security|/dev/shm|/run/lock|/sys/fs/cgroup|/sys/fs/cgroup/unified|/sys/fs/cgroup/systemd|/sys/fs/pstore|/sys/fs/cgroup/freezer|/sys/fs/cgroup/net_cls,net_prio|/sys/fs/cgroup/cpu,cpuacct|/sys/fs/cgroup/hugetlb|/sys/fs/cgroup/perf_event|/sys/fs/cgroup/cpuset|/sys/fs/cgroup/memory|/sys/fs/cgroup/devices|/sys/fs/cgroup/pids|/sys/fs/cgroup/blkio|/sys/fs/cgroup/rdma|/proc/sys/fs/binfmt_misc|/sys/kernel/debug|/dev/mqueue|/dev/hugepages|/sys/kernel/config|/sys/fs/fuse/connections|/proc/sys/fs/binfmt_misc|/run/user/0|/run/user/0/gvfs|UUID=040d9bdb-513b-4ecf-adde-309e7b54b137"
2⤵
PID:1545

/bin/cat
cat /etc/fstab
2⤵
PID:1541

/usr/bin/tr
tr "\\n" "|"
2⤵
PID:1546

/usr/bin/tr
tr " " "|"
2⤵
PID:1549

/usr/bin/groups
groups
2⤵
PID:1548

/usr/bin/whoami
whoami
2⤵
PID:1550

/bin/sed
sed -E s/o/a/
2⤵
PID:1552

/bin/sed
sed "s/:\\.:/:/g"
2⤵
PID:1555

/bin/sed
sed "s/:\\.\$//g"
2⤵
PID:1556

/bin/sed
sed "s/^\\.://g"
2⤵
PID:1557

/bin/sed
sed "s/:/\$|^/g"
2⤵
PID:1558

/bin/grep
grep -i "sh\$"
2⤵
PID:1562

/bin/grep
grep -v "^root:"
2⤵
PID:1561

/usr/bin/cut
cut -d : -f 1
2⤵
PID:1563

/bin/cat
cat /etc/passwd
2⤵
PID:1560

/usr/bin/tr
tr "\\n" "|"
2⤵
PID:1564

/bin/sed
sed "s/|bin|/|bin[\\\\\\s:]|^bin\$|/"
2⤵
PID:1565

/bin/sed
sed "s/|sys|/|sys[\\\\\\s:]|^sys\$|/"
2⤵
PID:1566

/bin/sed
sed "s/|daemon|/|daemon[\\\\\\s:]|^daemon\$|/"
2⤵
- Reads runtime system information
PID:1567

/usr/bin/awk
awk "{ print \"\\\\b\" \$0 }"
2⤵
PID:1571

/bin/grep
grep -i -v "sh\$"
2⤵
PID:1570

/usr/bin/sort
sort
2⤵
PID:1572

/usr/bin/cut
cut -d : -f 1
2⤵
PID:1573

/bin/sed
sed "s/\$/\\\\b/g"
2⤵
PID:1574

/bin/cat
cat /etc/passwd
2⤵
PID:1569

/usr/bin/tr
tr "\\n" "|"
2⤵
PID:1575

/bin/sed
sed "s/|bin|/|bin[\\\\\\s:]|^bin\$|/"
2⤵
PID:1576

/usr/bin/whoami
whoami
2⤵
PID:1578

/usr/bin/tr
tr " " "|"
2⤵
PID:1582

/usr/bin/cut
cut -d : -f 2
2⤵
PID:1581

/usr/bin/groups
groups root
2⤵
PID:1580

/usr/bin/cut
cut -d : -f2
2⤵
PID:1585

/usr/bin/groups
groups root
2⤵
PID:1584

/bin/sed
sed -e "s/ -or\$//"
2⤵
PID:1588

/usr/bin/sort
sort
2⤵
PID:1591

/usr/bin/find
find / -maxdepth 3 -type d "!" -path "/proc/*" "(" "(" -user root ")" -or "(" -perm "-o=w" ")" -or "(" -perm "-g=w" -and "(" -group root ")" ")" ")"
2⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1590

/usr/bin/tr
tr "\\n" "|"
2⤵
PID:1594

/usr/bin/head
head -n1
2⤵
PID:1598

/bin/grep
grep /shm
2⤵
PID:1597

/bin/sed
sed -E "s,/|/bin|/boot|/boot/grub|/boot/grub/fonts|/boot/grub/i386-pc|/boot/grub/locale|/.cache|/dev|/dev/block|/dev/bsg|/dev/bus|/dev/bus/usb|/dev/char|/dev/cpu|/dev/disk|/dev/disk/by-id|/dev/disk/by-partuuid|/dev/disk/by-path|/dev/disk/by-uuid|/dev/dri|/dev/dri/by-path|/dev/hugepages|/dev/input|/dev/input/by-id|/dev/input/by-path|/dev/mapper|/dev/mqueue|/dev/net|/dev/pts|/dev/shm|/dev/snd|/dev/vfio|/etc|/etc/acpi|/etc/acpi/events|/etc/alternatives|/etc/apm|/etc/apm/event.d|/etc/apm/resume.d|/etc/apm/scripts.d|/etc/apm/suspend.d|/etc/apparmor|/etc/apparmor.d|/etc/apparmor.d/abstractions|/etc/apparmor.d/cache|/etc/apparmor.d/disable|/etc/apparmor.d/force-complain|/etc/apparmor.d/local|/etc/apparmor.d/tunables|/etc/apparmor/init|/etc/apport|/etc/apport/blacklist.d|/etc/apport/native-origins.d|/etc/apt|/etc/apt/apt.conf.d|/etc/apt/auth.conf.d|/etc/apt/keyrings|/etc/apt/preferences.d|/etc/apt/sources.list.d|/etc/apt/trusted.gpg.d|/etc/audisp|/etc/audisp/plugins.d|/etc/audit|/etc/audit/rules.d|/etc/avahi|/etc/avahi/services|/etc/bash_completion.d|/etc/binfmt.d|/etc/bluetooth|/etc/brltty|/etc/brltty/Attributes|/etc/brltty/Contraction|/etc/brltty/Input|/etc/brltty/Keyboard|/etc/brltty/Text|/etc/ca-certificates|/etc/ca-certificates/update.d|/etc/calendar|/etc/chatscripts|/etc/console-setup|/etc/cracklib|/etc/cron.d|/etc/cron.daily|/etc/cron.hourly|/etc/cron.monthly|/etc/cron.weekly|/etc/cups|/etc/cupshelpers|/etc/cups/interfaces|/etc/cups/ppd|/etc/cups/ssl|/etc/dbus-1|/etc/dbus-1/session.d|/etc/dbus-1/system.d|/etc/dconf|/etc/dconf/db|/etc/dconf/profile|/etc/default|/etc/depmod.d|/etc/dhcp|/etc/dhcp/dhclient-enter-hooks.d|/etc/dhcp/dhclient-exit-hooks.d|/etc/dictionaries-common|/etc/dpkg|/etc/dpkg/dpkg.cfg.d|/etc/dpkg/origins|/etc/emacs|/etc/emacs/site-start.d|/etc/firefox|/etc/firefox/pref|/etc/fonts|/etc/fonts/conf.avail|/etc/fonts/conf.d|/etc/fwupd|/etc/fwupd/remotes.d|/etc/gdb|/etc/gdm3|/etc/gdm3/Init|/etc/gdm3/PostLogin|/etc/gdm3/PostSession|/etc/gdm3/PreSession|/etc/gdm3/Prime|/etc/gdm3/PrimeOff|/etc/geoclue|/etc/ghostscript|/etc/ghostscript/cidfmap.d|/etc/ghostscript/fontmap.d|/etc/glvnd|/etc/glvnd/egl_vendor.d|/etc/gnome|/etc/groff|/etc/grub.d|/etc/gss|/etc/gss/mech.d|/etc/gtk-2.0|/etc/gtk-3.0|/etc/hp|/etc/ifplugd|/etc/ifplugd/action.d|/etc/ImageMagick-6|/etc/init|/etc/init.d|/etc/initramfs-tools|/etc/initramfs-tools/conf.d|/etc/initramfs-tools/hooks|/etc/initramfs-tools/scripts|/etc/insserv.conf.d|/etc/iproute2|/etc/iproute2/rt_protos.d|/etc/iproute2/rt_tables.d|/etc/kernel|/etc/kernel/install.d|/etc/kernel/postinst.d|/etc/kernel/postrm.d|/etc/kernel/preinst.d|/etc/ldap|/etc/ld.so.conf.d|/etc/libblockdev|/etc/libblockdev/conf.d|/etc/libnl-3|/etc/libpaper.d|/etc/libreoffice|/etc/logcheck|/etc/logcheck/ignore.d.paranoid|/etc/logcheck/ignore.d.server|/etc/logrotate.d|/etc/modprobe.d|/etc/modules-load.d|/etc/netplan|/etc/network|/etc/networkd-dispatcher|/etc/networkd-dispatcher/dormant.d|/etc/networkd-dispatcher/no-carrier.d|/etc/networkd-dispatcher/off.d|/etc/networkd-dispatcher/routable.d|/etc/network/if-down.d|/etc/network/if-post-down.d|/etc/network/if-pre-up.d|/etc/network/if-up.d|/etc/network/interfaces.d|/etc/NetworkManager|/etc/NetworkManager/conf.d|/etc/NetworkManager/dispatcher.d|/etc/NetworkManager/dnsmasq.d|/etc/NetworkManager/dnsmasq-shared.d|/etc/NetworkManager/system-connections|/etc/newt|/etc/opt|/etc/PackageKit|/etc/pam.d|/etc/pcmcia|/etc/perl|/etc/perl/CPAN|/etc/perl/Net|/etc/perl/XML|/etc/pki|/etc/pki/fwupd|/etc/pki/fwupd-metadata|/etc/pm|/etc/pm/sleep.d|/etc/polkit-1|/etc/polkit-1/localauthority|/etc/polkit-1/localauthority.conf.d|/etc/polkit-1/nullbackend.conf.d|/etc/ppp|/etc/ppp/ip-down.d|/etc/ppp/ip-up.d|/etc/ppp/ipv6-down.d|/etc/ppp/ipv6-up.d|/etc/ppp/peers|/etc/ppp/resolv|/etc/profile.d|/etc/pulse|/etc/python|/etc/python2.7|/etc/python3|/etc/python3.6|/etc/rc0.d|/etc/rc1.d|/etc/rc2.d|/etc/rc3.d|/etc/rc4.d|/etc/rc5.d|/etc/rc6.d|/etc/rcS.d|/etc/resolvconf|/etc/resolvconf/update-libc.d|/etc/rsyslog.d|/etc/sane.d|/etc/sane.d/dll.d|/etc/security|/etc/security/limits.d|/etc/security/namespace.d|/etc/selinux|/etc/selinux/default|/etc/sensors.d|/etc/skel|/etc/speech-dispatcher|/etc/speech-dispatcher/clients|/etc/speech-dispatcher/modules|/etc/ssh|/etc/ssl|/etc/ssl/certs|/etc/ssl/private|/etc/sudoers.d|/etc/sysctl.d|/etc/systemd|/etc/systemd/network|/etc/systemd/system|/etc/systemd/user|/etc/terminfo|/etc/thunderbird|/etc/tmpfiles.d|/etc/ubuntu-advantage|/etc/udev|/etc/udev/hwdb.d|/etc/udev/rules.d|/etc/udisks2|/etc/ufw|/etc/ufw/applications.d|/etc/update-manager|/etc/update-manager/release-upgrades.d|/etc/update-motd.d|/etc/update-notifier|/etc/UPower|/etc/usb_modeswitch.d|/etc/vim|/etc/wpa_supplicant|/etc/X11|/etc/X11/app-defaults|/etc/X11/cursors|/etc/X11/fonts|/etc/X11/xinit|/etc/X11/xkb|/etc/X11/Xreset.d|/etc/X11/Xresources|/etc/X11/Xsession.d|/etc/X11/xsm|/etc/xdg|/etc/xdg/autostart|/etc/xdg/menus|/etc/xdg/systemd|/home|/lib|/lib64|/lib/apparmor|/lib/brltty|/lib/console-setup|/lib/crda|/lib/crda/pubkeys|/lib/firmware|/lib/firmware/3com|/lib/firmware/acenic|/lib/firmware/adaptec|/lib/firmware/advansys|/lib/firmware/amdgpu|/lib/firmware/amd-ucode|/lib/firmware/ar3k|/lib/firmware/asihpi|/lib/firmware/ath10k|/lib/firmware/ath6k|/lib/firmware/ath9k_htc|/lib/firmware/atmel|/lib/firmware/atusb|/lib/firmware/av7110|/lib/firmware/bnx2|/lib/firmware/bnx2x|/lib/firmware/brcm|/lib/firmware/carl9170fw|/lib/firmware/cavium|/lib/firmware/cis|/lib/firmware/cpia2|/lib/firmware/cxgb3|/lib/firmware/cxgb4|/lib/firmware/dsp56k|/lib/firmware/e100|/lib/firmware/ea|/lib/firmware/edgeport|/lib/firmware/emi26|/lib/firmware/emi62|/lib/firmware/ene-ub6250|/lib/firmware/ess|/lib/firmware/go7007|/lib/firmware/hp|/lib/firmware/i915|/lib/firmware/imx|/lib/firmware/intel|/lib/firmware/intel-ucode|/lib/firmware/isci|/lib/firmware/kaweth|/lib/firmware/keyspan|/lib/firmware/keyspan_pda|/lib/firmware/korg|/lib/firmware/libertas|/lib/firmware/liquidio|/lib/firmware/matrox|/lib/firmware/mediatek|/lib/firmware/mellanox|/lib/firmware/moxa|/lib/firmware/mrvl|/lib/firmware/mwl8k|/lib/firmware/mwlwifi|/lib/firmware/netronome|/lib/firmware/nvidia|/lib/firmware/ositech|/lib/firmware/qca|/lib/firmware/qcom|/lib/firmware/qed|/lib/firmware/qlogic|/lib/firmware/r128|/lib/firmware/radeon|/lib/firmware/rockchip|/lib/firmware/rsi|/lib/firmware/RTL8192E|/lib/firmware/rtl_bt|/lib/firmware/rtl_nic|/lib/firmware/rtlwifi|/lib/firmware/rtw88|/lib/firmware/sb16|/lib/firmware/slicoss|/lib/firmware/sun|/lib/firmware/tehuti|/lib/firmware/ti-connectivity|/lib/firmware/tigon|/lib/firmware/ti-keystone|/lib/firmware/ttusb-budget|/lib/firmware/ueagle-atm|/lib/firmware/usbdux|/lib/firmware/vicam|/lib/firmware/vxge|/lib/firmware/yam|/lib/firmware/yamaha|/lib/firmware/zd1211|/lib/hdparm|/lib/ifupdown|/lib/init|/lib/linux-sound-base|/lib/lsb|/lib/lsb/init-functions.d|/lib/modprobe.d|/lib/modules|/lib/modules/4.15.0-213-generic|/lib/netplan|/lib/recovery-mode|/lib/recovery-mode/options|/lib/systemd|/lib/systemd/network|/lib/systemd/system|/lib/systemd/system-generators|/lib/systemd/system-preset|/lib/systemd/system-shutdown|/lib/systemd/system-sleep|/lib/terminfo|/lib/terminfo/a|/lib/terminfo/c|/lib/terminfo/d|/lib/terminfo/E|/lib/terminfo/h|/lib/terminfo/l|/lib/terminfo/m|/lib/terminfo/p|/lib/terminfo/r|/lib/terminfo/s|/lib/terminfo/v|/lib/terminfo/w|/lib/terminfo/x|/lib/udev|/lib/udev/hwdb.d|/lib/udev/rules.d|/lib/ufw|/lib/x86_64-linux-gnu|/lib/x86_64-linux-gnu/security|/lost+found|/media|/media/floppy0|/mnt|/opt|/proc|/root|/root/.cache|/root/.cache/dconf|/root/.cache/doc|/root/.cache/evolution|/root/.cache/gnome-software|/root/.cache/ibus|/root/.cache/ibus-table|/root/.cache/libgweather|/root/.cache/mozilla|/root/.cache/wallpaper|/root/.config|/root/.config/dconf|/root/.config/evolution|/root/.config/gnome-session|/root/.config/goa-1.0|/root/.config/gtk-3.0|/root/.config/ibus|/root/.config/nautilus|/root/.config/systemd|/root/.dbus|/root/.dbus/session-bus|/root/Desktop|/root/Documents|/root/Downloads|/root/.gnupg|/root/.gnupg/private-keys-v1.d|/root/.gvfs|/root/.local|/root/.local/share|/root/.mozilla|/root/.mozilla/extensions|/root/.mozilla/firefox|/root/Music|/root/Pictures|/root/Public|/root/Templates|/root/Videos|/run|/run/boltd|/run/boltd/power|/run/console-setup|/run/cups|/run/dbus|/run/gdm3|/run/initramfs|/run/lock|/run/lock/subsys|/run/log|/run/mount|/run/network|/run/NetworkManager|/run/NetworkManager/conf.d|/run/NetworkManager/devices|/run/NetworkManager/system-connections|/run/pppconfig|/run/sendsigs.omit.d|/run/spice-vdagentd|/run/sshd|/run/sudo|/run/sudo/ts|/run/systemd|/run/systemd/ask-password|/run/systemd/generator|/run/systemd/generator.late|/run/systemd/inaccessible|/run/systemd/inhibit|/run/systemd/initctl|/run/systemd/journal|/run/systemd/machines|/run/systemd/seats|/run/systemd/sessions|/run/systemd/shutdown|/run/systemd/system|/run/systemd/transient|/run/systemd/unit-root|/run/systemd/units|/run/systemd/users|/run/tmpfiles.d|/run/udev|/run/udev/data|/run/udev/links|/run/udev/static_node-tags|/run/udev/tags|/run/udev/watch|/run/udisks2|/run/user|/run/user/0|/run/uuidd|/sbin|/snap|/srv|/sys|/sys/block|/sys/bus|/sys/bus/acpi|/sys/bus/clockevents|/sys/bus/clocksource|/sys/bus/container|/sys/bus/cpu|/sys/bus/edac|/sys/bus/event_source|/sys/bus/gpio|/sys/bus/hid|/sys/bus/i2c|/sys/bus/isa|/sys/bus/machinecheck|/sys/bus/mdio_bus|/sys/bus/memory|/sys/bus/mipi-dsi|/sys/bus/mmc|/sys/bus/nd|/sys/bus/node|/sys/bus/nvmem|/sys/bus/parport|/sys/bus/pci|/sys/bus/pci-epf|/sys/bus/pci_express|/sys/bus/platform|/sys/bus/pnp|/sys/bus/rapidio|/sys/bus/scsi|/sys/bus/sdio|/sys/bus/serial|/sys/bus/serio|/sys/bus/spi|/sys/bus/usb|/sys/bus/virtio|/sys/bus/vme|/sys/bus/workqueue|/sys/bus/xen|/sys/bus/xen-backend|/sys/class|/sys/class/ata_device|/sys/class/ata_link|/sys/class/ata_port|/sys/class/backlight|/sys/class/bdi|/sys/class/block|/sys/class/bsg|/sys/class/devcoredump|/sys/class/devfreq|/sys/class/devfreq-event|/sys/class/dma|/sys/class/dmi|/sys/class/drm|/sys/class/drm_dp_aux_dev|/sys/class/extcon|/sys/class/firmware|/sys/class/gpio|/sys/class/graphics|/sys/class/hidraw|/sys/class/hmm_device|/sys/class/hwmon|/sys/class/i2c-adapter|/sys/class/i2c-dev|/sys/class/input|/sys/class/iommu|/sys/class/leds|/sys/class/mdio_bus|/sys/class/mem|/sys/class/misc|/sys/class/mmc_host|/sys/class/nd|/sys/class/net|/sys/class/pci_bus|/sys/class/pci_epc|/sys/class/phy|/sys/class/powercap|/sys/class/power_supply|/sys/class/ppdev|/sys/class/ppp|/sys/class/printer|/sys/class/pwm|/sys/class/rapidio_port|/sys/class/regulator|/sys/class/rfkill|/sys/class/rtc|/sys/class/scsi_device|/sys/class/scsi_disk|/sys/class/scsi_generic|/sys/class/scsi_host|/sys/class/spi_master|/sys/class/spi_slave|/sys/class/thermal|/sys/class/tpm|/sys/class/tpmrm|/sys/class/tty|/sys/class/vc|/sys/class/virtio-ports|/sys/class/vtconsole|/sys/class/watchdog|/sys/dev|/sys/dev/block|/sys/dev/char|/sys/devices|/sys/devices/breakpoint|/sys/devices/isa|/sys/devices/LNXSYSTM:00|/sys/devices/msr|/sys/devices/parport0|/sys/devices/pci0000:00|/sys/devices/platform|/sys/devices/pnp0|/sys/devices/software|/sys/devices/system|/sys/devices/tracepoint|/sys/devices/uncore_arb|/sys/devices/uncore_cbox|/sys/devices/virtual|/sys/firmware|/sys/firmware/acpi|/sys/firmware/dmi|/sys/firmware/memmap|/sys/firmware/qemu_fw_cfg|/sys/fs|/sys/fs/bpf|/sys/fs/cgroup|/sys/fs/ecryptfs|/sys/fs/ext4|/sys/fs/fuse|/sys/fs/pstore|/sys/hypervisor|/sys/kernel|/sys/kernel/boot_params|/sys/kernel/cgroup|/sys/kernel/config|/sys/kernel/debug|/sys/kernel/iommu_groups|/sys/kernel/irq|/sys/kernel/livepatch|/sys/kernel/mm|/sys/kernel/security|/sys/kernel/slab|/sys/kernel/tracing|/sys/module|/sys/module/8139cp|/sys/module/8139too|/sys/module/8250|/sys/module/acpi|/sys/module/acpi_cpufreq|/sys/module/acpiphp|/sys/module/aesni_intel|/sys/module/aes_x86_64|/sys/module/ahci|/sys/module/apparmor|/sys/module/ata_generic|/sys/module/ata_piix|/sys/module/autofs4|/sys/module/battery|/sys/module/binfmt_misc|/sys/module/block|/sys/module/button|/sys/module/configfs|/sys/module/cpufreq|/sys/module/cpuidle|/sys/module/crc32_pclmul|/sys/module/crct10dif_pclmul|/sys/module/cryptd|/sys/module/cryptomgr|/sys/module/crypto_simd|/sys/module/debug_core|/sys/module/dm_mod|/sys/module/dns_resolver|/sys/module/drm|/sys/module/drm_kms_helper|/sys/module/dynamic_debug|/sys/module/edac_core|/sys/module/edd|/sys/module/efivars|/sys/module/ehci_hcd|/sys/module/elants_i2c|/sys/module/ext4|/sys/module/fb|/sys/module/fb_sys_fops|/sys/module/firmware_class|/sys/module/floppy|/sys/module/fscrypto|/sys/module/fuse|/sys/module/ghash_clmulni_intel|/sys/module/glue_helper|/sys/module/gpiolib_acpi|/sys/module/hid|/sys/module/hid_generic|/sys/module/i2c_piix4|/sys/module/i8042|/sys/module/ima|/sys/module/input_leds|/sys/module/intel_idle|/sys/module/ip_tables|/sys/module/ipv6|/sys/module/joydev|/sys/module/kdb|/sys/module/kernel|/sys/module/keyboard|/sys/module/kgdb_nmi|/sys/module/kgdboc|/sys/module/libahci|/sys/module/libata|/sys/module/loop|/sys/module/lp|/sys/module/mac_hid|/sys/module/md_mod|/sys/module/mii|/sys/module/module|/sys/module/mousedev|/sys/module/netpoll|/sys/module/nfnetlink|/sys/module/nf_tables|/sys/module/nf_tables_inet|/sys/module/nf_tables_ipv4|/sys/module/nf_tables_ipv6|/sys/module/parport|/sys/module/parport_pc|/sys/module/pata_acpi|/sys/module/pata_sis|/sys/module/pcbc|/sys/module/pcc_cpufreq|/sys/module/pcie_aspm|/sys/module/pciehp|/sys/module/pci_hotplug|/sys/module/ppdev|/sys/module/ppp_generic|/sys/module/printk|/sys/module/processor|/sys/module/psmouse|/sys/module/pstore|/sys/module/qemu_fw_cfg|/sys/module/random|/sys/module/rcupdate|/sys/module/rcutree|/sys/module/rfkill|/sys/module/rng_core|/sys/module/sch_fq_codel|/sys/module/scsi_mod|/sys/module/serio_raw|/sys/module/sg|/sys/module/spurious|/sys/module/srcutree|/sys/module/sr_mod|/sys/module/stahp|/sys/module/suspend|/sys/module/syscopyarea|/sys/module/sysfillrect|/sys/module/sysimgblt|/sys/module/sysrq|/sys/module/tcp_cubic|/sys/module/thermal|/sys/module/tpm|/sys/module/tpm_crb|/sys/module/tpm_tis|/sys/module/tpm_tis_core|/sys/module/ttm|/sys/module/uhci_hcd|/sys/module/uinput|/sys/module/usbcore|/sys/module/usbhid|/sys/module/virtio_balloon|/sys/module/virtio_blk|/sys/module/virtio_gpu|/sys/module/virtio_mmio|/sys/module/virtio_pci|/sys/module/vt|/sys/module/watchdog|/sys/module/workqueue|/sys/module/xen|/sys/module/xen_acpi_processor|/sys/module/xen_blkfront|/sys/module/xen_netfront|/sys/module/xhci_hcd|/sys/module/x_tables|/sys/module/xz_dec|/sys/module/zswap|/sys/power|/tmp|/tmp/.font-unix|/tmp/.ICE-unix|/tmp/netplan_t4gvmx20|/tmp/snap-private-tmp|/tmp/ssh-14h3MH9sLL6m|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-bolt.service-KydciJ|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-bolt.service-KydciJ/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-colord.service-MtZnPQ|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-colord.service-MtZnPQ/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-ModemManager.service-O97zjv|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-ModemManager.service-O97zjv/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-resolved.service-kBVedT|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-resolved.service-kBVedT/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-timedated.service-Ow3ERO|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-timedated.service-Ow3ERO/tmp|/tmp/.Test-unix|/tmp/.X11-unix|/tmp/.XIM-unix|/usr|/usr/bin|/usr/games|/usr/include|/usr/include/arpa|/usr/include/asm-generic|/usr/include/c++|/usr/include/drm|/usr/include/linux|/usr/include/misc|/usr/include/mtd|/usr/include/net|/usr/include/netash|/usr/include/netatalk|/usr/include/netax25|/usr/include/neteconet|/usr/include/netinet|/usr/include/netipx|/usr/include/netiucv|/usr/include/netpacket|/usr/include/netrom|/usr/include/netrose|/usr/include/nfs|/usr/include/node|/usr/include/openssl|/usr/include/protocols|/usr/include/python3.6m|/usr/include/rdma|/usr/include/reglib|/usr/include/rpc|/usr/include/rpcsvc|/usr/include/scsi|/usr/include/sound|/usr/include/video|/usr/include/X11|/usr/include/x86_64-linux-gnu|/usr/include/xen|/usr/include/xorg|/usr/lib|/usr/lib/accountsservice|/usr/lib/apg|/usr/lib/apt|/usr/lib/aspell|/usr/lib/at-spi2-core|/usr/lib/avahi|/usr/lib/bfd-plugins|/usr/lib/binfmt.d|/usr/lib/bluetooth|/usr/lib/colord|/usr/lib/compat-ld|/usr/lib/cups|/usr/lib/dbus-1.0|/usr/lib/dconf|/usr/lib/debug|/usr/lib/deja-dup|/usr/lib/dpkg|/usr/lib/eject|/usr/lib/emacsen-common|/usr/lib/environment.d|/usr/lib/evince|/usr/lib/evolution|/usr/lib/evolution-data-server|/usr/libexec|/usr/lib/file|/usr/lib/firefox|/usr/lib/firefox-addons|/usr/lib/fwupd|/usr/lib/gcc|/usr/lib/gcr|/usr/lib/gdm3|/usr/lib/geoclue-2.0|/usr/lib/gettext|/usr/lib/ghostscript|/usr/lib/girepository-1.0|/usr/lib/gjs|/usr/lib/glib-networking|/usr/lib/gnome-control-center|/usr/lib/gnome-disk-utility|/usr/lib/gnome-initial-setup|/usr/lib/gnome-online-accounts|/usr/lib/gnome-session|/usr/lib/gnome-settings-daemon|/usr/lib/gnome-settings-daemon-3.0|/usr/lib/gnome-shell|/usr/lib/gnome-terminal|/usr/lib/gnupg|/usr/lib/gnupg2|/usr/lib/gold-ld|/usr/lib/groff|/usr/lib/grub|/usr/lib/grub-legacy|/usr/lib/gvfs|/usr/lib/ibus|/usr/lib/initramfs-tools|/usr/lib/ispell|/usr/lib/kernel|/usr/lib/klibc|/usr/lib/language-selector|/usr/lib/libmbim|/usr/lib/libqmi|/usr/lib/libreoffice|/usr/lib/linux|/usr/lib/linux-boot-probes|/usr/lib/locale|/usr/lib/lp_solve|/usr/lib/man-db|/usr/lib/memtest86+|/usr/lib/mime|/usr/lib/modules-load.d|/usr/lib/mozilla|/usr/lib/mutter|/usr/lib/networkd-dispatcher|/usr/lib/NetworkManager|/usr/lib/node_modules|/usr/lib/notification-daemon|/usr/lib/nvidia|/usr/lib/openssh|/usr/lib/os-prober|/usr/lib/os-probes|/usr/lib/packagekit|/usr/lib/pcmciautils|/usr/lib/pkgconfig|/usr/lib/pm-utils|/usr/lib/policykit-1|/usr/lib/pppd|/usr/lib/pulse-11.1|/usr/lib/python2.7|/usr/lib/python3|/usr/lib/python3.6|/usr/lib/python3.7|/usr/lib/python3.8|/usr/lib/rhythmbox|/usr/lib/rsyslog|/usr/lib/rtkit|/usr/lib/sasl2|/usr/lib/selinux|/usr/lib/shotwell|/usr/lib/snapd|/usr/lib/software-properties|/usr/lib/speech-dispatcher-modules|/usr/lib/ssl|/usr/lib/sudo|/usr/lib/sysctl.d|/usr/lib/syslinux|/usr/lib/SYSLINUX|/usr/lib/syslinux-legacy|/usr/lib/systemd|/usr/lib/system-service|/usr/lib/sysusers.d|/usr/lib/tar|/usr/lib/tasksel|/usr/lib/tc|/usr/lib/thunderbird|/usr/lib/thunderbird-addons|/usr/lib/tmpfiles.d|/usr/lib/ubiquity|/usr/lib/ubuntu-advantage|/usr/lib/ubuntu-release-upgrader|/usr/lib/udisks2|/usr/lib/unity-settings-daemon-1.0|/usr/lib/update-notifier|/usr/lib/upower|/usr/lib/valgrind|/usr/lib/vino|/usr/lib/X11|/usr/lib/x86_64-linux-gnu|/usr/lib/xorg|/usr/lib/xserver-xorg-video-intel|/usr/lib/zeitgeist|/usr/local|/usr/local/bin|/usr/local/etc|/usr/local/games|/usr/local/include|/usr/local/lib|/usr/local/sbin|/usr/local/share|/usr/local/src|/usr/sbin|/usr/share|/usr/share/aclocal|/usr/share/acpi-support|/usr/share/adduser|/usr/share/adium|/usr/share/aisleriot|/usr/share/alsa|/usr/share/alsa-base|/usr/share/appdata|/usr/share/app-info|/usr/share/app-install|/usr/share/application-registry|/usr/share/applications|/usr/share/apport|/usr/share/apps|/usr/share/apturl|/usr/share/aspell|/usr/share/avahi|/usr/share/awk|/usr/share/backgrounds|/usr/share/base-files|/usr/share/base-passwd|/usr/share/bash-completion|/usr/share/binfmts|/usr/share/branding|/usr/share/brltty|/usr/share/bug|/usr/share/build-essential|/usr/share/ca-certificates|/usr/share/calendar|/usr/share/cmake|/usr/share/cogl|/usr/share/color|/usr/share/colord|/usr/share/command-not-found|/usr/share/common-licenses|/usr/share/consolefonts|/usr/share/console-setup|/usr/share/consoletrans|/usr/share/cups|/usr/share/dbus-1|/usr/share/dconf|/usr/share/debconf|/usr/share/debhelper|/usr/share/debianutils|/usr/share/defaults|/usr/share/desktop-directories|/usr/share/dict|/usr/share/dictionaries-common|/usr/share/distro-info|/usr/share/djvu|/usr/share/dns|/usr/share/dnsmasq-base|/usr/share/doc|/usr/share/doc-base|/usr/share/dpkg|/usr/share/drirc.d|/usr/share/emacs|/usr/share/enchant|/usr/share/eog|/usr/share/evince|/usr/share/evolution-data-server|/usr/share/example-content|/usr/share/file|/usr/share/file-roller|/usr/share/fish|/usr/share/fontconfig|/usr/share/fonts|/usr/share/fonts-droid-fallback|/usr/share/fonts-sil-padauk|/usr/share/foo2qpdl|/usr/share/foo2zjs|/usr/share/fwupd|/usr/share/gcc-8|/usr/share/GConf|/usr/share/gdb|/usr/share/gdm|/usr/share/gedit|/usr/share/GeoIP|/usr/share/gettext|/usr/share/gettext-0.19.8|/usr/share/ghostscript|/usr/share/glib-2.0|/usr/share/glvnd|/usr/share/gnome|/usr/share/gnome-background-properties|/usr/share/gnome-bluetooth|/usr/share/gnome-control-center|/usr/share/gnome-mahjongg|/usr/share/gnome-mines|/usr/share/gnome-session|/usr/share/gnome-settings-daemon|/usr/share/gnome-shell|/usr/share/gnome-software|/usr/share/gnome-sudoku|/usr/share/gnome-todo|/usr/share/gnome-video-effects|/usr/share/gnupg|/usr/share/goa-1.0|/usr/share/grilo-plugins|/usr/share/groff|/usr/share/grub|/usr/share/grub-gfxpayload-lists|/usr/share/gst-plugins-base|/usr/share/gstreamer-1.0|/usr/share/gtk-doc|/usr/share/gtk-engines|/usr/share/gtksourceview-3.0|/usr/share/guile|/usr/share/gutenprint|/usr/share/gvfs|/usr/share/hal|/usr/share/help|/usr/share/help-langpack|/usr/share/hplip|/usr/share/hunspell|/usr/share/hyphen|/usr/share/i18n|/usr/share/ibus|/usr/share/ibus-table|/usr/share/icons|/usr/share/ImageMagick-6|/usr/share/im-config|/usr/share/indicators|/usr/share/info|/usr/share/initramfs-tools|/usr/share/installation-report|/usr/share/intltool-debian|/usr/share/iptables|/usr/share/iso-codes|/usr/share/java|/usr/share/kde4|/usr/share/keyrings|/usr/share/language-selector|/usr/share/language-support|/usr/share/language-tools|/usr/share/libaudio2|/usr/share/libc-bin|/usr/share/libdrm|/usr/share/libexttextcat|/usr/share/libgnomekbd|/usr/share/libgphoto2|/usr/share/libgweather|/usr/share/liblangtag|/usr/share/liblouis|/usr/share/liblouisutdml|/usr/share/libparse-debianchangelog-perl|/usr/share/libreoffice|/usr/share/librevenge|/usr/share/libsensors4|/usr/share/libthai|/usr/share/libwacom|/usr/share/lightdm|/usr/share/lintian|/usr/share/linux-sound-base|/usr/share/locale|/usr/share/locale-langpack|/usr/share/locales|/usr/share/m2300w|/usr/share/man|/usr/share/man-db|/usr/share/maven-repo|/usr/share/media-player-info|/usr/share/menu|/usr/share/metainfo|/usr/share/mime|/usr/share/mime-info|/usr/share/mimelnk|/usr/share/misc|/usr/share/mobile-broadband-provider-info|/usr/share/mousetweaks|/usr/share/mozilla|/usr/share/mythes|/usr/share/nano|/usr/share/nautilus-share|/usr/share/netpbm|/usr/share/netplan|/usr/share/numpy3|/usr/share/openssh|/usr/share/orca|/usr/share/os-prober|/usr/share/p11-kit|/usr/share/package-data-downloads|/usr/share/PackageKit|/usr/share/pam|/usr/share/pam-configs|/usr/share/perl|/usr/share/perl5|/usr/share/perl-openssl-defaults|/usr/share/pixmaps|/usr/share/pkgconfig|/usr/share/plymouth|/usr/share/pnm2ppa|/usr/share/polkit-1|/usr/share/poppler|/usr/share/popularity-contest|/usr/share/ppd|/usr/share/ppp|/usr/share/publicsuffix|/usr/share/pulseaudio|/usr/share/pyshared|/usr/share/python|/usr/share/python3|/usr/share/python-apt|/usr/share/readline|/usr/share/remmina|/usr/share/rhythmbox|/usr/share/rsyslog|/usr/share/seahorse|/usr/share/secureboot|/usr/share/selinux|/usr/share/selinux-basics|/usr/share/sensible-utils|/usr/share/session-migration|/usr/share/simple-scan|/usr/share/snmp|/usr/share/software-properties|/usr/share/sounds|/usr/share/speech-dispatcher|/usr/share/ssl-cert|/usr/share/system-config-printer|/usr/share/systemd|/usr/share/systemtap|/usr/share/tabset|/usr/share/tasksel|/usr/share/terminfo|/usr/share/themes|/usr/share/thumbnailers|/usr/share/totem|/usr/share/transmission|/usr/share/ubuntu|/usr/share/ubuntu-drivers-common|/usr/share/ubuntu-release-upgrader|/usr/share/ubuntu-wayland|/usr/share/ufw|/usr/share/unattended-upgrades|/usr/share/unity|/usr/share/update-manager|/usr/share/update-notifier|/usr/share/upstart|/usr/share/usb-creator|/usr/share/usb_modeswitch|/usr/share/vim|/usr/share/wayland-sessions|/usr/share/X11|/usr/share/xdg-desktop-portal|/usr/share/xml|/usr/share/xsessions|/usr/share/yelp|/usr/share/yelp-xsl|/usr/share/zeitgeist|/usr/share/zenity|/usr/share/zoneinfo|/usr/share/zsh|/usr/src|/usr/src/linux-headers-4.15.0-213|/usr/src/linux-headers-4.15.0-213-generic|/var|/var/backups|/var/cache|/var/cache/apparmor|/var/cache/app-info|/var/cache/apt|/var/cache/cracklib|/var/cache/cups|/var/cache/debconf|/var/cache/dictionaries-common|/var/cache/fontconfig|/var/cache/gdm|/var/cache/ldconfig|/var/cache/PackageKit|/var/cache/snapd|/var/crash|/var/lib|/var/lib/AccountsService|/var/lib/acpi-support|/var/lib/alsa|/var/lib/app-info|/var/lib/apport|/var/lib/apt|/var/lib/aspell|/var/lib/bluetooth|/var/lib/boltd|/var/lib/command-not-found|/var/lib/dbus|/var/lib/dhcp|/var/lib/dictionaries-common|/var/lib/dpkg|/var/lib/emacsen-common|/var/lib/fwupd|/var/lib/ghostscript|/var/lib/grub|/var/lib/hp|/var/lib/initramfs-tools|/var/lib/ispell|/var/lib/libreoffice|/var/lib/libxml-sax-perl|/var/lib/locales|/var/lib/logrotate|/var/lib/man-db|/var/lib/misc|/var/lib/mlocate|/var/lib/NetworkManager|/var/lib/os-prober|/var/lib/PackageKit|/var/lib/pam|/var/lib/plymouth|/var/lib/polkit-1|/var/lib/private|/var/lib/python|/var/lib/selinux|/var/lib/sepolgen|/var/lib/snapd|/var/lib/snmp|/var/lib/sudo|/var/lib/systemd|/var/lib/ubuntu-advantage|/var/lib/ubuntu-drivers-common|/var/lib/ubuntu-release-upgrader|/var/lib/ucf|/var/lib/udisks2|/var/lib/unattended-upgrades|/var/lib/update-manager|/var/lib/update-notifier|/var/lib/upower|/var/lib/ureadahead|/var/lib/usb_modeswitch|/var/lib/usbutils|/var/lib/vim|/var/lib/whoopsie|/var/lib/xfonts|/var/lib/xkb|/var/local|/var/log|/var/log/apt|/var/log/audit|/var/log/cups|/var/log/dist-upgrade|/var/log/gdm3|/var/log/hp|/var/log/installer|/var/log/journal|/var/log/unattended-upgrades|/var/mail|/var/metrics|/var/opt|/var/snap|/var/spool|/var/spool/anacron|/var/spool/cron|/var/spool/cups|/var/spool/libreoffice|/var/tmp|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-bolt.service-n3lvBg|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-colord.service-HWph3q|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-ModemManager.service-92m3WO|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-resolved.service-ddH7Fb|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-timedated.service-3kmtM2|[a-zA-Z]+[a-zA-Z0-9]* +\\*|\\./|\\.:|:\\.,[1;31;103m&[0m,g"
2⤵
PID:1600

/usr/bin/wc
wc -l
2⤵
PID:1608

/bin/ps
ps auxwww
2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1607

/usr/bin/wc
wc -c
2⤵
PID:1617

/usr/bin/seq
seq 1 31
2⤵
PID:1618

/usr/bin/seq
seq 1 18
2⤵
PID:1619

/usr/bin/seq
seq 1 31
2⤵
PID:1620

/usr/bin/seq
seq 1 31
2⤵
PID:1621

/usr/bin/seq
seq 1 31
2⤵
PID:1622

/usr/bin/seq
seq 1 18
2⤵
PID:1623

/bin/sed
sed -E "s,3.19.0-42-lowlatency|3.19.0-43-generic|3.19.0-43-lowlatency|3.19.0-47-generic|3.19.0-47-lowlatency|3.19.0-49-generic|3.19.0-49-lowlatency|3.19.0-51-generic|3.19.0-51-lowlatency|3.19.0-56-generic|3.19.0-56-lowlatency|3.19.0-58-generic|3.19.0-58-lowlatency|3.19.0-59-generic|3.19.0-59-lowlatency|3.19.0-61-generic|3.19.0-61-lowlatency|3.19.0-64-generic|3.19.0-64-lowlatency|3.19.0-65-generic|3.19.0-65-lowlatency|3.19.0-66-generic|3.19.0-66-lowlatency|3.19.0-68-generic|3.19.0-68-lowlatency|3.19.0-69-generic|3.19.0-69-lowlatency|3.19.0-71-generic|3.19.0-71-lowlatency|3.4.0-5-chromebook|4.2.0-18-generic|4.2.0-18-lowlatency|4.2.0-19-generic|4.2.0-19-lowlatency|4.2.0-21-generic|4.2.0-21-lowlatency|4.2.0-22-generic|4.2.0-22-lowlatency|4.2.0-23-generic|4.2.0-23-lowlatency|4.2.0-25-generic|4.2.0-25-lowlatency|4.2.0-27-generic|4.2.0-27-lowlatency|4.2.0-30-generic|4.2.0-30-lowlatency|4.2.0-34-generic|4.2.0-34-lowlatency|4.2.0-35-generic|4.2.0-35-lowlatency|4.2.0-36-generic|4.2.0-36-lowlatency|4.2.0-38-generic|4.2.0-38-lowlatency|4.2.0-41-generic|4.2.0-41-lowlatency|4.4.0-21-generic|4.4.0-21-lowlatency|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"
2⤵
PID:1634

/bin/sed
sed -E "s,3.16.0-45-lowlatency|3.16.0-46-generic|3.16.0-46-lowlatency|3.16.0-48-generic|3.16.0-48-lowlatency|3.16.0-49-generic|3.16.0-49-lowlatency|3.16.0-50-generic|3.16.0-50-lowlatency|3.16.0-51-generic|3.16.0-51-lowlatency|3.16.0-52-generic|3.16.0-52-lowlatency|3.16.0-53-generic|3.16.0-53-lowlatency|3.16.0-55-generic|3.16.0-55-lowlatency|3.16.0-56-generic|3.16.0-56-lowlatency|3.16.0-57-generic|3.16.0-57-lowlatency|3.16.0-59-generic|3.16.0-59-lowlatency|3.16.0-60-generic|3.16.0-60-lowlatency|3.16.0-62-generic|3.16.0-62-lowlatency|3.16.0-67-generic|3.16.0-67-lowlatency|3.16.0-69-generic|3.16.0-69-lowlatency|3.16.0-70-generic|3.16.0-70-lowlatency|3.16.0-71-generic|3.16.0-71-lowlatency|3.16.0-73-generic|3.16.0-73-lowlatency|3.16.0-76-generic|3.16.0-76-lowlatency|3.16.0-77-generic|3.16.0-77-lowlatency|3.19.0-20-generic|3.19.0-20-lowlatency|3.19.0-21-generic|3.19.0-21-lowlatency|3.19.0-22-generic|3.19.0-22-lowlatency|3.19.0-23-generic|3.19.0-23-lowlatency|3.19.0-25-generic|3.19.0-25-lowlatency|3.19.0-26-generic|3.19.0-26-lowlatency|3.19.0-28-generic|3.19.0-28-lowlatency|3.19.0-30-generic|3.19.0-30-lowlatency|3.19.0-31-generic|3.19.0-31-lowlatency|3.19.0-32-generic|3.19.0-32-lowlatency|3.19.0-33-generic|3.19.0-33-lowlatency|3.19.0-37-generic|3.19.0-37-lowlatency|3.19.0-39-generic|3.19.0-39-lowlatency|3.19.0-41-generic|3.19.0-41-lowlatency|3.19.0-42-generic,[1;31;103m&[0m,"
2⤵
PID:1633

/bin/sed
sed -E "s,4.4.0-1009-raspi2|4.4.0-1012-snapdragon|4.4.0-21-generic|4.4.0-21-generic-lpae|4.4.0-21-lowlatency|4.4.0-21-powerpc-e500mc|4.4.0-21-powerpc-smp|4.4.0-21-powerpc64-emb|4.4.0-21-powerpc64-smp|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"
2⤵
PID:1635

/bin/sed
sed -E "s,3.13.0-67-generic|3.13.0-67-lowlatency|3.13.0-68-generic|3.13.0-68-lowlatency|3.13.0-70-generic|3.13.0-70-lowlatency|3.13.0-71-generic|3.13.0-71-lowlatency|3.13.0-73-generic|3.13.0-73-lowlatency|3.13.0-74-generic|3.13.0-74-lowlatency|3.13.0-76-generic|3.13.0-76-lowlatency|3.13.0-77-generic|3.13.0-77-lowlatency|3.13.0-79-generic|3.13.0-79-lowlatency|3.13.0-83-generic|3.13.0-83-lowlatency|3.13.0-85-generic|3.13.0-85-lowlatency|3.13.0-86-generic|3.13.0-86-lowlatency|3.13.0-87-generic|3.13.0-87-lowlatency|3.13.0-88-generic|3.13.0-88-lowlatency|3.13.0-91-generic|3.13.0-91-lowlatency|3.13.0-92-generic|3.13.0-92-lowlatency|3.13.0-93-generic|3.13.0-93-lowlatency|3.13.0-95-generic|3.13.0-95-lowlatency|3.13.0-96-generic|3.13.0-96-lowlatency|3.13.0-98-generic|3.13.0-98-lowlatency|3.16.0-25-generic|3.16.0-25-lowlatency|3.16.0-26-generic|3.16.0-26-lowlatency|3.16.0-28-generic|3.16.0-28-lowlatency|3.16.0-29-generic|3.16.0-29-lowlatency|3.16.0-31-generic|3.16.0-31-lowlatency|3.16.0-33-generic|3.16.0-33-lowlatency|3.16.0-34-generic|3.16.0-34-lowlatency|3.16.0-36-generic|3.16.0-36-lowlatency|3.16.0-37-generic|3.16.0-37-lowlatency|3.16.0-38-generic|3.16.0-38-lowlatency|3.16.0-39-generic|3.16.0-39-lowlatency|3.16.0-41-generic|3.16.0-41-lowlatency|3.16.0-43-generic|3.16.0-43-lowlatency|3.16.0-44-generic|3.16.0-44-lowlatency|3.16.0-45-generic,[1;31;103m&[0m,"
2⤵
PID:1632

/bin/sed
sed -E "s,2.6.24.7-74.el5rt|2.6.24.7-81.el5rt|2.6.24.7-93.el5rt|2.6.24.7-101.el5rt|2.6.24.7-108.el5rt|2.6.24.7-111.el5rt|2.6.24.7-117.el5rt|2.6.24.7-126.el5rt|2.6.24.7-132.el5rt|2.6.24.7-137.el5rt|2.6.24.7-139.el5rt|2.6.24.7-146.el5rt|2.6.24.7-149.el5rt|2.6.24.7-161.el5rt|2.6.24.7-169.el5rt|2.6.33.7-rt29.45.el5rt|2.6.33.7-rt29.47.el5rt|2.6.33.7-rt29.55.el5rt|2.6.33.9-rt31.64.el5rt|2.6.33.9-rt31.67.el5rt|2.6.33.9-rt31.86.el5rt|2.6.18-8.1.1.el5|2.6.18-8.1.3.el5|2.6.18-8.1.4.el5|2.6.18-8.1.6.el5|2.6.18-8.1.8.el5|2.6.18-8.1.10.el5|2.6.18-8.1.14.el5|2.6.18-8.1.15.el5|2.6.18-53.el5|2.6.18-53.1.4.el5|2.6.18-53.1.6.el5|2.6.18-53.1.13.el5|2.6.18-53.1.14.el5|2.6.18-53.1.19.el5|2.6.18-53.1.21.el5|2.6.18-92.el5|2.6.18-92.1.1.el5|2.6.18-92.1.6.el5|2.6.18-92.1.10.el5|2.6.18-92.1.13.el5|2.6.18-92.1.18.el5|2.6.18-92.1.22.el5|2.6.18-92.1.24.el5|2.6.18-92.1.26.el5|2.6.18-92.1.27.el5|2.6.18-92.1.28.el5|2.6.18-92.1.29.el5|2.6.18-92.1.32.el5|2.6.18-92.1.35.el5|2.6.18-92.1.38.el5|2.6.18-128.el5|2.6.18-128.1.1.el5|2.6.18-128.1.6.el5|2.6.18-128.1.10.el5|2.6.18-128.1.14.el5|2.6.18-128.1.16.el5|2.6.18-128.2.1.el5|2.6.18-128.4.1.el5|2.6.18-128.4.1.el5|2.6.18-128.7.1.el5|2.6.18-128.8.1.el5|2.6.18-128.11.1.el5|2.6.18-128.12.1.el5|2.6.18-128.14.1.el5|2.6.18-128.16.1.el5|2.6.18-128.17.1.el5|2.6.18-128.18.1.el5|2.6.18-128.23.1.el5|2.6.18-128.23.2.el5|2.6.18-128.25.1.el5|2.6.18-128.26.1.el5|2.6.18-128.27.1.el5,[1;31;103m&[0m,"
2⤵
PID:1636

/bin/sed
sed -E "s,3.13.0-24-generic|3.13.0-24-generic-lpae|3.13.0-24-lowlatency|3.13.0-24-powerpc-e500|3.13.0-24-powerpc-e500mc|3.13.0-24-powerpc-smp|3.13.0-24-powerpc64-emb|3.13.0-24-powerpc64-smp|3.13.0-27-generic|3.13.0-27-lowlatency|3.13.0-29-generic|3.13.0-29-lowlatency|3.13.0-3-exynos5|3.13.0-30-generic|3.13.0-30-lowlatency|3.13.0-32-generic|3.13.0-32-lowlatency|3.13.0-33-generic|3.13.0-33-lowlatency|3.13.0-34-generic|3.13.0-34-lowlatency|3.13.0-35-generic|3.13.0-35-lowlatency|3.13.0-36-generic|3.13.0-36-lowlatency|3.13.0-37-generic|3.13.0-37-lowlatency|3.13.0-39-generic|3.13.0-39-lowlatency|3.13.0-40-generic|3.13.0-40-lowlatency|3.13.0-41-generic|3.13.0-41-lowlatency|3.13.0-43-generic|3.13.0-43-lowlatency|3.13.0-44-generic|3.13.0-44-lowlatency|3.13.0-46-generic|3.13.0-46-lowlatency|3.13.0-48-generic|3.13.0-48-lowlatency|3.13.0-49-generic|3.13.0-49-lowlatency|3.13.0-51-generic|3.13.0-51-lowlatency|3.13.0-52-generic|3.13.0-52-lowlatency|3.13.0-53-generic|3.13.0-53-lowlatency|3.13.0-54-generic|3.13.0-54-lowlatency|3.13.0-55-generic|3.13.0-55-lowlatency|3.13.0-57-generic|3.13.0-57-lowlatency|3.13.0-58-generic|3.13.0-58-lowlatency|3.13.0-59-generic|3.13.0-59-lowlatency|3.13.0-61-generic|3.13.0-61-lowlatency|3.13.0-62-generic|3.13.0-62-lowlatency|3.13.0-63-generic|3.13.0-63-lowlatency|3.13.0-65-generic|3.13.0-65-lowlatency|3.13.0-66-generic|3.13.0-66-lowlatency,[1;31;103m&[0m,"
2⤵
PID:1631

/bin/sed
sed -E "s,2.6.18-274.17.1.el5|2.6.18-274.18.1.el5|2.6.18-308.el5|2.6.18-308.1.1.el5|2.6.18-308.4.1.el5|2.6.18-308.8.1.el5|2.6.18-308.8.2.el5|2.6.18-308.11.1.el5|2.6.18-308.13.1.el5|2.6.18-308.16.1.el5|2.6.18-308.20.1.el5|2.6.18-308.24.1.el5|2.6.18-348.el5|2.6.18-348.1.1.el5|2.6.18-348.2.1.el5|2.6.18-348.3.1.el5|2.6.18-348.4.1.el5|2.6.18-348.6.1.el5|2.6.18-348.12.1.el5|2.6.18-348.16.1.el5|2.6.18-348.18.1.el5|2.6.18-348.19.1.el5|2.6.18-348.21.1.el5|2.6.18-348.22.1.el5|2.6.18-348.23.1.el5|2.6.18-348.25.1.el5|2.6.18-348.27.1.el5|2.6.18-348.28.1.el5|2.6.18-348.29.1.el5|2.6.18-348.30.1.el5|2.6.18-348.31.2.el5|2.6.18-371.el5|2.6.18-371.1.2.el5|2.6.18-371.3.1.el5|2.6.18-371.4.1.el5|2.6.18-371.6.1.el5|2.6.18-371.8.1.el5|2.6.18-371.9.1.el5|2.6.18-371.11.1.el5|2.6.18-371.12.1.el5|2.6.18-398.el5|2.6.18-400.el5|2.6.18-400.1.1.el5|2.6.18-402.el5|2.6.18-404.el5|2.6.18-406.el5|2.6.18-407.el5|2.6.18-408.el5|2.6.18-409.el5|2.6.18-410.el5|2.6.18-411.el5|2.6.18-412.el5,[1;31;103m&[0m,"
2⤵
PID:1638

/bin/sed
sed -E "s,2.6.18-128.29.1.el5|2.6.18-128.30.1.el5|2.6.18-128.31.1.el5|2.6.18-128.32.1.el5|2.6.18-128.35.1.el5|2.6.18-128.36.1.el5|2.6.18-128.37.1.el5|2.6.18-128.38.1.el5|2.6.18-128.39.1.el5|2.6.18-128.40.1.el5|2.6.18-128.41.1.el5|2.6.18-164.el5|2.6.18-164.2.1.el5|2.6.18-164.6.1.el5|2.6.18-164.9.1.el5|2.6.18-164.10.1.el5|2.6.18-164.11.1.el5|2.6.18-164.15.1.el5|2.6.18-164.17.1.el5|2.6.18-164.19.1.el5|2.6.18-164.21.1.el5|2.6.18-164.25.1.el5|2.6.18-164.25.2.el5|2.6.18-164.28.1.el5|2.6.18-164.30.1.el5|2.6.18-164.32.1.el5|2.6.18-164.34.1.el5|2.6.18-164.36.1.el5|2.6.18-164.37.1.el5|2.6.18-164.38.1.el5|2.6.18-194.el5|2.6.18-194.3.1.el5|2.6.18-194.8.1.el5|2.6.18-194.11.1.el5|2.6.18-194.11.3.el5|2.6.18-194.11.4.el5|2.6.18-194.17.1.el5|2.6.18-194.17.4.el5|2.6.18-194.26.1.el5|2.6.18-194.32.1.el5|2.6.18-238.el5|2.6.18-238.1.1.el5|2.6.18-238.5.1.el5|2.6.18-238.9.1.el5|2.6.18-238.12.1.el5|2.6.18-238.19.1.el5|2.6.18-238.21.1.el5|2.6.18-238.27.1.el5|2.6.18-238.28.1.el5|2.6.18-238.31.1.el5|2.6.18-238.33.1.el5|2.6.18-238.35.1.el5|2.6.18-238.37.1.el5|2.6.18-238.39.1.el5|2.6.18-238.40.1.el5|2.6.18-238.44.1.el5|2.6.18-238.45.1.el5|2.6.18-238.47.1.el5|2.6.18-238.48.1.el5|2.6.18-238.49.1.el5|2.6.18-238.50.1.el5|2.6.18-238.51.1.el5|2.6.18-238.52.1.el5|2.6.18-238.53.1.el5|2.6.18-238.54.1.el5|2.6.18-238.55.1.el5|2.6.18-238.56.1.el5|2.6.18-274.el5|2.6.18-274.3.1.el5|2.6.18-274.7.1.el5|2.6.18-274.12.1.el5,[1;31;103m&[0m,"
2⤵
PID:1637

/bin/sed
sed -E "s,3.2.0-84-generic-pae|3.2.0-84-virtual|3.2.0-85-generic|3.2.0-85-generic-pae|3.2.0-85-virtual|3.2.0-86-generic|3.2.0-86-generic-pae|3.2.0-86-virtual|3.2.0-87-generic|3.2.0-87-generic-pae|3.2.0-87-virtual|3.2.0-88-generic|3.2.0-88-generic-pae|3.2.0-88-virtual|3.2.0-89-generic|3.2.0-89-generic-pae|3.2.0-89-virtual|3.2.0-90-generic|3.2.0-90-generic-pae|3.2.0-90-virtual|3.2.0-91-generic|3.2.0-91-generic-pae|3.2.0-91-virtual|3.2.0-92-generic|3.2.0-92-generic-pae|3.2.0-92-virtual|3.2.0-93-generic|3.2.0-93-generic-pae|3.2.0-93-virtual|3.2.0-94-generic|3.2.0-94-generic-pae|3.2.0-94-virtual|3.2.0-95-generic|3.2.0-95-generic-pae|3.2.0-95-virtual|3.2.0-96-generic|3.2.0-96-generic-pae|3.2.0-96-virtual|3.2.0-97-generic|3.2.0-97-generic-pae|3.2.0-97-virtual|3.2.0-98-generic|3.2.0-98-generic-pae|3.2.0-98-virtual|3.2.0-99-generic|3.2.0-99-generic-pae|3.2.0-99-virtual|3.5.0-40-generic|3.5.0-41-generic|3.5.0-42-generic|3.5.0-43-generic|3.5.0-44-generic|3.5.0-45-generic|3.5.0-46-generic|3.5.0-49-generic|3.5.0-51-generic|3.5.0-52-generic|3.5.0-54-generic|3.8.0-19-generic|3.8.0-21-generic|3.8.0-22-generic|3.8.0-23-generic|3.8.0-27-generic|3.8.0-29-generic|3.8.0-30-generic|3.8.0-31-generic|3.8.0-32-generic|3.8.0-33-generic|3.8.0-34-generic|3.8.0-35-generic|3.8.0-36-generic|3.8.0-37-generic|3.8.0-38-generic|3.8.0-39-generic|3.8.0-41-generic|3.8.0-42-generic,[1;31;103m&[0m,"
2⤵
PID:1630

/bin/sed
sed -E "s,2.6.32-431.71.1.el6|2.6.32-431.72.1.el6|2.6.32-431.73.2.el6|2.6.32-431.74.1.el6|2.6.32-504.el6|2.6.32-504.1.3.el6|2.6.32-504.3.3.el6|2.6.32-504.8.1.el6|2.6.32-504.8.2.bgq.el6|2.6.32-504.12.2.el6|2.6.32-504.16.2.el6|2.6.32-504.23.4.el6|2.6.32-504.30.3.el6|2.6.32-504.30.5.p7ih.el6|2.6.32-504.33.2.el6|2.6.32-504.36.1.el6|2.6.32-504.38.1.el6|2.6.32-504.40.1.el6|2.6.32-504.43.1.el6|2.6.32-504.46.1.el6|2.6.32-504.49.1.el6|2.6.32-504.50.1.el6|2.6.32-504.51.1.el6|2.6.32-504.52.1.el6|2.6.32-573.el6|2.6.32-573.1.1.el6|2.6.32-573.3.1.el6|2.6.32-573.4.2.bgq.el6|2.6.32-573.7.1.el6|2.6.32-573.8.1.el6|2.6.32-573.12.1.el6|2.6.32-573.18.1.el6|2.6.32-573.22.1.el6|2.6.32-573.26.1.el6|2.6.32-573.30.1.el6|2.6.32-573.32.1.el6|2.6.32-573.34.1.el6|2.6.32-642.el6|2.6.32-642.1.1.el6|2.6.32-642.3.1.el6|2.6.32-642.4.2.el6|2.6.32-642.6.1.el6,[1;31;103m&[0m,"
2⤵
PID:1642

/bin/sed
sed -E "s,2.6.32-279.41.1.el6|2.6.32-279.42.1.el6|2.6.32-279.43.1.el6|2.6.32-279.43.2.el6|2.6.32-279.46.1.el6|2.6.32-358.el6|2.6.32-358.0.1.el6|2.6.32-358.2.1.el6|2.6.32-358.6.1.el6|2.6.32-358.6.2.el6|2.6.32-358.6.3.p7ih.el6|2.6.32-358.11.1.bgq.el6|2.6.32-358.11.1.el6|2.6.32-358.14.1.el6|2.6.32-358.18.1.el6|2.6.32-358.23.2.el6|2.6.32-358.28.1.el6|2.6.32-358.32.3.el6|2.6.32-358.37.1.el6|2.6.32-358.41.1.el6|2.6.32-358.44.1.el6|2.6.32-358.46.1.el6|2.6.32-358.46.2.el6|2.6.32-358.48.1.el6|2.6.32-358.49.1.el6|2.6.32-358.51.1.el6|2.6.32-358.51.2.el6|2.6.32-358.55.1.el6|2.6.32-358.56.1.el6|2.6.32-358.59.1.el6|2.6.32-358.61.1.el6|2.6.32-358.62.1.el6|2.6.32-358.65.1.el6|2.6.32-358.67.1.el6|2.6.32-358.68.1.el6|2.6.32-358.69.1.el6|2.6.32-358.70.1.el6|2.6.32-358.71.1.el6|2.6.32-358.72.1.el6|2.6.32-358.73.1.el6|2.6.32-358.111.1.openstack.el6|2.6.32-358.114.1.openstack.el6|2.6.32-358.118.1.openstack.el6|2.6.32-358.123.4.openstack.el6|2.6.32-431.el6|2.6.32-431.1.1.bgq.el6|2.6.32-431.1.2.el6|2.6.32-431.3.1.el6|2.6.32-431.5.1.el6|2.6.32-431.11.2.el6|2.6.32-431.17.1.el6|2.6.32-431.20.3.el6|2.6.32-431.20.5.el6|2.6.32-431.23.3.el6|2.6.32-431.29.2.el6|2.6.32-431.37.1.el6|2.6.32-431.40.1.el6|2.6.32-431.40.2.el6|2.6.32-431.46.2.el6|2.6.32-431.50.1.el6|2.6.32-431.53.2.el6|2.6.32-431.56.1.el6|2.6.32-431.59.1.el6|2.6.32-431.61.2.el6|2.6.32-431.64.1.el6|2.6.32-431.66.1.el6|2.6.32-431.68.1.el6|2.6.32-431.69.1.el6|2.6.32-431.70.1.el6,[1;31;103m&[0m,"
2⤵
PID:1641

/bin/sed
sed -E "s,3.10.0-229.rt56.141.el7|3.10.0-229.1.2.rt56.141.2.el7_1|3.10.0-229.4.2.rt56.141.6.el7_1|3.10.0-229.7.2.rt56.141.6.el7_1|3.10.0-229.11.1.rt56.141.11.el7_1|3.10.0-229.14.1.rt56.141.13.el7_1|3.10.0-229.20.1.rt56.141.14.el7_1|3.10.0-229.rt56.141.el7|3.10.0-327.rt56.204.el7|3.10.0-327.4.5.rt56.206.el7_2|3.10.0-327.10.1.rt56.211.el7_2|3.10.0-327.13.1.rt56.216.el7_2|3.10.0-327.18.2.rt56.223.el7_2|3.10.0-327.22.2.rt56.230.el7_2|3.10.0-327.28.2.rt56.234.el7_2|3.10.0-327.28.3.rt56.235.el7|3.10.0-327.36.1.rt56.237.el7|3.10.0-123.el7|3.10.0-123.1.2.el7|3.10.0-123.4.2.el7|3.10.0-123.4.4.el7|3.10.0-123.6.3.el7|3.10.0-123.8.1.el7|3.10.0-123.9.2.el7|3.10.0-123.9.3.el7|3.10.0-123.13.1.el7|3.10.0-123.13.2.el7|3.10.0-123.20.1.el7|3.10.0-229.el7|3.10.0-229.1.2.el7|3.10.0-229.4.2.el7|3.10.0-229.7.2.el7|3.10.0-229.11.1.el7|3.10.0-229.14.1.el7|3.10.0-229.20.1.el7|3.10.0-229.24.2.el7|3.10.0-229.26.2.el7|3.10.0-229.28.1.el7|3.10.0-229.30.1.el7|3.10.0-229.34.1.el7|3.10.0-229.38.1.el7|3.10.0-229.40.1.el7|3.10.0-229.42.1.el7|3.10.0-327.el7|3.10.0-327.3.1.el7|3.10.0-327.4.4.el7|3.10.0-327.4.5.el7|3.10.0-327.10.1.el7|3.10.0-327.13.1.el7|3.10.0-327.18.2.el7|3.10.0-327.22.2.el7|3.10.0-327.28.2.el7|3.10.0-327.28.3.el7|3.10.0-327.36.1.el7|3.10.0-327.36.2.el7|3.10.0-229.1.2.ael7b|3.10.0-229.4.2.ael7b|3.10.0-229.7.2.ael7b|3.10.0-229.11.1.ael7b|3.10.0-229.14.1.ael7b|3.10.0-229.20.1.ael7b|3.10.0-229.24.2.ael7b|3.10.0-229.26.2.ael7b|3.10.0-229.28.1.ael7b|3.10.0-229.30.1.ael7b|3.10.0-229.34.1.ael7b|3.10.0-229.38.1.ael7b|3.10.0-229.40.1.ael7b|3.10.0-229.42.1.ael7b|4.2.0-0.21.el7,[1;31;103m&[0m,"
2⤵
PID:1643

/bin/sed
sed -E "s,3.2.0-68-generic-pae|3.2.0-68-lowlatency|3.2.0-68-lowlatency-pae|3.2.0-68-virtual|3.2.0-69-generic|3.2.0-69-generic-pae|3.2.0-69-lowlatency|3.2.0-69-lowlatency-pae|3.2.0-69-virtual|3.2.0-70-generic|3.2.0-70-generic-pae|3.2.0-70-lowlatency|3.2.0-70-lowlatency-pae|3.2.0-70-virtual|3.2.0-72-generic|3.2.0-72-generic-pae|3.2.0-72-lowlatency|3.2.0-72-lowlatency-pae|3.2.0-72-virtual|3.2.0-73-generic|3.2.0-73-generic-pae|3.2.0-73-lowlatency|3.2.0-73-lowlatency-pae|3.2.0-73-virtual|3.2.0-74-generic|3.2.0-74-generic-pae|3.2.0-74-lowlatency|3.2.0-74-lowlatency-pae|3.2.0-74-virtual|3.2.0-75-generic|3.2.0-75-generic-pae|3.2.0-75-lowlatency|3.2.0-75-lowlatency-pae|3.2.0-75-virtual|3.2.0-76-generic|3.2.0-76-generic-pae|3.2.0-76-lowlatency|3.2.0-76-lowlatency-pae|3.2.0-76-virtual|3.2.0-77-generic|3.2.0-77-generic-pae|3.2.0-77-lowlatency|3.2.0-77-lowlatency-pae|3.2.0-77-virtual|3.2.0-79-generic|3.2.0-79-generic-pae|3.2.0-79-lowlatency|3.2.0-79-lowlatency-pae|3.2.0-79-virtual|3.2.0-80-generic|3.2.0-80-generic-pae|3.2.0-80-lowlatency|3.2.0-80-lowlatency-pae|3.2.0-80-virtual|3.2.0-82-generic|3.2.0-82-generic-pae|3.2.0-82-lowlatency|3.2.0-82-lowlatency-pae|3.2.0-82-virtual|3.2.0-83-generic|3.2.0-83-generic-pae|3.2.0-83-virtual|3.2.0-84-generic,[1;31;103m&[0m,"
2⤵
PID:1629

/bin/sed
sed -E "s,2.6.32-131.17.1.el6|2.6.32-131.21.1.el6|2.6.32-131.22.1.el6|2.6.32-131.25.1.el6|2.6.32-131.26.1.el6|2.6.32-131.28.1.el6|2.6.32-131.29.1.el6|2.6.32-131.30.1.el6|2.6.32-131.30.2.el6|2.6.32-131.33.1.el6|2.6.32-131.35.1.el6|2.6.32-131.36.1.el6|2.6.32-131.37.1.el6|2.6.32-131.38.1.el6|2.6.32-131.39.1.el6|2.6.32-220.el6|2.6.32-220.2.1.el6|2.6.32-220.4.1.el6|2.6.32-220.4.2.el6|2.6.32-220.4.7.bgq.el6|2.6.32-220.7.1.el6|2.6.32-220.7.3.p7ih.el6|2.6.32-220.7.4.p7ih.el6|2.6.32-220.7.6.p7ih.el6|2.6.32-220.7.7.p7ih.el6|2.6.32-220.13.1.el6|2.6.32-220.17.1.el6|2.6.32-220.23.1.el6|2.6.32-220.24.1.el6|2.6.32-220.25.1.el6|2.6.32-220.26.1.el6|2.6.32-220.28.1.el6|2.6.32-220.30.1.el6|2.6.32-220.31.1.el6|2.6.32-220.32.1.el6|2.6.32-220.34.1.el6|2.6.32-220.34.2.el6|2.6.32-220.38.1.el6|2.6.32-220.39.1.el6|2.6.32-220.41.1.el6|2.6.32-220.42.1.el6|2.6.32-220.45.1.el6|2.6.32-220.46.1.el6|2.6.32-220.48.1.el6|2.6.32-220.51.1.el6|2.6.32-220.52.1.el6|2.6.32-220.53.1.el6|2.6.32-220.54.1.el6|2.6.32-220.55.1.el6|2.6.32-220.56.1.el6|2.6.32-220.57.1.el6|2.6.32-220.58.1.el6|2.6.32-220.60.2.el6|2.6.32-220.62.1.el6|2.6.32-220.63.2.el6|2.6.32-220.64.1.el6|2.6.32-220.65.1.el6|2.6.32-220.66.1.el6|2.6.32-220.67.1.el6|2.6.32-279.el6|2.6.32-279.1.1.el6|2.6.32-279.2.1.el6|2.6.32-279.5.1.el6|2.6.32-279.5.2.el6|2.6.32-279.9.1.el6|2.6.32-279.11.1.el6|2.6.32-279.14.1.bgq.el6|2.6.32-279.14.1.el6|2.6.32-279.19.1.el6|2.6.32-279.22.1.el6|2.6.32-279.23.1.el6|2.6.32-279.25.1.el6|2.6.32-279.25.2.el6|2.6.32-279.31.1.el6|2.6.32-279.33.1.el6|2.6.32-279.34.1.el6|2.6.32-279.37.2.el6|2.6.32-279.39.1.el6,[1;31;103m&[0m,"
2⤵
PID:1640

/bin/sed
sed -E "s, 4.0.[0-9]+| 4.1.[0-9]+| 4.2.[0-9]+| 4.3.[0-9]+| 4.4.[0-9]+| 4.5.[0-9]+| 4.6.[0-9]+| 4.7.[0-9]+| 4.8.[0-9]+| 4.9.[0-9]+| 4.10.[0-9]+| 4.11.[0-9]+| 4.12.[0-9]+| 4.13.[0-9]+| 3.9.6| 3.9.0| 3.9| 3.8.9| 3.8.8| 3.8.7| 3.8.6| 3.8.5| 3.8.4| 3.8.3| 3.8.2| 3.8.1| 3.8.0| 3.8| 3.7.6| 3.7.0| 3.7| 3.6.0| 3.6| 3.5.0| 3.5| 3.4.9| 3.4.8| 3.4.6| 3.4.5| 3.4.4| 3.4.3| 3.4.2| 3.4.1| 3.4.0| 3.4| 3.3| 3.2| 3.19.0| 3.16.0| 3.15| 3.14| 3.13.1| 3.13.0| 3.13| 3.12.0| 3.12| 3.11.0| 3.11| 3.10.6| 3.10.0| 3.10| 3.1.0| 3.0.6| 3.0.5| 3.0.4| 3.0.3| 3.0.2| 3.0.1| 3.0.0| 2.6.9| 2.6.8| 2.6.7| 2.6.6| 2.6.5| 2.6.4| 2.6.39| 2.6.38| 2.6.37| 2.6.36| 2.6.35| 2.6.34| 2.6.33| 2.6.32| 2.6.31| 2.6.30| 2.6.3| 2.6.29| 2.6.28| 2.6.27| 2.6.26| 2.6.25| 2.6.24.1| 2.6.24| 2.6.23| 2.6.22| 2.6.21| 2.6.20| 2.6.2| 2.6.19| 2.6.18| 2.6.17| 2.6.16| 2.6.15| 2.6.14| 2.6.13| 2.6.12| 2.6.11| 2.6.10| 2.6.1| 2.6.0| 2.4.9| 2.4.8| 2.4.7| 2.4.6| 2.4.5| 2.4.4| 2.4.37| 2.4.36| 2.4.35| 2.4.34| 2.4.33| 2.4.32| 2.4.31| 2.4.30| 2.4.29| 2.4.28| 2.4.27| 2.4.26| 2.4.25| 2.4.24| 2.4.23| 2.4.22| 2.4.21| 2.4.20| 2.4.19| 2.4.18| 2.4.17| 2.4.16| 2.4.15| 2.4.14| 2.4.13| 2.4.12| 2.4.11| 2.4.10| 2.2.24,[1;31m&[0m,"
2⤵
PID:1644

/bin/sed
sed -E "s,2.6.33.9-rt31.66.el6rt|2.6.33.9-rt31.74.el6rt|2.6.33.9-rt31.75.el6rt|2.6.33.9-rt31.79.el6rt|3.0.9-rt26.45.el6rt|3.0.9-rt26.46.el6rt|3.0.18-rt34.53.el6rt|3.0.25-rt44.57.el6rt|3.0.30-rt50.62.el6rt|3.0.36-rt57.66.el6rt|3.2.23-rt37.56.el6rt|3.2.33-rt50.66.el6rt|3.6.11-rt28.20.el6rt|3.6.11-rt30.25.el6rt|3.6.11.2-rt33.39.el6rt|3.6.11.5-rt37.55.el6rt|3.8.13-rt14.20.el6rt|3.8.13-rt14.25.el6rt|3.8.13-rt27.33.el6rt|3.8.13-rt27.34.el6rt|3.8.13-rt27.40.el6rt|3.10.0-229.rt56.144.el6rt|3.10.0-229.rt56.147.el6rt|3.10.0-229.rt56.149.el6rt|3.10.0-229.rt56.151.el6rt|3.10.0-229.rt56.153.el6rt|3.10.0-229.rt56.158.el6rt|3.10.0-229.rt56.161.el6rt|3.10.0-229.rt56.162.el6rt|3.10.0-327.rt56.170.el6rt|3.10.0-327.rt56.171.el6rt|3.10.0-327.rt56.176.el6rt|3.10.0-327.rt56.183.el6rt|3.10.0-327.rt56.190.el6rt|3.10.0-327.rt56.194.el6rt|3.10.0-327.rt56.195.el6rt|3.10.0-327.rt56.197.el6rt|3.10.33-rt32.33.el6rt|3.10.33-rt32.34.el6rt|3.10.33-rt32.43.el6rt|3.10.33-rt32.45.el6rt|3.10.33-rt32.51.el6rt|3.10.33-rt32.52.el6rt|3.10.58-rt62.58.el6rt|3.10.58-rt62.60.el6rt|2.6.32-71.7.1.el6|2.6.32-71.14.1.el6|2.6.32-71.18.1.el6|2.6.32-71.18.2.el6|2.6.32-71.24.1.el6|2.6.32-71.29.1.el6|2.6.32-71.31.1.el6|2.6.32-71.34.1.el6|2.6.32-71.35.1.el6|2.6.32-71.36.1.el6|2.6.32-71.37.1.el6|2.6.32-71.38.1.el6|2.6.32-71.39.1.el6|2.6.32-71.40.1.el6|2.6.32-131.0.15.el6|2.6.32-131.2.1.el6|2.6.32-131.4.1.el6|2.6.32-131.6.1.el6|2.6.32-131.12.1.el6,[1;31;103m&[0m,"
2⤵
PID:1639

/bin/sed
sed -E "s,3.2.0-53-generic-pae|3.2.0-53-lowlatency|3.2.0-53-lowlatency-pae|3.2.0-53-virtual|3.2.0-54-generic|3.2.0-54-generic-pae|3.2.0-54-lowlatency|3.2.0-54-lowlatency-pae|3.2.0-54-virtual|3.2.0-55-generic|3.2.0-55-generic-pae|3.2.0-55-lowlatency|3.2.0-55-lowlatency-pae|3.2.0-55-virtual|3.2.0-56-generic|3.2.0-56-generic-pae|3.2.0-56-lowlatency|3.2.0-56-lowlatency-pae|3.2.0-56-virtual|3.2.0-57-generic|3.2.0-57-generic-pae|3.2.0-57-lowlatency|3.2.0-57-lowlatency-pae|3.2.0-57-virtual|3.2.0-58-generic|3.2.0-58-generic-pae|3.2.0-58-lowlatency|3.2.0-58-lowlatency-pae|3.2.0-58-virtual|3.2.0-59-generic|3.2.0-59-generic-pae|3.2.0-59-lowlatency|3.2.0-59-lowlatency-pae|3.2.0-59-virtual|3.2.0-60-generic|3.2.0-60-generic-pae|3.2.0-60-lowlatency|3.2.0-60-lowlatency-pae|3.2.0-60-virtual|3.2.0-61-generic|3.2.0-61-generic-pae|3.2.0-61-virtual|3.2.0-63-generic|3.2.0-63-generic-pae|3.2.0-63-lowlatency|3.2.0-63-lowlatency-pae|3.2.0-63-virtual|3.2.0-64-generic|3.2.0-64-generic-pae|3.2.0-64-lowlatency|3.2.0-64-lowlatency-pae|3.2.0-64-virtual|3.2.0-65-generic|3.2.0-65-generic-pae|3.2.0-65-lowlatency|3.2.0-65-lowlatency-pae|3.2.0-65-virtual|3.2.0-67-generic|3.2.0-67-generic-pae|3.2.0-67-lowlatency|3.2.0-67-lowlatency-pae|3.2.0-67-virtual|3.2.0-68-generic,[1;31;103m&[0m,"
2⤵
PID:1628

/bin/sed
sed -E "s,3.2.0-36-generic|3.2.0-36-generic-pae|3.2.0-36-lowlatency|3.2.0-36-lowlatency-pae|3.2.0-36-virtual|3.2.0-37-generic|3.2.0-37-generic-pae|3.2.0-37-lowlatency|3.2.0-37-lowlatency-pae|3.2.0-37-virtual|3.2.0-38-generic|3.2.0-38-generic-pae|3.2.0-38-lowlatency|3.2.0-38-lowlatency-pae|3.2.0-38-virtual|3.2.0-39-generic|3.2.0-39-generic-pae|3.2.0-39-lowlatency|3.2.0-39-lowlatency-pae|3.2.0-39-virtual|3.2.0-40-generic|3.2.0-40-generic-pae|3.2.0-40-lowlatency|3.2.0-40-lowlatency-pae|3.2.0-40-virtual|3.2.0-41-generic|3.2.0-41-generic-pae|3.2.0-41-lowlatency|3.2.0-41-lowlatency-pae|3.2.0-41-virtual|3.2.0-43-generic|3.2.0-43-generic-pae|3.2.0-43-virtual|3.2.0-44-generic|3.2.0-44-generic-pae|3.2.0-44-lowlatency|3.2.0-44-lowlatency-pae|3.2.0-44-virtual|3.2.0-45-generic|3.2.0-45-generic-pae|3.2.0-45-virtual|3.2.0-48-generic|3.2.0-48-generic-pae|3.2.0-48-lowlatency|3.2.0-48-lowlatency-pae|3.2.0-48-virtual|3.2.0-51-generic|3.2.0-51-generic-pae|3.2.0-51-lowlatency|3.2.0-51-lowlatency-pae|3.2.0-51-virtual|3.2.0-52-generic|3.2.0-52-generic-pae|3.2.0-52-lowlatency|3.2.0-52-lowlatency-pae|3.2.0-52-virtual|3.2.0-53-generic,[1;31;103m&[0m,"
2⤵
PID:1627

/bin/sed
sed -E "s,3.2.0-104-generic|3.2.0-104-generic-pae|3.2.0-104-virtual|3.2.0-105-generic|3.2.0-105-generic-pae|3.2.0-105-virtual|3.2.0-106-generic|3.2.0-106-generic-pae|3.2.0-106-virtual|3.2.0-107-generic|3.2.0-107-generic-pae|3.2.0-107-virtual|3.2.0-109-generic|3.2.0-109-generic-pae|3.2.0-109-virtual|3.2.0-110-generic|3.2.0-110-generic-pae|3.2.0-110-virtual|3.2.0-111-generic|3.2.0-111-generic-pae|3.2.0-111-virtual|3.2.0-1412-omap4|3.2.0-1602-armadaxp|3.2.0-23-generic|3.2.0-23-generic-pae|3.2.0-23-lowlatency|3.2.0-23-lowlatency-pae|3.2.0-23-omap|3.2.0-23-powerpc-smp|3.2.0-23-powerpc64-smp|3.2.0-23-virtual|3.2.0-24-generic|3.2.0-24-generic-pae|3.2.0-24-virtual|3.2.0-25-generic|3.2.0-25-generic-pae|3.2.0-25-virtual|3.2.0-26-generic|3.2.0-26-generic-pae|3.2.0-26-virtual|3.2.0-27-generic|3.2.0-27-generic-pae|3.2.0-27-virtual|3.2.0-29-generic|3.2.0-29-generic-pae|3.2.0-29-virtual|3.2.0-31-generic|3.2.0-31-generic-pae|3.2.0-31-virtual|3.2.0-32-generic|3.2.0-32-generic-pae|3.2.0-32-virtual|3.2.0-33-generic|3.2.0-33-generic-pae|3.2.0-33-lowlatency|3.2.0-33-lowlatency-pae|3.2.0-33-virtual|3.2.0-34-generic|3.2.0-34-generic-pae|3.2.0-34-virtual|3.2.0-35-generic|3.2.0-35-generic-pae|3.2.0-35-lowlatency|3.2.0-35-lowlatency-pae|3.2.0-35-virtual,[1;31;103m&[0m,"
2⤵
PID:1626

/bin/sed
sed -E "s,3.1.1-1400-linaro-lt-mx5|3.11.0-13-generic|3.11.0-14-generic|3.11.0-15-generic|3.11.0-17-generic|3.11.0-18-generic|3.11.0-20-generic|3.11.0-22-generic|3.11.0-23-generic|3.11.0-24-generic|3.11.0-26-generic|3.13.0-100-generic|3.13.0-24-generic|3.13.0-27-generic|3.13.0-29-generic|3.13.0-30-generic|3.13.0-32-generic|3.13.0-33-generic|3.13.0-34-generic|3.13.0-35-generic|3.13.0-36-generic|3.13.0-37-generic|3.13.0-39-generic|3.13.0-40-generic|3.13.0-41-generic|3.13.0-43-generic|3.13.0-44-generic|3.13.0-46-generic|3.13.0-48-generic|3.13.0-49-generic|3.13.0-51-generic|3.13.0-52-generic|3.13.0-53-generic|3.13.0-54-generic|3.13.0-55-generic|3.13.0-57-generic|3.13.0-58-generic|3.13.0-59-generic|3.13.0-61-generic|3.13.0-62-generic|3.13.0-63-generic|3.13.0-65-generic|3.13.0-66-generic|3.13.0-67-generic|3.13.0-68-generic|3.13.0-71-generic|3.13.0-73-generic|3.13.0-74-generic|3.13.0-76-generic|3.13.0-77-generic|3.13.0-79-generic|3.13.0-83-generic|3.13.0-85-generic|3.13.0-86-generic|3.13.0-88-generic|3.13.0-91-generic|3.13.0-92-generic|3.13.0-93-generic|3.13.0-95-generic|3.13.0-96-generic|3.13.0-98-generic|3.2.0-101-generic|3.2.0-101-generic-pae|3.2.0-101-virtual|3.2.0-102-generic|3.2.0-102-generic-pae|3.2.0-102-virtual,[1;31;103m&[0m,"
2⤵
PID:1625

/bin/cat
cat /proc/version
2⤵
PID:1645

/bin/sed
sed -E "s,euid|egid,[1;31m&[0m,g"
2⤵
PID:1654

/bin/sed
sed "s,root,[1;95m&[0m,g"
2⤵
PID:1653

/bin/sed
sed -E "s,\$lpadmin\$|\$cdrom\$|\$plugdev\$|\$nogroup\$,[1;32m&[0m,g"
2⤵
PID:1652

/bin/sed
sed -E "s,_amavisd|_analyticsd|_appinstalld|_appleevents|_applepay|_appowner|_appserver|_appstore|_ard|_assetcache|_astris|_atsserver|_avbdeviced|_calendar|_captiveagent|_ces|_clamav|_cmiodalassistants|_coreaudiod|_coremediaiod|_coreml|_ctkd|_cvmsroot|_cvs|_cyrus|_datadetectors|_demod|_devdocs|_devicemgr|_diskimagesiod|_displaypolicyd|_distnote|_dovecot|_dovenull|_dpaudio|_driverkit|_eppc|_findmydevice|_fpsd|_ftp|_fud|_gamecontrollerd|_geod|_hidd|_iconservices|_installassistant|_installcoordinationd|_installer|_jabber|_kadmin_admin|_kadmin_changepw|_knowledgegraphd|_krb_anonymous|_krb_changepw|_krb_kadmin|_krb_kerberos|_krb_krbtgt|_krbfast|_krbtgt|_launchservicesd|_lda|_locationd|_logd|_lp|_mailman|_mbsetupuser|_mcxalr|_mdnsresponder|_mobileasset|_mysql|_nearbyd|_netbios|_netstatistics|_networkd|_nsurlsessiond|_nsurlstoraged|_oahd|_ondemand|_postfix|_postgres|_qtss|_reportmemoryexception|_rmd|_sandbox|_screensaver|_scsd|_securityagent|_softwareupdate|_spotlight|_sshd|_svn|_taskgated|_teamsserver|_timed|_timezone|_tokend|_trustd|_trustevaluationagent|_unknown|_update_sharing|_usbmuxd|_uucp|_warmd|_webauthserver|_windowserver|_www|_wwwproxy|_xserverdocs|daemon\\W|^daemon\$|message\\+|syslog|www|www-data|mail|nobody|Debian\\-\\+|rtkit|systemd\\+,[1;32m&[0m,g"
2⤵
PID:1651

/bin/sed
sed -E "s,\\b_apt\\b|\\bavahi-autoipd\\b|\\bavahi\\b|\\bbackup\\b|\\bbin\\b|\\bcolord\\b|\\bcups-pk-helper\\b|\\bdaemon\\b|\\bdnsmasq\\b|\\bgames\\b|\\bgdm\\b|\\bgeoclue\\b|\\bgnats\\b|\\bgnome-initial-setup\\b|\\bhplip\\b|\\birc\\b|\\bkernoops\\b|\\blist\\b|\\blp\\b|\\bmail\\b|\\bman\\b|\\bmessagebus\\b|\\bnews\\b|\\bnobody\\b|\\bproxy\\b|\\bpulse\\b|\\brtkit\\b|\\bsaned\\b|\\bspeech-dispatcher\\b|\\bsshd\\b|\\bsync\\b|\\bsyslog\\b|\\bsystemd-network\\b|\\bsystemd-resolve\\b|\\bsys\\b|\\busbmux\\b|\\buucp\\b|\\buuidd\\b|\\bwhoopsie\\b|\\bwww-data\\b|ImPoSSssSiBlEee,[1;34m&[0m,g"
2⤵
PID:1650

/bin/sed
sed -E "s,user|ImPoSSssSiBlEee,[1;96m&[0m,g"
2⤵
PID:1649

/bin/sed
sed -E "s,\$sudo\$|\$docker\$|\$lxd\$|\$disk\$|\$lxc\$,[1;31;103m&[0m,g"
2⤵
PID:1648

/bin/sed
sed -E "s,\$root\$|\$shadow\$|\$admin\$|\$video\$|\$adm\$|\$wheel\$|\$auth\$,[1;31m&[0m,g"
2⤵
PID:1647

/usr/bin/id
id
2⤵
PID:1655

/bin/hostname
hostname
2⤵
PID:1656

/bin/grep
grep -Ev "^/root|^/home|^/Users|^/var/www"
2⤵
PID:1662

/usr/bin/cut
cut -d : -f 6
2⤵
PID:1661

/usr/bin/tr
tr "\\n" " "
2⤵
PID:1663

/bin/grep
grep "sh\$"
2⤵
PID:1660

/bin/cat
cat /etc/passwd
2⤵
PID:1659

/bin/grep
grep -q /home/root
2⤵
PID:1665

/bin/grep
grep -qE "^/root|^/home|^/Users|^/var/www"
2⤵
PID:1667

/usr/bin/tr
tr " " "|"
2⤵
PID:1671

/bin/sed
sed "s/ *\$//g"
2⤵
PID:1670

/bin/grep
grep -q procs_crons_timers_srvcs_sockets
2⤵
PID:1673

/usr/bin/sort
sort
2⤵
PID:1677

/usr/bin/find
find /applications -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1676

/usr/bin/sort
sort
2⤵
PID:1681

/usr/bin/find
find /bin -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1680

/usr/bin/sort
sort
2⤵
PID:1685

/usr/bin/find
find /.cache -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1684

/usr/bin/sort
sort
2⤵
PID:1689

/usr/bin/find
find /cdrom -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1688

/usr/bin/sort
sort
2⤵
PID:1693

/usr/bin/find
find /etc -type d -name roundcube -o -name concourse-keys -o -name kube-proxy -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name system-connections -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name pam.d -o -name kubernetes -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name system.d -o -name ".kube*" -o -name ipa -o -name .docker -o -name bind -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store -o -name kubelet
2⤵
PID:1692

/usr/bin/sort
sort
2⤵
PID:1697

/usr/bin/find
find /home/ /Users/ /root/ /var/www -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1696

/usr/bin/sort
sort
2⤵
PID:1701

/usr/bin/find
find /media -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1700

/usr/bin/sort
sort
2⤵
PID:1705

/usr/bin/find
find /mnt -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1704

/usr/bin/sort
sort
2⤵
PID:1709

/usr/bin/find
find /opt -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1708

/usr/bin/sort
sort
2⤵
PID:1713

/usr/bin/find
find /private -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1712

/usr/bin/sort
sort
2⤵
PID:1717

/usr/bin/find
find /sbin -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1716

/usr/bin/sort
sort
2⤵
PID:1721

/usr/bin/find
find /snap -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1720

/usr/bin/sort
sort
2⤵
PID:1725

/usr/bin/find
find /srv -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1724

/usr/bin/sort
sort
2⤵
PID:1729

/usr/bin/find
find /tmp -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1728

/usr/bin/sort
sort
2⤵
PID:1733

/usr/bin/find
find /usr -type d -name roundcube -o -name concourse-keys -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name bind -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store
2⤵
PID:1732

/usr/bin/sort
sort
2⤵
PID:1737

/usr/bin/find
find /var -type d -name roundcube -o -name concourse-keys -o -name kube-proxy -o -name cacti -o -name concourse-auth -o -name gcloud -o -name filezilla -o -name varnish -o -name "*jenkins" -o -name keyrings -o -name postfix -o -name nginx -o -name environments -o -name .irssi -o -name kubernetes -o -name .vnc -o -name legacy_credentials -o -name mysql -o -name ".kube*" -o -name ipa -o -name .docker -o -name bind -o -name ErrorRecords -o -name logstash -o -name neo4j -o -name "seeddms*" -o -name doctl -o -name .bluemix -o -name couchdb -o -name .cloudflared -o -name ldap -o -name .svn -o -name dirsrv -o -name sentry -o -name sites-enabled -o -name zabbix -o -name .password-store -o -name kubelet
2⤵
PID:1736

/usr/bin/sort
sort
2⤵
PID:1741

/usr/bin/find
find /concourse-auth -type d -name concourse-auth
2⤵
PID:1740

/usr/bin/sort
sort
2⤵
PID:1745

/usr/bin/find
find /concourse-keys -type d -name concourse-keys
2⤵
PID:1744

/usr/bin/sort
sort
2⤵
PID:1749

/usr/bin/find
find /applications -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1748

/usr/bin/sort
sort
2⤵
PID:1753

/usr/bin/find
find /bin -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1752

/usr/bin/sort
sort
2⤵
PID:1757

/usr/bin/find
find /.cache -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1756

/usr/bin/sort
sort
2⤵
PID:1761

/usr/bin/find
find /cdrom -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1760

/usr/bin/sort
sort
2⤵
PID:1765

/usr/bin/find
find /etc -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name exports -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name "*knockd*" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1764

/usr/bin/sort
sort
2⤵
PID:1769

/usr/bin/find
find /home/ /Users/ /root/ /var/www -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "ssh*config" -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1768

/usr/bin/sort
sort
2⤵
PID:1773

/usr/bin/find
find /lib -name "*.service" -o -name "*.timer" -o -name "*.socket" -o -name rocketchat.service -o -name "log4j-core*.jar"
2⤵
PID:1772

/usr/bin/find
find /lib32 -name "log4j-core*.jar" -o -name "*.timer" -o -name "*.socket" -o -name "*.service"
2⤵
PID:1776

/usr/bin/sort
sort
2⤵
PID:1777

/usr/bin/sort
sort
2⤵
PID:1781

/usr/bin/find
find /lib64 -name "log4j-core*.jar" -o -name "*.timer" -o -name "*.socket" -o -name "*.service"
2⤵
PID:1780

/usr/bin/sort
sort
2⤵
PID:1785

/usr/bin/find
find /media -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1784

/usr/bin/sort
sort
2⤵
PID:1789

/usr/bin/find
find /mnt -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name "*.viminfo" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "sess_*"
2⤵
PID:1788

/usr/bin/sort
sort
2⤵
PID:1793

/usr/bin/find
find /opt -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1792

/usr/bin/sort
sort
2⤵
PID:1797

/usr/bin/find
find /private -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name "*.viminfo" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "sess_*"
2⤵
PID:1796

/usr/bin/sort
sort
2⤵
PID:1801

/usr/bin/find
find /run -name "*.timer" -o -name "*.socket" -o -name "*.service"
2⤵
PID:1800

/usr/bin/sort
sort
2⤵
PID:1806

/usr/bin/find
find /sbin -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1805

/usr/bin/sort
sort
2⤵
PID:1810

/usr/bin/find
find /snap -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1809

/usr/bin/sort
sort
2⤵
PID:1814

/usr/bin/find
find /srv -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1813

/usr/bin/sort
sort
2⤵
PID:1818

/usr/bin/find
find /sys -name "*.timer" -o -name "*.socket" -o -name "*.service"
2⤵
- Reads hardware information
- Reads network interface configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1817

/usr/bin/sort
sort
2⤵
PID:1822

/usr/bin/find
find /system -name "*.timer" -o -name "*.socket" -o -name "*.service"
2⤵
PID:1821

/usr/bin/sort
sort
2⤵
PID:1826

/usr/bin/find
find /systemd -name "*.timer" -o -name "*.socket" -o -name rocketchat.service -o -name "*.service"
2⤵
PID:1825

/usr/bin/sort
sort
2⤵
PID:1830

/usr/bin/find
find /tmp -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "agent*" -o -name "*.gnupg" -o -name KeePass.ini -o -name .wgetrc -o -name unattend.xml -o -name ffftp.ini -o -name "web*.config" -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name "*.viminfo" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "sess_*"
2⤵
PID:1829

/usr/bin/sort
sort
2⤵
PID:1834

/usr/bin/find
find /usr -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "ssh*config" -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "*.viminfo"
2⤵
PID:1833

/usr/bin/sort
sort
2⤵
PID:1840

/usr/bin/find
find /var -name scheduledtasks.xml -o -name legacy_credentials.db -o -name .credentials.json -o -name sitemanager.xml -o -name system.sav -o -name anaconda-ks.cfg -o -name my.ini -o -name mysqld.cnf -o -name "*.vhd" -o -name rpcd -o -name SecEvent.Evt -o -name AzureRMContext.json -o -name "pgadmin*.db" -o -name fastcgi_params -o -name "*.cer" -o -name config.php -o -name "*.pub" -o -name "*.pfx" -o -name zabbix_server.conf -o -name "*password*" -o -name RDCMan.settings -o -name snmpd.conf -o -name "*.pem" -o -name "*.swp" -o -name access_tokens.json -o -name gitlab.yml -o -name supervisord.conf -o -name docker.sock -o -name tomcat-users.xml -o -name .flyrc -o -name ConsoleHost_history.txt -o -name database.php -o -name gvm-tools.conf -o -name ftp.ini -o -name appcmd.exe -o -name jetty-realm.properties -o -name "password*.ibd" -o -name .bashrc -o -name vault-ssh-helper.hcl -o -name containerd.sock -o -name webserver_config.py -o -name .lesshst -o -name unattended.xml -o -name docker.socket -o -name passbolt.php -o -name ntuser.dat -o -name .ldaprc -o -name unattend.txt -o -name bash.exe -o -name "*.tfstate" -o -name influxdb.conf -o -name groups.xml -o -name pwd.ibd -o -name ftp.config -o -name amportal.conf -o -name rktlet.sock -o -name .git -o -name ipsec.conf -o -name mariadb.cnf -o -name "*.gnupg" -o -name .wgetrc -o -name KeePass.ini -o -name unattend.xml -o -name "web*.config" -o -name ffftp.ini -o -name master.key -o -name my.cnf -o -name psk.txt -o -name nginx.conf -o -name pgadmin4.db -o -name TokenCache.dat -o -name autologin -o -name setupinfo.bak -o -name zabbix_agentd.conf -o -name secrets.ldb -o -name passwd.ibd -o -name "*_history*" -o -name SAM -o -name "*.der" -o -name rocketchat.service -o -name AppEvent.Evt -o -name iis6.log -o -name scclient.exe -o -name wsl.exe -o -name "creds*" -o -name "*.gpg" -o -name cloud.cfg -o -name "*vnc*.xml" -o -name plum.sqlite -o -name .gitconfig -o -name crio.sock -o -name "*.timer" -o -name default.sav -o -name recentservers.xml -o -name authorized_keys -o -name "*.sqlite" -o -name SYSTEM -o -name "*.vhdx" -o -name "*.viminfo" -o -name Dockerfile -o -name .boto -o -name "*.service" -o -name racoon.conf -o -name software.sav -o -name sssd.conf -o -name "*.sqlite3" -o -name airflow.cfg -o -name .recently-used.xbel -o -name https.conf -o -name "*.keyring" -o -name .plan -o -name index.dat -o -name settings.php -o -name filezilla.xml -o -name .htpasswd -o -name drives.xml -o -name postgresql.conf -o -name "*credential*" -o -name .k5login -o -name api_key -o -name sysprep.xml -o -name firebase-tools.json -o -name datasources.xml -o -name "id_dsa*" -o -name pagefile.sys -o -name rsyncd.conf -o -name autologin.conf -o -name ddclient.conf -o -name access_tokens.db -o -name pg_hba.conf -o -name hostapd.conf -o -name "*vnc*.txt" -o -name "id_rsa*" -o -name sites.ini -o -name backup -o -name credentials.db -o -name "*.keystore" -o -name redis.conf -o -name .roadtools_auth -o -name krb5.conf -o -name grafana.ini -o -name vsftpd.conf -o -name Elastix.conf -o -name db.php -o -name "kibana.y*ml" -o -name autounattend.xml -o -name .google_authenticator -o -name adc.json -o -name "*.key" -o -name "*.socket" -o -name kcpassword -o -name config.xml -o -name .Xauthority -o -name .secrets.mkey -o -name php.ini -o -name software -o -name .pypirc -o -name hudson.util.Secret -o -name "*.csr" -o -name "KeePass.config*" -o -name "elasticsearch.y*ml" -o -name frakti.sock -o -name storage.php -o -name "mongod*.conf" -o -name "*.crt" -o -name .erlang.cookie -o -name .git-credentials -o -name NetSetup.log -o -name FreeSSHDservice.ini -o -name "*.tf" -o -name "log4j-core*.jar" -o -name access.log -o -name rsyncd.secrets -o -name hosts.equiv -o -name azureProfile.json -o -name FreePBX.conf -o -name unattend.inf -o -name Ntds.dit -o -name .profile -o -name wcx_ftp.ini -o -name httpd.conf -o -name ws_ftp.ini -o -name glusterfs.key -o -name sip.conf -o -name "*config*.php" -o -name .msmtprc -o -name snyk.config.json -o -name kadm5.acl -o -name backups -o -name .sudo_as_admin_successful -o -name "*.vmdk" -o -name mosquitto.conf -o -name protecteduserkey.bin -o -name "*vnc*.ini" -o -name wp-config.php -o -name .vault-token -o -name server.xml -o -name "KeePass.enforced*" -o -name .github -o -name "*vnc*.c*nf*" -o -name 000-default.conf -o -name "krb5cc_*" -o -name gitlab.rm -o -name printers.xml -o -name pgsql.conf -o -name glusterfs.pem -o -name "*.psk" -o -name glusterfs.ca -o -name "*.keytab" -o -name setupinfo -o -name "*.pgp" -o -name authorized_hosts -o -name "*.db" -o -name "*.kdbx" -o -name debian.cnf -o -name dockershim.sock -o -name .rhosts -o -name smb.conf -o -name cesi.conf -o -name docker-compose.yml -o -name sentry.conf.py -o -name known_hosts -o -name secrets.yml -o -name https-xampp.conf -o -name credentials.xml -o -name ".env*" -o -name bitcoin.conf -o -name "*.ovpn" -o -name accessTokens.json -o -name winscp.ini -o -name "*.ftpconfig" -o -name "*.rdg" -o -name ipsec.secrets -o -name fat.config -o -name sysprep.inf -o -name passwd -o -name "*.p12" -o -name security.sav -o -name "*.jks" -o -name error.log -o -name atlantis.db -o -name snyk.json -o -name "sess_*"
2⤵
PID:1839

/usr/bin/sort
sort
2⤵
PID:1844

/usr/bin/find
find /concourse-auth -name "*.timer" -o -name "*.socket" -o -name "*.service"
2⤵
PID:1843

/usr/bin/sort
sort
2⤵
PID:1848

/usr/bin/find
find /concourse-keys -name "*.timer" -o -name "*.socket" -o -name "*.service"
2⤵
PID:1847

/bin/grep
grep -q procs_crons_timers_srvcs_sockets
2⤵
PID:1850

/usr/bin/sort
sort
2⤵
PID:1855

/usr/bin/head
head -n 70
2⤵
PID:1857

/usr/bin/uniq
uniq
2⤵
PID:1856

/bin/grep
grep -E ".*\\.service\$"
2⤵
PID:1854

/bin/grep
grep -E "^/run|^/cdrom|^/bin|^/applications|^/lib32|^/sbin|^/system|^/private|^/concourse-auth|^/media|^/home/|/Users/|/root/|/var/www|^/.cache|^/opt|^/systemd|^/etc|^/lib|^/usr|^/snap|^/srv|^/var|^/mnt|^/sys|^/tmp|^/concourse-keys|^/lib64"
2⤵
PID:1853

/usr/bin/sort
sort
2⤵
PID:1862

/bin/grep
grep -E ".*\\.timer\$"
2⤵
PID:1861

/usr/bin/uniq
uniq
2⤵
PID:1863

/usr/bin/head
head -n 70
2⤵
PID:1864

/bin/grep
grep -E "^/run|^/cdrom|^/bin|^/applications|^/lib32|^/sbin|^/system|^/private|^/concourse-auth|^/media|^/home/|/Users/|/root/|/var/www|^/.cache|^/opt|^/systemd|^/etc|^/lib|^/usr|^/snap|^/srv|^/var|^/mnt|^/sys|^/tmp|^/concourse-keys|^/lib64"
2⤵
PID:1860

/usr/bin/head
head -n 70
2⤵
PID:1871

/usr/bin/uniq
uniq
2⤵
PID:1870

/usr/bin/sort
sort
2⤵
PID:1869

/bin/grep
grep -E ".*\\.socket\$"
2⤵
PID:1868

/bin/grep
grep -E "^/run|^/cdrom|^/bin|^/applications|^/lib32|^/sbin|^/system|^/private|^/concourse-auth|^/media|^/home/|/Users/|/root/|/var/www|^/.cache|^/opt|^/systemd|^/etc|^/lib|^/usr|^/snap|^/srv|^/var|^/mnt|^/sys|^/tmp|^/concourse-keys|^/lib64"
2⤵
PID:1867

/usr/bin/uniq
uniq
2⤵
PID:1877

/usr/bin/head
head -n 70
2⤵
PID:1878

/usr/bin/sort
sort
2⤵
PID:1876

/bin/grep
grep -E "system\\.d\$"
2⤵
PID:1875

/bin/grep
grep -E "^/etc"
2⤵
PID:1874

/bin/grep
grep -E "mysql\$|passwd\\.ibd\$|password.*\\.ibd\$|pwd\\.ibd\$|mysqld\\.cnf\$"
2⤵
PID:1884

/usr/bin/sort
sort
2⤵
PID:1885

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1883

/usr/bin/uniq
uniq
2⤵
PID:1886

/bin/grep
grep -E "^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql"
2⤵
PID:1882

/usr/bin/head
head -n 70
2⤵
PID:1887

/bin/grep
grep -v -E mysql/mysql
2⤵
PID:1881

/bin/grep
grep -E "mariadb\\.cnf\$|debian\\.cnf\$"
2⤵
PID:1891

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1890

/usr/bin/sort
sort
2⤵
PID:1892

/usr/bin/uniq
uniq
2⤵
PID:1893

/usr/bin/head
head -n 70
2⤵
PID:1894

/usr/bin/uniq
uniq
2⤵
PID:1900

/usr/bin/sort
sort
2⤵
PID:1899

/usr/bin/head
head -n 70
2⤵
PID:1901

/bin/grep
grep -E "pgadmin.*\\.db\$|pg_hba\\.conf\$|postgresql\\.conf\$|pgsql\\.conf\$|pgadmin4\\.db\$"
2⤵
PID:1898

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1897

/usr/bin/head
head -n 70
2⤵
PID:1908

/usr/bin/uniq
uniq
2⤵
PID:1907

/usr/bin/sort
sort
2⤵
PID:1906

/bin/grep
grep -E "sites-enabled\$|000-default\\.conf\$|php\\.ini\$|nginx\\.conf\$|nginx\$"
2⤵
PID:1905

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1904

/usr/bin/uniq
uniq
2⤵
PID:1914

/usr/bin/head
head -n 70
2⤵
PID:1915

/usr/bin/sort
sort
2⤵
PID:1913

/bin/grep
grep -E "varnish\$"
2⤵
PID:1912

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1911

/usr/bin/sort
sort
2⤵
PID:1921

/usr/bin/uniq
uniq
2⤵
PID:1922

/bin/grep
grep -E "sess_.*\$"
2⤵
PID:1920

/usr/bin/head
head -n 70
2⤵
PID:1923

/bin/grep
grep -E "^/mnt|^/private|^/tmp|^/var"
2⤵
PID:1919

/bin/grep
grep -E "/tmp/.*sess_.*|/var/tmp/.*sess_.*"
2⤵
PID:1918

/usr/bin/head
head -n 70
2⤵
PID:1930

/usr/bin/uniq
uniq
2⤵
PID:1929

/usr/bin/sort
sort
2⤵
PID:1928

/bin/grep
grep -E ".*config.*\\.php\$|database\\.php\$|db\\.php\$|storage\\.php\$|settings\\.php\$"
2⤵
PID:1927

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1926

/usr/bin/head
head -n 70
2⤵
PID:1937

/usr/bin/uniq
uniq
2⤵
PID:1936

/usr/bin/sort
sort
2⤵
PID:1935

/bin/grep
grep -E "airflow\\.cfg\$|webserver_config\\.py\$"
2⤵
PID:1934

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1933

/usr/bin/uniq
uniq
2⤵
PID:1943

/usr/bin/sort
sort
2⤵
PID:1942

/usr/bin/head
head -n 70
2⤵
PID:1944

/bin/grep
grep -E "\\.Xauthority\$"
2⤵
PID:1941

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1940

/usr/bin/head
head -n 70
2⤵
PID:1951

/usr/bin/uniq
uniq
2⤵
PID:1950

/usr/bin/sort
sort
2⤵
PID:1949

/bin/grep
grep -E "wp-config\\.php\$"
2⤵
PID:1948

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1947

/usr/bin/uniq
uniq
2⤵
PID:1958

/usr/bin/head
head -n 70
2⤵
PID:1959

/bin/grep
grep -E "settings\\.php\$"
2⤵
PID:1956

/usr/bin/sort
sort
2⤵
PID:1957

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1955

/bin/grep
grep -E /default/settings.php
2⤵
PID:1954

/usr/bin/sort
sort
2⤵
PID:1965

/bin/grep
grep -E "config\\.php\$"
2⤵
PID:1964

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1963

/usr/bin/uniq
uniq
2⤵
PID:1966

/usr/bin/head
head -n 70
2⤵
PID:1967

/bin/grep
grep -E moodle/config.php
2⤵
PID:1962

/usr/bin/head
head -n 70
2⤵
PID:1974

/usr/bin/uniq
uniq
2⤵
PID:1973

/usr/bin/sort
sort
2⤵
PID:1972

/bin/grep
grep -E "tomcat-users\\.xml\$"
2⤵
PID:1971

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1970

/usr/bin/head
head -n 70
2⤵
PID:1981

/usr/bin/uniq
uniq
2⤵
PID:1980

/usr/bin/sort
sort
2⤵
PID:1979

/bin/grep
grep -E "mongod.*\\.conf\$"
2⤵
PID:1978

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1977

/usr/bin/head
head -n 70
2⤵
PID:1988

/usr/bin/uniq
uniq
2⤵
PID:1987

/usr/bin/sort
sort
2⤵
PID:1986

/bin/grep
grep -E "rocketchat\\.service\$"
2⤵
PID:1985

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/systemd|^/etc|^/mnt|^/sbin|^/bin|^/lib|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1984

/usr/bin/head
head -n 70
2⤵
PID:1995

/usr/bin/uniq
uniq
2⤵
PID:1994

/usr/bin/sort
sort
2⤵
PID:1993

/bin/grep
grep -E "supervisord\\.conf\$"
2⤵
PID:1992

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1991

/usr/bin/head
head -n 70
2⤵
PID:2002

/usr/bin/uniq
uniq
2⤵
PID:2001

/usr/bin/sort
sort
2⤵
PID:2000

/bin/grep
grep -E "cesi\\.conf\$"
2⤵
PID:1999

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:1998

/bin/grep
grep -E "rsyncd\\.conf\$|rsyncd\\.secrets\$"
2⤵
PID:2006

/usr/bin/sort
sort
2⤵
PID:2007

/usr/bin/uniq
uniq
2⤵
PID:2008

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2005

/usr/bin/head
head -n 70
2⤵
PID:2009

/usr/bin/uniq
uniq
2⤵
PID:2016

/bin/grep
grep -E "rpcd\$"
2⤵
PID:2014

/usr/bin/head
head -n 70
2⤵
PID:2017

/usr/bin/sort
sort
2⤵
PID:2015

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2013

/bin/grep
grep -v -E "/init.d/|/sbin/|/usr/share/"
2⤵
PID:2012

/usr/bin/head
head -n 70
2⤵
PID:2024

/usr/bin/uniq
uniq
2⤵
PID:2023

/usr/bin/sort
sort
2⤵
PID:2022

/bin/grep
grep -E "bitcoin\\.conf\$"
2⤵
PID:2021

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2020

/usr/bin/uniq
uniq
2⤵
PID:2030

/usr/bin/head
head -n 70
2⤵
PID:2031

/usr/bin/sort
sort
2⤵
PID:2029

/bin/grep
grep -E "hostapd\\.conf\$"
2⤵
PID:2028

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2027

/usr/bin/head
head -n 70
2⤵
PID:2038

/usr/bin/uniq
uniq
2⤵
PID:2037

/usr/bin/sort
sort
2⤵
PID:2036

/bin/grep
grep -E "system-connections\$"
2⤵
PID:2035

/bin/grep
grep -E "^/etc"
2⤵
PID:2034

/usr/bin/head
head -n 70
2⤵
PID:2045

/usr/bin/uniq
uniq
2⤵
PID:2044

/usr/bin/sort
sort
2⤵
PID:2043

/bin/grep
grep -E "pam\\.d\$"
2⤵
PID:2042

/bin/grep
grep -E "^/etc"
2⤵
PID:2041

/usr/bin/head
head -n 70
2⤵
PID:2052

/usr/bin/uniq
uniq
2⤵
PID:2051

/usr/bin/sort
sort
2⤵
PID:2050

/bin/grep
grep -E "exports\$"
2⤵
PID:2049

/bin/grep
grep -E "^/etc"
2⤵
PID:2048

/usr/bin/head
head -n 70
2⤵
PID:2059

/usr/bin/uniq
uniq
2⤵
PID:2058

/usr/bin/sort
sort
2⤵
PID:2057

/bin/grep
grep -E "glusterfs\\.pem\$|glusterfs\\.ca\$|glusterfs\\.key\$"
2⤵
PID:2056

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2055

/usr/bin/head
head -n 70
2⤵
PID:2066

/usr/bin/uniq
uniq
2⤵
PID:2065

/usr/bin/sort
sort
2⤵
PID:2064

/bin/grep
grep -E "anaconda-ks\\.cfg\$"
2⤵
PID:2063

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2062

/usr/bin/uniq
uniq
2⤵
PID:2072

/usr/bin/head
head -n 70
2⤵
PID:2073

/usr/bin/sort
sort
2⤵
PID:2071

/bin/grep
grep -E ".*\\.tfstate\$|.*\\.tf\$"
2⤵
PID:2070

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2069

/usr/bin/head
head -n 70
2⤵
PID:2080

/usr/bin/uniq
uniq
2⤵
PID:2079

/usr/bin/sort
sort
2⤵
PID:2078

/bin/grep
grep -E "racoon\\.conf\$|psk\\.txt\$"
2⤵
PID:2077

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2076

/usr/bin/head
head -n 70
2⤵
PID:2087

/usr/bin/uniq
uniq
2⤵
PID:2086

/usr/bin/sort
sort
2⤵
PID:2085

/bin/grep
grep -E "kubeconfig\$|bootstrap-kubeconfig\$|kubelet-kubeconfig\$|kubelet\\.conf\$|psk\\.txt\$|\\.kube.*\$|kubelet\$|kube-proxy\$|kubernetes\$"
2⤵
PID:2084

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2083

/usr/bin/head
head -n 70
2⤵
PID:2095

/usr/bin/sort
sort
2⤵
PID:2093

/usr/bin/uniq
uniq
2⤵
PID:2094

/bin/grep
grep -E "\\.vnc\$|.*vnc.*\\.c.*nf.*\$|.*vnc.*\\.ini\$|.*vnc.*\\.txt\$|.*vnc.*\\.xml\$"
2⤵
PID:2092

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2091

/bin/grep
grep -v -E /mime/
2⤵
PID:2090

/usr/bin/head
head -n 70
2⤵
PID:2102

/usr/bin/uniq
uniq
2⤵
PID:2101

/usr/bin/sort
sort
2⤵
PID:2100

/bin/grep
grep -E "ldap\$"
2⤵
PID:2099

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2098

/usr/bin/head
head -n 70
2⤵
PID:2109

/usr/bin/uniq
uniq
2⤵
PID:2108

/usr/bin/sort
sort
2⤵
PID:2107

/bin/grep
grep -E "log4j-core.*\\.jar\$"
2⤵
PID:2106

/bin/grep
grep -E "^/cdrom|^/applications|^/bin|^/lib32|^/sbin|^/private|^/media|^/home/|/Users/|/root/|/var/www|^/.cache|^/opt|^/etc|^/lib|^/usr|^/snap|^/srv|^/var|^/mnt|^/tmp|^/lib64"
2⤵
PID:2105

/usr/bin/uniq
uniq
2⤵
PID:2115

/usr/bin/head
head -n 70
2⤵
PID:2116

/usr/bin/sort
sort
2⤵
PID:2114

/bin/grep
grep -E ".*\\.ovpn\$"
2⤵
PID:2113

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2112

/usr/bin/head
head -n 70
2⤵
PID:2123

/usr/bin/uniq
uniq
2⤵
PID:2122

/usr/bin/sort
sort
2⤵
PID:2121

/bin/grep
grep -E "id_dsa.*\$|id_rsa.*\$|known_hosts\$|authorized_hosts\$|authorized_keys\$|.*\\.pub\$"
2⤵
PID:2120

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2119

/usr/bin/uniq
uniq
2⤵
PID:2130

/usr/bin/head
head -n 70
2⤵
PID:2131

/usr/bin/sort
sort
2⤵
PID:2129

/bin/grep
grep -E ".*\\.pem\$|.*\\.cer\$|.*\\.crt\$"
2⤵
PID:2128

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2127

/bin/grep
grep -v -E "/usr/share/|/usr/local/lib/|/usr/lib.*"
2⤵
PID:2126

/usr/bin/sort
sort
2⤵
PID:2137

/usr/bin/uniq
uniq
2⤵
PID:2138

/bin/grep
grep -E ".*\\.csr\$|.*\\.der\$"
2⤵
PID:2136

/usr/bin/head
head -n 70
2⤵
PID:2139

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2135

/bin/grep
grep -v -E "^/usr/share/|/usr/local/lib/|/usr/lib/.*|/usr/share/|/usr/local/lib/|/usr/lib/.*"
2⤵
PID:2134

/usr/bin/sort
sort
2⤵
PID:2145

/usr/bin/uniq
uniq
2⤵
PID:2146

/bin/grep
grep -E ".*\\.pfx\$|.*\\.p12\$"
2⤵
PID:2144

/usr/bin/head
head -n 70
2⤵
PID:2147

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2143

/bin/grep
grep -v -E "/usr/share/|/usr/local/lib/|/usr/lib/.*"
2⤵
PID:2142

/bin/grep
grep -E "agent.*\$"
2⤵
PID:2152

/usr/bin/sort
sort
2⤵
PID:2153

/usr/bin/uniq
uniq
2⤵
PID:2154

/usr/bin/head
head -n 70
2⤵
PID:2155

/bin/grep
grep -E "^/tmp"
2⤵
PID:2151

/bin/grep
grep -v -E .dll
2⤵
PID:2150

/usr/bin/head
head -n 70
2⤵
PID:2162

/usr/bin/uniq
uniq
2⤵
PID:2161

/usr/bin/sort
sort
2⤵
PID:2160

/bin/grep
grep -E "ssh.*config\$"
2⤵
PID:2159

/bin/grep
grep -E "^/usr|^/home/|/Users/|/root/|/var/www"
2⤵
PID:2158

/usr/bin/head
head -n 70
2⤵
PID:2169

/usr/bin/uniq
uniq
2⤵
PID:2168

/usr/bin/sort
sort
2⤵
PID:2167

/bin/grep
grep -E "snyk\\.json\$|snyk\\.config\\.json\$"
2⤵
PID:2166

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2165

/usr/bin/head
head -n 70
2⤵
PID:2176

/usr/bin/uniq
uniq
2⤵
PID:2175

/usr/bin/sort
sort
2⤵
PID:2174

/bin/grep
grep -E "credentials\\.db\$|legacy_credentials\\.db\$|adc\\.json\$|\\.boto\$|\\.credentials\\.json\$|firebase-tools\\.json\$|access_tokens\\.db\$|access_tokens\\.json\$|accessTokens\\.json\$|gcloud\$|legacy_credentials\$|azureProfile\\.json\$|TokenCache\\.dat\$|AzureRMContext\\.json\$|ErrorRecords\$|TokenCache\\.dat\$|\\.bluemix\$|doctl\$"
2⤵
PID:2173

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2172

/usr/bin/head
head -n 70
2⤵
PID:2183

/usr/bin/uniq
uniq
2⤵
PID:2182

/usr/bin/sort
sort
2⤵
PID:2181

/bin/grep
grep -E "\\.roadtools_auth\$"
2⤵
PID:2180

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2179

/usr/bin/head
head -n 70
2⤵
PID:2190

/usr/bin/uniq
uniq
2⤵
PID:2189

/usr/bin/sort
sort
2⤵
PID:2188

/bin/grep
grep -E "ipa\$|dirsrv\$"
2⤵
PID:2187

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2186

/usr/bin/head
head -n 70
2⤵
PID:2197

/usr/bin/uniq
uniq
2⤵
PID:2196

/usr/bin/sort
sort
2⤵
PID:2195

/bin/grep
grep -E "krb5\\.conf\$|.*\\.keytab\$|\\.k5login\$|krb5cc_.*\$|kadm5\\.acl\$|secrets\\.ldb\$|\\.secrets\\.mkey\$|sssd\\.conf\$"
2⤵
PID:2194

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2193

/usr/bin/head
head -n 70
2⤵
PID:2204

/usr/bin/uniq
uniq
2⤵
PID:2203

/usr/bin/sort
sort
2⤵
PID:2202

/bin/grep
grep -E "kibana\\.y.*ml\$"
2⤵
PID:2201

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2200

/usr/bin/head
head -n 70
2⤵
PID:2211

/usr/bin/uniq
uniq
2⤵
PID:2210

/usr/bin/sort
sort
2⤵
PID:2209

/bin/grep
grep -E "grafana\\.ini\$"
2⤵
PID:2208

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2207

/usr/bin/sort
sort
2⤵
PID:2217

/usr/bin/uniq
uniq
2⤵
PID:2218

/usr/bin/head
head -n 70
2⤵
PID:2219

/bin/grep
grep -E ".*knockd.*\$"
2⤵
PID:2216

/bin/grep
grep -E "^/etc"
2⤵
PID:2215

/bin/grep
grep -E /etc/init.d/
2⤵
PID:2214

/usr/bin/head
head -n 70
2⤵
PID:2226

/usr/bin/uniq
uniq
2⤵
PID:2225

/usr/bin/sort
sort
2⤵
PID:2224

/bin/grep
grep -E "logstash\$"
2⤵
PID:2223

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2222

/bin/grep
grep -E "elasticsearch\\.y.*ml\$"
2⤵
PID:2230

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2229

/usr/bin/sort
sort
2⤵
PID:2231

/usr/bin/uniq
uniq
2⤵
PID:2232

/usr/bin/head
head -n 70
2⤵
PID:2233

/usr/bin/head
head -n 70
2⤵
PID:2240

/usr/bin/uniq
uniq
2⤵
PID:2239

/usr/bin/sort
sort
2⤵
PID:2238

/bin/grep
grep -E "vault-ssh-helper\\.hcl\$"
2⤵
PID:2237

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2236

/usr/bin/head
head -n 70
2⤵
PID:2247

/usr/bin/uniq
uniq
2⤵
PID:2246

/usr/bin/sort
sort
2⤵
PID:2245

/bin/grep
grep -E "\\.vault-token\$"
2⤵
PID:2244

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2243

/usr/bin/head
head -n 70
2⤵
PID:2254

/usr/bin/uniq
uniq
2⤵
PID:2253

/usr/bin/sort
sort
2⤵
PID:2252

/bin/grep
grep -E "couchdb\$"
2⤵
PID:2251

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2250

/usr/bin/head
head -n 70
2⤵
PID:2261

/usr/bin/uniq
uniq
2⤵
PID:2260

/usr/bin/sort
sort
2⤵
PID:2259

/bin/grep
grep -E "redis\\.conf\$"
2⤵
PID:2258

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2257

/usr/bin/head
head -n 70
2⤵
PID:2268

/usr/bin/uniq
uniq
2⤵
PID:2267

/usr/bin/sort
sort
2⤵
PID:2266

/bin/grep
grep -E "mosquitto\\.conf\$"
2⤵
PID:2265

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2264

/usr/bin/head
head -n 70
2⤵
PID:2275

/usr/bin/uniq
uniq
2⤵
PID:2274

/usr/bin/sort
sort
2⤵
PID:2273

/bin/grep
grep -E "neo4j\$"
2⤵
PID:2272

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2271

/usr/bin/head
head -n 70
2⤵
PID:2282

/usr/bin/sort
sort
2⤵
PID:2280

/usr/bin/uniq
uniq
2⤵
PID:2281

/bin/grep
grep -E "cloud\\.cfg\$"
2⤵
PID:2279

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2278

/usr/bin/uniq
uniq
2⤵
PID:2288

/usr/bin/head
head -n 70
2⤵
PID:2289

/usr/bin/sort
sort
2⤵
PID:2287

/bin/grep
grep -E "\\.erlang\\.cookie\$"
2⤵
PID:2286

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2285

/usr/bin/uniq
uniq
2⤵
PID:2295

/usr/bin/head
head -n 70
2⤵
PID:2296

/usr/bin/sort
sort
2⤵
PID:2294

/bin/grep
grep -E "sip\\.conf\$|amportal\\.conf\$|FreePBX\\.conf\$|Elastix\\.conf\$"
2⤵
PID:2293

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2292

/usr/bin/head
head -n 70
2⤵
PID:2303

/usr/bin/uniq
uniq
2⤵
PID:2302

/usr/bin/sort
sort
2⤵
PID:2301

/bin/grep
grep -E "gvm-tools\\.conf\$"
2⤵
PID:2300

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2299

/usr/bin/head
head -n 70
2⤵
PID:2310

/usr/bin/uniq
uniq
2⤵
PID:2309

/usr/bin/sort
sort
2⤵
PID:2308

/bin/grep
grep -E "ipsec\\.secrets\$|ipsec\\.conf\$"
2⤵
PID:2307

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2306

/usr/bin/head
head -n 70
2⤵
PID:2317

/usr/bin/uniq
uniq
2⤵
PID:2316

/usr/bin/sort
sort
2⤵
PID:2315

/bin/grep
grep -E "\\.irssi\$"
2⤵
PID:2314

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2313

/usr/bin/sort
sort
2⤵
PID:2322

/bin/grep
grep -E "keyrings\$|.*\\.keyring\$|.*\\.keystore\$|.*\\.jks\$"
2⤵
PID:2321

/usr/bin/uniq
uniq
2⤵
PID:2323

/usr/bin/head
head -n 70
2⤵
PID:2324

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2320

/usr/bin/head
head -n 70
2⤵
PID:2331

/usr/bin/uniq
uniq
2⤵
PID:2330

/usr/bin/sort
sort
2⤵
PID:2329

/bin/grep
grep -E ".*\\.vhd\$|.*\\.vhdx\$|.*\\.vmdk\$"
2⤵
PID:2328

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2327

/usr/bin/head
head -n 70
2⤵
PID:2338

/usr/bin/uniq
uniq
2⤵
PID:2337

/usr/bin/sort
sort
2⤵
PID:2336

/bin/grep
grep -E "filezilla\$|filezilla\\.xml\$|recentservers\\.xml\$"
2⤵
PID:2335

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2334

/usr/bin/head
head -n 70
2⤵
PID:2345

/usr/bin/uniq
uniq
2⤵
PID:2344

/usr/bin/sort
sort
2⤵
PID:2343

/bin/grep
grep -E "storage\\.php\$|database\\.php\$"
2⤵
PID:2342

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2341

/usr/bin/head
head -n 70
2⤵
PID:2352

/usr/bin/uniq
uniq
2⤵
PID:2351

/usr/bin/sort
sort
2⤵
PID:2350

/bin/grep
grep -E "passwd\$"
2⤵
PID:2349

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2348

/usr/bin/uniq
uniq
2⤵
PID:2358

/usr/bin/head
head -n 70
2⤵
PID:2359

/usr/bin/sort
sort
2⤵
PID:2357

/bin/grep
grep -E "\\.git-credentials\$"
2⤵
PID:2356

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2355

/usr/bin/head
head -n 70
2⤵
PID:2366

/usr/bin/uniq
uniq
2⤵
PID:2365

/usr/bin/sort
sort
2⤵
PID:2364

/bin/grep
grep -E "atlantis\\.db\$"
2⤵
PID:2363

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2362

/usr/bin/sort
sort
2⤵
PID:2372

/bin/grep
grep -E "secrets\\.yml\$|gitlab\\.yml\$|gitlab\\.rm\$"
2⤵
PID:2371

/usr/bin/uniq
uniq
2⤵
PID:2373

/usr/bin/head
head -n 70
2⤵
PID:2374

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2370

/bin/grep
grep -v -E /lib
2⤵
PID:2369

/usr/bin/sort
sort
2⤵
PID:2380

/bin/grep
grep -E ".*\\.pgp\$|.*\\.gpg\$|.*\\.gnupg\$"
2⤵
PID:2379

/usr/bin/uniq
uniq
2⤵
PID:2381

/usr/bin/head
head -n 70
2⤵
PID:2382

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2378

/bin/grep
grep -v -E README.gnupg
2⤵
PID:2377

/usr/bin/head
head -n 70
2⤵
PID:2389

/usr/bin/uniq
uniq
2⤵
PID:2388

/usr/bin/sort
sort
2⤵
PID:2387

/bin/grep
grep -E ".*\\.swp\$|.*\\.viminfo\$"
2⤵
PID:2386

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2385

/usr/bin/head
head -n 70
2⤵
PID:2396

/usr/bin/sort
sort
2⤵
PID:2394

/usr/bin/uniq
uniq
2⤵
PID:2395

/bin/grep
grep -E "docker\\.socket\$|docker\\.sock\$|Dockerfile\$|docker-compose\\.yml\$|dockershim\\.sock\$|containerd\\.sock\$|crio\\.sock\$|frakti\\.sock\$|rktlet\\.sock\$|\\.docker\$"
2⤵
PID:2393

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2392

/usr/bin/uniq
uniq
2⤵
PID:2402

/usr/bin/sort
sort
2⤵
PID:2401

/usr/bin/head
head -n 70
2⤵
PID:2403

/bin/grep
grep -E "\\.mozilla\$|Firefox\$"
2⤵
PID:2400

/bin/grep
grep -E "^"
2⤵
PID:2399

/usr/bin/uniq
uniq
2⤵
PID:2409

/usr/bin/head
head -n 70
2⤵
PID:2410

/usr/bin/sort
sort
2⤵
PID:2408

/bin/grep
grep -E "google-chrome\$|Chrome\$"
2⤵
PID:2407

/bin/grep
grep -E "^"
2⤵
PID:2406

/usr/bin/head
head -n 70
2⤵
PID:2417

/usr/bin/uniq
uniq
2⤵
PID:2416

/usr/bin/sort
sort
2⤵
PID:2415

/bin/grep
grep -E "com\\.operasoftware\\.Opera\$"
2⤵
PID:2414

/bin/grep
grep -E "^"
2⤵
PID:2413

/usr/bin/head
head -n 70
2⤵
PID:2424

/usr/bin/uniq
uniq
2⤵
PID:2423

/usr/bin/sort
sort
2⤵
PID:2422

/bin/grep
grep -E "Safari\$"
2⤵
PID:2421

/bin/grep
grep -E "^"
2⤵
PID:2420

/usr/bin/uniq
uniq
2⤵
PID:2430

/usr/bin/head
head -n 70
2⤵
PID:2431

/usr/bin/sort
sort
2⤵
PID:2429

/bin/grep
grep -E "autologin\$|autologin\\.conf\$"
2⤵
PID:2428

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2427

/bin/grep
grep -E "fastcgi_params\$"
2⤵
PID:2435

/usr/bin/sort
sort
2⤵
PID:2436

/usr/bin/uniq
uniq
2⤵
PID:2437

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2434

/usr/bin/head
head -n 70
2⤵
PID:2438

/usr/bin/uniq
uniq
2⤵
PID:2444

/usr/bin/sort
sort
2⤵
PID:2443

/usr/bin/head
head -n 70
2⤵
PID:2445

/bin/grep
grep -E "fat\\.config\$"
2⤵
PID:2442

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2441

/usr/bin/uniq
uniq
2⤵
PID:2451

/usr/bin/head
head -n 70
2⤵
PID:2452

/usr/bin/sort
sort
2⤵
PID:2450

/bin/grep
grep -E "api_key\$"
2⤵
PID:2449

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2448

/usr/bin/uniq
uniq
2⤵
PID:2458

/usr/bin/head
head -n 70
2⤵
PID:2459

/usr/bin/sort
sort
2⤵
PID:2457

/bin/grep
grep -E "\\.flyrc\$|concourse-auth\$|concourse-keys\$"
2⤵
PID:2456

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/concourse-keys|^/private|^/concourse-auth|^/media"
2⤵
PID:2455

/usr/bin/sort
sort
2⤵
PID:2464

/usr/bin/head
head -n 70
2⤵
PID:2466

/usr/bin/uniq
uniq
2⤵
PID:2465

/bin/grep
grep -E "\\.boto\$"
2⤵
PID:2463

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2462

/usr/bin/uniq
uniq
2⤵
PID:2472

/usr/bin/sort
sort
2⤵
PID:2471

/usr/bin/head
head -n 70
2⤵
PID:2473

/bin/grep
grep -E "snmpd\\.conf\$"
2⤵
PID:2470

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2469

/usr/bin/uniq
uniq
2⤵
PID:2479

/usr/bin/sort
sort
2⤵
PID:2478

/usr/bin/head
head -n 70
2⤵
PID:2480

/bin/grep
grep -E "\\.pypirc\$"
2⤵
PID:2477

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2476

/usr/bin/head
head -n 70
2⤵
PID:2487

/usr/bin/sort
sort
2⤵
PID:2485

/usr/bin/uniq
uniq
2⤵
PID:2486

/bin/grep
grep -E "postfix\$"
2⤵
PID:2484

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2483

/usr/bin/head
head -n 70
2⤵
PID:2494

/usr/bin/uniq
uniq
2⤵
PID:2493

/usr/bin/sort
sort
2⤵
PID:2492

/bin/grep
grep -E "\\.cloudflared\$"
2⤵
PID:2491

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2490

/usr/bin/sort
sort
2⤵
PID:2499

/usr/bin/uniq
uniq
2⤵
PID:2500

/usr/bin/head
head -n 70
2⤵
PID:2501

/bin/grep
grep -E ".*_history.*\$"
2⤵
PID:2498

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2497

/bin/grep
grep -E "httpd\\.conf\$"
2⤵
PID:2505

/usr/bin/sort
sort
2⤵
PID:2506

/usr/bin/uniq
uniq
2⤵
PID:2507

/usr/bin/head
head -n 70
2⤵
PID:2508

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2504

/usr/bin/head
head -n 70
2⤵
PID:2515

/usr/bin/uniq
uniq
2⤵
PID:2514

/usr/bin/sort
sort
2⤵
PID:2513

/bin/grep
grep -E "\\.htpasswd\$"
2⤵
PID:2512

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2511

/usr/bin/uniq
uniq
2⤵
PID:2521

/usr/bin/head
head -n 70
2⤵
PID:2522

/usr/bin/sort
sort
2⤵
PID:2520

/bin/grep
grep -E "\\.ldaprc\$"
2⤵
PID:2519

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2518

/bin/grep
grep -E "\\.env.*\$"
2⤵
PID:2527

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2526

/bin/grep
grep -v -E example
2⤵
PID:2525

/usr/bin/sort
sort
2⤵
PID:2528

/usr/bin/uniq
uniq
2⤵
PID:2529

/usr/bin/head
head -n 70
2⤵
PID:2530

/usr/bin/head
head -n 70
2⤵
PID:2537

/usr/bin/uniq
uniq
2⤵
PID:2536

/usr/bin/sort
sort
2⤵
PID:2535

/bin/grep
grep -E "\\.msmtprc\$"
2⤵
PID:2534

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2533

/bin/grep
grep -E "influxdb\\.conf\$"
2⤵
PID:2541

/usr/bin/sort
sort
2⤵
PID:2542

/usr/bin/uniq
uniq
2⤵
PID:2543

/usr/bin/head
head -n 70
2⤵
PID:2544

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2540

/usr/bin/head
head -n 70
2⤵
PID:2551

/usr/bin/uniq
uniq
2⤵
PID:2550

/usr/bin/sort
sort
2⤵
PID:2549

/bin/grep
grep -E "zabbix_server\\.conf\$|zabbix_agentd\\.conf\$|zabbix\$"
2⤵
PID:2548

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2547

/usr/bin/sort
sort
2⤵
PID:2556

/usr/bin/uniq
uniq
2⤵
PID:2557

/bin/grep
grep -E "\\.github\$|\\.gitconfig\$|\\.git-credentials\$|\\.git\$"
2⤵
PID:2555

/usr/bin/head
head -n 70
2⤵
PID:2558

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2554

/usr/bin/uniq
uniq
2⤵
PID:2564

/usr/bin/head
head -n 70
2⤵
PID:2565

/usr/bin/sort
sort
2⤵
PID:2563

/bin/grep
grep -E "\\.svn\$"
2⤵
PID:2562

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2561

/usr/bin/sort
sort
2⤵
PID:2570

/usr/bin/uniq
uniq
2⤵
PID:2571

/usr/bin/head
head -n 70
2⤵
PID:2572

/bin/grep
grep -E ".*\\.kdbx\$|KeePass\\.config.*\$|KeePass\\.ini\$|KeePass\\.enforced.*\$"
2⤵
PID:2569

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2568

/usr/bin/head
head -n 70
2⤵
PID:2579

/usr/bin/uniq
uniq
2⤵
PID:2578

/usr/bin/sort
sort
2⤵
PID:2577

/bin/grep
grep -E ".*\\.psk\$"
2⤵
PID:2576

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2575

/usr/bin/head
head -n 70
2⤵
PID:2586

/usr/bin/uniq
uniq
2⤵
PID:2585

/usr/bin/sort
sort
2⤵
PID:2584

/bin/grep
grep -E "\\.password-store\$"
2⤵
PID:2583

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2582

/usr/bin/uniq
uniq
2⤵
PID:2592

/usr/bin/sort
sort
2⤵
PID:2591

/usr/bin/head
head -n 70
2⤵
PID:2593

/bin/grep
grep -E "vsftpd\\.conf\$|.*\\.ftpconfig\$|ffftp\\.ini\$|ftp\\.ini\$|ftp\\.config\$|sites\\.ini\$|wcx_ftp\\.ini\$|winscp\\.ini\$|ws_ftp\\.ini\$"
2⤵
PID:2590

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2589

/usr/bin/head
head -n 70
2⤵
PID:2600

/usr/bin/uniq
uniq
2⤵
PID:2599

/usr/bin/sort
sort
2⤵
PID:2598

/bin/grep
grep -E "smb\\.conf\$"
2⤵
PID:2597

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2596

/usr/bin/uniq
uniq
2⤵
PID:2606

/usr/bin/head
head -n 70
2⤵
PID:2607

/usr/bin/sort
sort
2⤵
PID:2605

/bin/grep
grep -E "bind\$"
2⤵
PID:2604

/bin/grep
grep -E "^/usr|^/etc|^/var"
2⤵
PID:2603

/usr/bin/head
head -n 70
2⤵
PID:2614

/usr/bin/uniq
uniq
2⤵
PID:2613

/usr/bin/sort
sort
2⤵
PID:2612

/bin/grep
grep -E "seeddms.*\$"
2⤵
PID:2611

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2610

/usr/bin/uniq
uniq
2⤵
PID:2620

/usr/bin/head
head -n 70
2⤵
PID:2621

/usr/bin/sort
sort
2⤵
PID:2619

/bin/grep
grep -E "ddclient\\.conf\$"
2⤵
PID:2618

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2617

/usr/bin/head
head -n 70
2⤵
PID:2628

/usr/bin/uniq
uniq
2⤵
PID:2627

/usr/bin/sort
sort
2⤵
PID:2626

/bin/grep
grep -E "kcpassword\$"
2⤵
PID:2625

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2624

/usr/bin/head
head -n 70
2⤵
PID:2635

/usr/bin/uniq
uniq
2⤵
PID:2634

/usr/bin/sort
sort
2⤵
PID:2633

/bin/grep
grep -E "sentry\$|sentry\\.conf\\.py\$"
2⤵
PID:2632

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2631

/usr/bin/head
head -n 70
2⤵
PID:2642

/usr/bin/uniq
uniq
2⤵
PID:2641

/usr/bin/sort
sort
2⤵
PID:2640

/bin/grep
grep -E "environments\$"
2⤵
PID:2639

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2638

/usr/bin/head
head -n 70
2⤵
PID:2649

/usr/bin/uniq
uniq
2⤵
PID:2648

/usr/bin/sort
sort
2⤵
PID:2647

/bin/grep
grep -E "cacti\$"
2⤵
PID:2646

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2645

/usr/bin/head
head -n 70
2⤵
PID:2656

/usr/bin/uniq
uniq
2⤵
PID:2655

/usr/bin/sort
sort
2⤵
PID:2654

/bin/grep
grep -E "roundcube\$"
2⤵
PID:2653

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2652

/usr/bin/uniq
uniq
2⤵
PID:2662

/usr/bin/head
head -n 70
2⤵
PID:2663

/usr/bin/sort
sort
2⤵
PID:2661

/bin/grep
grep -E "passbolt\\.php\$"
2⤵
PID:2660

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2659

/usr/bin/head
head -n 70
2⤵
PID:2670

/usr/bin/uniq
uniq
2⤵
PID:2669

/usr/bin/sort
sort
2⤵
PID:2668

/bin/grep
grep -E "jetty-realm\\.properties\$"
2⤵
PID:2667

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2666

/usr/bin/head
head -n 70
2⤵
PID:2677

/usr/bin/uniq
uniq
2⤵
PID:2676

/usr/bin/sort
sort
2⤵
PID:2675

/bin/grep
grep -E "master\\.key\$|hudson\\.util\\.Secret\$|credentials\\.xml\$|config\\.xml\$|.*jenkins\$"
2⤵
PID:2674

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2673

/usr/bin/head
head -n 70
2⤵
PID:2684

/usr/bin/uniq
uniq
2⤵
PID:2683

/usr/bin/sort
sort
2⤵
PID:2682

/bin/grep
grep -E "\\.wgetrc\$"
2⤵
PID:2681

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2680

/usr/bin/head
head -n 70
2⤵
PID:2691

/usr/bin/uniq
uniq
2⤵
PID:2690

/usr/bin/sort
sort
2⤵
PID:2689

/bin/grep
grep -E "access\\.log\$|error\\.log\$"
2⤵
PID:2688

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2687

/usr/bin/head
head -n 70
2⤵
PID:2698

/usr/bin/uniq
uniq
2⤵
PID:2697

/usr/bin/sort
sort
2⤵
PID:2696

/bin/grep
grep -E "\\.bashrc\$|\\.google_authenticator\$|hosts\\.equiv\$|\\.lesshst\$|\\.plan\$|\\.profile\$|\\.recently-used\\.xbel\$|\\.rhosts\$|\\.sudo_as_admin_successful\$"
2⤵
PID:2695

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2694

/usr/bin/head
head -n 70
2⤵
PID:2705

/usr/bin/uniq
uniq
2⤵
PID:2704

/usr/bin/sort
sort
2⤵
PID:2703

/bin/grep
grep -E ".*\\.rdg\$|AppEvent\\.Evt\$|autounattend\\.xml\$|ConsoleHost_history\\.txt\$|FreeSSHDservice\\.ini\$|NetSetup\\.log\$|Ntds\\.dit\$|protecteduserkey\\.bin\$|RDCMan\\.settings\$|SAM\$|SYSTEM\$|SecEvent\\.Evt\$|appcmd\\.exe\$|bash\\.exe\$|datasources\\.xml\$|default\\.sav\$|drives\\.xml\$|groups\\.xml\$|https-xampp\\.conf\$|https\\.conf\$|iis6\\.log\$|index\\.dat\$|my\\.cnf\$|my\\.ini\$|ntuser\\.dat\$|pagefile\\.sys\$|printers\\.xml\$|recentservers\\.xml\$|scclient\\.exe\$|scheduledtasks\\.xml\$|security\\.sav\$|server\\.xml\$|setupinfo\$|setupinfo\\.bak\$|sitemanager\\.xml\$|sites\\.ini\$|software\$|software\\.sav\$|sysprep\\.inf\$|sysprep\\.xml\$|system\\.sav\$|unattend\\.inf\$|unattend\\.txt\$|unattend\\.xml\$|unattended\\.xml\$|wcx_ftp\\.ini\$|ws_ftp\\.ini\$|web.*\\.config\$|winscp\\.ini\$|wsl\\.exe\$|plum\\.sqlite\$"
2⤵
PID:2702

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2701

/usr/bin/sort
sort
2⤵
PID:2711

/bin/grep
grep -E ".*\\.db\$|.*\\.sqlite\$|.*\\.sqlite3\$"
2⤵
PID:2710

/usr/bin/uniq
uniq
2⤵
PID:2712

/usr/bin/head
head -n 70
2⤵
PID:2713

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2709

/bin/grep
grep -v -E "/man/|/usr/|/var/cache/|thumbcache|iconcache|IconCache|/man/|/usr/|/var/cache/"
2⤵
PID:2708

/usr/bin/head
head -n 70
2⤵
PID:2720

/usr/bin/uniq
uniq
2⤵
PID:2719

/usr/bin/sort
sort
2⤵
PID:2718

/bin/grep
grep -E "backup\$|backups\$"
2⤵
PID:2717

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2716

/usr/bin/uniq
uniq
2⤵
PID:2726

/usr/bin/head
head -n 70
2⤵
PID:2727

/usr/bin/sort
sort
2⤵
PID:2725

/bin/grep
grep -E ".*password.*\$|.*credential.*\$|creds.*\$|.*\\.key\$"
2⤵
PID:2724

/bin/grep
grep -E "^/home/|/Users/|/root/|/var/www|^/cdrom|^/.cache|^/opt|^/var|^/etc|^/mnt|^/sbin|^/bin|^/applications|^/usr|^/snap|^/srv|^/tmp|^/private|^/media"
2⤵
PID:2723

/usr/bin/tr
tr "\\n" " "
2⤵
PID:2730

/bin/grep
grep -q system_information
2⤵
PID:2732

/usr/bin/wc
wc -c
2⤵
PID:2735

/usr/bin/seq
seq 1 30
2⤵
PID:2736

/usr/bin/seq
seq 1 19
2⤵
PID:2737

/usr/bin/seq
seq 1 30
2⤵
PID:2738

/usr/bin/seq
seq 1 30
2⤵
PID:2739

/usr/bin/seq
seq 1 30
2⤵
PID:2740

/usr/bin/seq
seq 1 19
2⤵
PID:2741

/bin/sed
sed -E "s,3.2.0-84-generic-pae|3.2.0-84-virtual|3.2.0-85-generic|3.2.0-85-generic-pae|3.2.0-85-virtual|3.2.0-86-generic|3.2.0-86-generic-pae|3.2.0-86-virtual|3.2.0-87-generic|3.2.0-87-generic-pae|3.2.0-87-virtual|3.2.0-88-generic|3.2.0-88-generic-pae|3.2.0-88-virtual|3.2.0-89-generic|3.2.0-89-generic-pae|3.2.0-89-virtual|3.2.0-90-generic|3.2.0-90-generic-pae|3.2.0-90-virtual|3.2.0-91-generic|3.2.0-91-generic-pae|3.2.0-91-virtual|3.2.0-92-generic|3.2.0-92-generic-pae|3.2.0-92-virtual|3.2.0-93-generic|3.2.0-93-generic-pae|3.2.0-93-virtual|3.2.0-94-generic|3.2.0-94-generic-pae|3.2.0-94-virtual|3.2.0-95-generic|3.2.0-95-generic-pae|3.2.0-95-virtual|3.2.0-96-generic|3.2.0-96-generic-pae|3.2.0-96-virtual|3.2.0-97-generic|3.2.0-97-generic-pae|3.2.0-97-virtual|3.2.0-98-generic|3.2.0-98-generic-pae|3.2.0-98-virtual|3.2.0-99-generic|3.2.0-99-generic-pae|3.2.0-99-virtual|3.5.0-40-generic|3.5.0-41-generic|3.5.0-42-generic|3.5.0-43-generic|3.5.0-44-generic|3.5.0-45-generic|3.5.0-46-generic|3.5.0-49-generic|3.5.0-51-generic|3.5.0-52-generic|3.5.0-54-generic|3.8.0-19-generic|3.8.0-21-generic|3.8.0-22-generic|3.8.0-23-generic|3.8.0-27-generic|3.8.0-29-generic|3.8.0-30-generic|3.8.0-31-generic|3.8.0-32-generic|3.8.0-33-generic|3.8.0-34-generic|3.8.0-35-generic|3.8.0-36-generic|3.8.0-37-generic|3.8.0-38-generic|3.8.0-39-generic|3.8.0-41-generic|3.8.0-42-generic,[1;31;103m&[0m,"
2⤵
PID:2748

/bin/sed
sed -E "s,3.13.0-24-generic|3.13.0-24-generic-lpae|3.13.0-24-lowlatency|3.13.0-24-powerpc-e500|3.13.0-24-powerpc-e500mc|3.13.0-24-powerpc-smp|3.13.0-24-powerpc64-emb|3.13.0-24-powerpc64-smp|3.13.0-27-generic|3.13.0-27-lowlatency|3.13.0-29-generic|3.13.0-29-lowlatency|3.13.0-3-exynos5|3.13.0-30-generic|3.13.0-30-lowlatency|3.13.0-32-generic|3.13.0-32-lowlatency|3.13.0-33-generic|3.13.0-33-lowlatency|3.13.0-34-generic|3.13.0-34-lowlatency|3.13.0-35-generic|3.13.0-35-lowlatency|3.13.0-36-generic|3.13.0-36-lowlatency|3.13.0-37-generic|3.13.0-37-lowlatency|3.13.0-39-generic|3.13.0-39-lowlatency|3.13.0-40-generic|3.13.0-40-lowlatency|3.13.0-41-generic|3.13.0-41-lowlatency|3.13.0-43-generic|3.13.0-43-lowlatency|3.13.0-44-generic|3.13.0-44-lowlatency|3.13.0-46-generic|3.13.0-46-lowlatency|3.13.0-48-generic|3.13.0-48-lowlatency|3.13.0-49-generic|3.13.0-49-lowlatency|3.13.0-51-generic|3.13.0-51-lowlatency|3.13.0-52-generic|3.13.0-52-lowlatency|3.13.0-53-generic|3.13.0-53-lowlatency|3.13.0-54-generic|3.13.0-54-lowlatency|3.13.0-55-generic|3.13.0-55-lowlatency|3.13.0-57-generic|3.13.0-57-lowlatency|3.13.0-58-generic|3.13.0-58-lowlatency|3.13.0-59-generic|3.13.0-59-lowlatency|3.13.0-61-generic|3.13.0-61-lowlatency|3.13.0-62-generic|3.13.0-62-lowlatency|3.13.0-63-generic|3.13.0-63-lowlatency|3.13.0-65-generic|3.13.0-65-lowlatency|3.13.0-66-generic|3.13.0-66-lowlatency,[1;31;103m&[0m,"
2⤵
PID:2749

/bin/sed
sed -E "s,3.2.0-68-generic-pae|3.2.0-68-lowlatency|3.2.0-68-lowlatency-pae|3.2.0-68-virtual|3.2.0-69-generic|3.2.0-69-generic-pae|3.2.0-69-lowlatency|3.2.0-69-lowlatency-pae|3.2.0-69-virtual|3.2.0-70-generic|3.2.0-70-generic-pae|3.2.0-70-lowlatency|3.2.0-70-lowlatency-pae|3.2.0-70-virtual|3.2.0-72-generic|3.2.0-72-generic-pae|3.2.0-72-lowlatency|3.2.0-72-lowlatency-pae|3.2.0-72-virtual|3.2.0-73-generic|3.2.0-73-generic-pae|3.2.0-73-lowlatency|3.2.0-73-lowlatency-pae|3.2.0-73-virtual|3.2.0-74-generic|3.2.0-74-generic-pae|3.2.0-74-lowlatency|3.2.0-74-lowlatency-pae|3.2.0-74-virtual|3.2.0-75-generic|3.2.0-75-generic-pae|3.2.0-75-lowlatency|3.2.0-75-lowlatency-pae|3.2.0-75-virtual|3.2.0-76-generic|3.2.0-76-generic-pae|3.2.0-76-lowlatency|3.2.0-76-lowlatency-pae|3.2.0-76-virtual|3.2.0-77-generic|3.2.0-77-generic-pae|3.2.0-77-lowlatency|3.2.0-77-lowlatency-pae|3.2.0-77-virtual|3.2.0-79-generic|3.2.0-79-generic-pae|3.2.0-79-lowlatency|3.2.0-79-lowlatency-pae|3.2.0-79-virtual|3.2.0-80-generic|3.2.0-80-generic-pae|3.2.0-80-lowlatency|3.2.0-80-lowlatency-pae|3.2.0-80-virtual|3.2.0-82-generic|3.2.0-82-generic-pae|3.2.0-82-lowlatency|3.2.0-82-lowlatency-pae|3.2.0-82-virtual|3.2.0-83-generic|3.2.0-83-generic-pae|3.2.0-83-virtual|3.2.0-84-generic,[1;31;103m&[0m,"
2⤵
PID:2747

/bin/sed
sed -E "s,3.2.0-53-generic-pae|3.2.0-53-lowlatency|3.2.0-53-lowlatency-pae|3.2.0-53-virtual|3.2.0-54-generic|3.2.0-54-generic-pae|3.2.0-54-lowlatency|3.2.0-54-lowlatency-pae|3.2.0-54-virtual|3.2.0-55-generic|3.2.0-55-generic-pae|3.2.0-55-lowlatency|3.2.0-55-lowlatency-pae|3.2.0-55-virtual|3.2.0-56-generic|3.2.0-56-generic-pae|3.2.0-56-lowlatency|3.2.0-56-lowlatency-pae|3.2.0-56-virtual|3.2.0-57-generic|3.2.0-57-generic-pae|3.2.0-57-lowlatency|3.2.0-57-lowlatency-pae|3.2.0-57-virtual|3.2.0-58-generic|3.2.0-58-generic-pae|3.2.0-58-lowlatency|3.2.0-58-lowlatency-pae|3.2.0-58-virtual|3.2.0-59-generic|3.2.0-59-generic-pae|3.2.0-59-lowlatency|3.2.0-59-lowlatency-pae|3.2.0-59-virtual|3.2.0-60-generic|3.2.0-60-generic-pae|3.2.0-60-lowlatency|3.2.0-60-lowlatency-pae|3.2.0-60-virtual|3.2.0-61-generic|3.2.0-61-generic-pae|3.2.0-61-virtual|3.2.0-63-generic|3.2.0-63-generic-pae|3.2.0-63-lowlatency|3.2.0-63-lowlatency-pae|3.2.0-63-virtual|3.2.0-64-generic|3.2.0-64-generic-pae|3.2.0-64-lowlatency|3.2.0-64-lowlatency-pae|3.2.0-64-virtual|3.2.0-65-generic|3.2.0-65-generic-pae|3.2.0-65-lowlatency|3.2.0-65-lowlatency-pae|3.2.0-65-virtual|3.2.0-67-generic|3.2.0-67-generic-pae|3.2.0-67-lowlatency|3.2.0-67-lowlatency-pae|3.2.0-67-virtual|3.2.0-68-generic,[1;31;103m&[0m,"
2⤵
PID:2746

/bin/sed
sed -E "s,3.2.0-36-generic|3.2.0-36-generic-pae|3.2.0-36-lowlatency|3.2.0-36-lowlatency-pae|3.2.0-36-virtual|3.2.0-37-generic|3.2.0-37-generic-pae|3.2.0-37-lowlatency|3.2.0-37-lowlatency-pae|3.2.0-37-virtual|3.2.0-38-generic|3.2.0-38-generic-pae|3.2.0-38-lowlatency|3.2.0-38-lowlatency-pae|3.2.0-38-virtual|3.2.0-39-generic|3.2.0-39-generic-pae|3.2.0-39-lowlatency|3.2.0-39-lowlatency-pae|3.2.0-39-virtual|3.2.0-40-generic|3.2.0-40-generic-pae|3.2.0-40-lowlatency|3.2.0-40-lowlatency-pae|3.2.0-40-virtual|3.2.0-41-generic|3.2.0-41-generic-pae|3.2.0-41-lowlatency|3.2.0-41-lowlatency-pae|3.2.0-41-virtual|3.2.0-43-generic|3.2.0-43-generic-pae|3.2.0-43-virtual|3.2.0-44-generic|3.2.0-44-generic-pae|3.2.0-44-lowlatency|3.2.0-44-lowlatency-pae|3.2.0-44-virtual|3.2.0-45-generic|3.2.0-45-generic-pae|3.2.0-45-virtual|3.2.0-48-generic|3.2.0-48-generic-pae|3.2.0-48-lowlatency|3.2.0-48-lowlatency-pae|3.2.0-48-virtual|3.2.0-51-generic|3.2.0-51-generic-pae|3.2.0-51-lowlatency|3.2.0-51-lowlatency-pae|3.2.0-51-virtual|3.2.0-52-generic|3.2.0-52-generic-pae|3.2.0-52-lowlatency|3.2.0-52-lowlatency-pae|3.2.0-52-virtual|3.2.0-53-generic,[1;31;103m&[0m,"
2⤵
PID:2745

/bin/sed
sed -E "s,3.13.0-67-generic|3.13.0-67-lowlatency|3.13.0-68-generic|3.13.0-68-lowlatency|3.13.0-70-generic|3.13.0-70-lowlatency|3.13.0-71-generic|3.13.0-71-lowlatency|3.13.0-73-generic|3.13.0-73-lowlatency|3.13.0-74-generic|3.13.0-74-lowlatency|3.13.0-76-generic|3.13.0-76-lowlatency|3.13.0-77-generic|3.13.0-77-lowlatency|3.13.0-79-generic|3.13.0-79-lowlatency|3.13.0-83-generic|3.13.0-83-lowlatency|3.13.0-85-generic|3.13.0-85-lowlatency|3.13.0-86-generic|3.13.0-86-lowlatency|3.13.0-87-generic|3.13.0-87-lowlatency|3.13.0-88-generic|3.13.0-88-lowlatency|3.13.0-91-generic|3.13.0-91-lowlatency|3.13.0-92-generic|3.13.0-92-lowlatency|3.13.0-93-generic|3.13.0-93-lowlatency|3.13.0-95-generic|3.13.0-95-lowlatency|3.13.0-96-generic|3.13.0-96-lowlatency|3.13.0-98-generic|3.13.0-98-lowlatency|3.16.0-25-generic|3.16.0-25-lowlatency|3.16.0-26-generic|3.16.0-26-lowlatency|3.16.0-28-generic|3.16.0-28-lowlatency|3.16.0-29-generic|3.16.0-29-lowlatency|3.16.0-31-generic|3.16.0-31-lowlatency|3.16.0-33-generic|3.16.0-33-lowlatency|3.16.0-34-generic|3.16.0-34-lowlatency|3.16.0-36-generic|3.16.0-36-lowlatency|3.16.0-37-generic|3.16.0-37-lowlatency|3.16.0-38-generic|3.16.0-38-lowlatency|3.16.0-39-generic|3.16.0-39-lowlatency|3.16.0-41-generic|3.16.0-41-lowlatency|3.16.0-43-generic|3.16.0-43-lowlatency|3.16.0-44-generic|3.16.0-44-lowlatency|3.16.0-45-generic,[1;31;103m&[0m,"
2⤵
PID:2750

/bin/sed
sed -E "s,3.2.0-104-generic|3.2.0-104-generic-pae|3.2.0-104-virtual|3.2.0-105-generic|3.2.0-105-generic-pae|3.2.0-105-virtual|3.2.0-106-generic|3.2.0-106-generic-pae|3.2.0-106-virtual|3.2.0-107-generic|3.2.0-107-generic-pae|3.2.0-107-virtual|3.2.0-109-generic|3.2.0-109-generic-pae|3.2.0-109-virtual|3.2.0-110-generic|3.2.0-110-generic-pae|3.2.0-110-virtual|3.2.0-111-generic|3.2.0-111-generic-pae|3.2.0-111-virtual|3.2.0-1412-omap4|3.2.0-1602-armadaxp|3.2.0-23-generic|3.2.0-23-generic-pae|3.2.0-23-lowlatency|3.2.0-23-lowlatency-pae|3.2.0-23-omap|3.2.0-23-powerpc-smp|3.2.0-23-powerpc64-smp|3.2.0-23-virtual|3.2.0-24-generic|3.2.0-24-generic-pae|3.2.0-24-virtual|3.2.0-25-generic|3.2.0-25-generic-pae|3.2.0-25-virtual|3.2.0-26-generic|3.2.0-26-generic-pae|3.2.0-26-virtual|3.2.0-27-generic|3.2.0-27-generic-pae|3.2.0-27-virtual|3.2.0-29-generic|3.2.0-29-generic-pae|3.2.0-29-virtual|3.2.0-31-generic|3.2.0-31-generic-pae|3.2.0-31-virtual|3.2.0-32-generic|3.2.0-32-generic-pae|3.2.0-32-virtual|3.2.0-33-generic|3.2.0-33-generic-pae|3.2.0-33-lowlatency|3.2.0-33-lowlatency-pae|3.2.0-33-virtual|3.2.0-34-generic|3.2.0-34-generic-pae|3.2.0-34-virtual|3.2.0-35-generic|3.2.0-35-generic-pae|3.2.0-35-lowlatency|3.2.0-35-lowlatency-pae|3.2.0-35-virtual,[1;31;103m&[0m,"
2⤵
PID:2744

/bin/sed
sed -E "s,3.16.0-45-lowlatency|3.16.0-46-generic|3.16.0-46-lowlatency|3.16.0-48-generic|3.16.0-48-lowlatency|3.16.0-49-generic|3.16.0-49-lowlatency|3.16.0-50-generic|3.16.0-50-lowlatency|3.16.0-51-generic|3.16.0-51-lowlatency|3.16.0-52-generic|3.16.0-52-lowlatency|3.16.0-53-generic|3.16.0-53-lowlatency|3.16.0-55-generic|3.16.0-55-lowlatency|3.16.0-56-generic|3.16.0-56-lowlatency|3.16.0-57-generic|3.16.0-57-lowlatency|3.16.0-59-generic|3.16.0-59-lowlatency|3.16.0-60-generic|3.16.0-60-lowlatency|3.16.0-62-generic|3.16.0-62-lowlatency|3.16.0-67-generic|3.16.0-67-lowlatency|3.16.0-69-generic|3.16.0-69-lowlatency|3.16.0-70-generic|3.16.0-70-lowlatency|3.16.0-71-generic|3.16.0-71-lowlatency|3.16.0-73-generic|3.16.0-73-lowlatency|3.16.0-76-generic|3.16.0-76-lowlatency|3.16.0-77-generic|3.16.0-77-lowlatency|3.19.0-20-generic|3.19.0-20-lowlatency|3.19.0-21-generic|3.19.0-21-lowlatency|3.19.0-22-generic|3.19.0-22-lowlatency|3.19.0-23-generic|3.19.0-23-lowlatency|3.19.0-25-generic|3.19.0-25-lowlatency|3.19.0-26-generic|3.19.0-26-lowlatency|3.19.0-28-generic|3.19.0-28-lowlatency|3.19.0-30-generic|3.19.0-30-lowlatency|3.19.0-31-generic|3.19.0-31-lowlatency|3.19.0-32-generic|3.19.0-32-lowlatency|3.19.0-33-generic|3.19.0-33-lowlatency|3.19.0-37-generic|3.19.0-37-lowlatency|3.19.0-39-generic|3.19.0-39-lowlatency|3.19.0-41-generic|3.19.0-41-lowlatency|3.19.0-42-generic,[1;31;103m&[0m,"
2⤵
PID:2751

/bin/sed
sed -E "s,3.1.1-1400-linaro-lt-mx5|3.11.0-13-generic|3.11.0-14-generic|3.11.0-15-generic|3.11.0-17-generic|3.11.0-18-generic|3.11.0-20-generic|3.11.0-22-generic|3.11.0-23-generic|3.11.0-24-generic|3.11.0-26-generic|3.13.0-100-generic|3.13.0-24-generic|3.13.0-27-generic|3.13.0-29-generic|3.13.0-30-generic|3.13.0-32-generic|3.13.0-33-generic|3.13.0-34-generic|3.13.0-35-generic|3.13.0-36-generic|3.13.0-37-generic|3.13.0-39-generic|3.13.0-40-generic|3.13.0-41-generic|3.13.0-43-generic|3.13.0-44-generic|3.13.0-46-generic|3.13.0-48-generic|3.13.0-49-generic|3.13.0-51-generic|3.13.0-52-generic|3.13.0-53-generic|3.13.0-54-generic|3.13.0-55-generic|3.13.0-57-generic|3.13.0-58-generic|3.13.0-59-generic|3.13.0-61-generic|3.13.0-62-generic|3.13.0-63-generic|3.13.0-65-generic|3.13.0-66-generic|3.13.0-67-generic|3.13.0-68-generic|3.13.0-71-generic|3.13.0-73-generic|3.13.0-74-generic|3.13.0-76-generic|3.13.0-77-generic|3.13.0-79-generic|3.13.0-83-generic|3.13.0-85-generic|3.13.0-86-generic|3.13.0-88-generic|3.13.0-91-generic|3.13.0-92-generic|3.13.0-93-generic|3.13.0-95-generic|3.13.0-96-generic|3.13.0-98-generic|3.2.0-101-generic|3.2.0-101-generic-pae|3.2.0-101-virtual|3.2.0-102-generic|3.2.0-102-generic-pae|3.2.0-102-virtual,[1;31;103m&[0m,"
2⤵
PID:2743

/bin/sed
sed -E "s,3.19.0-42-lowlatency|3.19.0-43-generic|3.19.0-43-lowlatency|3.19.0-47-generic|3.19.0-47-lowlatency|3.19.0-49-generic|3.19.0-49-lowlatency|3.19.0-51-generic|3.19.0-51-lowlatency|3.19.0-56-generic|3.19.0-56-lowlatency|3.19.0-58-generic|3.19.0-58-lowlatency|3.19.0-59-generic|3.19.0-59-lowlatency|3.19.0-61-generic|3.19.0-61-lowlatency|3.19.0-64-generic|3.19.0-64-lowlatency|3.19.0-65-generic|3.19.0-65-lowlatency|3.19.0-66-generic|3.19.0-66-lowlatency|3.19.0-68-generic|3.19.0-68-lowlatency|3.19.0-69-generic|3.19.0-69-lowlatency|3.19.0-71-generic|3.19.0-71-lowlatency|3.4.0-5-chromebook|4.2.0-18-generic|4.2.0-18-lowlatency|4.2.0-19-generic|4.2.0-19-lowlatency|4.2.0-21-generic|4.2.0-21-lowlatency|4.2.0-22-generic|4.2.0-22-lowlatency|4.2.0-23-generic|4.2.0-23-lowlatency|4.2.0-25-generic|4.2.0-25-lowlatency|4.2.0-27-generic|4.2.0-27-lowlatency|4.2.0-30-generic|4.2.0-30-lowlatency|4.2.0-34-generic|4.2.0-34-lowlatency|4.2.0-35-generic|4.2.0-35-lowlatency|4.2.0-36-generic|4.2.0-36-lowlatency|4.2.0-38-generic|4.2.0-38-lowlatency|4.2.0-41-generic|4.2.0-41-lowlatency|4.4.0-21-generic|4.4.0-21-lowlatency|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"
2⤵
PID:2752

/bin/sed
sed -E "s,4.4.0-1009-raspi2|4.4.0-1012-snapdragon|4.4.0-21-generic|4.4.0-21-generic-lpae|4.4.0-21-lowlatency|4.4.0-21-powerpc-e500mc|4.4.0-21-powerpc-smp|4.4.0-21-powerpc64-emb|4.4.0-21-powerpc64-smp|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"
2⤵
PID:2753

/bin/sed
sed -E "s,2.6.24.7-74.el5rt|2.6.24.7-81.el5rt|2.6.24.7-93.el5rt|2.6.24.7-101.el5rt|2.6.24.7-108.el5rt|2.6.24.7-111.el5rt|2.6.24.7-117.el5rt|2.6.24.7-126.el5rt|2.6.24.7-132.el5rt|2.6.24.7-137.el5rt|2.6.24.7-139.el5rt|2.6.24.7-146.el5rt|2.6.24.7-149.el5rt|2.6.24.7-161.el5rt|2.6.24.7-169.el5rt|2.6.33.7-rt29.45.el5rt|2.6.33.7-rt29.47.el5rt|2.6.33.7-rt29.55.el5rt|2.6.33.9-rt31.64.el5rt|2.6.33.9-rt31.67.el5rt|2.6.33.9-rt31.86.el5rt|2.6.18-8.1.1.el5|2.6.18-8.1.3.el5|2.6.18-8.1.4.el5|2.6.18-8.1.6.el5|2.6.18-8.1.8.el5|2.6.18-8.1.10.el5|2.6.18-8.1.14.el5|2.6.18-8.1.15.el5|2.6.18-53.el5|2.6.18-53.1.4.el5|2.6.18-53.1.6.el5|2.6.18-53.1.13.el5|2.6.18-53.1.14.el5|2.6.18-53.1.19.el5|2.6.18-53.1.21.el5|2.6.18-92.el5|2.6.18-92.1.1.el5|2.6.18-92.1.6.el5|2.6.18-92.1.10.el5|2.6.18-92.1.13.el5|2.6.18-92.1.18.el5|2.6.18-92.1.22.el5|2.6.18-92.1.24.el5|2.6.18-92.1.26.el5|2.6.18-92.1.27.el5|2.6.18-92.1.28.el5|2.6.18-92.1.29.el5|2.6.18-92.1.32.el5|2.6.18-92.1.35.el5|2.6.18-92.1.38.el5|2.6.18-128.el5|2.6.18-128.1.1.el5|2.6.18-128.1.6.el5|2.6.18-128.1.10.el5|2.6.18-128.1.14.el5|2.6.18-128.1.16.el5|2.6.18-128.2.1.el5|2.6.18-128.4.1.el5|2.6.18-128.4.1.el5|2.6.18-128.7.1.el5|2.6.18-128.8.1.el5|2.6.18-128.11.1.el5|2.6.18-128.12.1.el5|2.6.18-128.14.1.el5|2.6.18-128.16.1.el5|2.6.18-128.17.1.el5|2.6.18-128.18.1.el5|2.6.18-128.23.1.el5|2.6.18-128.23.2.el5|2.6.18-128.25.1.el5|2.6.18-128.26.1.el5|2.6.18-128.27.1.el5,[1;31;103m&[0m,"
2⤵
PID:2754

/bin/sed
sed -E "s,2.6.18-128.29.1.el5|2.6.18-128.30.1.el5|2.6.18-128.31.1.el5|2.6.18-128.32.1.el5|2.6.18-128.35.1.el5|2.6.18-128.36.1.el5|2.6.18-128.37.1.el5|2.6.18-128.38.1.el5|2.6.18-128.39.1.el5|2.6.18-128.40.1.el5|2.6.18-128.41.1.el5|2.6.18-164.el5|2.6.18-164.2.1.el5|2.6.18-164.6.1.el5|2.6.18-164.9.1.el5|2.6.18-164.10.1.el5|2.6.18-164.11.1.el5|2.6.18-164.15.1.el5|2.6.18-164.17.1.el5|2.6.18-164.19.1.el5|2.6.18-164.21.1.el5|2.6.18-164.25.1.el5|2.6.18-164.25.2.el5|2.6.18-164.28.1.el5|2.6.18-164.30.1.el5|2.6.18-164.32.1.el5|2.6.18-164.34.1.el5|2.6.18-164.36.1.el5|2.6.18-164.37.1.el5|2.6.18-164.38.1.el5|2.6.18-194.el5|2.6.18-194.3.1.el5|2.6.18-194.8.1.el5|2.6.18-194.11.1.el5|2.6.18-194.11.3.el5|2.6.18-194.11.4.el5|2.6.18-194.17.1.el5|2.6.18-194.17.4.el5|2.6.18-194.26.1.el5|2.6.18-194.32.1.el5|2.6.18-238.el5|2.6.18-238.1.1.el5|2.6.18-238.5.1.el5|2.6.18-238.9.1.el5|2.6.18-238.12.1.el5|2.6.18-238.19.1.el5|2.6.18-238.21.1.el5|2.6.18-238.27.1.el5|2.6.18-238.28.1.el5|2.6.18-238.31.1.el5|2.6.18-238.33.1.el5|2.6.18-238.35.1.el5|2.6.18-238.37.1.el5|2.6.18-238.39.1.el5|2.6.18-238.40.1.el5|2.6.18-238.44.1.el5|2.6.18-238.45.1.el5|2.6.18-238.47.1.el5|2.6.18-238.48.1.el5|2.6.18-238.49.1.el5|2.6.18-238.50.1.el5|2.6.18-238.51.1.el5|2.6.18-238.52.1.el5|2.6.18-238.53.1.el5|2.6.18-238.54.1.el5|2.6.18-238.55.1.el5|2.6.18-238.56.1.el5|2.6.18-274.el5|2.6.18-274.3.1.el5|2.6.18-274.7.1.el5|2.6.18-274.12.1.el5,[1;31;103m&[0m,"
2⤵
PID:2755

/bin/cat
cat /proc/version
2⤵
PID:2757

/bin/sed
sed -E "s,2.6.18-274.17.1.el5|2.6.18-274.18.1.el5|2.6.18-308.el5|2.6.18-308.1.1.el5|2.6.18-308.4.1.el5|2.6.18-308.8.1.el5|2.6.18-308.8.2.el5|2.6.18-308.11.1.el5|2.6.18-308.13.1.el5|2.6.18-308.16.1.el5|2.6.18-308.20.1.el5|2.6.18-308.24.1.el5|2.6.18-348.el5|2.6.18-348.1.1.el5|2.6.18-348.2.1.el5|2.6.18-348.3.1.el5|2.6.18-348.4.1.el5|2.6.18-348.6.1.el5|2.6.18-348.12.1.el5|2.6.18-348.16.1.el5|2.6.18-348.18.1.el5|2.6.18-348.19.1.el5|2.6.18-348.21.1.el5|2.6.18-348.22.1.el5|2.6.18-348.23.1.el5|2.6.18-348.25.1.el5|2.6.18-348.27.1.el5|2.6.18-348.28.1.el5|2.6.18-348.29.1.el5|2.6.18-348.30.1.el5|2.6.18-348.31.2.el5|2.6.18-371.el5|2.6.18-371.1.2.el5|2.6.18-371.3.1.el5|2.6.18-371.4.1.el5|2.6.18-371.6.1.el5|2.6.18-371.8.1.el5|2.6.18-371.9.1.el5|2.6.18-371.11.1.el5|2.6.18-371.12.1.el5|2.6.18-398.el5|2.6.18-400.el5|2.6.18-400.1.1.el5|2.6.18-402.el5|2.6.18-404.el5|2.6.18-406.el5|2.6.18-407.el5|2.6.18-408.el5|2.6.18-409.el5|2.6.18-410.el5|2.6.18-411.el5|2.6.18-412.el5,[1;31;103m&[0m,"
2⤵
PID:2756

/bin/sed
sed -E "s,2.6.33.9-rt31.66.el6rt|2.6.33.9-rt31.74.el6rt|2.6.33.9-rt31.75.el6rt|2.6.33.9-rt31.79.el6rt|3.0.9-rt26.45.el6rt|3.0.9-rt26.46.el6rt|3.0.18-rt34.53.el6rt|3.0.25-rt44.57.el6rt|3.0.30-rt50.62.el6rt|3.0.36-rt57.66.el6rt|3.2.23-rt37.56.el6rt|3.2.33-rt50.66.el6rt|3.6.11-rt28.20.el6rt|3.6.11-rt30.25.el6rt|3.6.11.2-rt33.39.el6rt|3.6.11.5-rt37.55.el6rt|3.8.13-rt14.20.el6rt|3.8.13-rt14.25.el6rt|3.8.13-rt27.33.el6rt|3.8.13-rt27.34.el6rt|3.8.13-rt27.40.el6rt|3.10.0-229.rt56.144.el6rt|3.10.0-229.rt56.147.el6rt|3.10.0-229.rt56.149.el6rt|3.10.0-229.rt56.151.el6rt|3.10.0-229.rt56.153.el6rt|3.10.0-229.rt56.158.el6rt|3.10.0-229.rt56.161.el6rt|3.10.0-229.rt56.162.el6rt|3.10.0-327.rt56.170.el6rt|3.10.0-327.rt56.171.el6rt|3.10.0-327.rt56.176.el6rt|3.10.0-327.rt56.183.el6rt|3.10.0-327.rt56.190.el6rt|3.10.0-327.rt56.194.el6rt|3.10.0-327.rt56.195.el6rt|3.10.0-327.rt56.197.el6rt|3.10.33-rt32.33.el6rt|3.10.33-rt32.34.el6rt|3.10.33-rt32.43.el6rt|3.10.33-rt32.45.el6rt|3.10.33-rt32.51.el6rt|3.10.33-rt32.52.el6rt|3.10.58-rt62.58.el6rt|3.10.58-rt62.60.el6rt|2.6.32-71.7.1.el6|2.6.32-71.14.1.el6|2.6.32-71.18.1.el6|2.6.32-71.18.2.el6|2.6.32-71.24.1.el6|2.6.32-71.29.1.el6|2.6.32-71.31.1.el6|2.6.32-71.34.1.el6|2.6.32-71.35.1.el6|2.6.32-71.36.1.el6|2.6.32-71.37.1.el6|2.6.32-71.38.1.el6|2.6.32-71.39.1.el6|2.6.32-71.40.1.el6|2.6.32-131.0.15.el6|2.6.32-131.2.1.el6|2.6.32-131.4.1.el6|2.6.32-131.6.1.el6|2.6.32-131.12.1.el6,[1;31;103m&[0m,"
2⤵
PID:2758

/bin/sed
sed -E "s,2.6.32-131.17.1.el6|2.6.32-131.21.1.el6|2.6.32-131.22.1.el6|2.6.32-131.25.1.el6|2.6.32-131.26.1.el6|2.6.32-131.28.1.el6|2.6.32-131.29.1.el6|2.6.32-131.30.1.el6|2.6.32-131.30.2.el6|2.6.32-131.33.1.el6|2.6.32-131.35.1.el6|2.6.32-131.36.1.el6|2.6.32-131.37.1.el6|2.6.32-131.38.1.el6|2.6.32-131.39.1.el6|2.6.32-220.el6|2.6.32-220.2.1.el6|2.6.32-220.4.1.el6|2.6.32-220.4.2.el6|2.6.32-220.4.7.bgq.el6|2.6.32-220.7.1.el6|2.6.32-220.7.3.p7ih.el6|2.6.32-220.7.4.p7ih.el6|2.6.32-220.7.6.p7ih.el6|2.6.32-220.7.7.p7ih.el6|2.6.32-220.13.1.el6|2.6.32-220.17.1.el6|2.6.32-220.23.1.el6|2.6.32-220.24.1.el6|2.6.32-220.25.1.el6|2.6.32-220.26.1.el6|2.6.32-220.28.1.el6|2.6.32-220.30.1.el6|2.6.32-220.31.1.el6|2.6.32-220.32.1.el6|2.6.32-220.34.1.el6|2.6.32-220.34.2.el6|2.6.32-220.38.1.el6|2.6.32-220.39.1.el6|2.6.32-220.41.1.el6|2.6.32-220.42.1.el6|2.6.32-220.45.1.el6|2.6.32-220.46.1.el6|2.6.32-220.48.1.el6|2.6.32-220.51.1.el6|2.6.32-220.52.1.el6|2.6.32-220.53.1.el6|2.6.32-220.54.1.el6|2.6.32-220.55.1.el6|2.6.32-220.56.1.el6|2.6.32-220.57.1.el6|2.6.32-220.58.1.el6|2.6.32-220.60.2.el6|2.6.32-220.62.1.el6|2.6.32-220.63.2.el6|2.6.32-220.64.1.el6|2.6.32-220.65.1.el6|2.6.32-220.66.1.el6|2.6.32-220.67.1.el6|2.6.32-279.el6|2.6.32-279.1.1.el6|2.6.32-279.2.1.el6|2.6.32-279.5.1.el6|2.6.32-279.5.2.el6|2.6.32-279.9.1.el6|2.6.32-279.11.1.el6|2.6.32-279.14.1.bgq.el6|2.6.32-279.14.1.el6|2.6.32-279.19.1.el6|2.6.32-279.22.1.el6|2.6.32-279.23.1.el6|2.6.32-279.25.1.el6|2.6.32-279.25.2.el6|2.6.32-279.31.1.el6|2.6.32-279.33.1.el6|2.6.32-279.34.1.el6|2.6.32-279.37.2.el6|2.6.32-279.39.1.el6,[1;31;103m&[0m,"
2⤵
PID:2759

/bin/sed
sed -E "s,2.6.32-279.41.1.el6|2.6.32-279.42.1.el6|2.6.32-279.43.1.el6|2.6.32-279.43.2.el6|2.6.32-279.46.1.el6|2.6.32-358.el6|2.6.32-358.0.1.el6|2.6.32-358.2.1.el6|2.6.32-358.6.1.el6|2.6.32-358.6.2.el6|2.6.32-358.6.3.p7ih.el6|2.6.32-358.11.1.bgq.el6|2.6.32-358.11.1.el6|2.6.32-358.14.1.el6|2.6.32-358.18.1.el6|2.6.32-358.23.2.el6|2.6.32-358.28.1.el6|2.6.32-358.32.3.el6|2.6.32-358.37.1.el6|2.6.32-358.41.1.el6|2.6.32-358.44.1.el6|2.6.32-358.46.1.el6|2.6.32-358.46.2.el6|2.6.32-358.48.1.el6|2.6.32-358.49.1.el6|2.6.32-358.51.1.el6|2.6.32-358.51.2.el6|2.6.32-358.55.1.el6|2.6.32-358.56.1.el6|2.6.32-358.59.1.el6|2.6.32-358.61.1.el6|2.6.32-358.62.1.el6|2.6.32-358.65.1.el6|2.6.32-358.67.1.el6|2.6.32-358.68.1.el6|2.6.32-358.69.1.el6|2.6.32-358.70.1.el6|2.6.32-358.71.1.el6|2.6.32-358.72.1.el6|2.6.32-358.73.1.el6|2.6.32-358.111.1.openstack.el6|2.6.32-358.114.1.openstack.el6|2.6.32-358.118.1.openstack.el6|2.6.32-358.123.4.openstack.el6|2.6.32-431.el6|2.6.32-431.1.1.bgq.el6|2.6.32-431.1.2.el6|2.6.32-431.3.1.el6|2.6.32-431.5.1.el6|2.6.32-431.11.2.el6|2.6.32-431.17.1.el6|2.6.32-431.20.3.el6|2.6.32-431.20.5.el6|2.6.32-431.23.3.el6|2.6.32-431.29.2.el6|2.6.32-431.37.1.el6|2.6.32-431.40.1.el6|2.6.32-431.40.2.el6|2.6.32-431.46.2.el6|2.6.32-431.50.1.el6|2.6.32-431.53.2.el6|2.6.32-431.56.1.el6|2.6.32-431.59.1.el6|2.6.32-431.61.2.el6|2.6.32-431.64.1.el6|2.6.32-431.66.1.el6|2.6.32-431.68.1.el6|2.6.32-431.69.1.el6|2.6.32-431.70.1.el6,[1;31;103m&[0m,"
2⤵
PID:2760

/bin/sed
sed -E "s,2.6.32-431.71.1.el6|2.6.32-431.72.1.el6|2.6.32-431.73.2.el6|2.6.32-431.74.1.el6|2.6.32-504.el6|2.6.32-504.1.3.el6|2.6.32-504.3.3.el6|2.6.32-504.8.1.el6|2.6.32-504.8.2.bgq.el6|2.6.32-504.12.2.el6|2.6.32-504.16.2.el6|2.6.32-504.23.4.el6|2.6.32-504.30.3.el6|2.6.32-504.30.5.p7ih.el6|2.6.32-504.33.2.el6|2.6.32-504.36.1.el6|2.6.32-504.38.1.el6|2.6.32-504.40.1.el6|2.6.32-504.43.1.el6|2.6.32-504.46.1.el6|2.6.32-504.49.1.el6|2.6.32-504.50.1.el6|2.6.32-504.51.1.el6|2.6.32-504.52.1.el6|2.6.32-573.el6|2.6.32-573.1.1.el6|2.6.32-573.3.1.el6|2.6.32-573.4.2.bgq.el6|2.6.32-573.7.1.el6|2.6.32-573.8.1.el6|2.6.32-573.12.1.el6|2.6.32-573.18.1.el6|2.6.32-573.22.1.el6|2.6.32-573.26.1.el6|2.6.32-573.30.1.el6|2.6.32-573.32.1.el6|2.6.32-573.34.1.el6|2.6.32-642.el6|2.6.32-642.1.1.el6|2.6.32-642.3.1.el6|2.6.32-642.4.2.el6|2.6.32-642.6.1.el6,[1;31;103m&[0m,"
2⤵
PID:2761

/bin/sed
sed -E "s,3.10.0-229.rt56.141.el7|3.10.0-229.1.2.rt56.141.2.el7_1|3.10.0-229.4.2.rt56.141.6.el7_1|3.10.0-229.7.2.rt56.141.6.el7_1|3.10.0-229.11.1.rt56.141.11.el7_1|3.10.0-229.14.1.rt56.141.13.el7_1|3.10.0-229.20.1.rt56.141.14.el7_1|3.10.0-229.rt56.141.el7|3.10.0-327.rt56.204.el7|3.10.0-327.4.5.rt56.206.el7_2|3.10.0-327.10.1.rt56.211.el7_2|3.10.0-327.13.1.rt56.216.el7_2|3.10.0-327.18.2.rt56.223.el7_2|3.10.0-327.22.2.rt56.230.el7_2|3.10.0-327.28.2.rt56.234.el7_2|3.10.0-327.28.3.rt56.235.el7|3.10.0-327.36.1.rt56.237.el7|3.10.0-123.el7|3.10.0-123.1.2.el7|3.10.0-123.4.2.el7|3.10.0-123.4.4.el7|3.10.0-123.6.3.el7|3.10.0-123.8.1.el7|3.10.0-123.9.2.el7|3.10.0-123.9.3.el7|3.10.0-123.13.1.el7|3.10.0-123.13.2.el7|3.10.0-123.20.1.el7|3.10.0-229.el7|3.10.0-229.1.2.el7|3.10.0-229.4.2.el7|3.10.0-229.7.2.el7|3.10.0-229.11.1.el7|3.10.0-229.14.1.el7|3.10.0-229.20.1.el7|3.10.0-229.24.2.el7|3.10.0-229.26.2.el7|3.10.0-229.28.1.el7|3.10.0-229.30.1.el7|3.10.0-229.34.1.el7|3.10.0-229.38.1.el7|3.10.0-229.40.1.el7|3.10.0-229.42.1.el7|3.10.0-327.el7|3.10.0-327.3.1.el7|3.10.0-327.4.4.el7|3.10.0-327.4.5.el7|3.10.0-327.10.1.el7|3.10.0-327.13.1.el7|3.10.0-327.18.2.el7|3.10.0-327.22.2.el7|3.10.0-327.28.2.el7|3.10.0-327.28.3.el7|3.10.0-327.36.1.el7|3.10.0-327.36.2.el7|3.10.0-229.1.2.ael7b|3.10.0-229.4.2.ael7b|3.10.0-229.7.2.ael7b|3.10.0-229.11.1.ael7b|3.10.0-229.14.1.ael7b|3.10.0-229.20.1.ael7b|3.10.0-229.24.2.ael7b|3.10.0-229.26.2.ael7b|3.10.0-229.28.1.ael7b|3.10.0-229.30.1.ael7b|3.10.0-229.34.1.ael7b|3.10.0-229.38.1.ael7b|3.10.0-229.40.1.ael7b|3.10.0-229.42.1.ael7b|4.2.0-0.21.el7,[1;31;103m&[0m,"
2⤵
PID:2762

/bin/sed
sed -E "s, 4.0.[0-9]+| 4.1.[0-9]+| 4.2.[0-9]+| 4.3.[0-9]+| 4.4.[0-9]+| 4.5.[0-9]+| 4.6.[0-9]+| 4.7.[0-9]+| 4.8.[0-9]+| 4.9.[0-9]+| 4.10.[0-9]+| 4.11.[0-9]+| 4.12.[0-9]+| 4.13.[0-9]+| 3.9.6| 3.9.0| 3.9| 3.8.9| 3.8.8| 3.8.7| 3.8.6| 3.8.5| 3.8.4| 3.8.3| 3.8.2| 3.8.1| 3.8.0| 3.8| 3.7.6| 3.7.0| 3.7| 3.6.0| 3.6| 3.5.0| 3.5| 3.4.9| 3.4.8| 3.4.6| 3.4.5| 3.4.4| 3.4.3| 3.4.2| 3.4.1| 3.4.0| 3.4| 3.3| 3.2| 3.19.0| 3.16.0| 3.15| 3.14| 3.13.1| 3.13.0| 3.13| 3.12.0| 3.12| 3.11.0| 3.11| 3.10.6| 3.10.0| 3.10| 3.1.0| 3.0.6| 3.0.5| 3.0.4| 3.0.3| 3.0.2| 3.0.1| 3.0.0| 2.6.9| 2.6.8| 2.6.7| 2.6.6| 2.6.5| 2.6.4| 2.6.39| 2.6.38| 2.6.37| 2.6.36| 2.6.35| 2.6.34| 2.6.33| 2.6.32| 2.6.31| 2.6.30| 2.6.3| 2.6.29| 2.6.28| 2.6.27| 2.6.26| 2.6.25| 2.6.24.1| 2.6.24| 2.6.23| 2.6.22| 2.6.21| 2.6.20| 2.6.2| 2.6.19| 2.6.18| 2.6.17| 2.6.16| 2.6.15| 2.6.14| 2.6.13| 2.6.12| 2.6.11| 2.6.10| 2.6.1| 2.6.0| 2.4.9| 2.4.8| 2.4.7| 2.4.6| 2.4.5| 2.4.4| 2.4.37| 2.4.36| 2.4.35| 2.4.34| 2.4.33| 2.4.32| 2.4.31| 2.4.30| 2.4.29| 2.4.28| 2.4.27| 2.4.26| 2.4.25| 2.4.24| 2.4.23| 2.4.22| 2.4.21| 2.4.20| 2.4.19| 2.4.18| 2.4.17| 2.4.16| 2.4.15| 2.4.14| 2.4.13| 2.4.12| 2.4.11| 2.4.10| 2.2.24,[1;31m&[0m,"
2⤵
PID:2763

/usr/bin/lsb_release
lsb_release -a
2⤵
PID:2764

/usr/local/sbin/dpkg-query
dpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security
3⤵
PID:2765

/usr/local/bin/dpkg-query
dpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security
3⤵
PID:2765

/usr/sbin/dpkg-query
dpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security
3⤵
PID:2765

/usr/bin/dpkg-query
dpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security
3⤵
PID:2765

/bin/sed
sed -E "s,[01].[012345678].[0-9]+|1.9.[01234]|1.9.5p1,[1;31m&[0m,"
2⤵
PID:2769

/bin/grep
grep "Sudo ver"
2⤵
PID:2768

/usr/bin/sudo
sudo -V
2⤵
PID:2767

/bin/grep
grep -q com.ubuntu.USBCreator
2⤵
PID:2772

/usr/bin/busctl
busctl list
2⤵
PID:2771

/bin/date
date
2⤵
PID:2779

/usr/bin/uptime
uptime
2⤵
- Reads CPU attributes
PID:2780

/usr/bin/head
head -n 20
2⤵
PID:2784

/bin/sed
sed "s,crypt,[1;31m&[0m,"
2⤵
PID:2783

/bin/grep
grep -Ei "^sd|^disk"
2⤵
PID:2782

/bin/ls
ls /dev
2⤵
PID:2781

/bin/sed
sed -E "s,nosuid|nouser|noexec,[1;32m&[0m,g"
2⤵
PID:2792

/bin/sed
sed -E "s,\\Wsuid|\\Wuser|\\Wexec,[1;31m&[0m,g"
2⤵
PID:2791

/bin/sed
sed -E "s,/|/bin|/boot|/boot/grub|/boot/grub/fonts|/boot/grub/i386-pc|/boot/grub/locale|/.cache|/dev|/dev/block|/dev/bsg|/dev/bus|/dev/bus/usb|/dev/char|/dev/cpu|/dev/disk|/dev/disk/by-id|/dev/disk/by-partuuid|/dev/disk/by-path|/dev/disk/by-uuid|/dev/dri|/dev/dri/by-path|/dev/hugepages|/dev/input|/dev/input/by-id|/dev/input/by-path|/dev/mapper|/dev/mqueue|/dev/net|/dev/pts|/dev/shm|/dev/snd|/dev/vfio|/etc|/etc/acpi|/etc/acpi/events|/etc/alternatives|/etc/apm|/etc/apm/event.d|/etc/apm/resume.d|/etc/apm/scripts.d|/etc/apm/suspend.d|/etc/apparmor|/etc/apparmor.d|/etc/apparmor.d/abstractions|/etc/apparmor.d/cache|/etc/apparmor.d/disable|/etc/apparmor.d/force-complain|/etc/apparmor.d/local|/etc/apparmor.d/tunables|/etc/apparmor/init|/etc/apport|/etc/apport/blacklist.d|/etc/apport/native-origins.d|/etc/apt|/etc/apt/apt.conf.d|/etc/apt/auth.conf.d|/etc/apt/keyrings|/etc/apt/preferences.d|/etc/apt/sources.list.d|/etc/apt/trusted.gpg.d|/etc/audisp|/etc/audisp/plugins.d|/etc/audit|/etc/audit/rules.d|/etc/avahi|/etc/avahi/services|/etc/bash_completion.d|/etc/binfmt.d|/etc/bluetooth|/etc/brltty|/etc/brltty/Attributes|/etc/brltty/Contraction|/etc/brltty/Input|/etc/brltty/Keyboard|/etc/brltty/Text|/etc/ca-certificates|/etc/ca-certificates/update.d|/etc/calendar|/etc/chatscripts|/etc/console-setup|/etc/cracklib|/etc/cron.d|/etc/cron.daily|/etc/cron.hourly|/etc/cron.monthly|/etc/cron.weekly|/etc/cups|/etc/cupshelpers|/etc/cups/interfaces|/etc/cups/ppd|/etc/cups/ssl|/etc/dbus-1|/etc/dbus-1/session.d|/etc/dbus-1/system.d|/etc/dconf|/etc/dconf/db|/etc/dconf/profile|/etc/default|/etc/depmod.d|/etc/dhcp|/etc/dhcp/dhclient-enter-hooks.d|/etc/dhcp/dhclient-exit-hooks.d|/etc/dictionaries-common|/etc/dpkg|/etc/dpkg/dpkg.cfg.d|/etc/dpkg/origins|/etc/emacs|/etc/emacs/site-start.d|/etc/firefox|/etc/firefox/pref|/etc/fonts|/etc/fonts/conf.avail|/etc/fonts/conf.d|/etc/fwupd|/etc/fwupd/remotes.d|/etc/gdb|/etc/gdm3|/etc/gdm3/Init|/etc/gdm3/PostLogin|/etc/gdm3/PostSession|/etc/gdm3/PreSession|/etc/gdm3/Prime|/etc/gdm3/PrimeOff|/etc/geoclue|/etc/ghostscript|/etc/ghostscript/cidfmap.d|/etc/ghostscript/fontmap.d|/etc/glvnd|/etc/glvnd/egl_vendor.d|/etc/gnome|/etc/groff|/etc/grub.d|/etc/gss|/etc/gss/mech.d|/etc/gtk-2.0|/etc/gtk-3.0|/etc/hp|/etc/ifplugd|/etc/ifplugd/action.d|/etc/ImageMagick-6|/etc/init|/etc/init.d|/etc/initramfs-tools|/etc/initramfs-tools/conf.d|/etc/initramfs-tools/hooks|/etc/initramfs-tools/scripts|/etc/insserv.conf.d|/etc/iproute2|/etc/iproute2/rt_protos.d|/etc/iproute2/rt_tables.d|/etc/kernel|/etc/kernel/install.d|/etc/kernel/postinst.d|/etc/kernel/postrm.d|/etc/kernel/preinst.d|/etc/ldap|/etc/ld.so.conf.d|/etc/libblockdev|/etc/libblockdev/conf.d|/etc/libnl-3|/etc/libpaper.d|/etc/libreoffice|/etc/logcheck|/etc/logcheck/ignore.d.paranoid|/etc/logcheck/ignore.d.server|/etc/logrotate.d|/etc/modprobe.d|/etc/modules-load.d|/etc/netplan|/etc/network|/etc/networkd-dispatcher|/etc/networkd-dispatcher/dormant.d|/etc/networkd-dispatcher/no-carrier.d|/etc/networkd-dispatcher/off.d|/etc/networkd-dispatcher/routable.d|/etc/network/if-down.d|/etc/network/if-post-down.d|/etc/network/if-pre-up.d|/etc/network/if-up.d|/etc/network/interfaces.d|/etc/NetworkManager|/etc/NetworkManager/conf.d|/etc/NetworkManager/dispatcher.d|/etc/NetworkManager/dnsmasq.d|/etc/NetworkManager/dnsmasq-shared.d|/etc/NetworkManager/system-connections|/etc/newt|/etc/opt|/etc/PackageKit|/etc/pam.d|/etc/pcmcia|/etc/perl|/etc/perl/CPAN|/etc/perl/Net|/etc/perl/XML|/etc/pki|/etc/pki/fwupd|/etc/pki/fwupd-metadata|/etc/pm|/etc/pm/sleep.d|/etc/polkit-1|/etc/polkit-1/localauthority|/etc/polkit-1/localauthority.conf.d|/etc/polkit-1/nullbackend.conf.d|/etc/ppp|/etc/ppp/ip-down.d|/etc/ppp/ip-up.d|/etc/ppp/ipv6-down.d|/etc/ppp/ipv6-up.d|/etc/ppp/peers|/etc/ppp/resolv|/etc/profile.d|/etc/pulse|/etc/python|/etc/python2.7|/etc/python3|/etc/python3.6|/etc/rc0.d|/etc/rc1.d|/etc/rc2.d|/etc/rc3.d|/etc/rc4.d|/etc/rc5.d|/etc/rc6.d|/etc/rcS.d|/etc/resolvconf|/etc/resolvconf/update-libc.d|/etc/rsyslog.d|/etc/sane.d|/etc/sane.d/dll.d|/etc/security|/etc/security/limits.d|/etc/security/namespace.d|/etc/selinux|/etc/selinux/default|/etc/sensors.d|/etc/skel|/etc/speech-dispatcher|/etc/speech-dispatcher/clients|/etc/speech-dispatcher/modules|/etc/ssh|/etc/ssl|/etc/ssl/certs|/etc/ssl/private|/etc/sudoers.d|/etc/sysctl.d|/etc/systemd|/etc/systemd/network|/etc/systemd/system|/etc/systemd/user|/etc/terminfo|/etc/thunderbird|/etc/tmpfiles.d|/etc/ubuntu-advantage|/etc/udev|/etc/udev/hwdb.d|/etc/udev/rules.d|/etc/udisks2|/etc/ufw|/etc/ufw/applications.d|/etc/update-manager|/etc/update-manager/release-upgrades.d|/etc/update-motd.d|/etc/update-notifier|/etc/UPower|/etc/usb_modeswitch.d|/etc/vim|/etc/wpa_supplicant|/etc/X11|/etc/X11/app-defaults|/etc/X11/cursors|/etc/X11/fonts|/etc/X11/xinit|/etc/X11/xkb|/etc/X11/Xreset.d|/etc/X11/Xresources|/etc/X11/Xsession.d|/etc/X11/xsm|/etc/xdg|/etc/xdg/autostart|/etc/xdg/menus|/etc/xdg/systemd|/home|/lib|/lib64|/lib/apparmor|/lib/brltty|/lib/console-setup|/lib/crda|/lib/crda/pubkeys|/lib/firmware|/lib/firmware/3com|/lib/firmware/acenic|/lib/firmware/adaptec|/lib/firmware/advansys|/lib/firmware/amdgpu|/lib/firmware/amd-ucode|/lib/firmware/ar3k|/lib/firmware/asihpi|/lib/firmware/ath10k|/lib/firmware/ath6k|/lib/firmware/ath9k_htc|/lib/firmware/atmel|/lib/firmware/atusb|/lib/firmware/av7110|/lib/firmware/bnx2|/lib/firmware/bnx2x|/lib/firmware/brcm|/lib/firmware/carl9170fw|/lib/firmware/cavium|/lib/firmware/cis|/lib/firmware/cpia2|/lib/firmware/cxgb3|/lib/firmware/cxgb4|/lib/firmware/dsp56k|/lib/firmware/e100|/lib/firmware/ea|/lib/firmware/edgeport|/lib/firmware/emi26|/lib/firmware/emi62|/lib/firmware/ene-ub6250|/lib/firmware/ess|/lib/firmware/go7007|/lib/firmware/hp|/lib/firmware/i915|/lib/firmware/imx|/lib/firmware/intel|/lib/firmware/intel-ucode|/lib/firmware/isci|/lib/firmware/kaweth|/lib/firmware/keyspan|/lib/firmware/keyspan_pda|/lib/firmware/korg|/lib/firmware/libertas|/lib/firmware/liquidio|/lib/firmware/matrox|/lib/firmware/mediatek|/lib/firmware/mellanox|/lib/firmware/moxa|/lib/firmware/mrvl|/lib/firmware/mwl8k|/lib/firmware/mwlwifi|/lib/firmware/netronome|/lib/firmware/nvidia|/lib/firmware/ositech|/lib/firmware/qca|/lib/firmware/qcom|/lib/firmware/qed|/lib/firmware/qlogic|/lib/firmware/r128|/lib/firmware/radeon|/lib/firmware/rockchip|/lib/firmware/rsi|/lib/firmware/RTL8192E|/lib/firmware/rtl_bt|/lib/firmware/rtl_nic|/lib/firmware/rtlwifi|/lib/firmware/rtw88|/lib/firmware/sb16|/lib/firmware/slicoss|/lib/firmware/sun|/lib/firmware/tehuti|/lib/firmware/ti-connectivity|/lib/firmware/tigon|/lib/firmware/ti-keystone|/lib/firmware/ttusb-budget|/lib/firmware/ueagle-atm|/lib/firmware/usbdux|/lib/firmware/vicam|/lib/firmware/vxge|/lib/firmware/yam|/lib/firmware/yamaha|/lib/firmware/zd1211|/lib/hdparm|/lib/ifupdown|/lib/init|/lib/linux-sound-base|/lib/lsb|/lib/lsb/init-functions.d|/lib/modprobe.d|/lib/modules|/lib/modules/4.15.0-213-generic|/lib/netplan|/lib/recovery-mode|/lib/recovery-mode/options|/lib/systemd|/lib/systemd/network|/lib/systemd/system|/lib/systemd/system-generators|/lib/systemd/system-preset|/lib/systemd/system-shutdown|/lib/systemd/system-sleep|/lib/terminfo|/lib/terminfo/a|/lib/terminfo/c|/lib/terminfo/d|/lib/terminfo/E|/lib/terminfo/h|/lib/terminfo/l|/lib/terminfo/m|/lib/terminfo/p|/lib/terminfo/r|/lib/terminfo/s|/lib/terminfo/v|/lib/terminfo/w|/lib/terminfo/x|/lib/udev|/lib/udev/hwdb.d|/lib/udev/rules.d|/lib/ufw|/lib/x86_64-linux-gnu|/lib/x86_64-linux-gnu/security|/lost+found|/media|/media/floppy0|/mnt|/opt|/proc|/root|/root/.cache|/root/.cache/dconf|/root/.cache/doc|/root/.cache/evolution|/root/.cache/gnome-software|/root/.cache/ibus|/root/.cache/ibus-table|/root/.cache/libgweather|/root/.cache/mozilla|/root/.cache/wallpaper|/root/.config|/root/.config/dconf|/root/.config/evolution|/root/.config/gnome-session|/root/.config/goa-1.0|/root/.config/gtk-3.0|/root/.config/ibus|/root/.config/nautilus|/root/.config/systemd|/root/.dbus|/root/.dbus/session-bus|/root/Desktop|/root/Documents|/root/Downloads|/root/.gnupg|/root/.gnupg/private-keys-v1.d|/root/.gvfs|/root/.local|/root/.local/share|/root/.mozilla|/root/.mozilla/extensions|/root/.mozilla/firefox|/root/Music|/root/Pictures|/root/Public|/root/Templates|/root/Videos|/run|/run/boltd|/run/boltd/power|/run/console-setup|/run/cups|/run/dbus|/run/gdm3|/run/initramfs|/run/lock|/run/lock/subsys|/run/log|/run/mount|/run/network|/run/NetworkManager|/run/NetworkManager/conf.d|/run/NetworkManager/devices|/run/NetworkManager/system-connections|/run/pppconfig|/run/sendsigs.omit.d|/run/spice-vdagentd|/run/sshd|/run/sudo|/run/sudo/ts|/run/systemd|/run/systemd/ask-password|/run/systemd/generator|/run/systemd/generator.late|/run/systemd/inaccessible|/run/systemd/inhibit|/run/systemd/initctl|/run/systemd/journal|/run/systemd/machines|/run/systemd/seats|/run/systemd/sessions|/run/systemd/shutdown|/run/systemd/system|/run/systemd/transient|/run/systemd/unit-root|/run/systemd/units|/run/systemd/users|/run/tmpfiles.d|/run/udev|/run/udev/data|/run/udev/links|/run/udev/static_node-tags|/run/udev/tags|/run/udev/watch|/run/udisks2|/run/user|/run/user/0|/run/uuidd|/sbin|/snap|/srv|/sys|/sys/block|/sys/bus|/sys/bus/acpi|/sys/bus/clockevents|/sys/bus/clocksource|/sys/bus/container|/sys/bus/cpu|/sys/bus/edac|/sys/bus/event_source|/sys/bus/gpio|/sys/bus/hid|/sys/bus/i2c|/sys/bus/isa|/sys/bus/machinecheck|/sys/bus/mdio_bus|/sys/bus/memory|/sys/bus/mipi-dsi|/sys/bus/mmc|/sys/bus/nd|/sys/bus/node|/sys/bus/nvmem|/sys/bus/parport|/sys/bus/pci|/sys/bus/pci-epf|/sys/bus/pci_express|/sys/bus/platform|/sys/bus/pnp|/sys/bus/rapidio|/sys/bus/scsi|/sys/bus/sdio|/sys/bus/serial|/sys/bus/serio|/sys/bus/spi|/sys/bus/usb|/sys/bus/virtio|/sys/bus/vme|/sys/bus/workqueue|/sys/bus/xen|/sys/bus/xen-backend|/sys/class|/sys/class/ata_device|/sys/class/ata_link|/sys/class/ata_port|/sys/class/backlight|/sys/class/bdi|/sys/class/block|/sys/class/bsg|/sys/class/devcoredump|/sys/class/devfreq|/sys/class/devfreq-event|/sys/class/dma|/sys/class/dmi|/sys/class/drm|/sys/class/drm_dp_aux_dev|/sys/class/extcon|/sys/class/firmware|/sys/class/gpio|/sys/class/graphics|/sys/class/hidraw|/sys/class/hmm_device|/sys/class/hwmon|/sys/class/i2c-adapter|/sys/class/i2c-dev|/sys/class/input|/sys/class/iommu|/sys/class/leds|/sys/class/mdio_bus|/sys/class/mem|/sys/class/misc|/sys/class/mmc_host|/sys/class/nd|/sys/class/net|/sys/class/pci_bus|/sys/class/pci_epc|/sys/class/phy|/sys/class/powercap|/sys/class/power_supply|/sys/class/ppdev|/sys/class/ppp|/sys/class/printer|/sys/class/pwm|/sys/class/rapidio_port|/sys/class/regulator|/sys/class/rfkill|/sys/class/rtc|/sys/class/scsi_device|/sys/class/scsi_disk|/sys/class/scsi_generic|/sys/class/scsi_host|/sys/class/spi_master|/sys/class/spi_slave|/sys/class/thermal|/sys/class/tpm|/sys/class/tpmrm|/sys/class/tty|/sys/class/vc|/sys/class/virtio-ports|/sys/class/vtconsole|/sys/class/watchdog|/sys/dev|/sys/dev/block|/sys/dev/char|/sys/devices|/sys/devices/breakpoint|/sys/devices/isa|/sys/devices/LNXSYSTM:00|/sys/devices/msr|/sys/devices/parport0|/sys/devices/pci0000:00|/sys/devices/platform|/sys/devices/pnp0|/sys/devices/software|/sys/devices/system|/sys/devices/tracepoint|/sys/devices/uncore_arb|/sys/devices/uncore_cbox|/sys/devices/virtual|/sys/firmware|/sys/firmware/acpi|/sys/firmware/dmi|/sys/firmware/memmap|/sys/firmware/qemu_fw_cfg|/sys/fs|/sys/fs/bpf|/sys/fs/cgroup|/sys/fs/ecryptfs|/sys/fs/ext4|/sys/fs/fuse|/sys/fs/pstore|/sys/hypervisor|/sys/kernel|/sys/kernel/boot_params|/sys/kernel/cgroup|/sys/kernel/config|/sys/kernel/debug|/sys/kernel/iommu_groups|/sys/kernel/irq|/sys/kernel/livepatch|/sys/kernel/mm|/sys/kernel/security|/sys/kernel/slab|/sys/kernel/tracing|/sys/module|/sys/module/8139cp|/sys/module/8139too|/sys/module/8250|/sys/module/acpi|/sys/module/acpi_cpufreq|/sys/module/acpiphp|/sys/module/aesni_intel|/sys/module/aes_x86_64|/sys/module/ahci|/sys/module/apparmor|/sys/module/ata_generic|/sys/module/ata_piix|/sys/module/autofs4|/sys/module/battery|/sys/module/binfmt_misc|/sys/module/block|/sys/module/button|/sys/module/configfs|/sys/module/cpufreq|/sys/module/cpuidle|/sys/module/crc32_pclmul|/sys/module/crct10dif_pclmul|/sys/module/cryptd|/sys/module/cryptomgr|/sys/module/crypto_simd|/sys/module/debug_core|/sys/module/dm_mod|/sys/module/dns_resolver|/sys/module/drm|/sys/module/drm_kms_helper|/sys/module/dynamic_debug|/sys/module/edac_core|/sys/module/edd|/sys/module/efivars|/sys/module/ehci_hcd|/sys/module/elants_i2c|/sys/module/ext4|/sys/module/fb|/sys/module/fb_sys_fops|/sys/module/firmware_class|/sys/module/floppy|/sys/module/fscrypto|/sys/module/fuse|/sys/module/ghash_clmulni_intel|/sys/module/glue_helper|/sys/module/gpiolib_acpi|/sys/module/hid|/sys/module/hid_generic|/sys/module/i2c_piix4|/sys/module/i8042|/sys/module/ima|/sys/module/input_leds|/sys/module/intel_idle|/sys/module/ip_tables|/sys/module/ipv6|/sys/module/joydev|/sys/module/kdb|/sys/module/kernel|/sys/module/keyboard|/sys/module/kgdb_nmi|/sys/module/kgdboc|/sys/module/libahci|/sys/module/libata|/sys/module/loop|/sys/module/lp|/sys/module/mac_hid|/sys/module/md_mod|/sys/module/mii|/sys/module/module|/sys/module/mousedev|/sys/module/netpoll|/sys/module/nfnetlink|/sys/module/nf_tables|/sys/module/nf_tables_inet|/sys/module/nf_tables_ipv4|/sys/module/nf_tables_ipv6|/sys/module/parport|/sys/module/parport_pc|/sys/module/pata_acpi|/sys/module/pata_sis|/sys/module/pcbc|/sys/module/pcc_cpufreq|/sys/module/pcie_aspm|/sys/module/pciehp|/sys/module/pci_hotplug|/sys/module/ppdev|/sys/module/ppp_generic|/sys/module/printk|/sys/module/processor|/sys/module/psmouse|/sys/module/pstore|/sys/module/qemu_fw_cfg|/sys/module/random|/sys/module/rcupdate|/sys/module/rcutree|/sys/module/rfkill|/sys/module/rng_core|/sys/module/sch_fq_codel|/sys/module/scsi_mod|/sys/module/serio_raw|/sys/module/sg|/sys/module/spurious|/sys/module/srcutree|/sys/module/sr_mod|/sys/module/stahp|/sys/module/suspend|/sys/module/syscopyarea|/sys/module/sysfillrect|/sys/module/sysimgblt|/sys/module/sysrq|/sys/module/tcp_cubic|/sys/module/thermal|/sys/module/tpm|/sys/module/tpm_crb|/sys/module/tpm_tis|/sys/module/tpm_tis_core|/sys/module/ttm|/sys/module/uhci_hcd|/sys/module/uinput|/sys/module/usbcore|/sys/module/usbhid|/sys/module/virtio_balloon|/sys/module/virtio_blk|/sys/module/virtio_gpu|/sys/module/virtio_mmio|/sys/module/virtio_pci|/sys/module/vt|/sys/module/watchdog|/sys/module/workqueue|/sys/module/xen|/sys/module/xen_acpi_processor|/sys/module/xen_blkfront|/sys/module/xen_netfront|/sys/module/xhci_hcd|/sys/module/x_tables|/sys/module/xz_dec|/sys/module/zswap|/sys/power|/tmp|/tmp/.font-unix|/tmp/.ICE-unix|/tmp/netplan_t4gvmx20|/tmp/snap-private-tmp|/tmp/ssh-14h3MH9sLL6m|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-bolt.service-KydciJ|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-bolt.service-KydciJ/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-colord.service-MtZnPQ|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-colord.service-MtZnPQ/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-ModemManager.service-O97zjv|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-ModemManager.service-O97zjv/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-resolved.service-kBVedT|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-resolved.service-kBVedT/tmp|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-timedated.service-Ow3ERO|/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-timedated.service-Ow3ERO/tmp|/tmp/.Test-unix|/tmp/.X11-unix|/tmp/.XIM-unix|/usr|/usr/bin|/usr/games|/usr/include|/usr/include/arpa|/usr/include/asm-generic|/usr/include/c++|/usr/include/drm|/usr/include/linux|/usr/include/misc|/usr/include/mtd|/usr/include/net|/usr/include/netash|/usr/include/netatalk|/usr/include/netax25|/usr/include/neteconet|/usr/include/netinet|/usr/include/netipx|/usr/include/netiucv|/usr/include/netpacket|/usr/include/netrom|/usr/include/netrose|/usr/include/nfs|/usr/include/node|/usr/include/openssl|/usr/include/protocols|/usr/include/python3.6m|/usr/include/rdma|/usr/include/reglib|/usr/include/rpc|/usr/include/rpcsvc|/usr/include/scsi|/usr/include/sound|/usr/include/video|/usr/include/X11|/usr/include/x86_64-linux-gnu|/usr/include/xen|/usr/include/xorg|/usr/lib|/usr/lib/accountsservice|/usr/lib/apg|/usr/lib/apt|/usr/lib/aspell|/usr/lib/at-spi2-core|/usr/lib/avahi|/usr/lib/bfd-plugins|/usr/lib/binfmt.d|/usr/lib/bluetooth|/usr/lib/colord|/usr/lib/compat-ld|/usr/lib/cups|/usr/lib/dbus-1.0|/usr/lib/dconf|/usr/lib/debug|/usr/lib/deja-dup|/usr/lib/dpkg|/usr/lib/eject|/usr/lib/emacsen-common|/usr/lib/environment.d|/usr/lib/evince|/usr/lib/evolution|/usr/lib/evolution-data-server|/usr/libexec|/usr/lib/file|/usr/lib/firefox|/usr/lib/firefox-addons|/usr/lib/fwupd|/usr/lib/gcc|/usr/lib/gcr|/usr/lib/gdm3|/usr/lib/geoclue-2.0|/usr/lib/gettext|/usr/lib/ghostscript|/usr/lib/girepository-1.0|/usr/lib/gjs|/usr/lib/glib-networking|/usr/lib/gnome-control-center|/usr/lib/gnome-disk-utility|/usr/lib/gnome-initial-setup|/usr/lib/gnome-online-accounts|/usr/lib/gnome-session|/usr/lib/gnome-settings-daemon|/usr/lib/gnome-settings-daemon-3.0|/usr/lib/gnome-shell|/usr/lib/gnome-terminal|/usr/lib/gnupg|/usr/lib/gnupg2|/usr/lib/gold-ld|/usr/lib/groff|/usr/lib/grub|/usr/lib/grub-legacy|/usr/lib/gvfs|/usr/lib/ibus|/usr/lib/initramfs-tools|/usr/lib/ispell|/usr/lib/kernel|/usr/lib/klibc|/usr/lib/language-selector|/usr/lib/libmbim|/usr/lib/libqmi|/usr/lib/libreoffice|/usr/lib/linux|/usr/lib/linux-boot-probes|/usr/lib/locale|/usr/lib/lp_solve|/usr/lib/man-db|/usr/lib/memtest86+|/usr/lib/mime|/usr/lib/modules-load.d|/usr/lib/mozilla|/usr/lib/mutter|/usr/lib/networkd-dispatcher|/usr/lib/NetworkManager|/usr/lib/node_modules|/usr/lib/notification-daemon|/usr/lib/nvidia|/usr/lib/openssh|/usr/lib/os-prober|/usr/lib/os-probes|/usr/lib/packagekit|/usr/lib/pcmciautils|/usr/lib/pkgconfig|/usr/lib/pm-utils|/usr/lib/policykit-1|/usr/lib/pppd|/usr/lib/pulse-11.1|/usr/lib/python2.7|/usr/lib/python3|/usr/lib/python3.6|/usr/lib/python3.7|/usr/lib/python3.8|/usr/lib/rhythmbox|/usr/lib/rsyslog|/usr/lib/rtkit|/usr/lib/sasl2|/usr/lib/selinux|/usr/lib/shotwell|/usr/lib/snapd|/usr/lib/software-properties|/usr/lib/speech-dispatcher-modules|/usr/lib/ssl|/usr/lib/sudo|/usr/lib/sysctl.d|/usr/lib/syslinux|/usr/lib/SYSLINUX|/usr/lib/syslinux-legacy|/usr/lib/systemd|/usr/lib/system-service|/usr/lib/sysusers.d|/usr/lib/tar|/usr/lib/tasksel|/usr/lib/tc|/usr/lib/thunderbird|/usr/lib/thunderbird-addons|/usr/lib/tmpfiles.d|/usr/lib/ubiquity|/usr/lib/ubuntu-advantage|/usr/lib/ubuntu-release-upgrader|/usr/lib/udisks2|/usr/lib/unity-settings-daemon-1.0|/usr/lib/update-notifier|/usr/lib/upower|/usr/lib/valgrind|/usr/lib/vino|/usr/lib/X11|/usr/lib/x86_64-linux-gnu|/usr/lib/xorg|/usr/lib/xserver-xorg-video-intel|/usr/lib/zeitgeist|/usr/local|/usr/local/bin|/usr/local/etc|/usr/local/games|/usr/local/include|/usr/local/lib|/usr/local/sbin|/usr/local/share|/usr/local/src|/usr/sbin|/usr/share|/usr/share/aclocal|/usr/share/acpi-support|/usr/share/adduser|/usr/share/adium|/usr/share/aisleriot|/usr/share/alsa|/usr/share/alsa-base|/usr/share/appdata|/usr/share/app-info|/usr/share/app-install|/usr/share/application-registry|/usr/share/applications|/usr/share/apport|/usr/share/apps|/usr/share/apturl|/usr/share/aspell|/usr/share/avahi|/usr/share/awk|/usr/share/backgrounds|/usr/share/base-files|/usr/share/base-passwd|/usr/share/bash-completion|/usr/share/binfmts|/usr/share/branding|/usr/share/brltty|/usr/share/bug|/usr/share/build-essential|/usr/share/ca-certificates|/usr/share/calendar|/usr/share/cmake|/usr/share/cogl|/usr/share/color|/usr/share/colord|/usr/share/command-not-found|/usr/share/common-licenses|/usr/share/consolefonts|/usr/share/console-setup|/usr/share/consoletrans|/usr/share/cups|/usr/share/dbus-1|/usr/share/dconf|/usr/share/debconf|/usr/share/debhelper|/usr/share/debianutils|/usr/share/defaults|/usr/share/desktop-directories|/usr/share/dict|/usr/share/dictionaries-common|/usr/share/distro-info|/usr/share/djvu|/usr/share/dns|/usr/share/dnsmasq-base|/usr/share/doc|/usr/share/doc-base|/usr/share/dpkg|/usr/share/drirc.d|/usr/share/emacs|/usr/share/enchant|/usr/share/eog|/usr/share/evince|/usr/share/evolution-data-server|/usr/share/example-content|/usr/share/file|/usr/share/file-roller|/usr/share/fish|/usr/share/fontconfig|/usr/share/fonts|/usr/share/fonts-droid-fallback|/usr/share/fonts-sil-padauk|/usr/share/foo2qpdl|/usr/share/foo2zjs|/usr/share/fwupd|/usr/share/gcc-8|/usr/share/GConf|/usr/share/gdb|/usr/share/gdm|/usr/share/gedit|/usr/share/GeoIP|/usr/share/gettext|/usr/share/gettext-0.19.8|/usr/share/ghostscript|/usr/share/glib-2.0|/usr/share/glvnd|/usr/share/gnome|/usr/share/gnome-background-properties|/usr/share/gnome-bluetooth|/usr/share/gnome-control-center|/usr/share/gnome-mahjongg|/usr/share/gnome-mines|/usr/share/gnome-session|/usr/share/gnome-settings-daemon|/usr/share/gnome-shell|/usr/share/gnome-software|/usr/share/gnome-sudoku|/usr/share/gnome-todo|/usr/share/gnome-video-effects|/usr/share/gnupg|/usr/share/goa-1.0|/usr/share/grilo-plugins|/usr/share/groff|/usr/share/grub|/usr/share/grub-gfxpayload-lists|/usr/share/gst-plugins-base|/usr/share/gstreamer-1.0|/usr/share/gtk-doc|/usr/share/gtk-engines|/usr/share/gtksourceview-3.0|/usr/share/guile|/usr/share/gutenprint|/usr/share/gvfs|/usr/share/hal|/usr/share/help|/usr/share/help-langpack|/usr/share/hplip|/usr/share/hunspell|/usr/share/hyphen|/usr/share/i18n|/usr/share/ibus|/usr/share/ibus-table|/usr/share/icons|/usr/share/ImageMagick-6|/usr/share/im-config|/usr/share/indicators|/usr/share/info|/usr/share/initramfs-tools|/usr/share/installation-report|/usr/share/intltool-debian|/usr/share/iptables|/usr/share/iso-codes|/usr/share/java|/usr/share/kde4|/usr/share/keyrings|/usr/share/language-selector|/usr/share/language-support|/usr/share/language-tools|/usr/share/libaudio2|/usr/share/libc-bin|/usr/share/libdrm|/usr/share/libexttextcat|/usr/share/libgnomekbd|/usr/share/libgphoto2|/usr/share/libgweather|/usr/share/liblangtag|/usr/share/liblouis|/usr/share/liblouisutdml|/usr/share/libparse-debianchangelog-perl|/usr/share/libreoffice|/usr/share/librevenge|/usr/share/libsensors4|/usr/share/libthai|/usr/share/libwacom|/usr/share/lightdm|/usr/share/lintian|/usr/share/linux-sound-base|/usr/share/locale|/usr/share/locale-langpack|/usr/share/locales|/usr/share/m2300w|/usr/share/man|/usr/share/man-db|/usr/share/maven-repo|/usr/share/media-player-info|/usr/share/menu|/usr/share/metainfo|/usr/share/mime|/usr/share/mime-info|/usr/share/mimelnk|/usr/share/misc|/usr/share/mobile-broadband-provider-info|/usr/share/mousetweaks|/usr/share/mozilla|/usr/share/mythes|/usr/share/nano|/usr/share/nautilus-share|/usr/share/netpbm|/usr/share/netplan|/usr/share/numpy3|/usr/share/openssh|/usr/share/orca|/usr/share/os-prober|/usr/share/p11-kit|/usr/share/package-data-downloads|/usr/share/PackageKit|/usr/share/pam|/usr/share/pam-configs|/usr/share/perl|/usr/share/perl5|/usr/share/perl-openssl-defaults|/usr/share/pixmaps|/usr/share/pkgconfig|/usr/share/plymouth|/usr/share/pnm2ppa|/usr/share/polkit-1|/usr/share/poppler|/usr/share/popularity-contest|/usr/share/ppd|/usr/share/ppp|/usr/share/publicsuffix|/usr/share/pulseaudio|/usr/share/pyshared|/usr/share/python|/usr/share/python3|/usr/share/python-apt|/usr/share/readline|/usr/share/remmina|/usr/share/rhythmbox|/usr/share/rsyslog|/usr/share/seahorse|/usr/share/secureboot|/usr/share/selinux|/usr/share/selinux-basics|/usr/share/sensible-utils|/usr/share/session-migration|/usr/share/simple-scan|/usr/share/snmp|/usr/share/software-properties|/usr/share/sounds|/usr/share/speech-dispatcher|/usr/share/ssl-cert|/usr/share/system-config-printer|/usr/share/systemd|/usr/share/systemtap|/usr/share/tabset|/usr/share/tasksel|/usr/share/terminfo|/usr/share/themes|/usr/share/thumbnailers|/usr/share/totem|/usr/share/transmission|/usr/share/ubuntu|/usr/share/ubuntu-drivers-common|/usr/share/ubuntu-release-upgrader|/usr/share/ubuntu-wayland|/usr/share/ufw|/usr/share/unattended-upgrades|/usr/share/unity|/usr/share/update-manager|/usr/share/update-notifier|/usr/share/upstart|/usr/share/usb-creator|/usr/share/usb_modeswitch|/usr/share/vim|/usr/share/wayland-sessions|/usr/share/X11|/usr/share/xdg-desktop-portal|/usr/share/xml|/usr/share/xsessions|/usr/share/yelp|/usr/share/yelp-xsl|/usr/share/zeitgeist|/usr/share/zenity|/usr/share/zoneinfo|/usr/share/zsh|/usr/src|/usr/src/linux-headers-4.15.0-213|/usr/src/linux-headers-4.15.0-213-generic|/var|/var/backups|/var/cache|/var/cache/apparmor|/var/cache/app-info|/var/cache/apt|/var/cache/cracklib|/var/cache/cups|/var/cache/debconf|/var/cache/dictionaries-common|/var/cache/fontconfig|/var/cache/gdm|/var/cache/ldconfig|/var/cache/PackageKit|/var/cache/snapd|/var/crash|/var/lib|/var/lib/AccountsService|/var/lib/acpi-support|/var/lib/alsa|/var/lib/app-info|/var/lib/apport|/var/lib/apt|/var/lib/aspell|/var/lib/bluetooth|/var/lib/boltd|/var/lib/command-not-found|/var/lib/dbus|/var/lib/dhcp|/var/lib/dictionaries-common|/var/lib/dpkg|/var/lib/emacsen-common|/var/lib/fwupd|/var/lib/ghostscript|/var/lib/grub|/var/lib/hp|/var/lib/initramfs-tools|/var/lib/ispell|/var/lib/libreoffice|/var/lib/libxml-sax-perl|/var/lib/locales|/var/lib/logrotate|/var/lib/man-db|/var/lib/misc|/var/lib/mlocate|/var/lib/NetworkManager|/var/lib/os-prober|/var/lib/PackageKit|/var/lib/pam|/var/lib/plymouth|/var/lib/polkit-1|/var/lib/private|/var/lib/python|/var/lib/selinux|/var/lib/sepolgen|/var/lib/snapd|/var/lib/snmp|/var/lib/sudo|/var/lib/systemd|/var/lib/ubuntu-advantage|/var/lib/ubuntu-drivers-common|/var/lib/ubuntu-release-upgrader|/var/lib/ucf|/var/lib/udisks2|/var/lib/unattended-upgrades|/var/lib/update-manager|/var/lib/update-notifier|/var/lib/upower|/var/lib/ureadahead|/var/lib/usb_modeswitch|/var/lib/usbutils|/var/lib/vim|/var/lib/whoopsie|/var/lib/xfonts|/var/lib/xkb|/var/local|/var/log|/var/log/apt|/var/log/audit|/var/log/cups|/var/log/dist-upgrade|/var/log/gdm3|/var/log/hp|/var/log/installer|/var/log/journal|/var/log/unattended-upgrades|/var/mail|/var/metrics|/var/opt|/var/snap|/var/spool|/var/spool/anacron|/var/spool/cron|/var/spool/cups|/var/spool/libreoffice|/var/tmp|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-bolt.service-n3lvBg|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-colord.service-HWph3q|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-ModemManager.service-92m3WO|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-resolved.service-ddH7Fb|/var/tmp/systemd-private-b5d6eaf9401f4e778415740bab8e891b-systemd-timedated.service-3kmtM2|[a-zA-Z]+[a-zA-Z0-9]* +\\*,[1;31m&[0m,"
2⤵
PID:2790

/bin/sed
sed -E "s%/sys|/proc|/dev|/dev/pts|/run|/|/sys/kernel/security|/dev/shm|/run/lock|/sys/fs/cgroup|/sys/fs/cgroup/unified|/sys/fs/cgroup/systemd|/sys/fs/pstore|/sys/fs/cgroup/freezer|/sys/fs/cgroup/net_cls,net_prio|/sys/fs/cgroup/cpu,cpuacct|/sys/fs/cgroup/hugetlb|/sys/fs/cgroup/perf_event|/sys/fs/cgroup/cpuset|/sys/fs/cgroup/memory|/sys/fs/cgroup/devices|/sys/fs/cgroup/pids|/sys/fs/cgroup/blkio|/sys/fs/cgroup/rdma|/proc/sys/fs/binfmt_misc|/sys/kernel/debug|/dev/mqueue|/dev/hugepages|/sys/kernel/config|/sys/fs/fuse/connections|/proc/sys/fs/binfmt_misc|/run/user/0|/run/user/0/gvfs|UUID=040d9bdb-513b-4ecf-adde-309e7b54b137%[1;34m&[0m%g"
2⤵
PID:2789

/bin/sed
sed -E "s,ImPoSSssSiBlEee,[1;31m&[0m,g"
2⤵
PID:2788

/bin/sed
sed -E "s,swap|/cdrom|/floppy|/dev/shm,[1;32m&[0m,g"
2⤵
PID:2787

/bin/grep
grep -Ev "\\W+\\#|^#"
2⤵
PID:2786

/bin/grep
grep -v "^#" /etc/fstab
2⤵
PID:2785

/bin/sed
sed -E "s,[pP][wW][dD]|[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY]|KRB5CCNAME,[1;31m&[0m,g"
2⤵
PID:2798

/bin/grep
grep -v "RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|PWD=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs|USEFUL_SOFTWARE|PSTORAGE_KUBERNETES"
2⤵
PID:2797

/usr/bin/env
env
2⤵
PID:2799

/bin/grep
grep signature
2⤵
PID:2803

/bin/dmesg
dmesg
2⤵
PID:2802

/bin/grep
grep -Ev "^\\-\\-\$"
2⤵
PID:2810

/bin/grep
grep -i "\\[CVE" -A 10
2⤵
PID:2809

/bin/bash
bash
2⤵
- Writes file to tmp directory
PID:2807

/bin/cat
cat
3⤵
PID:2814

/bin/cat
cat
3⤵
PID:2816

/bin/cat
cat
3⤵
PID:2818

/bin/cat
cat
3⤵
PID:2820

/bin/cat
cat
3⤵
PID:2822

/bin/cat
cat
3⤵
PID:2824

/bin/cat
cat
3⤵
PID:2826

/bin/cat
cat
3⤵
PID:2828

/bin/cat
cat
3⤵
PID:2830

/bin/cat
cat
3⤵
PID:2832

/bin/cat
cat
3⤵
PID:2834

/bin/cat
cat
3⤵
PID:2836

/bin/cat
cat
3⤵
PID:2838

/bin/cat
cat
3⤵
PID:2840

/bin/cat
cat
3⤵
PID:2842

/bin/cat
cat
3⤵
PID:2844

/bin/cat
cat
3⤵
PID:2846

/bin/cat
cat
3⤵
PID:2848

/bin/cat
cat
3⤵
PID:2850

/bin/cat
cat
3⤵
PID:2852

/bin/cat
cat
3⤵
PID:2854

/bin/cat
cat
3⤵
PID:2856

/bin/cat
cat
3⤵
PID:2858

/bin/cat
cat
3⤵
PID:2860

/bin/cat
cat
3⤵
PID:2862

/bin/cat
cat
3⤵
PID:2864

/bin/cat
cat
3⤵
PID:2866

/bin/cat
cat
3⤵
PID:2868

/bin/cat
cat
3⤵
PID:2870

/bin/cat
cat
3⤵
PID:2872

/bin/cat
cat
3⤵
PID:2874

/bin/cat
cat
3⤵
PID:2876

/bin/cat
cat
3⤵
PID:2878

/bin/cat
cat
3⤵
PID:2880

/bin/cat
cat
3⤵
PID:2882

/bin/cat
cat
3⤵
PID:2884

/bin/cat
cat
3⤵
PID:2886

/bin/cat
cat
3⤵
PID:2888

/bin/cat
cat
3⤵
PID:2890

/bin/cat
cat
3⤵
PID:2892

/bin/cat
cat
3⤵
PID:2894

/bin/cat
cat
3⤵
PID:2896

/bin/cat
cat
3⤵
PID:2898

/bin/cat
cat
3⤵
PID:2900

/bin/cat
cat
3⤵
PID:2902

/bin/cat
cat
3⤵
PID:2904

/bin/cat
cat
3⤵
PID:2906

/bin/cat
cat
3⤵
PID:2908

/bin/cat
cat
3⤵
PID:2910

/bin/cat
cat
3⤵
PID:2912

/bin/cat
cat
3⤵
PID:2914

/bin/cat
cat
3⤵
PID:2916

/bin/cat
cat
3⤵
PID:2918

/bin/cat
cat
3⤵
PID:2920

/bin/cat
cat
3⤵
PID:2922

/bin/cat
cat
3⤵
PID:2924

/bin/cat
cat
3⤵
PID:2926

/bin/cat
cat
3⤵
PID:2928

/bin/cat
cat
3⤵
PID:2930

/bin/cat
cat
3⤵
PID:2932

/bin/cat
cat
3⤵
PID:2934

/bin/cat
cat
3⤵
PID:2936

/bin/cat
cat
3⤵
PID:2938

/bin/cat
cat
3⤵
PID:2940

/bin/cat
cat
3⤵
PID:2942

/bin/cat
cat
3⤵
PID:2944

/bin/cat
cat
3⤵
PID:2946

/bin/cat
cat
3⤵
PID:2948

/bin/cat
cat
3⤵
PID:2950

/bin/cat
cat
3⤵
PID:2952

/bin/cat
cat
3⤵
PID:2954

/bin/cat
cat
3⤵
PID:2956

/bin/cat
cat
3⤵
PID:2958

/bin/cat
cat
3⤵
PID:2960

/bin/cat
cat
3⤵
PID:2962

/bin/cat
cat
3⤵
PID:2964

/bin/cat
cat
3⤵
PID:2966

/bin/cat
cat
3⤵
PID:2968

/bin/cat
cat
3⤵
PID:2970

/bin/cat
cat
3⤵
PID:2972

/bin/cat
cat
3⤵
PID:2974

/bin/cat
cat
3⤵
PID:2976

/bin/cat
cat
3⤵
PID:2978

/bin/cat
cat
3⤵
PID:2980

/bin/cat
cat
3⤵
PID:2982

/bin/cat
cat
3⤵
PID:2984

/bin/cat
cat
3⤵
PID:2986

/bin/cat
cat
3⤵
PID:2988

/bin/cat
cat
3⤵
PID:2990

/bin/cat
cat
3⤵
PID:2992

/bin/cat
cat
3⤵
PID:2994

/bin/cat
cat
3⤵
PID:2996

/bin/cat
cat
3⤵
PID:2998

/bin/cat
cat
3⤵
PID:3000

/bin/cat
cat
3⤵
PID:3002

/bin/cat
cat
3⤵
PID:3004

/bin/cat
cat
3⤵
PID:3006

/bin/cat
cat
3⤵
PID:3008

/bin/cat
cat
3⤵
PID:3010

/bin/cat
cat
3⤵
PID:3012

/bin/cat
cat
3⤵
PID:3014

/bin/cat
cat
3⤵
PID:3016

/bin/cat
cat
3⤵
PID:3018

/bin/cat
cat
3⤵
PID:3020

/bin/cat
cat
3⤵
PID:3022

/bin/cat
cat
3⤵
PID:3024

/bin/cat
cat
3⤵
PID:3026

/bin/cat
cat
3⤵
PID:3028

/bin/cat
cat
3⤵
PID:3030

/bin/cat
cat
3⤵
PID:3032

/bin/cat
cat
3⤵
PID:3034

/bin/cat
cat
3⤵
PID:3036

/bin/cat
cat
3⤵
PID:3038

/bin/cat
cat
3⤵
PID:3040

/bin/cat
cat
3⤵
PID:3042

/bin/cat
cat
3⤵
PID:3044

/bin/cat
cat
3⤵
PID:3046

/bin/cat
cat
3⤵
PID:3048

/bin/cat
cat
3⤵
PID:3050

/bin/cat
cat
3⤵
PID:3052

/usr/bin/base64
base64 -d
2⤵
PID:2806

/bin/sed
sed "s,\\[[0-9;]*[a-zA-Z],,g"
2⤵
PID:2808

/bin/sed
sed -E "s,\\[CVE-[0-9]+-[0-9]+\\].*,[1;31m&[0m,g"
2⤵
PID:2811

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1497

Credential Access

Discovery

System Information Discovery

3

T1082

System Network Configuration Discovery

1

T1016

System Network Connections Discovery

1

T1049

Virtualization/Sandbox Evasion

2

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/tmp/sh-thd.1JBk5u
Filesize
270B

MD5
ee10762d37537e1887f4a35f45c0adaf

SHA1
0938fcc9929f63038efbb55fa0bb1cf3eccd758e

SHA256
211ec73c1e0d03f0f75e457962a94ddade882ca4f5b0085205b38ab2b14eaa00

SHA512
fdb212c8f4ab247c885fb0dde28b6c3342259c4f652d0e076eec27052fa3bf7a1bb56b412edccd89f8efcb827e78affa8c7dad9ba2ea52a0d976f5e9f1417af7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads