Analysis
- max time kernel
115s - max time network
131s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260126-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
06/05/2026, 12:21
Static task
static1
Behavioral task
behavioral1
Sample
linpeas.sh
Resource
ubuntu1804-amd64-20260126-en
Behavioral task
behavioral2
Sample
linpeas.sh
Resource
debian9-armhf-20260126-en
Behavioral task
behavioral3
Sample
linpeas.sh
Resource
debian9-mipsbe-20250619-en
Behavioral task
behavioral4
Sample
linpeas.sh
Resource
debian9-mipsel-20260126-en
General
- Target linpeas.sh
- Size 1.0MB
- Sample260506-pjdfmaev7p
- SHA256 6fb997878c8e4a4706f8b7884151ebbcabe52c774fef8314b1f8f441a7acf9a7
- MD5 5a6654cf44878a09f7dc509a46ef3293
- SHA1 553142c7748583f61980e06c17710c424c80cdb2
- SHA512 ddc97e75a42338930842b7f9512e12146c6642bd98663459395e9839206dd1067ece66c5f455f2822dd6f07b2a1f2b72492c391c9eedca3c8fc47e68dcf92175
- SSDEEP 6144:hYcgthotOWtO0tOmtOEtOCtO7tOKtOvtOGtOFtOutOKtOltODtOOtOxCEe9Hpg09:jXKihTa1CG3GoLZtjYDxXmrlZ
- TLSH T14125FA5C740CEFB25025C97C1C951F7A19A3AF0F2665182870ECB61C7FDCCAD60B66AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Creates Raw socket 7 IoCs
Creates a socket that captures raw packets at the device level
pid Process 25345 Process not Found 25345 Process not Found 25345 Process not Found 25360 Process not Found 25360 Process not Found 25365 Process not Found 25365 Process not Found - OS Credential Dumping 1 TTPs 1 IoCs
Adversaries may attempt to dump credentials to use it in password cracking.
description ioc Process File opened for reading /etc/shadow Process not Found - Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 64 IoCs
Abuse sudo or cached sudo credentials to execute code.
pid Process 7130 Process not Found 7132 Process not Found 7136 Process not Found 1745 find 17606 Process not Found 17662 Process not Found 29299 Process not Found 1645 Process not Found 7098 Process not Found 7120 Process not Found 7134 Process not Found 21079 Process not Found 7085 Process not Found 7142 Process not Found 7155 Process not Found 17900 Process not Found 26540 Process not Found 31430 Process not Found 2867 Process not Found 7119 Process not Found 7125 Process not Found 7134 Process not Found 7146 Process not Found 26584 Process not Found 3880 Process not Found 7142 Process not Found 7154 Process not Found 7156 Process not Found 17119 Process not Found 17956 Process not Found 26631 Process not Found 31903 Process not Found 1713 Process not Found 7137 Process not Found 25570 Process not Found 7118 Process not Found 7144 Process not Found 7100 Process not Found 7108 Process not Found 7119 Process not Found 7130 Process not Found 7137 Process not Found 26507 Process not Found 7091 Process not Found 7107 Process not Found 7108 Process not Found 3242 Process not Found 7105 Process not Found 7112 Process not Found 7148 Process not Found 17970 Process not Found 7094 Process not Found 7112 Process not Found 7119 Process not Found 7123 Process not Found 7131 Process not Found 29369 Process not Found 7116 Process not Found 7095 Process not Found 7119 Process not Found 7120 Process not Found 7120 Process not Found 7137 Process not Found 7141 Process not Found - Reads AppArmor ptrace settings 1 TTPs 5 IoCs
Discovery of allowed ptrace capabilities by AppArmor.
description ioc Process File opened for reading /sys/kernel/security/apparmor/features/ptrace Process not Found File opened for reading /sys/kernel/security/apparmor/features/ptrace Process not Found File opened for reading /sys/kernel/security/apparmor/features/ptrace Process not Found File opened for reading /sys/kernel/security/apparmor/features/ptrace find File opened for reading /sys/kernel/security/apparmor/features/ptrace Process not Found - Checks hardware identifiers (DMI) 1 TTPs 4 IoCs
Checks DMI information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /sys/class/dmi/id/product_name systemd-detect-virt File opened for reading /sys/class/dmi/id/sys_vendor systemd-detect-virt File opened for reading /sys/class/dmi/id/board_vendor systemd-detect-virt File opened for reading /sys/class/dmi/id/bios_vendor systemd-detect-virt - Checks mountinfo of local process 1 TTPs 64 IoCs
Checks mountinfo of running processes which indicate if it is running in chroot jail.
description ioc Process File opened for reading /proc/1176/mountinfo Process not Found File opened for reading /proc/1266/mountinfo Process not Found File opened for reading /proc/544/mountinfo Process not Found File opened for reading /proc/640/mountinfo Process not Found File opened for reading /proc/655/mountinfo Process not Found File opened for reading /proc/1047/mountinfo Process not Found File opened for reading /proc/1093/mountinfo Process not Found File opened for reading /proc/1301/mountinfo Process not Found File opened for reading /proc/414/mountinfo Process not Found File opened for reading /proc/607/mountinfo Process not Found File opened for reading /proc/658/mountinfo Process not Found File opened for reading /proc/724/mountinfo Process not Found File opened for reading /proc/924/mountinfo Process not Found File opened for reading /proc/949/mountinfo Process not Found File opened for reading /proc/969/mountinfo Process not Found File opened for reading /proc/970/mountinfo Process not Found File opened for reading /proc/326/mountinfo Process not Found File opened for reading /proc/902/mountinfo Process not Found File opened for reading /proc/986/mountinfo Process not Found File opened for reading /proc/1034/mountinfo Process not Found File opened for reading /proc/1048/mountinfo Process not Found File opened for reading /proc/1052/mountinfo Process not Found File opened for reading /proc/1067/mountinfo Process not Found File opened for reading /proc/1087/mountinfo Process not Found File opened for reading /proc/416/mountinfo Process not Found File opened for reading /proc/454/mountinfo Process not Found File opened for reading /proc/501/mountinfo Process not Found File opened for reading /proc/691/mountinfo Process not Found File opened for reading /proc/990/mountinfo Process not Found File opened for reading /proc/1026/mountinfo Process not Found File opened for reading /proc/1030/mountinfo Process not Found File opened for reading /proc/1098/mountinfo Process not Found File opened for reading /proc/483/mountinfo Process not Found File opened for reading /proc/486/mountinfo Process not Found File opened for reading /proc/731/mountinfo Process not Found File opened for reading /proc/1018/mountinfo Process not Found File opened for reading /proc/1069/mountinfo Process not Found File opened for reading /proc/1325/mountinfo Process not Found File opened for reading /proc/1348/mountinfo Process not Found File opened for reading /proc/1518/mountinfo Process not Found File opened for reading /proc/437/mountinfo Process not Found File opened for reading /proc/473/mountinfo Process not Found File opened for reading /proc/552/mountinfo Process not Found File opened for reading /proc/646/mountinfo Process not Found File opened for reading /proc/900/mountinfo Process not Found File opened for reading /proc/962/mountinfo Process not Found File opened for reading /proc/1043/mountinfo Process not Found File opened for reading /proc/1195/mountinfo Process not Found File opened for reading /proc/270/mountinfo Process not Found File opened for reading /proc/461/mountinfo Process not Found File opened for reading /proc/999/mountinfo Process not Found File opened for reading /proc/1138/mountinfo Process not Found File opened for reading /proc/1193/mountinfo Process not Found File opened for reading /proc/1550/mountinfo Process not Found File opened for reading /proc/477/mountinfo Process not Found File opened for reading /proc/606/mountinfo Process not Found File opened for reading /proc/929/mountinfo Process not Found File opened for reading /proc/1055/mountinfo Process not Found File opened for reading /proc/1213/mountinfo Process not Found File opened for reading /proc/322/mountinfo Process not Found File opened for reading /proc/1159/mountinfo Process not Found File opened for reading /proc/1258/mountinfo Process not Found File opened for reading /proc/1265/mountinfo Process not Found File opened for reading /proc/494/mountinfo Process not Found - Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp Process not Found - Enumerates running processes
Discovers information about currently running processes on the system
- Reads data from the clipboard 64 IoCs
Attempts to collect data stored in the clipboard using xclip tool.
pid Process 25672 Process not Found 25539 Process not Found 25602 Process not Found 25637 Process not Found 25827 Process not Found 26222 Process not Found 2382 Process not Found 25535 Process not Found 25727 Process not Found 26427 Process not Found 31245 Process not Found 31653 Process not Found 25692 Process not Found 25797 Process not Found 26012 Process not Found 26117 Process not Found 26152 Process not Found 26257 Process not Found 26337 Process not Found 26397 Process not Found 25582 Process not Found 25682 Process not Found 25942 Process not Found 25952 Process not Found 26007 Process not Found 26022 Process not Found 27789 Process not Found 28194 Process not Found 26142 Process not Found 32293 Process not Found 25677 Process not Found 25597 Process not Found 25632 Process not Found 25717 Process not Found 25852 Process not Found 25992 Process not Found 26092 Process not Found 26207 Process not Found 25687 Process not Found 25737 Process not Found 25842 Process not Found 25847 Process not Found 26067 Process not Found 26182 Process not Found 26212 Process not Found 26332 Process not Found 25917 Process not Found 26057 Process not Found 26087 Process not Found 26162 Process not Found 26267 Process not Found 26277 Process not Found 26387 Process not Found 29961 Process not Found 25817 Process not Found 25518 Process not Found 25762 Process not Found 25957 Process not Found 26002 Process not Found 26407 Process not Found 26417 Process not Found 26453 Process not Found 25857 Process not Found 25937 Process not Found - Reads hardware information 1 TTPs 6 IoCs
Accesses system info like serial numbers, manufacturer names etc.
description ioc Process File opened for reading /sys/devices/virtual/dmi/id/power Process not Found File opened for reading /sys/devices/virtual/dmi/id/power Process not Found File opened for reading /sys/devices/virtual/dmi/id/power find File opened for reading /sys/class/dmi/id/product_version systemd-detect-virt File opened for reading /sys/devices/virtual/dmi/id/power Process not Found File opened for reading /sys/devices/virtual/dmi/id/power Process not Found - Reads network interface configuration 2 TTPs 60 IoCs
Fetches information about one or more active network interfaces.
description ioc Process File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues find File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/statistics Process not Found File opened for reading /sys/devices/virtual/net/lo/statistics Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues Process not Found File opened for reading /sys/devices/virtual/net/lo/statistics Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics Process not Found File opened for reading /sys/devices/virtual/net/lo/power Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics Process not Found File opened for reading /sys/devices/virtual/net/lo/queues Process not Found File opened for reading /sys/devices/virtual/net/lo/queues Process not Found File opened for reading /sys/devices/virtual/net/lo/queues Process not Found File opened for reading /sys/devices/virtual/net/lo/power find File opened for reading /sys/devices/virtual/net/lo/queues find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics Process not Found File opened for reading /sys/devices/virtual/net/lo/statistics Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits find File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/power Process not Found File opened for reading /sys/devices/virtual/net/lo/queues Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/virtual/net/lo/power Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/statistics find File opened for reading /sys/devices/virtual/net/lo/power Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 find File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 Process not Found - Uses Polkit to run commands 2 IoCs
Uses Polkit pkexec as a proxy to execute commands, possibly to bypass security restrictions.
pid Process 26450 Process not Found 26452 Process not Found - Virtualization/Sandbox Evasion: Time Based Evasion 1 TTPs 1 IoCs
Adversaries may detect and evade virtualized environments and sandboxes.
pid Process 2829 uptime - Reads process memory 1 TTPs 64 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
description ioc Process File opened for reading /proc/31/maps Process not Found File opened for reading /proc/178/maps Process not Found File opened for reading /proc/454/maps Process not Found File opened for reading /proc/900/maps Process not Found File opened for reading /proc/171/maps Process not Found File opened for reading /proc/172/maps Process not Found File opened for reading /proc/724/maps Process not Found File opened for reading /proc/929/maps Process not Found File opened for reading /proc/322/maps Process not Found File opened for reading /proc/486/maps Process not Found File opened for reading /proc/115/maps Process not Found File opened for reading /proc/494/maps Process not Found File opened for reading /proc/658/maps Process not Found File opened for reading /proc/477/maps Process not Found File opened for reading /proc/655/maps Process not Found File opened for reading /proc/607/maps Process not Found File opened for reading /proc/907/maps Process not Found File opened for reading /proc/999/maps Process not Found File opened for reading /proc/2/maps Process not Found File opened for reading /proc/4/maps Process not Found File opened for reading /proc/13/maps Process not Found File opened for reading /proc/79/maps Process not Found File opened for reading /proc/82/maps Process not Found File opened for reading /proc/137/maps Process not Found File opened for reading /proc/437/maps Process not Found File opened for reading /proc/494/maps Process not Found File opened for reading /proc/924/maps Process not Found File opened for reading /proc/976/maps Process not Found File opened for reading /proc/660/maps Process not Found File opened for reading /proc/943/maps Process not Found File opened for reading /proc/414/maps Process not Found File opened for reading /proc/437/maps Process not Found File opened for reading /proc/525/maps Process not Found File opened for reading /proc/658/maps Process not Found File opened for reading /proc/970/maps Process not Found File opened for reading /proc/990/maps Process not Found File opened for reading /proc/30/maps Process not Found File opened for reading /proc/166/maps Process not Found File opened for reading /proc/5/maps Process not Found File opened for reading /proc/7/maps Process not Found File opened for reading /proc/14/maps Process not Found File opened for reading /proc/168/maps Process not Found File opened for reading /proc/575/maps Process not Found File opened for reading /proc/962/maps Process not Found File opened for reading /proc/969/maps Process not Found File opened for reading /proc/163/maps Process not Found File opened for reading /proc/173/maps Process not Found File opened for reading /proc/414/maps Process not Found File opened for reading /proc/655/maps Process not Found File opened for reading /proc/999/maps Process not Found File opened for reading /proc/8/maps Process not Found File opened for reading /proc/525/maps Process not Found File opened for reading /proc/562/maps Process not Found File opened for reading /proc/606/maps Process not Found File opened for reading /proc/24/maps Process not Found File opened for reading /proc/32/maps Process not Found File opened for reading /proc/165/maps Process not Found File opened for reading /proc/640/maps Process not Found File opened for reading /proc/731/maps Process not Found File opened for reading /proc/902/maps Process not Found File opened for reading /proc/479/maps Process not Found File opened for reading /proc/84/maps Process not Found File opened for reading /proc/175/maps Process not Found File opened for reading /proc/473/maps Process not Found - Checks CPU configuration 1 TTPs 3 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo grep File opened for reading /proc/cpuinfo grep File opened for reading /proc/cpuinfo systemd-detect-virt - Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/power Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/smt find File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index0 Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/power Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/power Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0 find File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/topology Process not Found File opened for reading /sys/devices/system/cpu/vulnerabilities Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpufreq Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index0 find File opened for reading /sys/devices/system/cpu/cpu0/cache/index1/power find File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/smt Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/power Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index1 Process not Found File opened for reading /sys/devices/system/cpu/cpufreq Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/power find File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index1 Process not Found File opened for reading /sys/devices/system/cpu/power Process not Found File opened for reading /sys/devices/system/cpu/cpu0/power Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index0 Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found - Reads system network configuration 1 TTPs 20 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/udplite6 Process not Found File opened for reading /proc/net/udplite Process not Found File opened for reading /proc/net/sctp/assocs Process not Found File opened for reading /proc/net/sctp/eps Process not Found File opened for reading /proc/net/icmp Process not Found File opened for reading /proc/net/dev Process not Found File opened for reading /proc/net/netlink Process not Found File opened for reading /proc/net/sockstat6 Process not Found File opened for reading /proc/net/tcp Process not Found File opened for reading /proc/net/udp Process not Found File opened for reading /proc/net/dev Process not Found File opened for reading /proc/net/tcp6 Process not Found File opened for reading /proc/net/sockstat Process not Found File opened for reading /proc/net/ax25 Process not Found File opened for reading /proc/net/ipx Process not Found File opened for reading /proc/net/raw Process not Found File opened for reading /proc/net/packet Process not Found File opened for reading /proc/net/unix Process not Found File opened for reading /proc/net/raw6 Process not Found File opened for reading /proc/net/udp6 Process not Found -
pid Process 2944 python3 2944 python3 2944 python3 2944 python3 - Enumerates kernel/hardware configuration 1 TTPs 64 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/debug/tracing/events/xen/xen_mc_batch Process not Found File opened for reading /sys/bus/usb/drivers/hub Process not Found File opened for reading /sys/kernel/debug/block/loop0/hctx0 Process not Found File opened for reading /sys/module/loop Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_sched_rr_get_interval Process not Found File opened for reading /sys/bus/nd/drivers/nd_region Process not Found File opened for reading /sys/kernel/debug/tracing/events/block/block_split Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_unlinkat Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_clock_getres Process not Found File opened for reading /sys/bus/nd/drivers/nd_bus Process not Found File opened for reading /sys/bus/clocksource/drivers Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_setresuid Process not Found File opened for reading /sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/DADY0002:00/power Process not Found File opened for reading /sys/bus/pci/drivers/asiliantfb Process not Found File opened for reading /sys/kernel/slab/:0000400/cgroup Process not Found File opened for reading /sys/module/ahci/holders Process not Found File opened for reading /sys/module/watchdog Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:04.0/ata3/host2/scsi_host find File opened for reading /sys/kernel/debug/tracing/events/fs_dax/dax_pmd_load_hole_fallback Process not Found File opened for reading /sys/module/ttm Process not Found File opened for reading /sys/kernel/security/apparmor/features/signal Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_bpf Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:04.0/ata3/host2/power find File opened for reading /sys/bus/rapidio/drivers find File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_setpgid Process not Found File opened for reading /sys/fs/cgroup/pids/system.slice Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_mincore Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_msgctl find File opened for reading /sys/kernel/irq/28 Process not Found File opened for reading /sys/devices/platform/i8042 Process not Found File opened for reading /sys/kernel/debug/tracing/events/thermal/thermal_power_devfreq_get_power Process not Found File opened for reading /sys/kernel/debug/tracing/events/irq_vectors/spurious_apic_exit Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_mq_open find File opened for reading /sys/devices/virtual/tty/tty61/power find File opened for reading /sys/module/nfnetlink/notes find File opened for reading /sys/kernel/debug/tracing/events/power/cpu_idle Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:01.1/ata2/link2/dev2.1/ata_device Process not Found File opened for reading /sys/kernel/debug/tracing/events/xhci-hcd/xhci_urb_dequeue find File opened for reading /sys/kernel/debug/tracing/events/vmscan/mm_vmscan_lru_shrink_inactive find File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_copy_file_range Process not Found File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_load_inode_bitmap Process not Found File opened for reading /sys/module/sr_mod/parameters Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_accept Process not Found File opened for reading /sys/fs/cgroup/pids/user.slice/user-0.slice/[email protected]/gvfs-gphoto2-volume-monitor.service find File opened for reading /sys/bus/pci/slots/11 Process not Found File opened for reading /sys/module/joydev/sections Process not Found File opened for reading /sys/module/sg Process not Found File opened for reading /sys/class/tpm Process not Found File opened for reading /sys/devices/virtual/block/loop3/queue Process not Found File opened for reading /sys/bus/hid Process not Found File opened for reading /sys/module/acpi find File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_pkey_free Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_readlink Process not Found File opened for reading /sys/bus/hid/drivers Process not Found File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_ext_convert_to_initialized_enter Process not Found File opened for reading /sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1e find File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_timerfd_settime Process not Found File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_getfsmap_low_key Process not Found File opened for reading /sys/kernel/debug/tracing/events/compaction/mm_compaction_defer_reset Process not Found File opened for reading /sys/devices/virtual/tty/tty44/power Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_mq_open Process not Found File opened for reading /sys/bus/mmc/devices Process not Found File opened for reading /sys/module/rcupdate Process not Found File opened for reading /sys/module/nf_defrag_ipv4 Process not Found - Process Discovery 1 TTPs 5 IoCs
Adversaries may try to discover information about running processes.
pid Process 27636 Process not Found 25255 Process not Found 25332 Process not Found 25370 Process not Found 26589 Process not Found -
description ioc Process File opened for reading /proc/35/stat Process not Found File opened for reading /proc/1265/cmdline Process not Found File opened for reading /proc/943/task/959/attr Process not Found File opened for reading /proc/1176/attr/apparmor Process not Found File opened for reading /proc/self/stat Process not Found File opened for reading /proc/461/stat Process not Found File opened for reading /proc/1052/status Process not Found File opened for reading /proc/1052/task/1052/attr/apparmor Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/25580/status Process not Found File opened for reading /proc/990/stat Process not Found File opened for reading /proc/477/stat Process not Found File opened for reading /proc/1159/fdinfo Process not Found File opened for reading /proc/1213/net/dev_snmp6 Process not Found File opened for reading /proc/1515/attr Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/1/stat Process not Found File opened for reading /proc/23538/stat Process not Found File opened for reading /proc/999/task/1004/attr/apparmor Process not Found File opened for reading /proc/1026/maps Process not Found File opened for reading /proc/7/status Process not Found File opened for reading /proc/167/status Process not Found File opened for reading /proc/204/status Process not Found File opened for reading /proc/454/stat Process not Found File opened for reading /proc/1043/stat Process not Found File opened for reading /proc/907/task/907/fdinfo Process not Found File opened for reading /proc/1/cmdline Process not Found File opened for reading /proc/1091/status Process not Found File opened for reading /proc/969/stat Process not Found File opened for reading /proc/463/status Process not Found File opened for reading /proc/1069/stat Process not Found File opened for reading /proc/1030/stat Process not Found File opened for reading /proc/1048/stat Process not Found File opened for reading /proc/463/status Process not Found File opened for reading /proc/1043/stat Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/999/stat Process not Found File opened for reading /proc/657/stat Process not Found File opened for reading /proc/970/status Process not Found File opened for reading /proc/168/net/dev_snmp6 Process not Found File opened for reading /proc/437/task/447/attr/apparmor Process not Found File opened for reading /proc/501/net Process not Found File opened for reading /proc/203/stat Process not Found File opened for reading /proc/uptime Process not Found File opened for reading /proc/25/stat Process not Found File opened for reading /proc/25/stat Process not Found File opened for reading /proc/14/status Process not Found File opened for reading /proc/27910/attr/smack Process not Found File opened for reading /proc/1092/task/1116/net/netfilter Process not Found File opened for reading /proc/1486/task/1489/fdinfo Process not Found File opened for reading /proc/902/fd Process not Found File opened for reading /proc/479/status Process not Found File opened for reading /proc/1151/status Process not Found File opened for reading /proc/607/status Process not Found File opened for reading /proc/1193/task/1254/net/netfilter Process not Found File opened for reading /proc/606/task/606/attr/apparmor Process not Found File opened for reading /proc/1048/task/1048 Process not Found File opened for reading /proc/1380/task/1387/net/stat Process not Found File opened for reading /proc/924/status ps File opened for reading /proc/filesystems Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/164/stat Process not Found File opened for reading /proc/1034/stat Process not Found - Remote System Discovery 1 TTPs 1 IoCs
Adversaries may try to discover information about remote systems in a network.
pid Process 25458 Process not Found - System Network Configuration Discovery 1 TTPs 64 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 24111 Process not Found 24126 Process not Found 21571 Process not Found 30869 Process not Found 23098 Process not Found 23523 Process not Found 23930 Process not Found 24011 Process not Found 24108 Process not Found 24129 Process not Found 21881 Process not Found 1753 Process not Found 23361 Process not Found 23892 Process not Found 24133 Process not Found 26674 Process not Found 29008 Process not Found 7052 Process not Found 23929 Process not Found 31195 Process not Found 523 Process not Found 6218 Process not Found 23233 Process not Found 23269 Process not Found 31911 Process not Found 1655 Process not Found 7528 Process not Found 23624 Process not Found 23910 Process not Found 32762 Process not Found 2582 Process not Found 7053 Process not Found 7171 Process not Found 23143 Process not Found 23307 Process not Found 23867 Process not Found 24106 Process not Found 7054 Process not Found 7055 Process not Found 7059 Process not Found 23109 Process not Found 23161 Process not Found 23388 Process not Found 23415 Process not Found 31140 Process not Found 32244 Process not Found 7171 Process not Found 7171 Process not Found 23136 Process not Found 24132 Process not Found 31853 Process not Found 4504 Process not Found 7050 Process not Found 23298 Process not Found 19870 Process not Found 20463 Process not Found 23336 Process not Found 28910 Process not Found 5320 Process not Found 23757 Process not Found 32493 Process not Found 7050 Process not Found 11090 Process not Found 23714 Process not Found - Writes file to tmp directory 25 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/cf31-check-t4c0b1i4/sentinel python3 File opened for modification /tmp/fileutl.message.9iGwmD Process not Found File opened for modification /tmp/fileutl.message.hD46Z7 Process not Found File opened for modification /tmp/fileutl.message.hmCFZ6 Process not Found File opened for modification /tmp/fileutl.message.nXfc1o Process not Found File opened for modification /tmp/fileutl.message.1ACTOG Process not Found File opened for modification /tmp/cf31-probe-1518.py linpeas.sh File opened for modification /tmp/irbhblyb python3 File opened for modification /tmp/fileutl.message.dObi3n Process not Found File opened for modification /tmp/fileutl.message.N0V8FS Process not Found File opened for modification /tmp/fileutl.message.hiTOom Process not Found File opened for modification /tmp/fileutl.message.x3HgeR Process not Found File opened for modification /tmp/fileutl.message.fQ6EK6 Process not Found File opened for modification /tmp/fileutl.message.ZxM3k2 Process not Found File opened for modification /tmp/fileutl.message.nprzln Process not Found File opened for modification /tmp/fileutl.message.7tXi4R Process not Found File opened for modification /tmp/fileutl.message.tGCScC Process not Found File opened for modification /tmp/fileutl.message.bcs6AR Process not Found File opened for modification /tmp/fileutl.message.hY2lOB Process not Found File opened for modification /tmp/fileutl.message.jONlFI Process not Found File opened for modification /tmp/fileutl.message.V05cxm Process not Found File opened for modification /tmp/fileutl.message.1POTK8 Process not Found File opened for modification /tmp/fileutl.message.LtIuHC Process not Found File opened for modification /tmp/fileutl.message.LHltr7 Process not Found File opened for modification /tmp/fileutl.message.9eYZOm Process not Found -
pid Process 2819 dpkg-query 25237 Process not Found 25237 Process not Found 26745 Process not Found 26745 Process not Found 27727 Process not Found 27727 Process not Found 2819 dpkg
Processes
-
/tmp/linpeas.sh/tmp/linpeas.sh1⤵
- Writes file to tmp directory
PID:1518 -
/usr/bin/id/usr/bin/id -u2⤵PID:1520
-
-
/bin/grepgrep -q Darwin2⤵PID:1523
-
-
/bin/unameuname2⤵PID:1522
-
-
/bin/grepgrep -q Darwin2⤵PID:1525
-
-
/usr/bin/uname/usr/bin/uname2⤵PID:1524
-
-
/usr/bin/trtr -d "\\n"2⤵PID:1528
-
-
/bin/grepgrep -c processor /proc/cpuinfo2⤵
- Checks CPU configuration
PID:1529
-
-
/bin/sedsed -E s/o/a/2⤵PID:1531
-
-
/bin/bash/bin/bash -c "printf ' \\e[38;2;26;43;21mâ–„\\e[38;2;58;91;50mâ–„\\e[48;2;116;117;116m\\e[38;2;68;119;56mâ–„\\e[48;2;98;98;98m\\e[38;2;86;143;70mâ–„\\e[48;2;98;98;98m\\e[38;2;100;153;87mâ–„\\e[48;2;63;65;63m\\e[38;2;102;164;86mâ–„\\e[48;2;46;49;44m\\e[38;2;98;168;79mâ–„\\e[48;2;43;45;43m\\e[38;2;91;155;75mâ–„\\e[48;2;61;62;61m\\e[38;2;78;137;63mâ–„\\e[48;2;102;101;102m\\e[38;2;64;112;52mâ–„\\e[0m\\e[38;2;38;67;32mâ–„\\e[38;2;20;35;16mâ–„\\e[38;2;10;20;8mâ–„\\e[38;2;15;21;13mâ–„\\e[0m \\e[38;2;49;80;41mâ–„\\e[38;2;73;133;59mâ–„\\e[48;2;20;21;20m\\e[38;2;91;163;72mâ–„\\e[48;2;14;27;12m\\e[38;2;96;174;76mâ–„\\e[48;2;51;92;41m\\e[38;2;98;177;78mâ–„\\e[48;2;86;155;68m\\e[38;2;98;177;78mâ–„\\e[48;2;96;173;77m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;97;175;76m\\e[38;2;98;177;78mâ–„\\e[48;2;93;168;74m\\e[38;2;98;177;78mâ–„\\e[48;2;99;163;83m\\e[38;2;97;177;77mâ–„\\e[48;2;99;151;86m\\e[38;2;98;177;78mâ–„\\e[48;2;35;57;29m\\e[38;2;98;176;78mâ–„\\e[48;2;19;21;19m\\e[38;2;94;169;75mâ–„\\e[0m\\e[38;2;70;125;56mâ–„\\e[0m \\e[38;2;42;65;36mâ–„\\e[38;2;62;106;52mâ–„\\e[48;2;94;95;94m\\e[38;2;86;152;70mâ–„\\e[48;2;57;72;53m\\e[38;2;96;174;77mâ–„\\e[48;2;57;96;47m\\e[38;2;98;177;78mâ–„\\e[48;2;78;136;62m\\e[38;2;98;177;78mâ–„\\e[48;2;95;167;76m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;77mâ–„\\e[48;2;98;177;78m\\e[38;2;91;165;72mâ–„\\e[48;2;98;177;78m\\e[38;2;76;137;60mâ–„\\e[48;2;98;177;78m\\e[38;2;54;97;42mâ–„\\e[48;2;99;179;79m\\e[38;2;39;71;30mâ–„\\e[48;2;100;181;79m\\e[38;2;35;60;30mâ–„\\e[48;2;101;181;81m\\e[38;2;42;66;37mâ–„\\e[48;2;100;177;80m\\e[38;2;52;73;45mâ–„\\e[48;2;95;175;76m\\e[38;2;47;75;40mâ–„\\e[48;2;94;178;73m\\e[38;2;41;75;33mâ–„\\e[48;2;98;179;78m\\e[38;2;42;73;34mâ–„\\e[48;2;99;180;79m\\e[38;2;40;70;33mâ–„\\e[48;2;99;179;78m\\e[38;2;44;75;36mâ–„\\e[48;2;97;177;77m\\e[38;2;55;93;46mâ–„\\e[48;2;97;176;77m\\e[38;2;65;113;52mâ–„\\e[48;2;98;177;78m\\e[38;2;79;141;63mâ–„\\e[48;2;98;177;78m\\e[38;2;93;166;75mâ–„\\e[48;2;98;177;78m\\e[38;2;99;177;79mâ–„\\e[48;2;98;177;78m\\e[38;2;97;177;78mâ–„\\e[48;2;98;177;78m\\e[38;2;97;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;94;170;75m\\e[38;2;98;177;78mâ–„\\e[48;2;71;128;56m\\e[38;2;98;177;78mâ–„\\e[48;2;34;56;28m\\e[38;2;97;175;77mâ–„\\e[48;2;64;66;64m\\e[38;2;78;140;62mâ–„\\e[0m \\e[48;2;66;112;54m\\e[38;2;98;177;78mâ–„\\e[48;2;80;133;66m\\e[38;2;98;177;78mâ–„\\e[48;2;95;162;76m\\e[38;2;98;177;78mâ–„\\e[48;2;96;171;76m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;98;177;78m\\e[38;2;96;174;76mâ–„\\e[48;2;98;177;78m\\e[38;2;74;130;59mâ–„\\e[48;2;98;176;78m\\e[38;2;32;49;27mâ–„\\e[48;2;95;166;76m\\e[38;2;18;29;15mâ–„\\e[48;2;73;126;59m\\e[38;2;65;113;53mâ–„\\e[48;2;40;62;34m\\e[38;2;107;209;83mâ–„\\e[48;2;23;43;19m\\e[38;2;77;220;42mâ–„\\e[48;2;32;72;22m\\e[38;2;72;218;36mâ–„\\e[48;2;55;155;30m\\e[38;2;73;217;37mâ–„\\e[48;2;71;203;38m\\e[38;2;73;217;37mâ–„\\e[48;2;79;212;46m\\e[38;2;73;218;37mâ–„\\e[48;2;81;216;48m\\e[38;2;73;218;37mâ–„\\e[48;2;82;220;48m\\e[38;2;73;218;37mâ–„\\e[48;2;79;221;44m\\e[38;2;73;218;37mâ–„\\e[48;2;76;219;40m\\e[38;2;73;218;37mâ–„\\e[48;2;76;218;40m\\e[38;2;73;218;37mâ–„\\e[48;2;75;213;41m\\e[38;2;73;218;37mâ–„\\e[48;2;79;203;48m\\e[38;2;73;218;37mâ–„\\e[48;2;76;175;52m\\e[38;2;73;218;37mâ–„\\e[48;2;52;127;33m\\e[38;2;73;218;37mâ–„\\e[48;2;29;75;18m\\e[38;2;73;217;37mâ–„\\e[48;2;19;45;12m\\e[38;2;73;218;36mâ–„\\e[48;2;45;74;38m\\e[38;2;65;196;33mâ–„\\e[48;2;76;127;62m\\e[38;2;44;132;24mâ–„\\e[48;2;90;158;72m\\e[38;2;16;45;10mâ–„\\e[48;2;97;175;77m\\e[38;2;28;50;22mâ–„\\e[48;2;98;177;78m\\e[38;2;80;145;64mâ–„\\e[48;2;98;177;78m\\e[38;2;97;175;77mâ–„\\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78mâ–„\\e[48;2;98;177;78m\\e[38;2;98;177;77mâ–„\\e[48;2;97;173;78m\\e[38;2;98;177;78mâ–„\\e[48;2;69;114;56m\\e[38;2;98;177;78mâ–„\\e[48;2;30;38;28m\\e[38;2;103;179;83mâ–„\\e[0m\\e[38;2;99;149;87mâ–„\\e[0m \\e[48;2;98;177;78m\\e[38;2;98;177;77mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;178;78mâ–„\\e[48;2;98;177;78m\\e[38;2;98;178;78mâ–„\\e[48;2;98;177;78m\\e[38;2;83;150;66mâ–„\\e[48;2;98;177;78m\\e[38;2;44;80;34mâ–„\\e[48;2;99;179;78m\\e[38;2;33;49;28mâ–„\\e[48;2;87;159;69m\\e[38;2;68;97;61mâ–„\\e[48;2;46;84;37m\\e[38;2;87;165;68mâ–„\\e[48;2;25;37;21m\\e[38;2;83;208;52mâ–„\\e[48;2;59;131;42m\\e[38;2;73;219;37mâ–„\\e[48;2;74;199;43m\\e[38;2;74;223;37mâ–„\\e[48;2;72;213;38m\\e[38;2;67;204;35mâ–„\\e[48;2;73;218;37m\\e[38;2;55;171;29mâ–„\\e[48;2;72;218;36m\\e[38;2;59;136;22mâ–„\\e[48;2;72;218;36m\\e[38;2;103;132;15mâ–„\\e[48;2;73;219;37m\\e[38;2;149;133;9mâ–„\\e[48;2;72;220;37m\\e[38;2;168;130;7mâ–„\\e[48;2;73;220;37m\\e[38;2;167;118;5mâ–„\\e[48;2;72;218;37m\\e[38;2;106;78;4mâ–„\\e[48;2;69;210;36m\\e[38;2;93;69;4mâ–„\\e[48;2;66;199;34m\\e[38;2;173;117;4mâ–„\\e[48;2;63;192;32m\\e[38;2;177;119;4mâ–„\\e[48;2;62;186;32m\\e[38;2;173;116;4mâ–„\\e[48;2;61;186;31m\\e[38;2;176;115;4mâ–„\\e[48;2;63;191;32m\\e[38;2;174;115;4mâ–„\\e[48;2;67;202;34m\\e[38;2;170;113;4mâ–„\\e[48;2;70;213;36m\\e[38;2;180;118;3mâ–„\\e[48;2;72;219;37m\\e[38;2;175;117;4mâ–„\\e[48;2;73;220;37m\\e[38;2;154;120;7mâ–„\\e[48;2;73;220;37m\\e[38;2;80;94;11mâ–„\\e[48;2;73;219;37m\\e[38;2;48;93;15mâ–„\\e[48;2;73;218;37m\\e[38;2;41;112;19mâ–„\\e[48;2;72;215;36m\\e[38;2;45;144;25mâ–„\\e[48;2;64;192;32m\\e[38;2;63;191;32mâ–„\\e[48;2;32;99;16m\\e[38;2;73;218;37mâ–„\\e[48;2;21;41;16m\\e[38;2;72;210;38mâ–„\\e[48;2;38;66;30m\\e[38;2;67;177;41mâ–„\\e[48;2;79;141;63m\\e[38;2;53;123;36mâ–„\\e[48;2;98;178;78m\\e[38;2;32;57;25mâ–„\\e[48;2;98;179;77m\\e[38;2;25;46;20mâ–„\\e[48;2;97;177;77m\\e[38;2;56;100;46mâ–„\\e[48;2;98;177;78m\\e[38;2;93;165;75mâ–„\\e[48;2;97;176;77m\\e[38;2;100;181;80mâ–„\\e[48;2;98;177;77m\\e[38;2;97;176;76mâ–„\\e[48;2;97;176;78m\\e[38;2;98;177;78mâ–„\\e[48;2;99;174;79m\\e[38;2;98;177;78mâ–„\\e[0m \\e[48;2;98;178;78m\\e[38;2;46;76;38mâ–„\\e[48;2;100;178;80m\\e[38;2;50;69;45mâ–„\\e[48;2;99;176;80m\\e[38;2;35;46;33mâ–„\\e[48;2;82;148;65m\\e[38;2;7;9;6mâ–„\\e[48;2;64;117;50m\\e[38;2;35;54;30mâ–„\\e[48;2;42;77;34m\\e[38;2;52;107;39mâ–„\\e[48;2;26;46;21m\\e[38;2;80;194;52mâ–„\\e[48;2;34;71;26m\\e[38;2;73;216;38mâ–„\\e[48;2;54;133;35m\\e[38;2;67;192;32mâ–„\\e[48;2;81;199;52m\\e[38;2;81;158;23mâ–„\\e[48;2;80;218;46m\\e[38;2;100;110;11mâ–„\\e[48;2;66;199;33m\\e[38;2;152;98;2mâ–„\\e[48;2;60;157;26m\\e[38;2;220;129;1mâ–„\\e[48;2;80;128;18m\\e[38;2;251;145;0mâ–„\\e[48;2;120;110;9m\\e[38;2;255;147;0mâ–„\\e[48;2;154;106;4m\\e[38;2;255;147;0mâ–„\\e[48;2;181;114;2m\\e[38;2;255;147;0mâ–„\\e[48;2;230;134;0m\\e[38;2;255;147;0mâ–„\\e[48;2;251;144;0m\\e[38;2;255;147;0mâ–„\\e[48;2;254;146;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;163;94;0m\\e[38;2;134;78;0mâ–„\\e[48;2;2;1;0m\\e[38;2;58;33;0mâ–„\\e[48;2;13;7;0m\\e[38;2;133;76;0mâ–„\\e[48;2;64;38;0m\\e[38;2;12;7;0mâ–„\\e[48;2;250;144;0m\\e[38;2;234;135;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;249;146;0m\\e[38;2;255;147;0mâ–„\\e[48;2;239;143;2m\\e[38;2;255;147;0mâ–„\\e[48;2;223;131;1m\\e[38;2;255;147;0mâ–„\\e[48;2;192;120;2m\\e[38;2;255;147;0mâ–„\\e[48;2;130;96;5m\\e[38;2;255;147;0mâ–„\\e[48;2;82;88;9m\\e[38;2;255;148;0mâ–„\\e[48;2;62;104;15m\\e[38;2;247;147;1mâ–„\\e[48;2;49;132;22m\\e[38;2;212;134;3mâ–„\\e[48;2;57;165;32m\\e[38;2;144;95;3mâ–„\\e[48;2;53;117;38m\\e[38;2;74;61;8mâ–„\\e[48;2;50;97;39m\\e[38;2;47;60;21mâ–„\\e[48;2;35;56;29m\\e[38;2;47;81;33mâ–„\\e[48;2;17;22;15m\\e[38;2;20;34;19mâ–„\\e[48;2;31;50;26m\\e[38;2;48;73;42mâ–„\\e[48;2;55;90;47m\\e[38;2;37;56;33mâ–„\\e[48;2;78;132;64m\\e[38;2;21;31;18mâ–„\\e[48;2;95;167;78m\\e[38;2;18;26;16mâ–„\\e[0m \\e[48;2;48;74;43m\\e[38;2;51;78;45mâ–„\\e[48;2;48;74;43m\\e[38;2;50;76;44mâ–„\\e[48;2;46;71;42m\\e[38;2;12;17;11mâ–„\\e[48;2;32;54;28m\\e[38;2;45;93;35mâ–„\\e[48;2;58;112;46m\\e[38;2;26;45;17mâ–„\\e[48;2;55;130;37m\\e[38;2;121;83;5mâ–„\\e[48;2;57;133;27m\\e[38;2;232;138;0mâ–„\\e[48;2;101;96;8m\\e[38;2;253;146;0mâ–„\\e[48;2;200;118;1m\\e[38;2;254;147;0mâ–„\\e[48;2;248;144;0m\\e[38;2;255;147;0mâ–„\\e[48;2;254;147;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;173;100;0m\\e[38;2;210;122;0mâ–„\\e[48;2;172;100;0m\\e[38;2;76;44;0mâ–„\\e[48;2;214;123;0m\\e[38;2;153;88;0mâ–„\\e[48;2;36;21;0m\\e[38;2;162;94;0mâ–„\\e[48;2;201;116;0m\\e[38;2;20;12;0mâ–„\\e[48;2;254;147;0m\\e[38;2;238;137;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;255;147;0mâ–„\\e[48;2;241;143;1m\\e[38;2;255;147;0mâ–„\\e[48;2;213;125;0m\\e[38;2;255;147;0mâ–„\\e[48;2;117;73;3m\\e[38;2;252;147;1mâ–„\\e[48;2;25;36;21m\\e[38;2;94;69;18mâ–„\\e[48;2;50;77;44m\\e[38;2;39;59;33mâ–„\\e[48;2;51;78;45m \\e[48;2;51;78;44m\\e[38;2;51;78;45mâ–„\\e[0m \\e[48;2;51;78;45m\\e[38;2;50;76;44mâ–„\\e[48;2;40;58;34m\\e[38;2;43;36;13mâ–„\\e[48;2;38;37;6m\\e[38;2;240;143;2mâ–„\\e[48;2;149;95;6m\\e[38;2;254;147;0mâ–„\\e[48;2;226;134;1m\\e[38;2;255;147;0mâ–„\\e[48;2;253;146;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;243;140;0mâ–„\\e[48;2;116;67;0m\\e[38;2;90;52;0mâ–„\\e[48;2;237;137;0m\\e[38;2;254;147;0mâ–„\\e[48;2;248;143;0m\\e[38;2;255;147;0mâ–„\\e[48;2;250;144;0m\\e[38;2;255;147;0mâ–„\\e[48;2;45;25;0m\\e[38;2;191;110;0mâ–„\\e[48;2;64;36;0m\\e[38;2;32;18;0mâ–„\\e[48;2;245;141;0m\\e[38;2;152;87;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;255;147;0mâ–„\\e[48;2;230;140;6m\\e[38;2;254;147;0mâ–„\\e[48;2;25;21;7m\\e[38;2;143;86;2mâ–„\\e[48;2;48;74;42m\\e[38;2;39;60;34mâ–„\\e[48;2;51;78;45m \\e[0m \\e[48;2;41;63;37m\\e[38;2;40;47;23mâ–„\\e[48;2;119;70;1m\\e[38;2;230;135;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;180;104;0m\\e[38;2;120;68;0mâ–„\\e[48;2;135;78;0m\\e[38;2;158;91;0mâ–„\\e[48;2;255;147;0m\\e[38;2;250;145;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;146;0mâ–„\\e[48;2;252;145;0m\\e[38;2;209;120;0mâ–„\\e[48;2;54;31;0m\\e[38;2;61;35;0mâ–„\\e[48;2;94;54;0m\\e[38;2;159;91;0mâ–„\\e[48;2;254;146;0m\\e[38;2;244;140;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;240;144;1m\\e[38;2;255;147;0mâ–„\\e[48;2;36;40;18m\\e[38;2;70;49;6mâ–„\\e[48;2;50;78;45m\\e[38;2;45;69;40mâ–„\\e[0m \\e[48;2;65;48;9m\\e[38;2;98;64;6mâ–„\\e[48;2;255;149;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;254;146;0mâ–„\\e[48;2;225;130;0m\\e[38;2;175;100;0mâ–„\\e[48;2;210;120;0m\\e[38;2;253;146;0mâ–„\\e[48;2;209;121;0m\\e[38;2;254;147;0mâ–„\\e[48;2;86;49;0m\\e[38;2;189;109;0mâ–„\\e[48;2;254;146;0m\\e[38;2;142;81;0mâ–„\\e[48;2;255;147;0m\\e[38;2;102;59;0mâ–„\\e[48;2;199;115;0m\\e[38;2;69;40;0mâ–„\\e[48;2;244;141;0m\\e[38;2;238;138;0mâ–„\\e[48;2;253;146;0m\\e[38;2;184;105;0mâ–„\\e[48;2;200;115;0m\\e[38;2;231;134;0mâ–„\\e[48;2;253;147;0m\\e[38;2;254;146;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;149;98;7m\\e[38;2;215;132;5mâ–„\\e[48;2;35;54;32m\\e[38;2;31;42;22mâ–„\\e[0m \\e[48;2;133;82;3m\\e[38;2;153;89;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;255;146;0mâ–„\\e[48;2;255;147;0m\\e[38;2;255;146;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;148;0mâ–„\\e[48;2;255;147;0m\\e[38;2;248;147;0mâ–„\\e[48;2;254;147;0m\\e[38;2;242;142;0mâ–„\\e[48;2;204;116;0m\\e[38;2;224;131;0mâ–„\\e[48;2;200;115;0m\\e[38;2;205;124;1mâ–„\\e[48;2;199;115;0m\\e[38;2;175;109;2mâ–„\\e[48;2;172;100;0m\\e[38;2;157;102;2mâ–„\\e[48;2;168;97;0m\\e[38;2;172;114;3mâ–„\\e[48;2;206;119;0m\\e[38;2;156;115;5mâ–„\\e[48;2;215;125;0m\\e[38;2;138;111;7mâ–„\\e[48;2;180;105;0m\\e[38;2;121;105;8mâ–„\\e[48;2;233;136;0m\\e[38;2;120;109;8mâ–„\\e[48;2;254;148;0m\\e[38;2;116;111;9mâ–„\\e[48;2;254;148;0m\\e[38;2;112;111;10mâ–„\\e[48;2;255;148;0m\\e[38;2;130;121;10mâ–„\\e[48;2;254;148;0m\\e[38;2;103;105;10mâ–„\\e[48;2;254;148;0m\\e[38;2;99;99;9mâ–„\\e[48;2;254;148;0m\\e[38;2;106;98;8mâ–„\\e[48;2;254;148;0m\\e[38;2;106;96;8mâ–„\\e[48;2;255;148;0m\\e[38;2;118;98;7mâ–„\\e[48;2;255;147;0m\\e[38;2;123;101;7mâ–„\\e[48;2;255;147;0m\\e[38;2;129;99;6mâ–„\\e[48;2;255;147;0m\\e[38;2;141;100;5mâ–„\\e[48;2;255;147;0m\\e[38;2;166;111;4mâ–„\\e[48;2;255;147;0m\\e[38;2;189;122;4mâ–„\\e[48;2;255;147;0m\\e[38;2;217;131;1mâ–„\\e[48;2;255;147;0m\\e[38;2;248;145;0mâ–„\\e[48;2;255;147;0m\\e[38;2;250;148;0mâ–„\\e[48;2;255;147;0m\\e[38;2;254;149;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;249;147;1m\\e[38;2;254;147;0mâ–„\\e[48;2;47;44;15m\\e[38;2;81;54;7mâ–„\\e[0m \\e[48;2;163;95;0m\\e[38;2;176;103;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;147;0mâ–„\\e[48;2;255;147;0m\\e[38;2;250;144;0mâ–„\\e[48;2;255;147;0m\\e[38;2;238;146;1mâ–„\\e[48;2;254;147;0m\\e[38;2;170;117;4mâ–„\\e[48;2;252;147;0m\\e[38;2;78;65;5mâ–„\\e[48;2;239;144;1m\\e[38;2;36;71;11mâ–„\\e[48;2;220;136;2m\\e[38;2;41;122;21mâ–„\\e[48;2;193;124;2m\\e[38;2;59;179;31mâ–„\\e[48;2;178;119;4m\\e[38;2;69;210;35mâ–„\\e[48;2;129;104;6m\\e[38;2;73;219;37mâ–„\\e[48;2;67;87;10m\\e[38;2;73;219;37mâ–„\\e[48;2;61;106;15m\\e[38;2;73;218;37mâ–„\\e[48;2;52;126;21m\\e[38;2;73;218;37mâ–„\\e[48;2;52;150;25m\\e[38;2;73;218;37mâ–„\\e[48;2;58;177;30m\\e[38;2;73;218;37mâ–„\\e[48;2;63;194;33m\\e[38;2;73;218;37mâ–„\\e[48;2;66;204;34m\\e[38;2;73;218;37mâ–„\\e[48;2;69;212;36m\\e[38;2;73;218;37mâ–„\\e[48;2;72;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;72;219;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;74;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;219;37m\\e[38;2;73;218;37mâ–„\\e[48;2;72;214;36m\\e[38;2;73;218;37mâ–„\\e[48;2;68;207;35m\\e[38;2;73;218;37mâ–„\\e[48;2;65;197;34m\\e[38;2;73;218;37mâ–„\\e[48;2;61;185;32m\\e[38;2;73;218;37mâ–„\\e[48;2;51;157;27m\\e[38;2;73;218;37mâ–„\\e[48;2;41;125;21m\\e[38;2;73;218;37mâ–„\\e[48;2;40;106;18m\\e[38;2;73;218;37mâ–„\\e[48;2;75;92;10m\\e[38;2;73;218;37mâ–„\\e[48;2;76;85;10m\\e[38;2;73;219;37mâ–„\\e[48;2;112;94;7m\\e[38;2;72;216;36mâ–„\\e[48;2;162;113;5m\\e[38;2;64;194;33mâ–„\\e[48;2;219;131;0m\\e[38;2;50;152;26mâ–„\\e[48;2;231;138;1m\\e[38;2;30;65;14mâ–„\\e[48;2;252;147;0m\\e[38;2;106;71;5mâ–„\\e[48;2;97;61;4m\\e[38;2;30;31;7mâ–„\\e[0m \\e[48;2;186;108;0m\\e[38;2;185;108;0mâ–„\\e[48;2;255;147;0m\\e[38;2;254;148;0mâ–„\\e[48;2;255;147;0m\\e[38;2;247;144;0mâ–„\\e[48;2;255;147;0m\\e[38;2;188;113;1mâ–„\\e[48;2;255;147;0m\\e[38;2;110;100;8mâ–„\\e[48;2;248;147;0m\\e[38;2;72;136;20mâ–„\\e[48;2;206;124;1m\\e[38;2;62;175;29mâ–„\\e[48;2;115;81;4m\\e[38;2;67;204;34mâ–„\\e[48;2;55;92;13m\\e[38;2;72;217;36mâ–„\\e[48;2;60;157;26m\\e[38;2;73;218;37mâ–„\\e[48;2;66;195;32m\\e[38;2;73;218;37mâ–„\\e[48;2;70;212;35m\\e[38;2;73;218;37mâ–„\\e[48;2;72;215;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;210;37m\\e[38;2;71;214;37mâ–„\\e[48;2;58;142;37m\\e[38;2;57;136;37mâ–„\\e[48;2;51;109;39m\\e[38;2;54;109;40mâ–„\\e[48;2;36;76;26m\\e[38;2;38;71;31mâ–„\\e[0m \\e[48;2;73;63;12m\\e[38;2;24;46;20mâ–„\\e[48;2;89;67;7m\\e[38;2;54;120;38mâ–„\\e[48;2;67;119;19m\\e[38;2;66;192;35mâ–„\\e[48;2;61;177;29m\\e[38;2;73;217;37mâ–„\\e[48;2;71;213;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;214;35m\\e[38;2;42;129;21mâ–„\\e[48;2;43;131;22m\\e[38;2;4;10;2mâ–„\\e[48;2;37;111;19m\\e[38;2;4;10;2mâ–„\\e[48;2;60;180;30m\\e[38;2;7;22;3mâ–„\\e[48;2;73;218;37m\\e[38;2;62;187;31mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;72;217;36mâ–„\\e[48;2;69;208;35m\\e[38;2;20;61;10mâ–„\\e[48;2;43;129;22m\\e[38;2;4;11;2mâ–„\\e[48;2;38;116;19m\\e[38;2;3;8;1mâ–„\\e[48;2;64;192;32m\\e[38;2;19;57;10mâ–„\\e[48;2;73;218;37m\\e[38;2;73;219;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;214;36m\\e[38;2;71;213;36mâ–„\\e[48;2;55;130;37m\\e[38;2;55;123;38mâ–„\\e[48;2;54;108;41m\\e[38;2;56;110;44mâ–„\\e[48;2;35;60;30m\\e[38;2;35;57;30mâ–„\\e[0m \\e[48;2;37;68;29m\\e[38;2;38;61;33mâ–„\\e[48;2;58;132;39m\\e[38;2;62;134;45mâ–„\\e[48;2;64;179;36m\\e[38;2;55;129;37mâ–„\\e[48;2;72;217;36m\\e[38;2;71;210;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;27;82;14m\\e[38;2;59;178;30mâ–„\\e[48;2;4;11;3m\\e[38;2;3;9;1mâ–„\\e[48;2;0;0;0m\\e[38;2;8;18;4mâ–„\\e[48;2;1;3;1m\\e[38;2;4;12;2mâ–„\\e[48;2;36;112;19m\\e[38;2;54;163;27mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;70;210;36m\\e[38;2;72;217;36mâ–„\\e[48;2;4;11;1m\\e[38;2;9;28;4mâ–„\\e[48;2;0;0;0m\\e[38;2;6;16;3mâ–„\\e[48;2;1;3;1m\\e[38;2;6;15;3mâ–„\\e[48;2;13;39;6m\\e[38;2;32;94;15mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;70;207;36m\\e[38;2;67;196;36mâ–„\\e[48;2;52;110;38m \\e[48;2;57;101;47m\\e[38;2;56;90;47mâ–„\\e[48;2;36;55;31m\\e[38;2;38;58;33mâ–„\\e[0m \\e[48;2;40;63;35m\\e[38;2;43;67;38mâ–„\\e[48;2;61;117;48m\\e[38;2;45;80;38mâ–„\\e[48;2;54;114;39m\\e[38;2;52;110;38mâ–„\\e[48;2;64;177;36m\\e[38;2;59;150;37mâ–„\\e[48;2;72;217;36m\\e[38;2;72;214;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;61;182;30m\\e[38;2;73;218;37mâ–„\\e[48;2;45;135;22m\\e[38;2;73;218;37mâ–„\\e[48;2;58;174;29m\\e[38;2;73;218;37mâ–„\\e[48;2;72;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;212;35m\\e[38;2;72;216;36mâ–„\\e[48;2;34;101;17m\\e[38;2;11;32;5mâ–„\\e[48;2;34;101;17m\\e[38;2;1;2;1mâ–„\\e[48;2;34;98;18m\\e[38;2;1;3;1mâ–„\\e[48;2;35;101;18m\\e[38;2;1;1;1mâ–„\\e[48;2;35;100;17m\\e[38;2;1;3;1mâ–„\\e[48;2;57;170;29m\\e[38;2;56;168;28mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;72;218;36mâ–„\\e[48;2;66;197;33m\\e[38;2;72;217;36mâ–„\\e[48;2;46;139;23m\\e[38;2;73;217;37mâ–„\\e[48;2;54;163;27m\\e[38;2;72;217;37mâ–„\\e[48;2;71;212;36m\\e[38;2;72;217;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;37m\\e[38;2;70;204;36mâ–„\\e[48;2;60;158;37m\\e[38;2;53;122;37mâ–„\\e[48;2;52;103;38m\\e[38;2;52;104;40mâ–„\\e[48;2;33;54;28m\\e[38;2;21;34;18mâ–„\\e[48;2;46;70;41m\\e[38;2;49;76;44mâ–„\\e[0m \\e[48;2;49;76;44m\\e[38;2;51;78;45mâ–„\\e[48;2;32;51;28m\\e[38;2;43;65;37mâ–„\\e[48;2;61;125;45m\\e[38;2;81;124;71mâ–„\\e[48;2;54;124;38m\\e[38;2;53;113;40mâ–„\\e[48;2;68;202;36m\\e[38;2;60;156;37mâ–„\\e[48;2;73;218;37m\\e[38;2;72;215;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;216;37mâ–„\\e[48;2;73;217;37m\\e[38;2;93;205;61mâ–„\\e[48;2;79;213;44m\\e[38;2;121;189;95mâ–„\\e[48;2;85;210;51m\\e[38;2;132;184;108mâ–„\\e[48;2;82;211;47m\\e[38;2;121;191;93mâ–„\\e[48;2;73;217;37m\\e[38;2;85;210;52mâ–„\\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;37;111;20m\\e[38;2;71;214;36mâ–„\\e[48;2;1;2;0m\\e[38;2;44;128;22mâ–„\\e[48;2;2;4;2m\\e[38;2;15;39;8mâ–„\\e[48;2;1;1;1m\\e[38;2;29;82;14mâ–„\\e[48;2;13;37;7m\\e[38;2;68;204;34mâ–„\\e[48;2;70;210;35m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;217;37m\\e[38;2;74;216;38mâ–„\\e[48;2;82;211;47m\\e[38;2;118;191;90mâ–„\\e[48;2;100;200;70m\\e[38;2;132;185;108mâ–„\\e[48;2;103;201;72m\\e[38;2;127;187;101mâ–„\\e[48;2;98;203;67m\\e[38;2;125;189;100mâ–„\\e[48;2;85;209;52m\\e[38;2;116;192;88mâ–„\\e[48;2;73;217;37m\\e[38;2;80;211;44mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;68;200;35mâ–„\\e[48;2;63;170;35m\\e[38;2;54;125;36mâ–„\\e[48;2;51;103;38m\\e[38;2;51;99;38mâ–„\\e[48;2;49;101;36m\\e[38;2;22;45;17mâ–„\\e[48;2;30;47;26m\\e[38;2;45;69;39mâ–„\\e[48;2;51;78;45m \\e[0m \\e[48;2;51;78;45m \\e[48;2;49;75;43m\\e[38;2;51;78;45mâ–„\\e[48;2;30;38;27m\\e[38;2;39;59;35mâ–„\\e[48;2;63;123;49m\\e[38;2;71;110;62mâ–„\\e[48;2;54;121;37m\\e[38;2;56;119;40mâ–„\\e[48;2;68;198;37m\\e[38;2;60;158;37mâ–„\\e[48;2;73;218;37m\\e[38;2;71;216;36mâ–„\\e[48;2;73;217;37m\\e[38;2;73;216;38mâ–„\\e[48;2;91;206;58m\\e[38;2;110;196;81mâ–„\\e[48;2;122;191;95m\\e[38;2;126;188;100mâ–„\\e[48;2;128;186;102m\\e[38;2;130;187;104mâ–„\\e[48;2;140;180;116m\\e[38;2;128;187;103mâ–„\\e[48;2;126;188;100m\\e[38;2;106;197;76mâ–„\\e[48;2;96;202;64m\\e[38;2;75;215;39mâ–„\\e[48;2;73;217;37m\\e[38;2;72;218;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;74;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;74;217;38m\\e[38;2;73;217;37mâ–„\\e[48;2;114;194;86m\\e[38;2;76;215;40mâ–„\\e[48;2;142;178;121m\\e[38;2;94;205;62mâ–„\\e[48;2;150;176;129m\\e[38;2;109;196;81mâ–„\\e[48;2;142;180;120m\\e[38;2;95;203;63mâ–„\\e[48;2;116;193;88m\\e[38;2;76;214;41mâ–„\\e[48;2;78;213;44m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;67;196;36mâ–„\\e[48;2;71;209;37m\\e[38;2;60;154;36mâ–„\\e[48;2;59;152;36m\\e[38;2;57;138;37mâ–„\\e[48;2;52;110;38m\\e[38;2;56;130;37mâ–„\\e[48;2;51;104;38m\\e[38;2;30;71;21mâ–„\\e[48;2;20;31;17m\\e[38;2;45;69;39mâ–„\\e[48;2;50;78;44m\\e[38;2;51;78;45mâ–„\\e[48;2;51;78;45m \\e[0m \\e[48;2;51;78;45m\\e[38;2;28;43;24mâ–„\\e[48;2;51;78;45m\\e[38;2;43;64;38mâ–„\\e[48;2;51;78;45m\\e[38;2;52;79;46mâ–„\\e[48;2;34;53;30m\\e[38;2;46;71;41mâ–„\\e[48;2;64;124;48m\\e[38;2;49;106;36mâ–„\\e[48;2;53;115;38m\\e[38;2;57;124;40mâ–„\\e[48;2;63;175;36m\\e[38;2;55;126;38mâ–„\\e[48;2;73;217;37m\\e[38;2;66;186;36mâ–„\\e[48;2;89;208;56m\\e[38;2;73;217;37mâ–„\\e[48;2;111;195;82m\\e[38;2;75;215;40mâ–„\\e[48;2;109;197;80m\\e[38;2;74;216;38mâ–„\\e[48;2;85;209;52m\\e[38;2;73;218;36mâ–„\\e[48;2;73;216;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;217;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m\\e[38;2;71;214;36mâ–„\\e[48;2;71;212;36m\\e[38;2;63;172;36mâ–„\\e[48;2;63;174;35m\\e[38;2;57;138;37mâ–„\\e[48;2;58;146;36m\\e[38;2;57;137;38mâ–„\\e[48;2;58;139;37m\\e[38;2;57;138;37mâ–„\\e[48;2;58;138;37m\\e[38;2;54;128;35mâ–„\\e[48;2;50;117;34m\\e[38;2;20;44;14mâ–„\\e[48;2;20;32;17m\\e[38;2;39;61;34mâ–„\\e[48;2;51;77;44m\\e[38;2;45;69;40mâ–„\\e[48;2;51;78;45m\\e[38;2;45;69;40mâ–„\\e[48;2;51;78;45m\\e[38;2;49;75;43mâ–„\\e[0m \\e[48;2;84;151;67m\\e[38;2;98;177;78mâ–„\\e[48;2;43;80;34m\\e[38;2;98;177;78mâ–„\\e[48;2;22;39;19m\\e[38;2;98;178;78mâ–„\\e[48;2;43;67;38m\\e[38;2;81;148;64mâ–„\\e[48;2;40;70;33m\\e[38;2;44;78;36mâ–„\\e[48;2;54;127;36m\\e[38;2;21;47;15mâ–„\\e[48;2;55;120;39m\\e[38;2;54;117;39mâ–„\\e[48;2;56;133;37m\\e[38;2;59;133;40mâ–„\\e[48;2;71;211;36m\\e[38;2;61;164;37mâ–„\\e[48;2;73;217;36m\\e[38;2;71;211;36mâ–„\\e[48;2;73;218;37m\\e[38;2;72;218;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;72;217;36mâ–„\\e[48;2;73;218;37m\\e[38;2;67;203;34mâ–„\\e[48;2;68;194;37m\\e[38;2;40;116;21mâ–„\\e[48;2;58;142;36m\\e[38;2;8;21;5mâ–„\\e[48;2;49;120;31m\\e[38;2;6;10;5mâ–„\\e[48;2;25;59;16m\\e[38;2;73;108;65mâ–„\\e[48;2;15;33;11m\\e[38;2;95;157;79mâ–„\\e[48;2;12;25;9m\\e[38;2;97;175;77mâ–„\\e[48;2;21;32;19m\\e[38;2;99;179;79mâ–„\\e[48;2;23;35;19m\\e[38;2;98;178;78mâ–„\\e[48;2;20;34;17m\\e[38;2;98;178;78mâ–„\\e[48;2;13;24;11m\\e[38;2;98;178;78mâ–„\\e[48;2;16;26;14m\\e[38;2;98;177;78mâ–„\\e[0m \\e[48;2;97;176;77m\\e[38;2;58;103;46mâ–„\\e[48;2;98;177;78m\\e[38;2;94;170;75mâ–„\\e[48;2;98;177;78m\\e[38;2;99;179;79mâ–„\\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;97;176;77m\\e[38;2;98;177;78mâ–„\\e[48;2;91;165;72m\\e[38;2;98;177;78mâ–„\\e[48;2;55;100;44m\\e[38;2;98;177;78mâ–„\\e[48;2;15;27;10m\\e[38;2;92;168;73mâ–„\\e[48;2;24;46;18m\\e[38;2;76;138;61mâ–„\\e[48;2;73;154;53m\\e[38;2;54;96;43mâ–„\\e[48;2;74;213;39m\\e[38;2;24;48;18mâ–„\\e[48;2;74;222;37m\\e[38;2;20;55;11mâ–„\\e[48;2;73;217;37m\\e[38;2;31;91;16mâ–„\\e[48;2;73;218;37m\\e[38;2;49;145;24mâ–„\\e[48;2;73;218;37m\\e[38;2;68;201;35mâ–„\\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;74;220;37mâ–„\\e[48;2;73;218;37m\\e[38;2;73;219;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;220;37mâ–„\\e[48;2;73;218;37m\\e[38;2;72;214;37mâ–„\\e[48;2;73;218;37m\\e[38;2;63;187;32mâ–„\\e[48;2;72;217;36m\\e[38;2;41;120;22mâ–„\\e[48;2;74;222;36m\\e[38;2;21;52;13mâ–„\\e[48;2;67;203;34m\\e[38;2;39;62;34mâ–„\\e[48;2;40;117;21m\\e[38;2;64;103;54mâ–„\\e[48;2;14;43;7m\\e[38;2;72;126;57mâ–„\\e[48;2;4;12;2m\\e[38;2;87;156;69mâ–„\\e[48;2;25;45;21m\\e[38;2;97;174;78mâ–„\\e[48;2;71;124;57m\\e[38;2;99;177;80mâ–„\\e[48;2;97;168;78m\\e[38;2;94;170;75mâ–„\\e[48;2;96;175;77m\\e[38;2;103;177;84mâ–„\\e[48;2;98;176;79m\\e[38;2;109;183;90mâ–„\\e[48;2;100;178;80m\\e[38;2;112;185;94mâ–„\\e[48;2;100;177;80m\\e[38;2;111;184;92mâ–„\\e[48;2;99;177;80m\\e[38;2;107;182;89mâ–„\\e[48;2;98;177;78m\\e[38;2;105;182;85mâ–„\\e[48;2;98;177;78m\\e[38;2;103;180;83mâ–„\\e[48;2;98;177;78m\\e[38;2;99;177;79mâ–„\\e[0m \\e[38;2;54;79;47mâ–€\\e[38;2;72;123;60mâ–€\\e[48;2;97;176;78m\\e[38;2;65;87;60mâ–„\\e[48;2;98;177;78m\\e[38;2;73;130;59mâ–„\\e[48;2;98;177;78m\\e[38;2;91;165;72mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;96;172;77m\\e[38;2;98;177;78mâ–„\\e[48;2;82;147;65m\\e[38;2;98;177;78mâ–„\\e[48;2;66;116;52m\\e[38;2;98;177;78mâ–„\\e[48;2;46;78;38m\\e[38;2;98;177;78mâ–„\\e[48;2;27;51;20m\\e[38;2;98;177;78mâ–„\\e[48;2;28;60;20m\\e[38;2;94;169;74mâ–„\\e[48;2;28;67;19m\\e[38;2;86;155;69mâ–„\\e[48;2;34;96;19m\\e[38;2;69;123;54mâ–„\\e[48;2;42;126;21m\\e[38;2;48;86;39mâ–„\\e[48;2;51;148;27m\\e[38;2;36;64;28mâ–„\\e[48;2;55;164;28m\\e[38;2;26;46;20mâ–„\\e[48;2;60;180;30m\\e[38;2;23;39;18mâ–„\\e[48;2;62;186;31m\\e[38;2;21;40;17mâ–„\\e[48;2;61;181;31m\\e[38;2;19;36;16mâ–„\\e[48;2;67;176;40m\\e[38;2;18;32;14mâ–„\\e[48;2;63;173;35m\\e[38;2;23;36;19mâ–„\\e[48;2;56;168;29m\\e[38;2;27;42;23mâ–„\\e[48;2;53;160;27m\\e[38;2;29;45;24mâ–„\\e[48;2;44;133;22m\\e[38;2;30;53;25mâ–„\\e[48;2;34;102;17m\\e[38;2;52;89;43mâ–„\\e[48;2;20;60;10m\\e[38;2;88;148;71mâ–„\\e[48;2;24;47;19m\\e[38;2;97;171;78mâ–„\\e[48;2;34;62;27m\\e[38;2;98;177;78mâ–„\\e[48;2;55;99;44m\\e[38;2;98;177;78mâ–„\\e[48;2;80;144;64m\\e[38;2;98;177;78mâ–„\\e[48;2;99;176;79m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;99;177;79mâ–„\\e[48;2;99;177;79m\\e[38;2;96;172;76mâ–„\\e[48;2;99;175;79m\\e[38;2;85;151;68mâ–„\\e[48;2;95;169;76m\\e[38;2;72;121;60mâ–„\\e[48;2;109;180;92m\\e[38;2;37;57;32mâ–„\\e[48;2;100;159;85m\\e[38;2;38;41;36mâ–„\\e[48;2;72;107;62m\\e[38;2;74;74;74mâ–„\\e[0m\\e[38;2;44;65;38mâ–€\\e[38;2;31;48;27mâ–€\\e[38;2;31;48;26mâ–€\\e[38;2;31;52;25mâ–€\\e[38;2;41;71;34mâ–€\\e[38;2;59;97;50mâ–€\\e[0m \\e[38;2;95;106;94mâ–€\\e[38;2;81;137;65mâ–€\\e[38;2;91;166;73mâ–€\\e[48;2;95;174;76m\\e[38;2;61;73;59mâ–„\\e[48;2;98;177;78m\\e[38;2;33;66;26mâ–„\\e[48;2;98;177;78m\\e[38;2;81;143;65mâ–„\\e[48;2;98;177;78m\\e[38;2;102;182;81mâ–„\\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;99;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;97;177;77m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78mâ–„\\e[48;2;98;177;78m\\e[38;2;99;179;78mâ–„\\e[48;2;98;177;78m\\e[38;2;93;169;74mâ–„\\e[48;2;98;177;78m\\e[38;2;56;106;44mâ–„\\e[48;2;96;174;77m\\e[38;2;16;31;13mâ–„\\e[48;2;68;126;54m\\e[38;2;58;58;58mâ–„\\e[0m\\e[38;2;28;50;23mâ–€\\e[38;2;20;22;20mâ–€\\e[0m \\e[38;2;41;52;39mâ–€\\e[38;2;39;76;30mâ–€\\e[38;2;73;136;57mâ–€\\e[48;2;90;162;72m\\e[38;2;96;100;95mâ–„\\e[48;2;99;175;79m\\e[38;2;60;69;58mâ–„\\e[48;2;98;177;78m\\e[38;2;46;59;43mâ–„\\e[48;2;98;177;78m\\e[38;2;32;51;27mâ–„\\e[48;2;98;178;78m\\e[38;2;28;50;23mâ–„\\e[48;2;98;178;78m\\e[38;2;28;55;22mâ–„\\e[48;2;98;178;78m\\e[38;2;35;64;28mâ–„\\e[48;2;98;177;78m\\e[38;2;41;75;33mâ–„\\e[48;2;98;177;78m\\e[38;2;50;89;41mâ–„\\e[48;2;98;177;77m\\e[38;2;54;89;45mâ–„\\e[48;2;98;177;77m\\e[38;2;53;89;44mâ–„\\e[48;2;98;177;78m\\e[38;2;49;86;39mâ–„\\e[48;2;98;177;78m\\e[38;2;45;83;36mâ–„\\e[48;2;98;177;78m\\e[38;2;40;74;32mâ–„\\e[48;2;98;177;78m\\e[38;2;35;64;28mâ–„\\e[48;2;98;178;78m\\e[38;2;39;60;33mâ–„\\e[48;2;90;163;71m\\e[38;2;55;61;53mâ–„\\e[0m\\e[38;2;53;97;41mâ–€\\e[38;2;24;44;19mâ–€\\e[38;2;36;41;35mâ–€\\e[0m '"2⤵PID:1532
-
-
/bin/sedsed "s,LEGEND,[1;4m&[0m,"2⤵PID:1534
-
-
/bin/sedsed "s,RED/YELLOW,[1;31;103m&[0m,"2⤵PID:1536
-
-
/bin/sedsed "s,RED,[1;31m&[0m,"2⤵PID:1538
-
-
/bin/sedsed "s,LightCyan,[1;96m&[0m,"2⤵PID:1540
-
-
/bin/sedsed "s,Blue,[1;34m&[0m,"2⤵PID:1542
-
-
/bin/sedsed "s,Green,[1;32m&[0m,"2⤵PID:1544
-
-
/bin/sedsed "s,LightMagenta,[1;95m&[0m,"2⤵PID:1546
-
-
/bin/sedsed "s,YOU ARE ALREADY ROOT!!!,[1;31;103m&[0m,"2⤵PID:1548
-
-
/bin/sleepsleep 32⤵PID:1549
-
-
/usr/bin/wcwc -c2⤵PID:1556
-
-
/usr/bin/seqseq 1 312⤵PID:1557
-
-
/usr/bin/seqseq 1 182⤵PID:1558
-
-
/usr/bin/seqseq 1 312⤵PID:1559
-
-
/usr/bin/seqseq 1 312⤵PID:1560
-
-
/usr/bin/seqseq 1 312⤵PID:1561
-
-
/usr/bin/seqseq 1 182⤵PID:1562
-
-
/bin/catcat /proc/version2⤵PID:1564
-
-
/usr/bin/idid2⤵PID:1566
-
-
/bin/hostnamehostname2⤵PID:1567
-
-
/usr/bin/whoamiwhoami2⤵PID:1576
-
-
/usr/bin/cutcut -d : -f22⤵PID:1579
-
-
/usr/bin/groupsgroups root2⤵PID:1578
-
-
/bin/sedsed -e "s/ -or\$//"2⤵PID:1582
-
-
/usr/bin/sortsort2⤵PID:1585
-
-
/usr/bin/findfind / -maxdepth 3 -type d "!" -path "/proc/*" "(" "(" -user root ")" -or "(" -perm "-o=w" ")" -or "(" -perm "-g=w" -and "(" -group root ")" ")" ")"2⤵PID:1584
-
-
/usr/bin/trtr "\\n" "|"2⤵PID:1588
-
-
/usr/bin/headhead -n12⤵PID:1592
-
-
/bin/grepgrep /shm2⤵PID:1591
-
-
/bin/sedsed -E "s,/|/bin|/boot|/boot/grub|/boot/grub/fonts|/boot/grub/i386-pc|/boot/grub/locale|/.cache|/dev|/dev/block|/dev/bsg|/dev/bus|/dev/bus/usb|/dev/char|/dev/disk|/dev/disk/by-id|/dev/disk/by-partuuid|/dev/disk/by-path|/dev/disk/by-uuid|/dev/dri|/dev/dri/by-path|/dev/hugepages|/dev/input|/dev/input/by-id|/dev/input/by-path|/dev/mapper|/dev/mqueue|/dev/net|/dev/pts|/dev/shm|/dev/snd|/dev/vfio|/etc|/etc/acpi|/etc/acpi/events|/etc/alternatives|/etc/apm|/etc/apm/event.d|/etc/apm/resume.d|/etc/apm/scripts.d|/etc/apm/suspend.d|/etc/apparmor|/etc/apparmor.d|/etc/apparmor.d/abstractions|/etc/apparmor.d/cache|/etc/apparmor.d/disable|/etc/apparmor.d/force-complain|/etc/apparmor.d/local|/etc/apparmor.d/tunables|/etc/apparmor/init|/etc/apport|/etc/apport/blacklist.d|/etc/apport/native-origins.d|/etc/apt|/etc/apt/apt.conf.d|/etc/apt/auth.conf.d|/etc/apt/keyrings|/etc/apt/preferences.d|/etc/apt/sources.list.d|/etc/apt/trusted.gpg.d|/etc/audisp|/etc/audisp/plugins.d|/etc/audit|/etc/audit/rules.d|/etc/avahi|/etc/avahi/services|/etc/bash_completion.d|/etc/binfmt.d|/etc/bluetooth|/etc/brltty|/etc/brltty/Attributes|/etc/brltty/Contraction|/etc/brltty/Input|/etc/brltty/Keyboard|/etc/brltty/Text|/etc/ca-certificates|/etc/ca-certificates/update.d|/etc/calendar|/etc/chatscripts|/etc/console-setup|/etc/cracklib|/etc/cron.d|/etc/cron.daily|/etc/cron.hourly|/etc/cron.monthly|/etc/cron.weekly|/etc/cups|/etc/cupshelpers|/etc/cups/interfaces|/etc/cups/ppd|/etc/cups/ssl|/etc/dbus-1|/etc/dbus-1/session.d|/etc/dbus-1/system.d|/etc/dconf|/etc/dconf/db|/etc/dconf/profile|/etc/default|/etc/depmod.d|/etc/dhcp|/etc/dhcp/dhclient-enter-hooks.d|/etc/dhcp/dhclient-exit-hooks.d|/etc/dictionaries-common|/etc/dpkg|/etc/dpkg/dpkg.cfg.d|/etc/dpkg/origins|/etc/emacs|/etc/emacs/site-start.d|/etc/firefox|/etc/firefox/policies|/etc/firefox/pref|/etc/fonts|/etc/fonts/conf.avail|/etc/fonts/conf.d|/etc/fwupd|/etc/fwupd/remotes.d|/etc/gdb|/etc/gdm3|/etc/gdm3/Init|/etc/gdm3/PostLogin|/etc/gdm3/PostSession|/etc/gdm3/PreSession|/etc/gdm3/Prime|/etc/gdm3/PrimeOff|/etc/geoclue|/etc/ghostscript|/etc/ghostscript/cidfmap.d|/etc/ghostscript/fontmap.d|/etc/glvnd|/etc/glvnd/egl_vendor.d|/etc/gnome|/etc/groff|/etc/grub.d|/etc/gss|/etc/gss/mech.d|/etc/gtk-2.0|/etc/gtk-3.0|/etc/hp|/etc/ifplugd|/etc/ifplugd/action.d|/etc/ImageMagick-6|/etc/init|/etc/init.d|/etc/initramfs-tools|/etc/initramfs-tools/conf.d|/etc/initramfs-tools/hooks|/etc/initramfs-tools/scripts|/etc/insserv.conf.d|/etc/iproute2|/etc/iproute2/rt_protos.d|/etc/iproute2/rt_tables.d|/etc/kernel|/etc/kernel/install.d|/etc/kernel/postinst.d|/etc/kernel/postrm.d|/etc/kernel/preinst.d|/etc/ldap|/etc/ld.so.conf.d|/etc/libblockdev|/etc/libblockdev/conf.d|/etc/libnl-3|/etc/libpaper.d|/etc/libreoffice|/etc/logcheck|/etc/logcheck/ignore.d.paranoid|/etc/logcheck/ignore.d.server|/etc/logrotate.d|/etc/modprobe.d|/etc/modules-load.d|/etc/netplan|/etc/network|/etc/networkd-dispatcher|/etc/networkd-dispatcher/dormant.d|/etc/networkd-dispatcher/no-carrier.d|/etc/networkd-dispatcher/off.d|/etc/networkd-dispatcher/routable.d|/etc/network/if-down.d|/etc/network/if-post-down.d|/etc/network/if-pre-up.d|/etc/network/if-up.d|/etc/network/interfaces.d|/etc/NetworkManager|/etc/NetworkManager/conf.d|/etc/NetworkManager/dispatcher.d|/etc/NetworkManager/dnsmasq.d|/etc/NetworkManager/dnsmasq-shared.d|/etc/NetworkManager/system-connections|/etc/newt|/etc/opt|/etc/PackageKit|/etc/pam.d|/etc/pcmcia|/etc/perl|/etc/perl/CPAN|/etc/perl/Net|/etc/perl/XML|/etc/pki|/etc/pki/fwupd|/etc/pki/fwupd-metadata|/etc/pm|/etc/pm/sleep.d|/etc/polkit-1|/etc/polkit-1/localauthority|/etc/polkit-1/localauthority.conf.d|/etc/polkit-1/nullbackend.conf.d|/etc/ppp|/etc/ppp/ip-down.d|/etc/ppp/ip-up.d|/etc/ppp/ipv6-down.d|/etc/ppp/ipv6-up.d|/etc/ppp/peers|/etc/ppp/resolv|/etc/profile.d|/etc/pulse|/etc/python|/etc/python2.7|/etc/python3|/etc/python3.6|/etc/rc0.d|/etc/rc1.d|/etc/rc2.d|/etc/rc3.d|/etc/rc4.d|/etc/rc5.d|/etc/rc6.d|/etc/rcS.d|/etc/resolvconf|/etc/resolvconf/update-libc.d|/etc/rsyslog.d|/etc/sane.d|/etc/sane.d/dll.d|/etc/security|/etc/security/limits.d|/etc/security/namespace.d|/etc/selinux|/etc/selinux/default|/etc/sensors.d|/etc/skel|/etc/speech-dispatcher|/etc/speech-dispatcher/clients|/etc/speech-dispatcher/modules|/etc/ssh|/etc/ssl|/etc/ssl/certs|/etc/ssl/private|/etc/sudoers.d|/etc/sysctl.d|/etc/systemd|/etc/systemd/network|/etc/systemd/system|/etc/systemd/user|/etc/terminfo|/etc/thunderbird|/etc/tmpfiles.d|/etc/ubuntu-advantage|/etc/udev|/etc/udev/hwdb.d|/etc/udev/rules.d|/etc/udisks2|/etc/ufw|/etc/ufw/applications.d|/etc/update-manager|/etc/update-manager/release-upgrades.d|/etc/update-motd.d|/etc/update-notifier|/etc/UPower|/etc/usb_modeswitch.d|/etc/vim|/etc/wpa_supplicant|/etc/X11|/etc/X11/app-defaults|/etc/X11/cursors|/etc/X11/fonts|/etc/X11/xinit|/etc/X11/xkb|/etc/X11/Xreset.d|/etc/X11/Xresources|/etc/X11/Xsession.d|/etc/X11/xsm|/etc/xdg|/etc/xdg/autostart|/etc/xdg/menus|/etc/xdg/systemd|/home|/lib|/lib64|/lib/apparmor|/lib/brltty|/lib/console-setup|/lib/crda|/lib/crda/pubkeys|/lib/firmware|/lib/firmware/3com|/lib/firmware/acenic|/lib/firmware/adaptec|/lib/firmware/advansys|/lib/firmware/amdgpu|/lib/firmware/amd-ucode|/lib/firmware/ar3k|/lib/firmware/asihpi|/lib/firmware/ath10k|/lib/firmware/ath6k|/lib/firmware/ath9k_htc|/lib/firmware/atmel|/lib/firmware/atusb|/lib/firmware/av7110|/lib/firmware/bnx2|/lib/firmware/bnx2x|/lib/firmware/brcm|/lib/firmware/carl9170fw|/lib/firmware/cavium|/lib/firmware/cis|/lib/firmware/cpia2|/lib/firmware/cxgb3|/lib/firmware/cxgb4|/lib/firmware/dsp56k|/lib/firmware/e100|/lib/firmware/ea|/lib/firmware/edgeport|/lib/firmware/emi26|/lib/firmware/emi62|/lib/firmware/ene-ub6250|/lib/firmware/ess|/lib/firmware/go7007|/lib/firmware/hp|/lib/firmware/i915|/lib/firmware/imx|/lib/firmware/intel|/lib/firmware/intel-ucode|/lib/firmware/isci|/lib/firmware/kaweth|/lib/firmware/keyspan|/lib/firmware/keyspan_pda|/lib/firmware/korg|/lib/firmware/libertas|/lib/firmware/liquidio|/lib/firmware/matrox|/lib/firmware/mediatek|/lib/firmware/mellanox|/lib/firmware/moxa|/lib/firmware/mrvl|/lib/firmware/mwl8k|/lib/firmware/mwlwifi|/lib/firmware/netronome|/lib/firmware/nvidia|/lib/firmware/ositech|/lib/firmware/qca|/lib/firmware/qcom|/lib/firmware/qed|/lib/firmware/qlogic|/lib/firmware/r128|/lib/firmware/radeon|/lib/firmware/rockchip|/lib/firmware/rsi|/lib/firmware/RTL8192E|/lib/firmware/rtl_bt|/lib/firmware/rtl_nic|/lib/firmware/rtlwifi|/lib/firmware/rtw88|/lib/firmware/sb16|/lib/firmware/slicoss|/lib/firmware/sun|/lib/firmware/tehuti|/lib/firmware/ti-connectivity|/lib/firmware/tigon|/lib/firmware/ti-keystone|/lib/firmware/ttusb-budget|/lib/firmware/ueagle-atm|/lib/firmware/usbdux|/lib/firmware/vicam|/lib/firmware/vxge|/lib/firmware/yam|/lib/firmware/yamaha|/lib/firmware/zd1211|/lib/hdparm|/lib/ifupdown|/lib/init|/lib/linux-sound-base|/lib/lsb|/lib/lsb/init-functions.d|/lib/modprobe.d|/lib/modules|/lib/modules/4.15.0-213-generic|/lib/netplan|/lib/recovery-mode|/lib/recovery-mode/options|/lib/systemd|/lib/systemd/network|/lib/systemd/system|/lib/systemd/system-generators|/lib/systemd/system-preset|/lib/systemd/system-shutdown|/lib/systemd/system-sleep|/lib/terminfo|/lib/terminfo/a|/lib/terminfo/c|/lib/terminfo/d|/lib/terminfo/E|/lib/terminfo/h|/lib/terminfo/l|/lib/terminfo/m|/lib/terminfo/p|/lib/terminfo/r|/lib/terminfo/s|/lib/terminfo/v|/lib/terminfo/w|/lib/terminfo/x|/lib/udev|/lib/udev/hwdb.d|/lib/udev/rules.d|/lib/ufw|/lib/x86_64-linux-gnu|/lib/x86_64-linux-gnu/security|/lost+found|/media|/media/floppy0|/mnt|/opt|/proc|/root|/root/.cache|/root/.cache/dconf|/root/.cache/doc|/root/.cache/evolution|/root/.cache/gnome-software|/root/.cache/ibus|/root/.cache/ibus-table|/root/.cache/libgweather|/root/.cache/mozilla|/root/.cache/wallpaper|/root/.config|/root/.config/dconf|/root/.config/evolution|/root/.config/gnome-session|/root/.config/goa-1.0|/root/.config/gtk-3.0|/root/.config/ibus|/root/.config/mozilla|/root/.config/nautilus|/root/.config/systemd|/root/.dbus|/root/.dbus/session-bus|/root/Desktop|/root/Documents|/root/Downloads|/root/.gnupg|/root/.gnupg/private-keys-v1.d|/root/.gvfs|/root/.local|/root/.local/share|/root/Music|/root/Pictures|/root/Public|/root/Templates|/root/Videos|/run|/run/boltd|/run/boltd/power|/run/console-setup|/run/cups|/run/dbus|/run/gdm3|/run/initramfs|/run/lock|/run/lock/subsys|/run/log|/run/mount|/run/network|/run/NetworkManager|/run/NetworkManager/conf.d|/run/NetworkManager/devices|/run/NetworkManager/system-connections|/run/pppconfig|/run/sendsigs.omit.d|/run/spice-vdagentd|/run/sshd|/run/sudo|/run/sudo/ts|/run/systemd|/run/systemd/ask-password|/run/systemd/generator|/run/systemd/generator.late|/run/systemd/inaccessible|/run/systemd/inhibit|/run/systemd/initctl|/run/systemd/journal|/run/systemd/machines|/run/systemd/seats|/run/systemd/sessions|/run/systemd/shutdown|/run/systemd/system|/run/systemd/transient|/run/systemd/unit-root|/run/systemd/units|/run/systemd/users|/run/tmpfiles.d|/run/udev|/run/udev/data|/run/udev/links|/run/udev/static_node-tags|/run/udev/tags|/run/udev/watch|/run/udisks2|/run/user|/run/user/0|/run/uuidd|/sbin|/snap|/srv|/sys|/sys/block|/sys/bus|/sys/bus/acpi|/sys/bus/clockevents|/sys/bus/clocksource|/sys/bus/container|/sys/bus/cpu|/sys/bus/edac|/sys/bus/event_source|/sys/bus/gpio|/sys/bus/hid|/sys/bus/i2c|/sys/bus/isa|/sys/bus/machinecheck|/sys/bus/mdio_bus|/sys/bus/memory|/sys/bus/mipi-dsi|/sys/bus/mmc|/sys/bus/nd|/sys/bus/node|/sys/bus/nvmem|/sys/bus/parport|/sys/bus/pci|/sys/bus/pci-epf|/sys/bus/pci_express|/sys/bus/platform|/sys/bus/pnp|/sys/bus/rapidio|/sys/bus/scsi|/sys/bus/sdio|/sys/bus/serial|/sys/bus/serio|/sys/bus/spi|/sys/bus/usb|/sys/bus/virtio|/sys/bus/vme|/sys/bus/workqueue|/sys/bus/xen|/sys/bus/xen-backend|/sys/class|/sys/class/ata_device|/sys/class/ata_link|/sys/class/ata_port|/sys/class/backlight|/sys/class/bdi|/sys/class/block|/sys/class/bsg|/sys/class/devcoredump|/sys/class/devfreq|/sys/class/devfreq-event|/sys/class/dma|/sys/class/dmi|/sys/class/drm|/sys/class/drm_dp_aux_dev|/sys/class/extcon|/sys/class/firmware|/sys/class/gpio|/sys/class/graphics|/sys/class/hidraw|/sys/class/hmm_device|/sys/class/hwmon|/sys/class/i2c-adapter|/sys/class/i2c-dev|/sys/class/input|/sys/class/iommu|/sys/class/leds|/sys/class/mdio_bus|/sys/class/mem|/sys/class/misc|/sys/class/mmc_host|/sys/class/nd|/sys/class/net|/sys/class/pci_bus|/sys/class/pci_epc|/sys/class/phy|/sys/class/powercap|/sys/class/power_supply|/sys/class/ppdev|/sys/class/ppp|/sys/class/printer|/sys/class/pwm|/sys/class/rapidio_port|/sys/class/regulator|/sys/class/rfkill|/sys/class/rtc|/sys/class/scsi_device|/sys/class/scsi_disk|/sys/class/scsi_generic|/sys/class/scsi_host|/sys/class/spi_master|/sys/class/spi_slave|/sys/class/thermal|/sys/class/tpm|/sys/class/tpmrm|/sys/class/tty|/sys/class/vc|/sys/class/virtio-ports|/sys/class/vtconsole|/sys/class/watchdog|/sys/dev|/sys/dev/block|/sys/dev/char|/sys/devices|/sys/devices/breakpoint|/sys/devices/cpu|/sys/devices/isa|/sys/devices/LNXSYSTM:00|/sys/devices/msr|/sys/devices/parport0|/sys/devices/pci0000:00|/sys/devices/platform|/sys/devices/pnp0|/sys/devices/software|/sys/devices/system|/sys/devices/tracepoint|/sys/devices/virtual|/sys/firmware|/sys/firmware/acpi|/sys/firmware/dmi|/sys/firmware/memmap|/sys/fs|/sys/fs/bpf|/sys/fs/cgroup|/sys/fs/ecryptfs|/sys/fs/ext4|/sys/fs/fuse|/sys/fs/pstore|/sys/hypervisor|/sys/kernel|/sys/kernel/boot_params|/sys/kernel/cgroup|/sys/kernel/config|/sys/kernel/debug|/sys/kernel/iommu_groups|/sys/kernel/irq|/sys/kernel/livepatch|/sys/kernel/mm|/sys/kernel/security|/sys/kernel/slab|/sys/kernel/tracing|/sys/module|/sys/module/8139cp|/sys/module/8139too|/sys/module/8250|/sys/module/acpi|/sys/module/acpi_cpufreq|/sys/module/acpiphp|/sys/module/aesni_intel|/sys/module/aes_x86_64|/sys/module/ahci|/sys/module/apparmor|/sys/module/ata_generic|/sys/module/ata_piix|/sys/module/autofs4|/sys/module/battery|/sys/module/binfmt_misc|/sys/module/block|/sys/module/button|/sys/module/configfs|/sys/module/cpufreq|/sys/module/cpuidle|/sys/module/crc32_pclmul|/sys/module/crct10dif_pclmul|/sys/module/cryptd|/sys/module/cryptomgr|/sys/module/crypto_simd|/sys/module/debug_core|/sys/module/dm_mod|/sys/module/dns_resolver|/sys/module/drm|/sys/module/drm_kms_helper|/sys/module/dynamic_debug|/sys/module/edac_core|/sys/module/edd|/sys/module/efivars|/sys/module/ehci_hcd|/sys/module/elants_i2c|/sys/module/ext4|/sys/module/fb|/sys/module/fb_sys_fops|/sys/module/firmware_class|/sys/module/floppy|/sys/module/fscrypto|/sys/module/fuse|/sys/module/ghash_clmulni_intel|/sys/module/glue_helper|/sys/module/gpiolib_acpi|/sys/module/hid|/sys/module/hid_generic|/sys/module/i2c_piix4|/sys/module/i8042|/sys/module/ima|/sys/module/input_leds|/sys/module/intel_idle|/sys/module/ip_tables|/sys/module/ipv6|/sys/module/joydev|/sys/module/kdb|/sys/module/kernel|/sys/module/keyboard|/sys/module/kgdb_nmi|/sys/module/kgdboc|/sys/module/libahci|/sys/module/libata|/sys/module/loop|/sys/module/lp|/sys/module/mac_hid|/sys/module/md_mod|/sys/module/mii|/sys/module/module|/sys/module/mousedev|/sys/module/netpoll|/sys/module/nfnetlink|/sys/module/nf_tables|/sys/module/nf_tables_inet|/sys/module/nf_tables_ipv4|/sys/module/nf_tables_ipv6|/sys/module/parport|/sys/module/parport_pc|/sys/module/pata_acpi|/sys/module/pata_sis|/sys/module/pcbc|/sys/module/pcc_cpufreq|/sys/module/pcie_aspm|/sys/module/pciehp|/sys/module/pci_hotplug|/sys/module/ppdev|/sys/module/ppp_generic|/sys/module/printk|/sys/module/processor|/sys/module/psmouse|/sys/module/pstore|/sys/module/random|/sys/module/rcupdate|/sys/module/rcutree|/sys/module/rfkill|/sys/module/rng_core|/sys/module/sch_fq_codel|/sys/module/scsi_mod|/sys/module/serio_raw|/sys/module/sg|/sys/module/spurious|/sys/module/srcutree|/sys/module/sr_mod|/sys/module/stahp|/sys/module/suspend|/sys/module/syscopyarea|/sys/module/sysfillrect|/sys/module/sysimgblt|/sys/module/sysrq|/sys/module/tcp_cubic|/sys/module/thermal|/sys/module/tpm|/sys/module/tpm_crb|/sys/module/tpm_tis|/sys/module/tpm_tis_core|/sys/module/ttm|/sys/module/uhci_hcd|/sys/module/uinput|/sys/module/usbcore|/sys/module/usbhid|/sys/module/virtio_balloon|/sys/module/virtio_blk|/sys/module/virtio_gpu|/sys/module/virtio_mmio|/sys/module/virtio_pci|/sys/module/vt|/sys/module/watchdog|/sys/module/workqueue|/sys/module/xen|/sys/module/xen_acpi_processor|/sys/module/xen_blkfront|/sys/module/xen_netfront|/sys/module/xhci_hcd|/sys/module/x_tables|/sys/module/xz_dec|/sys/module/zswap|/sys/power|/tmp|/tmp/.font-unix|/tmp/.ICE-unix|/tmp/netplan_lx3vfqo2|/tmp/snap-private-tmp|/tmp/ssh-dw52Rekv8XIC|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-bolt.service-6hCFSA|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-bolt.service-6hCFSA/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-colord.service-YVjWiF|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-colord.service-YVjWiF/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-ModemManager.service-cISTPY|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-ModemManager.service-cISTPY/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-resolved.service-qzf14b|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-resolved.service-qzf14b/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-timedated.service-C8mze2|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-timedated.service-C8mze2/tmp|/tmp/.Test-unix|/tmp/.X11-unix|/tmp/.XIM-unix|/usr|/usr/bin|/usr/games|/usr/include|/usr/include/arpa|/usr/include/asm-generic|/usr/include/c++|/usr/include/drm|/usr/include/linux|/usr/include/misc|/usr/include/mtd|/usr/include/net|/usr/include/netash|/usr/include/netatalk|/usr/include/netax25|/usr/include/neteconet|/usr/include/netinet|/usr/include/netipx|/usr/include/netiucv|/usr/include/netpacket|/usr/include/netrom|/usr/include/netrose|/usr/include/nfs|/usr/include/node|/usr/include/openssl|/usr/include/protocols|/usr/include/python3.6m|/usr/include/rdma|/usr/include/reglib|/usr/include/rpc|/usr/include/rpcsvc|/usr/include/scsi|/usr/include/sound|/usr/include/video|/usr/include/X11|/usr/include/x86_64-linux-gnu|/usr/include/xen|/usr/include/xorg|/usr/lib|/usr/lib/accountsservice|/usr/lib/apg|/usr/lib/apt|/usr/lib/aspell|/usr/lib/at-spi2-core|/usr/lib/avahi|/usr/lib/bfd-plugins|/usr/lib/binfmt.d|/usr/lib/bluetooth|/usr/lib/colord|/usr/lib/compat-ld|/usr/lib/cups|/usr/lib/dbus-1.0|/usr/lib/dconf|/usr/lib/debug|/usr/lib/deja-dup|/usr/lib/dpkg|/usr/lib/eject|/usr/lib/emacsen-common|/usr/lib/environment.d|/usr/lib/evince|/usr/lib/evolution|/usr/lib/evolution-data-server|/usr/libexec|/usr/lib/file|/usr/lib/firefox|/usr/lib/firefox-addons|/usr/lib/fwupd|/usr/lib/gcc|/usr/lib/gcr|/usr/lib/gdm3|/usr/lib/geoclue-2.0|/usr/lib/gettext|/usr/lib/ghostscript|/usr/lib/girepository-1.0|/usr/lib/gjs|/usr/lib/glib-networking|/usr/lib/gnome-control-center|/usr/lib/gnome-disk-utility|/usr/lib/gnome-initial-setup|/usr/lib/gnome-online-accounts|/usr/lib/gnome-session|/usr/lib/gnome-settings-daemon|/usr/lib/gnome-settings-daemon-3.0|/usr/lib/gnome-shell|/usr/lib/gnome-terminal|/usr/lib/gnupg|/usr/lib/gnupg2|/usr/lib/gold-ld|/usr/lib/groff|/usr/lib/grub|/usr/lib/grub-legacy|/usr/lib/gvfs|/usr/lib/ibus|/usr/lib/initramfs-tools|/usr/lib/ispell|/usr/lib/kernel|/usr/lib/klibc|/usr/lib/language-selector|/usr/lib/libmbim|/usr/lib/libqmi|/usr/lib/libreoffice|/usr/lib/linux|/usr/lib/linux-boot-probes|/usr/lib/locale|/usr/lib/lp_solve|/usr/lib/man-db|/usr/lib/memtest86+|/usr/lib/mime|/usr/lib/modules-load.d|/usr/lib/mozilla|/usr/lib/mutter|/usr/lib/networkd-dispatcher|/usr/lib/NetworkManager|/usr/lib/node_modules|/usr/lib/notification-daemon|/usr/lib/nvidia|/usr/lib/openssh|/usr/lib/os-prober|/usr/lib/os-probes|/usr/lib/packagekit|/usr/lib/pcmciautils|/usr/lib/pkgconfig|/usr/lib/pm-utils|/usr/lib/policykit-1|/usr/lib/pppd|/usr/lib/pulse-11.1|/usr/lib/python2.7|/usr/lib/python3|/usr/lib/python3.6|/usr/lib/python3.7|/usr/lib/python3.8|/usr/lib/rhythmbox|/usr/lib/rsyslog|/usr/lib/rtkit|/usr/lib/sasl2|/usr/lib/selinux|/usr/lib/shotwell|/usr/lib/snapd|/usr/lib/software-properties|/usr/lib/speech-dispatcher-modules|/usr/lib/ssl|/usr/lib/sudo|/usr/lib/sysctl.d|/usr/lib/syslinux|/usr/lib/SYSLINUX|/usr/lib/syslinux-legacy|/usr/lib/systemd|/usr/lib/system-service|/usr/lib/sysusers.d|/usr/lib/tar|/usr/lib/tasksel|/usr/lib/tc|/usr/lib/thunderbird|/usr/lib/thunderbird-addons|/usr/lib/tmpfiles.d|/usr/lib/ubiquity|/usr/lib/ubuntu-advantage|/usr/lib/ubuntu-release-upgrader|/usr/lib/udisks2|/usr/lib/unity-settings-daemon-1.0|/usr/lib/update-notifier|/usr/lib/upower|/usr/lib/valgrind|/usr/lib/vino|/usr/lib/X11|/usr/lib/x86_64-linux-gnu|/usr/lib/xorg|/usr/lib/xserver-xorg-video-intel|/usr/lib/zeitgeist|/usr/local|/usr/local/bin|/usr/local/etc|/usr/local/games|/usr/local/include|/usr/local/lib|/usr/local/sbin|/usr/local/share|/usr/local/src|/usr/sbin|/usr/share|/usr/share/aclocal|/usr/share/acpi-support|/usr/share/adduser|/usr/share/adium|/usr/share/aisleriot|/usr/share/alsa|/usr/share/alsa-base|/usr/share/appdata|/usr/share/app-info|/usr/share/app-install|/usr/share/application-registry|/usr/share/applications|/usr/share/apport|/usr/share/apps|/usr/share/apturl|/usr/share/aspell|/usr/share/avahi|/usr/share/awk|/usr/share/backgrounds|/usr/share/base-files|/usr/share/base-passwd|/usr/share/bash-completion|/usr/share/binfmts|/usr/share/branding|/usr/share/brltty|/usr/share/bug|/usr/share/build-essential|/usr/share/ca-certificates|/usr/share/calendar|/usr/share/cmake|/usr/share/cogl|/usr/share/color|/usr/share/colord|/usr/share/command-not-found|/usr/share/common-licenses|/usr/share/consolefonts|/usr/share/console-setup|/usr/share/consoletrans|/usr/share/cups|/usr/share/dbus-1|/usr/share/dconf|/usr/share/debconf|/usr/share/debhelper|/usr/share/debianutils|/usr/share/defaults|/usr/share/desktop-directories|/usr/share/dict|/usr/share/dictionaries-common|/usr/share/distro-info|/usr/share/djvu|/usr/share/dns|/usr/share/dnsmasq-base|/usr/share/doc|/usr/share/doc-base|/usr/share/dpkg|/usr/share/drirc.d|/usr/share/emacs|/usr/share/enchant|/usr/share/eog|/usr/share/evince|/usr/share/evolution-data-server|/usr/share/example-content|/usr/share/file|/usr/share/file-roller|/usr/share/fish|/usr/share/fontconfig|/usr/share/fonts|/usr/share/fonts-droid-fallback|/usr/share/fonts-sil-padauk|/usr/share/foo2qpdl|/usr/share/foo2zjs|/usr/share/fwupd|/usr/share/gcc-8|/usr/share/GConf|/usr/share/gdb|/usr/share/gdm|/usr/share/gedit|/usr/share/GeoIP|/usr/share/gettext|/usr/share/gettext-0.19.8|/usr/share/ghostscript|/usr/share/glib-2.0|/usr/share/glvnd|/usr/share/gnome|/usr/share/gnome-background-properties|/usr/share/gnome-bluetooth|/usr/share/gnome-control-center|/usr/share/gnome-mahjongg|/usr/share/gnome-mines|/usr/share/gnome-session|/usr/share/gnome-settings-daemon|/usr/share/gnome-shell|/usr/share/gnome-software|/usr/share/gnome-sudoku|/usr/share/gnome-todo|/usr/share/gnome-video-effects|/usr/share/gnupg|/usr/share/goa-1.0|/usr/share/grilo-plugins|/usr/share/groff|/usr/share/grub|/usr/share/grub-gfxpayload-lists|/usr/share/gst-plugins-base|/usr/share/gstreamer-1.0|/usr/share/gtk-doc|/usr/share/gtk-engines|/usr/share/gtksourceview-3.0|/usr/share/guile|/usr/share/gutenprint|/usr/share/gvfs|/usr/share/hal|/usr/share/help|/usr/share/help-langpack|/usr/share/hplip|/usr/share/hunspell|/usr/share/hyphen|/usr/share/i18n|/usr/share/ibus|/usr/share/ibus-table|/usr/share/icons|/usr/share/ImageMagick-6|/usr/share/im-config|/usr/share/indicators|/usr/share/info|/usr/share/initramfs-tools|/usr/share/installation-report|/usr/share/intltool-debian|/usr/share/iptables|/usr/share/iso-codes|/usr/share/java|/usr/share/kde4|/usr/share/keyrings|/usr/share/language-selector|/usr/share/language-support|/usr/share/language-tools|/usr/share/libaudio2|/usr/share/libc-bin|/usr/share/libdrm|/usr/share/libexttextcat|/usr/share/libgnomekbd|/usr/share/libgphoto2|/usr/share/libgweather|/usr/share/liblangtag|/usr/share/liblouis|/usr/share/liblouisutdml|/usr/share/libparse-debianchangelog-perl|/usr/share/libreoffice|/usr/share/librevenge|/usr/share/libsensors4|/usr/share/libthai|/usr/share/libwacom|/usr/share/lightdm|/usr/share/lintian|/usr/share/linux-sound-base|/usr/share/locale|/usr/share/locale-langpack|/usr/share/locales|/usr/share/m2300w|/usr/share/man|/usr/share/man-db|/usr/share/maven-repo|/usr/share/media-player-info|/usr/share/menu|/usr/share/metainfo|/usr/share/mime|/usr/share/mime-info|/usr/share/mimelnk|/usr/share/misc|/usr/share/mobile-broadband-provider-info|/usr/share/mousetweaks|/usr/share/mozilla|/usr/share/mythes|/usr/share/nano|/usr/share/nautilus-share|/usr/share/netpbm|/usr/share/netplan|/usr/share/numpy3|/usr/share/openssh|/usr/share/orca|/usr/share/os-prober|/usr/share/p11-kit|/usr/share/package-data-downloads|/usr/share/PackageKit|/usr/share/pam|/usr/share/pam-configs|/usr/share/perl|/usr/share/perl5|/usr/share/perl-openssl-defaults|/usr/share/pixmaps|/usr/share/pkgconfig|/usr/share/plymouth|/usr/share/pnm2ppa|/usr/share/polkit-1|/usr/share/poppler|/usr/share/popularity-contest|/usr/share/ppd|/usr/share/ppp|/usr/share/publicsuffix|/usr/share/pulseaudio|/usr/share/pyshared|/usr/share/python|/usr/share/python3|/usr/share/python-apt|/usr/share/readline|/usr/share/remmina|/usr/share/rhythmbox|/usr/share/rsyslog|/usr/share/seahorse|/usr/share/secureboot|/usr/share/selinux|/usr/share/selinux-basics|/usr/share/sensible-utils|/usr/share/session-migration|/usr/share/simple-scan|/usr/share/snmp|/usr/share/software-properties|/usr/share/sounds|/usr/share/speech-dispatcher|/usr/share/ssl-cert|/usr/share/system-config-printer|/usr/share/systemd|/usr/share/systemtap|/usr/share/tabset|/usr/share/tasksel|/usr/share/terminfo|/usr/share/themes|/usr/share/thumbnailers|/usr/share/totem|/usr/share/transmission|/usr/share/ubuntu|/usr/share/ubuntu-drivers-common|/usr/share/ubuntu-release-upgrader|/usr/share/ubuntu-wayland|/usr/share/ufw|/usr/share/unattended-upgrades|/usr/share/unity|/usr/share/update-manager|/usr/share/update-notifier|/usr/share/upstart|/usr/share/usb-creator|/usr/share/usb_modeswitch|/usr/share/vim|/usr/share/wayland-sessions|/usr/share/X11|/usr/share/xdg-desktop-portal|/usr/share/xml|/usr/share/xsessions|/usr/share/yelp|/usr/share/yelp-xsl|/usr/share/zeitgeist|/usr/share/zenity|/usr/share/zoneinfo|/usr/share/zsh|/usr/src|/usr/src/linux-headers-4.15.0-213|/usr/src/linux-headers-4.15.0-213-generic|/var|/var/backups|/var/cache|/var/cache/apparmor|/var/cache/app-info|/var/cache/apt|/var/cache/cracklib|/var/cache/cups|/var/cache/debconf|/var/cache/dictionaries-common|/var/cache/fontconfig|/var/cache/gdm|/var/cache/ldconfig|/var/cache/PackageKit|/var/cache/snapd|/var/crash|/var/lib|/var/lib/AccountsService|/var/lib/acpi-support|/var/lib/alsa|/var/lib/app-info|/var/lib/apport|/var/lib/apt|/var/lib/aspell|/var/lib/bluetooth|/var/lib/boltd|/var/lib/command-not-found|/var/lib/dbus|/var/lib/dhcp|/var/lib/dictionaries-common|/var/lib/dpkg|/var/lib/emacsen-common|/var/lib/fwupd|/var/lib/ghostscript|/var/lib/grub|/var/lib/hp|/var/lib/initramfs-tools|/var/lib/ispell|/var/lib/libreoffice|/var/lib/libxml-sax-perl|/var/lib/locales|/var/lib/logrotate|/var/lib/man-db|/var/lib/misc|/var/lib/mlocate|/var/lib/NetworkManager|/var/lib/os-prober|/var/lib/PackageKit|/var/lib/pam|/var/lib/plymouth|/var/lib/polkit-1|/var/lib/private|/var/lib/python|/var/lib/selinux|/var/lib/sepolgen|/var/lib/snapd|/var/lib/snmp|/var/lib/sudo|/var/lib/systemd|/var/lib/ubuntu-advantage|/var/lib/ubuntu-drivers-common|/var/lib/ubuntu-release-upgrader|/var/lib/ucf|/var/lib/udisks2|/var/lib/unattended-upgrades|/var/lib/update-manager|/var/lib/update-notifier|/var/lib/upower|/var/lib/ureadahead|/var/lib/usb_modeswitch|/var/lib/usbutils|/var/lib/vim|/var/lib/whoopsie|/var/lib/xfonts|/var/lib/xkb|/var/local|/var/log|/var/log/apt|/var/log/audit|/var/log/cups|/var/log/dist-upgrade|/var/log/gdm3|/var/log/hp|/var/log/installer|/var/log/journal|/var/log/unattended-upgrades|/var/mail|/var/metrics|/var/opt|/var/snap|/var/spool|/var/spool/anacron|/var/spool/cron|/var/spool/cups|/var/spool/libreoffice|/var/tmp|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-bolt.service-phU6e7|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-colord.service-bwmMmd|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-ModemManager.service-rxKhGn|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-resolved.service-xGzwZz|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-timedated.service-Tc9erG|[a-zA-Z]+[a-zA-Z0-9]* +\\*|\\./|\\.:|:\\.,[1;31;103m&[0m,g"2⤵PID:1594
-
-
/usr/bin/trtr "\\n" " "2⤵PID:1600
-
-
/bin/grepgrep -Ev "^/root|^/home|^/Users|^/var/www"2⤵PID:1599
-
-
/usr/bin/cutcut -d : -f 62⤵PID:1598
-
-
/bin/grepgrep "sh\$"2⤵PID:1597
-
-
/bin/catcat /etc/passwd2⤵PID:1596
-
-
/bin/grepgrep -q /home/root2⤵PID:1602
-
-
/bin/grepgrep -qE "^/root|^/home|^/Users|^/var/www"2⤵PID:1604
-
-
/usr/bin/trtr " " "|"2⤵PID:1608
-
-
/bin/sedsed "s/ *\$//g"2⤵PID:1607
-
-
/bin/grepgrep -q procs_crons_timers_srvcs_sockets2⤵PID:1610
-
-
/usr/bin/sortsort2⤵PID:1614
-
-
/usr/bin/findfind /applications -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1613
-
-
/usr/bin/sortsort2⤵PID:1618
-
-
/usr/bin/findfind /bin -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1617
-
-
/usr/bin/sortsort2⤵PID:1622
-
-
/usr/bin/findfind /.cache -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1621
-
-
/usr/bin/sortsort2⤵PID:1626
-
-
/usr/bin/findfind /cdrom -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1625
-
-
/usr/bin/sortsort2⤵PID:1630
-
-
/usr/bin/findfind /etc -type d -name ipa -o -name .gemini -o -name kubelet -o -name session.d -o -name concourse-auth -o -name kubernetes -o -name legacy_credentials -o -name "*jenkins" -o -name sites-enabled -o -name pam.d -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name bind -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name system-connections -o -name environments -o -name mysql -o -name wpa_supplicant -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name system-local.d -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name system.d -o -name gh -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name kube-proxy -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1629
-
-
/usr/bin/sortsort2⤵PID:1634
-
-
/usr/bin/findfind /home/ /Users/ /root/ /var/www -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1633
-
-
/usr/bin/sortsort2⤵PID:1638
-
-
/usr/bin/findfind /media -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1637
-
-
/usr/bin/sortsort2⤵PID:1642
-
-
/usr/bin/findfind /mnt -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1641
-
-
/usr/bin/sortsort2⤵PID:1646
-
-
/usr/bin/findfind /opt -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1645
-
-
/usr/bin/sortsort2⤵PID:1650
-
-
/usr/bin/findfind /private -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1649
-
-
/usr/bin/sortsort2⤵PID:1654
-
-
/usr/bin/findfind /sbin -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1653
-
-
/usr/bin/sortsort2⤵PID:1658
-
-
/usr/bin/findfind /snap -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1657
-
-
/usr/bin/sortsort2⤵PID:1662
-
-
/usr/bin/findfind /srv -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1661
-
-
/usr/bin/sortsort2⤵PID:1666
-
-
/usr/bin/findfind /tmp -type d -name ipa -o -name .gemini -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1665
-
-
/usr/bin/sortsort2⤵PID:1670
-
-
/usr/bin/findfind /usr -type d -name services -o -name ipa -o -name .gemini -o -name session.d -o -name concourse-auth -o -name "*jenkins" -o -name legacy_credentials -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name bind -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name system-services -o -name sentry -o -name varnish -o -name cacti -o -name gh -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1669
-
-
/usr/bin/sortsort2⤵PID:1674
-
-
/usr/bin/findfind /var -type d -name ipa -o -name .gemini -o -name kubelet -o -name concourse-auth -o -name kubernetes -o -name legacy_credentials -o -name "*jenkins" -o -name sites-enabled -o -name gcloud -o -name .docker -o -name .vnc -o -name concourse-keys -o -name bind -o -name .irssi -o -name doctl -o -name keyrings -o -name logstash -o -name postfix -o -name environments -o -name mysql -o -name "seeddms*" -o -name .svn -o -name .cursor -o -name .bluemix -o -name ".kube*" -o -name zabbix -o -name ErrorRecords -o -name couchdb -o -name .password-store -o -name .codex -o -name roundcube -o -name neo4j -o -name .cloudflared -o -name apt.conf.d -o -name gh -o -name .claude -o -name ldap -o -name "Google Password Sync" -o -name sentry -o -name varnish -o -name cacti -o -name kube-proxy -o -name filezilla -o -name dirsrv -o -name nginx -o -name "Google Cloud Directory Sync"2⤵PID:1673
-
-
/usr/bin/sortsort2⤵PID:1678
-
-
/usr/bin/findfind /concourse-auth -type d -name concourse-auth2⤵PID:1677
-
-
/usr/bin/sortsort2⤵PID:1682
-
-
/usr/bin/findfind /concourse-keys -type d -name concourse-keys2⤵PID:1681
-
-
/usr/bin/sortsort2⤵PID:1686
-
-
/usr/bin/findfind /applications -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1685
-
-
/usr/bin/sortsort2⤵PID:1690
-
-
/usr/bin/findfind /bin -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1689
-
-
/usr/bin/sortsort2⤵PID:1694
-
-
/usr/bin/findfind /.cache -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1693
-
-
/usr/bin/sortsort2⤵PID:1698
-
-
/usr/bin/findfind /cdrom -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1697
-
-
/usr/bin/sortsort2⤵PID:1702
-
-
/usr/bin/findfind /etc -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name exports -o -name msal_token_cache.json -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name fastcgi_params -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name "*knockd*" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1701
-
-
/usr/bin/sortsort2⤵PID:1706
-
-
/usr/bin/findfind /home/ /Users/ /root/ /var/www -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "ssh*config" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name "*.sqlite" -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1705
-
-
/usr/bin/sortsort2⤵PID:1710
-
-
/usr/bin/findfind /lib -name "*.service" -o -name "*.timer" -o -name "log4j-core*.jar" -o -name rocketchat.service -o -name "*.socket"2⤵PID:1709
-
-
/usr/bin/sortsort2⤵PID:1714
-
-
/usr/bin/findfind /lib32 -name "log4j-core*.jar" -o -name "*.service" -o -name "*.timer" -o -name "*.socket"2⤵PID:1713
-
-
/usr/bin/sortsort2⤵PID:1718
-
-
/usr/bin/findfind /lib64 -name "log4j-core*.jar" -o -name "*.service" -o -name "*.timer" -o -name "*.socket"2⤵PID:1717
-
-
/usr/bin/sortsort2⤵PID:1722
-
-
/usr/bin/findfind /media -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1721
-
-
/usr/bin/sortsort2⤵PID:1726
-
-
/usr/bin/findfind /mnt -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name "sess_*" -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1725
-
-
/usr/bin/sortsort2⤵PID:1730
-
-
/usr/bin/findfind /opt -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1729
-
-
/usr/bin/sortsort2⤵PID:1734
-
-
/usr/bin/findfind /private -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name "sess_*" -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1733
-
-
/usr/bin/sortsort2⤵PID:1738
-
-
/usr/bin/findfind /run -name "*.service" -o -name "*.timer" -o -name ssh-agent.sock -o -name "*.socket" -o -name "agent.*"2⤵PID:1737
-
-
/usr/bin/sortsort2⤵PID:1742
-
-
/usr/bin/findfind /sbin -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1741
-
-
/usr/bin/sortsort2⤵PID:1746
-
-
/usr/bin/findfind /snap -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
PID:1745
-
-
/usr/bin/sortsort2⤵PID:1750
-
-
/usr/bin/findfind /srv -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1749
-
-
/usr/bin/sortsort2⤵PID:1754
-
-
/usr/bin/findfind /sys -name "*.service" -o -name "*.timer" -o -name "*.socket"2⤵
- Reads AppArmor ptrace settings
- Reads hardware information
- Reads network interface configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1753
-
-
/usr/bin/sortsort2⤵PID:1758
-
-
/usr/bin/findfind /system -name "*.service" -o -name "*.timer" -o -name "*.socket"2⤵PID:1757
-
-
/usr/bin/sortsort2⤵PID:1762
-
-
/usr/bin/findfind /systemd -name rocketchat.service -o -name "*.service" -o -name "*.timer" -o -name "*.socket"2⤵PID:1761
-
-
/usr/bin/sortsort2⤵PID:1766
-
-
/usr/bin/findfind /tmp -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name ssh-agent.sock -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name "agent.*" -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name "*.maintenance*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name "sess_*" -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1765
-
-
/usr/bin/sortsort2⤵PID:1770
-
-
/usr/bin/findfind /usr -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "ssh*config" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name "*.sqlite" -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1769
-
-
/usr/bin/sortsort2⤵PID:1774
-
-
/usr/bin/findfind /var -name authorized_hosts -o -name fat.config -o -name "id_rsa*" -o -name pubring.kbx -o -name "*credential*" -o -name .roadtools_auth -o -name postgresql.conf -o -name "*.pcap" -o -name hostapd.conf -o -name config.php -o -name .boto -o -name .wgetrc -o -name .mcp.json -o -name https-xampp.conf -o -name apt.conf -o -name redis.conf -o -name .Xauthority -o -name my.cnf -o -name docker.socket -o -name azureProfile.json -o -name sentry.conf.py -o -name crontab.db -o -name known_hosts -o -name access_tokens.db -o -name .sudo_as_admin_successful -o -name hosts.equiv -o -name sslkeylog.log -o -name "*.socket" -o -name firebase-tools.json -o -name cesi.conf -o -name sip.conf -o -name glusterfs.key -o -name .credentials.json -o -name vault-ssh-helper.hcl -o -name "*.sqlite" -o -name "*_history*" -o -name FreeSSHDservice.ini -o -name zabbix_agentd.conf -o -name iis6.log -o -name "*.maintenance*" -o -name state.vscdb -o -name .recently-used.xbel -o -name pagefile.sys -o -name "*vnc*.txt" -o -name zabbix_server.conf -o -name printers.xml -o -name airflow.cfg -o -name state.vscdb.backup -o -name gvm-tools.conf -o -name racoon.conf -o -name FreePBX.conf -o -name .git-credentials -o -name .gitconfig -o -name scheduledtasks.xml -o -name smb.conf -o -name webserver_config.py -o -name service_principal_entries.json -o -name filezilla.xml -o -name secring.gpg -o -name "log4j-core*.jar" -o -name "*.der" -o -name .ldaprc -o -name "*.pgp" -o -name "*.gpg" -o -name "*.rdg" -o -name sysprep.inf -o -name keys.log -o -name "*vnc*.ini" -o -name "*.pem" -o -name Dockerfile -o -name "*.keytab" -o -name KeePass.ini -o -name "*.ftpconfig" -o -name software -o -name krb5.conf -o -name https.conf -o -name "*.gnupg" -o -name snyk.config.json -o -name api_key -o -name "*.p12" -o -name credentials.db -o -name setupinfo -o -name Ntds.dit -o -name "KeePass.enforced*" -o -name AppEvent.Evt -o -name ws_ftp.ini -o -name .k5login -o -name ipsec.conf -o -name setupinfo.bak -o -name db.php -o -name mosquitto.conf -o -name database.php -o -name containerd.sock -o -name tomcat-users.xml -o -name unattended.xml -o -name "*.db" -o -name snmpd.conf -o -name "*.key" -o -name system.sav -o -name glusterfs.ca -o -name AzureRMContext.json -o -name "KeePass.config*" -o -name ffftp.ini -o -name crio.sock -o -name kadm5.acl -o -name "id_dsa*" -o -name passwd -o -name "kibana.y*ml" -o -name storage.php -o -name "*.psk" -o -name "*.timer" -o -name .mylogin.cnf -o -name credentials.tfrc.json -o -name datasources.xml -o -name autounattend.xml -o -name .erlang.cookie -o -name msal_token_cache.json -o -name fastcgi_params -o -name supervisord.conf -o -name accessTokens.json -o -name "*.asc" -o -name docker-compose.yml -o -name dockershim.sock -o -name pg_hba.conf -o -name access.log -o -name wsl.exe -o -name nginx.conf -o -name wp-config.php -o -name "*.pfx" -o -name ConsoleHost_history.txt -o -name server.xml -o -name gitlab.yml -o -name secret.asc -o -name "*password*" -o -name default.sav -o -name passwd.ibd -o -name "*vnc*.xml" -o -name bitcoin.conf -o -name .vault-token -o -name service_principal_entries.bin -o -name .htpasswd -o -name 000-default.conf -o -name crontab-ui.service -o -name unattend.txt -o -name hudson.util.Secret -o -name secrets.ldb -o -name security.sav -o -name ftp.config -o -name trustdb.gpg -o -name NetSetup.log -o -name "mongod*.conf" -o -name SecEvent.Evt -o -name pgadmin4.db -o -name "*config*.php" -o -name httpd.conf -o -name secrets.yml -o -name "*.pub" -o -name settings.php -o -name passbolt.php -o -name "web*.config" -o -name .msmtprc -o -name jetty-realm.properties -o -name "*.tfstate" -o -name "*.vhd" -o -name backups -o -name ipsec.secrets -o -name credentials.xml -o -name psk.txt -o -name recentservers.xml -o -name error.log -o -name "*.keystore" -o -name sitemanager.xml -o -name access_tokens.json -o -name wcx_ftp.ini -o -name amportal.conf -o -name aliases -o -name SYSTEM -o -name scclient.exe -o -name groups.xml -o -name master.key -o -name "*.vhdx" -o -name gpg-agent.conf -o -name .github -o -name sysprep.xml -o -name cloud.cfg -o -name msal_token_cache.bin -o -name "*.sqlite3" -o -name grafana.ini -o -name backup -o -name debian.cnf -o -name winscp.ini -o -name drives.xml -o -name software.sav -o -name index.dat -o -name "*.cer" -o -name pwd.ibd -o -name "password*.ibd" -o -name mariadb.cnf -o -name pgsql.conf -o -name "*.swp" -o -name "creds*" -o -name Elastix.conf -o -name unattend.inf -o -name "*.service" -o -name storage.json -o -name php.ini -o -name "private-keys-v1.d/*.key" -o -name "*vnc*.c*nf*" -o -name SAM -o -name ddclient.conf -o -name RDCMan.settings -o -name gitlab.rm -o -name "pgadmin*.db" -o -name my.ini -o -name "*.tf" -o -name ftp.ini -o -name anaconda-ks.cfg -o -name authorized_keys -o -name .git -o -name autologin -o -name bash.exe -o -name "*.csr" -o -name appcmd.exe -o -name .flyrc -o -name .rhosts -o -name sites.ini -o -name "*.crt" -o -name msal_http_cache.bin -o -name rpcd -o -name .claude.json -o -name config.xml -o -name sssd.conf -o -name clouds.config -o -name ntuser.dat -o -name docker.sock -o -name ".env*" -o -name .secrets.mkey -o -name influxdb.conf -o -name .plan -o -name snyk.json -o -name "sess_*" -o -name rocketchat.service -o -name "*.ovpn" -o -name rsyncd.secrets -o -name "krb5cc_*" -o -name autologin.conf -o -name "elasticsearch.y*ml" -o -name "*.vmdk" -o -name atlantis.db -o -name .profile -o -name protecteduserkey.bin -o -name .google_authenticator -o -name environment -o -name "*.jks" -o -name unattend.xml -o -name rsyncd.conf -o -name kcpassword -o -name .pypirc -o -name vsftpd.conf -o -name .lesshst -o -name "*.pcapng" -o -name "*.kdbx" -o -name glusterfs.pem -o -name legacy_credentials.db -o -name adc.json -o -name mysqld.cnf -o -name TokenCache.dat -o -name frakti.sock -o -name rktlet.sock -o -name "*.keyring" -o -name .bashrc -o -name plum.sqlite -o -name .pgpass -o -name "*.viminfo"2⤵PID:1773
-
-
/usr/bin/sortsort2⤵PID:1778
-
-
/usr/bin/findfind /concourse-auth -name "*.service" -o -name "*.timer" -o -name "*.socket"2⤵PID:1777
-
-
/usr/bin/sortsort2⤵PID:1782
-
-
/usr/bin/findfind /concourse-keys -name "*.service" -o -name "*.timer" -o -name "*.socket"2⤵PID:1781
-
-
/bin/grepgrep -q procs_crons_timers_srvcs_sockets2⤵PID:1784
-
-
/usr/bin/headhead -n 702⤵PID:1791
-
-
/usr/bin/uniquniq2⤵PID:1790
-
-
/usr/bin/sortsort2⤵PID:1789
-
-
/bin/grepgrep -E ".*\\.service\$"2⤵PID:1788
-
-
/bin/grepgrep -E "^/home/|/Users/|/root/|/var/www|^/systemd|^/etc|^/private|^/lib64|^/usr|^/media|^/applications|^/.cache|^/cdrom|^/run|^/tmp|^/opt|^/sys|^/lib32|^/system|^/sbin|^/concourse-keys|^/lib|^/bin|^/var|^/srv|^/concourse-auth|^/snap|^/mnt"2⤵PID:1787
-
-
/usr/bin/headhead -n 702⤵PID:1798
-
-
/usr/bin/uniquniq2⤵PID:1797
-
-
/usr/bin/sortsort2⤵PID:1796
-
-
/bin/grepgrep -E ".*\\.timer\$"2⤵PID:1795
-
-
/bin/grepgrep -E "^/home/|/Users/|/root/|/var/www|^/systemd|^/etc|^/private|^/lib64|^/usr|^/media|^/applications|^/.cache|^/cdrom|^/run|^/tmp|^/opt|^/sys|^/lib32|^/system|^/sbin|^/concourse-keys|^/lib|^/bin|^/var|^/srv|^/concourse-auth|^/snap|^/mnt"2⤵PID:1794
-
-
/usr/bin/headhead -n 702⤵PID:1805
-
-
/usr/bin/uniquniq2⤵PID:1804
-
-
/usr/bin/sortsort2⤵PID:1803
-
-
/bin/grepgrep -E ".*\\.socket\$"2⤵PID:1802
-
-
/bin/grepgrep -E "^/home/|/Users/|/root/|/var/www|^/systemd|^/etc|^/private|^/lib64|^/usr|^/media|^/applications|^/.cache|^/cdrom|^/run|^/tmp|^/opt|^/sys|^/lib32|^/system|^/sbin|^/concourse-keys|^/lib|^/bin|^/var|^/srv|^/concourse-auth|^/snap|^/mnt"2⤵PID:1801
-
-
/usr/bin/headhead -n 702⤵PID:1812
-
-
/usr/bin/uniquniq2⤵PID:1811
-
-
/usr/bin/sortsort2⤵PID:1810
-
-
/bin/grepgrep -E "system\\.d\$|system-local\\.d\$|session\\.d\$|system-services\$|services\$"2⤵PID:1809
-
-
/bin/grepgrep -E "^/usr|^/etc"2⤵PID:1808
-
-
/usr/bin/uniquniq2⤵PID:1820
-
-
/usr/bin/sortsort2⤵PID:1819
-
-
/usr/bin/headhead -n 702⤵PID:1821
-
-
/bin/grepgrep -E "mysql\$|passwd\\.ibd\$|password.*\\.ibd\$|pwd\\.ibd\$|mysqld\\.cnf\$|\\.mylogin\\.cnf\$"2⤵PID:1818
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1817
-
-
/bin/grepgrep -E "^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql"2⤵PID:1816
-
-
/bin/grepgrep -v -E mysql/mysql2⤵PID:1815
-
-
/usr/bin/headhead -n 702⤵PID:1828
-
-
/usr/bin/uniquniq2⤵PID:1827
-
-
/usr/bin/sortsort2⤵PID:1826
-
-
/bin/grepgrep -E "mariadb\\.cnf\$|debian\\.cnf\$"2⤵PID:1825
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1824
-
-
/usr/bin/headhead -n 702⤵PID:1835
-
-
/usr/bin/uniquniq2⤵PID:1834
-
-
/usr/bin/sortsort2⤵PID:1833
-
-
/bin/grepgrep -E "pgadmin.*\\.db\$|pg_hba\\.conf\$|postgresql\\.conf\$|pgsql\\.conf\$|\\.pgpass\$|pgadmin4\\.db\$"2⤵PID:1832
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1831
-
-
/usr/bin/headhead -n 702⤵PID:1842
-
-
/usr/bin/uniquniq2⤵PID:1841
-
-
/usr/bin/sortsort2⤵PID:1840
-
-
/bin/grepgrep -E "sites-enabled\$|000-default\\.conf\$|php\\.ini\$|nginx\\.conf\$|nginx\$"2⤵PID:1839
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1838
-
-
/usr/bin/headhead -n 702⤵PID:1849
-
-
/usr/bin/uniquniq2⤵PID:1848
-
-
/usr/bin/sortsort2⤵PID:1847
-
-
/bin/grepgrep -E "varnish\$"2⤵PID:1846
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1845
-
-
/usr/bin/headhead -n 702⤵PID:1857
-
-
/usr/bin/uniquniq2⤵PID:1856
-
-
/usr/bin/sortsort2⤵PID:1855
-
-
/bin/grepgrep -E "sess_.*\$"2⤵PID:1854
-
-
/bin/grepgrep -E "^/var|^/mnt|^/private|^/tmp"2⤵PID:1853
-
-
/bin/grepgrep -E "/tmp/.*sess_.*|/var/tmp/.*sess_.*"2⤵PID:1852
-
-
/usr/bin/headhead -n 702⤵PID:1864
-
-
/usr/bin/uniquniq2⤵PID:1863
-
-
/usr/bin/sortsort2⤵PID:1862
-
-
/bin/grepgrep -E ".*config.*\\.php\$|database\\.php\$|db\\.php\$|storage\\.php\$|settings\\.php\$"2⤵PID:1861
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1860
-
-
/usr/bin/headhead -n 702⤵PID:1871
-
-
/usr/bin/uniquniq2⤵PID:1870
-
-
/usr/bin/sortsort2⤵PID:1869
-
-
/bin/grepgrep -E "airflow\\.cfg\$|webserver_config\\.py\$"2⤵PID:1868
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1867
-
-
/usr/bin/headhead -n 702⤵PID:1878
-
-
/usr/bin/uniquniq2⤵PID:1877
-
-
/usr/bin/sortsort2⤵PID:1876
-
-
/bin/grepgrep -E "\\.Xauthority\$"2⤵PID:1875
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1874
-
-
/usr/bin/headhead -n 702⤵PID:1885
-
-
/usr/bin/uniquniq2⤵PID:1884
-
-
/usr/bin/sortsort2⤵PID:1883
-
-
/bin/grepgrep -E "wp-config\\.php\$"2⤵PID:1882
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1881
-
-
/usr/bin/headhead -n 702⤵PID:1893
-
-
/usr/bin/uniquniq2⤵PID:1892
-
-
/usr/bin/sortsort2⤵PID:1891
-
-
/bin/grepgrep -E "settings\\.php\$"2⤵PID:1890
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1889
-
-
/bin/grepgrep -E /default/settings.php2⤵PID:1888
-
-
/usr/bin/headhead -n 702⤵PID:1901
-
-
/usr/bin/uniquniq2⤵PID:1900
-
-
/usr/bin/sortsort2⤵PID:1899
-
-
/bin/grepgrep -E "config\\.php\$"2⤵PID:1898
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1897
-
-
/bin/grepgrep -E moodle/config.php2⤵PID:1896
-
-
/usr/bin/headhead -n 702⤵PID:1908
-
-
/usr/bin/uniquniq2⤵PID:1907
-
-
/usr/bin/sortsort2⤵PID:1906
-
-
/bin/grepgrep -E "tomcat-users\\.xml\$"2⤵PID:1905
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1904
-
-
/usr/bin/headhead -n 702⤵PID:1915
-
-
/usr/bin/uniquniq2⤵PID:1914
-
-
/usr/bin/sortsort2⤵PID:1913
-
-
/bin/grepgrep -E "mongod.*\\.conf\$"2⤵PID:1912
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1911
-
-
/usr/bin/headhead -n 702⤵PID:1922
-
-
/usr/bin/uniquniq2⤵PID:1921
-
-
/usr/bin/sortsort2⤵PID:1920
-
-
/bin/grepgrep -E "rocketchat\\.service\$"2⤵PID:1919
-
-
/bin/grepgrep -E "^/applications|^/lib|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/systemd|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1918
-
-
/usr/bin/headhead -n 702⤵PID:1929
-
-
/usr/bin/uniquniq2⤵PID:1928
-
-
/usr/bin/sortsort2⤵PID:1927
-
-
/bin/grepgrep -E "supervisord\\.conf\$"2⤵PID:1926
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1925
-
-
/usr/bin/headhead -n 702⤵PID:1936
-
-
/usr/bin/uniquniq2⤵PID:1935
-
-
/usr/bin/sortsort2⤵PID:1934
-
-
/bin/grepgrep -E "cesi\\.conf\$"2⤵PID:1933
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1932
-
-
/usr/bin/headhead -n 702⤵PID:1943
-
-
/usr/bin/uniquniq2⤵PID:1942
-
-
/usr/bin/sortsort2⤵PID:1941
-
-
/bin/grepgrep -E "rsyncd\\.conf\$|rsyncd\\.secrets\$"2⤵PID:1940
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1939
-
-
/usr/bin/headhead -n 702⤵PID:1951
-
-
/usr/bin/uniquniq2⤵PID:1950
-
-
/usr/bin/sortsort2⤵PID:1949
-
-
/bin/grepgrep -E "rpcd\$"2⤵PID:1948
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1947
-
-
/bin/grepgrep -v -E "/init.d/|/sbin/|/usr/share/"2⤵PID:1946
-
-
/usr/bin/headhead -n 702⤵PID:1958
-
-
/usr/bin/uniquniq2⤵PID:1957
-
-
/usr/bin/sortsort2⤵PID:1956
-
-
/bin/grepgrep -E "bitcoin\\.conf\$"2⤵PID:1955
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1954
-
-
/usr/bin/headhead -n 702⤵PID:1965
-
-
/usr/bin/uniquniq2⤵PID:1964
-
-
/usr/bin/sortsort2⤵PID:1963
-
-
/bin/grepgrep -E "hostapd\\.conf\$"2⤵PID:1962
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1961
-
-
/usr/bin/headhead -n 702⤵PID:1972
-
-
/usr/bin/uniquniq2⤵PID:1971
-
-
/usr/bin/sortsort2⤵PID:1970
-
-
/bin/grepgrep -E "system-connections\$|wpa_supplicant\$"2⤵PID:1969
-
-
/bin/grepgrep -E "^/etc"2⤵PID:1968
-
-
/usr/bin/headhead -n 702⤵PID:1979
-
-
/usr/bin/uniquniq2⤵PID:1978
-
-
/usr/bin/sortsort2⤵PID:1977
-
-
/bin/grepgrep -E "pam\\.d\$"2⤵PID:1976
-
-
/bin/grepgrep -E "^/etc"2⤵PID:1975
-
-
/usr/bin/headhead -n 702⤵PID:1986
-
-
/usr/bin/uniquniq2⤵PID:1985
-
-
/usr/bin/sortsort2⤵PID:1984
-
-
/bin/grepgrep -E "exports\$"2⤵PID:1983
-
-
/bin/grepgrep -E "^/etc"2⤵PID:1982
-
-
/usr/bin/headhead -n 702⤵PID:1993
-
-
/usr/bin/uniquniq2⤵PID:1992
-
-
/usr/bin/sortsort2⤵PID:1991
-
-
/bin/grepgrep -E "glusterfs\\.pem\$|glusterfs\\.ca\$|glusterfs\\.key\$"2⤵PID:1990
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1989
-
-
/usr/bin/headhead -n 702⤵PID:2000
-
-
/usr/bin/uniquniq2⤵PID:1999
-
-
/usr/bin/sortsort2⤵PID:1998
-
-
/bin/grepgrep -E "anaconda-ks\\.cfg\$"2⤵PID:1997
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:1996
-
-
/usr/bin/headhead -n 702⤵PID:2007
-
-
/usr/bin/uniquniq2⤵PID:2006
-
-
/usr/bin/sortsort2⤵PID:2005
-
-
/bin/grepgrep -E ".*\\.tfstate\$|.*\\.tf\$|credentials\\.tfrc\\.json\$"2⤵PID:2004
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2003
-
-
/usr/bin/headhead -n 702⤵PID:2014
-
-
/usr/bin/uniquniq2⤵PID:2013
-
-
/usr/bin/sortsort2⤵PID:2012
-
-
/bin/grepgrep -E "racoon\\.conf\$|psk\\.txt\$"2⤵PID:2011
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2010
-
-
/usr/bin/uniquniq2⤵PID:2020
-
-
/usr/bin/headhead -n 702⤵PID:2021
-
-
/usr/bin/sortsort2⤵PID:2019
-
-
/bin/grepgrep -E "kubeconfig\$|bootstrap-kubeconfig\$|kubelet-kubeconfig\$|kubelet\\.conf\$|psk\\.txt\$|\\.kube.*\$|kubelet\$|kube-proxy\$|kubernetes\$"2⤵PID:2018
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2017
-
-
/usr/bin/headhead -n 702⤵PID:2029
-
-
/usr/bin/uniquniq2⤵PID:2028
-
-
/bin/grepgrep -E "\\.vnc\$|.*vnc.*\\.c.*nf.*\$|.*vnc.*\\.ini\$|.*vnc.*\\.txt\$|.*vnc.*\\.xml\$"2⤵PID:2026
-
-
/usr/bin/sortsort2⤵PID:2027
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2025
-
-
/bin/grepgrep -v -E /mime/2⤵PID:2024
-
-
/bin/grepgrep -E "ldap\$"2⤵PID:2033
-
-
/usr/bin/sortsort2⤵PID:2034
-
-
/usr/bin/uniquniq2⤵PID:2035
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2032
-
-
/usr/bin/headhead -n 702⤵PID:2036
-
-
/usr/bin/headhead -n 702⤵PID:2043
-
-
/usr/bin/uniquniq2⤵PID:2042
-
-
/usr/bin/sortsort2⤵PID:2041
-
-
/bin/grepgrep -E "log4j-core.*\\.jar\$"2⤵PID:2040
-
-
/bin/grepgrep -E "^/home/|/Users/|/root/|/var/www|^/etc|^/private|^/lib64|^/usr|^/media|^/applications|^/.cache|^/cdrom|^/tmp|^/opt|^/lib32|^/sbin|^/lib|^/bin|^/var|^/srv|^/snap|^/mnt"2⤵PID:2039
-
-
/usr/bin/headhead -n 702⤵PID:2050
-
-
/usr/bin/uniquniq2⤵PID:2049
-
-
/usr/bin/sortsort2⤵PID:2048
-
-
/bin/grepgrep -E ".*\\.ovpn\$"2⤵PID:2047
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2046
-
-
/usr/bin/headhead -n 702⤵PID:2057
-
-
/usr/bin/uniquniq2⤵PID:2056
-
-
/usr/bin/sortsort2⤵PID:2055
-
-
/bin/grepgrep -E "id_dsa.*\$|id_rsa.*\$|known_hosts\$|authorized_hosts\$|authorized_keys\$|.*\\.pub\$"2⤵PID:2054
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2053
-
-
/usr/bin/headhead -n 702⤵PID:2065
-
-
/usr/bin/uniquniq2⤵PID:2064
-
-
/usr/bin/sortsort2⤵PID:2063
-
-
/bin/grepgrep -E ".*\\.pem\$|.*\\.cer\$|.*\\.crt\$"2⤵PID:2062
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2061
-
-
/bin/grepgrep -v -E "/usr/share/|/usr/local/lib/|/usr/lib.*"2⤵PID:2060
-
-
/usr/bin/headhead -n 702⤵PID:2073
-
-
/usr/bin/uniquniq2⤵PID:2072
-
-
/usr/bin/sortsort2⤵PID:2071
-
-
/bin/grepgrep -E ".*\\.csr\$|.*\\.der\$"2⤵PID:2070
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2069
-
-
/bin/grepgrep -v -E "^/usr/share/|/usr/local/lib/|/usr/lib/.*|/usr/share/|/usr/local/lib/|/usr/lib/.*"2⤵PID:2068
-
-
/usr/bin/headhead -n 702⤵PID:2081
-
-
/usr/bin/uniquniq2⤵PID:2080
-
-
/usr/bin/sortsort2⤵PID:2079
-
-
/bin/grepgrep -E ".*\\.pfx\$|.*\\.p12\$"2⤵PID:2078
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2077
-
-
/bin/grepgrep -v -E "/usr/share/|/usr/local/lib/|/usr/lib/.*"2⤵PID:2076
-
-
/usr/bin/headhead -n 702⤵PID:2089
-
-
/usr/bin/uniquniq2⤵PID:2088
-
-
/usr/bin/sortsort2⤵PID:2087
-
-
/bin/grepgrep -E "agent\\..*\$|ssh-agent\\.sock\$"2⤵PID:2086
-
-
/bin/grepgrep -E "^/run|^/tmp"2⤵PID:2085
-
-
/bin/grepgrep -v -E .dll2⤵PID:2084
-
-
/usr/bin/headhead -n 702⤵PID:2096
-
-
/usr/bin/uniquniq2⤵PID:2095
-
-
/usr/bin/sortsort2⤵PID:2094
-
-
/bin/grepgrep -E "ssh.*config\$"2⤵PID:2093
-
-
/bin/grepgrep -E "^/home/|/Users/|/root/|/var/www|^/usr"2⤵PID:2092
-
-
/usr/bin/headhead -n 702⤵PID:2103
-
-
/usr/bin/uniquniq2⤵PID:2102
-
-
/usr/bin/sortsort2⤵PID:2101
-
-
/bin/grepgrep -E "snyk\\.json\$|snyk\\.config\\.json\$"2⤵PID:2100
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2099
-
-
/usr/bin/headhead -n 702⤵PID:2110
-
-
/usr/bin/uniquniq2⤵PID:2109
-
-
/usr/bin/sortsort2⤵PID:2108
-
-
/bin/grepgrep -E "credentials\\.db\$|legacy_credentials\\.db\$|adc\\.json\$|\\.boto\$|\\.credentials\\.json\$|firebase-tools\\.json\$|access_tokens\\.db\$|access_tokens\\.json\$|accessTokens\\.json\$|gcloud\$|legacy_credentials\$|azureProfile\\.json\$|TokenCache\\.dat\$|AzureRMContext\\.json\$|clouds\\.config\$|service_principal_entries\\.json\$|msal_token_cache\\.json\$|msal_http_cache\\.bin\$|service_principal_entries\\.bin\$|msal_token_cache\\.bin\$|ErrorRecords\$|TokenCache\\.dat\$|\\.bluemix\$|doctl\$|Google Cloud Directory Sync\$|Google Password Sync\$"2⤵PID:2107
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2106
-
-
/usr/bin/headhead -n 702⤵PID:2118
-
-
/usr/bin/uniquniq2⤵PID:2117
-
-
/usr/bin/sortsort2⤵PID:2116
-
-
/bin/grepgrep -E "\\.codex\$|\\.claude\$|\\.claude\\.json\$|\\.gemini\$|\\.cursor\$|\\.mcp\\.json\$|gh\$|state\\.vscdb\$|state\\.vscdb\\.backup\$|storage\\.json\$"2⤵PID:2115
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2114
-
-
/bin/grepgrep -E ".*/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?\$|.*/Library/Application Support/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?\$|.*/\\.config/gh\$|.*/AppData/.*gh\$|.*/Library/Application Support/gh\$"2⤵PID:2113
-
-
/usr/bin/headhead -n 702⤵PID:2125
-
-
/usr/bin/uniquniq2⤵PID:2124
-
-
/usr/bin/sortsort2⤵PID:2123
-
-
/bin/grepgrep -E "\\.roadtools_auth\$"2⤵PID:2122
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2121
-
-
/usr/bin/headhead -n 702⤵PID:2132
-
-
/usr/bin/uniquniq2⤵PID:2131
-
-
/usr/bin/sortsort2⤵PID:2130
-
-
/bin/grepgrep -E "ipa\$|dirsrv\$"2⤵PID:2129
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2128
-
-
/usr/bin/headhead -n 702⤵PID:2139
-
-
/usr/bin/uniquniq2⤵PID:2138
-
-
/usr/bin/sortsort2⤵PID:2137
-
-
/bin/grepgrep -E "krb5\\.conf\$|.*\\.keytab\$|\\.k5login\$|krb5cc_.*\$|kadm5\\.acl\$|secrets\\.ldb\$|\\.secrets\\.mkey\$|sssd\\.conf\$"2⤵PID:2136
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2135
-
-
/usr/bin/headhead -n 702⤵PID:2146
-
-
/usr/bin/uniquniq2⤵PID:2145
-
-
/usr/bin/sortsort2⤵PID:2144
-
-
/bin/grepgrep -E "kibana\\.y.*ml\$"2⤵PID:2143
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2142
-
-
/usr/bin/headhead -n 702⤵PID:2153
-
-
/usr/bin/uniquniq2⤵PID:2152
-
-
/usr/bin/sortsort2⤵PID:2151
-
-
/bin/grepgrep -E "grafana\\.ini\$"2⤵PID:2150
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2149
-
-
/usr/bin/headhead -n 702⤵PID:2161
-
-
/usr/bin/uniquniq2⤵PID:2160
-
-
/usr/bin/sortsort2⤵PID:2159
-
-
/bin/grepgrep -E ".*knockd.*\$"2⤵PID:2158
-
-
/bin/grepgrep -E "^/etc"2⤵PID:2157
-
-
/bin/grepgrep -E /etc/init.d/2⤵PID:2156
-
-
/usr/bin/headhead -n 702⤵PID:2168
-
-
/usr/bin/uniquniq2⤵PID:2167
-
-
/usr/bin/sortsort2⤵PID:2166
-
-
/bin/grepgrep -E "logstash\$"2⤵PID:2165
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2164
-
-
/usr/bin/headhead -n 702⤵PID:2175
-
-
/usr/bin/uniquniq2⤵PID:2174
-
-
/usr/bin/sortsort2⤵PID:2173
-
-
/bin/grepgrep -E "elasticsearch\\.y.*ml\$"2⤵PID:2172
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2171
-
-
/usr/bin/headhead -n 702⤵PID:2182
-
-
/usr/bin/uniquniq2⤵PID:2181
-
-
/usr/bin/sortsort2⤵PID:2180
-
-
/bin/grepgrep -E "vault-ssh-helper\\.hcl\$"2⤵PID:2179
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2178
-
-
/usr/bin/headhead -n 702⤵PID:2189
-
-
/usr/bin/uniquniq2⤵PID:2188
-
-
/usr/bin/sortsort2⤵PID:2187
-
-
/bin/grepgrep -E "\\.vault-token\$"2⤵PID:2186
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2185
-
-
/usr/bin/sortsort2⤵PID:2194
-
-
/usr/bin/headhead -n 702⤵PID:2196
-
-
/bin/grepgrep -E "couchdb\$"2⤵PID:2193
-
-
/usr/bin/uniquniq2⤵PID:2195
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2192
-
-
/usr/bin/headhead -n 702⤵PID:2203
-
-
/usr/bin/uniquniq2⤵PID:2202
-
-
/usr/bin/sortsort2⤵PID:2201
-
-
/bin/grepgrep -E "redis\\.conf\$"2⤵PID:2200
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2199
-
-
/usr/bin/headhead -n 702⤵PID:2210
-
-
/usr/bin/uniquniq2⤵PID:2209
-
-
/usr/bin/sortsort2⤵PID:2208
-
-
/bin/grepgrep -E "mosquitto\\.conf\$"2⤵PID:2207
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2206
-
-
/usr/bin/headhead -n 702⤵PID:2217
-
-
/usr/bin/uniquniq2⤵PID:2216
-
-
/usr/bin/sortsort2⤵PID:2215
-
-
/bin/grepgrep -E "neo4j\$"2⤵PID:2214
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2213
-
-
/usr/bin/headhead -n 702⤵PID:2224
-
-
/usr/bin/uniquniq2⤵PID:2223
-
-
/usr/bin/sortsort2⤵PID:2222
-
-
/bin/grepgrep -E "cloud\\.cfg\$"2⤵PID:2221
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2220
-
-
/usr/bin/headhead -n 702⤵PID:2231
-
-
/usr/bin/uniquniq2⤵PID:2230
-
-
/usr/bin/sortsort2⤵PID:2229
-
-
/bin/grepgrep -E "\\.erlang\\.cookie\$"2⤵PID:2228
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2227
-
-
/usr/bin/headhead -n 702⤵PID:2238
-
-
/usr/bin/uniquniq2⤵PID:2237
-
-
/usr/bin/sortsort2⤵PID:2236
-
-
/bin/grepgrep -E "sip\\.conf\$|amportal\\.conf\$|FreePBX\\.conf\$|Elastix\\.conf\$"2⤵PID:2235
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2234
-
-
/usr/bin/headhead -n 702⤵PID:2245
-
-
/usr/bin/uniquniq2⤵PID:2244
-
-
/usr/bin/sortsort2⤵PID:2243
-
-
/bin/grepgrep -E "gvm-tools\\.conf\$"2⤵PID:2242
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2241
-
-
/usr/bin/headhead -n 702⤵PID:2252
-
-
/usr/bin/uniquniq2⤵PID:2251
-
-
/usr/bin/sortsort2⤵PID:2250
-
-
/bin/grepgrep -E "ipsec\\.secrets\$|ipsec\\.conf\$"2⤵PID:2249
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2248
-
-
/usr/bin/headhead -n 702⤵PID:2259
-
-
/usr/bin/uniquniq2⤵PID:2258
-
-
/usr/bin/sortsort2⤵PID:2257
-
-
/bin/grepgrep -E "\\.irssi\$"2⤵PID:2256
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2255
-
-
/usr/bin/headhead -n 702⤵PID:2266
-
-
/usr/bin/uniquniq2⤵PID:2265
-
-
/usr/bin/sortsort2⤵PID:2264
-
-
/bin/grepgrep -E "keyrings\$|.*\\.keyring\$|.*\\.keystore\$|.*\\.jks\$"2⤵PID:2263
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2262
-
-
/usr/bin/headhead -n 702⤵PID:2273
-
-
/usr/bin/uniquniq2⤵PID:2272
-
-
/usr/bin/sortsort2⤵PID:2271
-
-
/bin/grepgrep -E ".*\\.vhd\$|.*\\.vhdx\$|.*\\.vmdk\$"2⤵PID:2270
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2269
-
-
/usr/bin/headhead -n 702⤵PID:2280
-
-
/usr/bin/uniquniq2⤵PID:2279
-
-
/usr/bin/sortsort2⤵PID:2278
-
-
/bin/grepgrep -E "filezilla\$|filezilla\\.xml\$|recentservers\\.xml\$"2⤵PID:2277
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2276
-
-
/usr/bin/headhead -n 702⤵PID:2287
-
-
/usr/bin/uniquniq2⤵PID:2286
-
-
/usr/bin/sortsort2⤵PID:2285
-
-
/bin/grepgrep -E "storage\\.php\$|database\\.php\$"2⤵PID:2284
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2283
-
-
/usr/bin/headhead -n 702⤵PID:2294
-
-
/usr/bin/uniquniq2⤵PID:2293
-
-
/usr/bin/sortsort2⤵PID:2292
-
-
/bin/grepgrep -E "passwd\$"2⤵PID:2291
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2290
-
-
/usr/bin/headhead -n 702⤵PID:2301
-
-
/usr/bin/uniquniq2⤵PID:2300
-
-
/usr/bin/sortsort2⤵PID:2299
-
-
/bin/grepgrep -E "\\.git-credentials\$"2⤵PID:2298
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2297
-
-
/usr/bin/headhead -n 702⤵PID:2308
-
-
/usr/bin/uniquniq2⤵PID:2307
-
-
/usr/bin/sortsort2⤵PID:2306
-
-
/bin/grepgrep -E "atlantis\\.db\$"2⤵PID:2305
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2304
-
-
/usr/bin/headhead -n 702⤵PID:2316
-
-
/usr/bin/uniquniq2⤵PID:2315
-
-
/usr/bin/sortsort2⤵PID:2314
-
-
/bin/grepgrep -E "secrets\\.yml\$|gitlab\\.yml\$|gitlab\\.rm\$"2⤵PID:2313
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2312
-
-
/bin/grepgrep -v -E /lib2⤵PID:2311
-
-
/usr/bin/headhead -n 702⤵PID:2324
-
-
/usr/bin/uniquniq2⤵PID:2323
-
-
/usr/bin/sortsort2⤵PID:2322
-
-
/bin/grepgrep -E ".*\\.pgp\$|.*\\.gpg\$|.*\\.asc\$|secring\\.gpg\$|pubring\\.kbx\$|trustdb\\.gpg\$|gpg-agent\\.conf\$|secret\\.asc\$|private-keys-v1\\.d/.*\\.key\$|.*\\.gnupg\$"2⤵PID:2321
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2320
-
-
/bin/grepgrep -v -E "/usr/share/|/usr/lib/|/lib/|/man/|README.gnupg"2⤵PID:2319
-
-
/usr/bin/headhead -n 702⤵PID:2331
-
-
/usr/bin/uniquniq2⤵PID:2330
-
-
/usr/bin/sortsort2⤵PID:2329
-
-
/bin/grepgrep -E ".*\\.swp\$|.*\\.viminfo\$"2⤵PID:2328
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2327
-
-
/usr/bin/headhead -n 702⤵PID:2338
-
-
/usr/bin/uniquniq2⤵PID:2337
-
-
/usr/bin/sortsort2⤵PID:2336
-
-
/bin/grepgrep -E "docker\\.socket\$|docker\\.sock\$|Dockerfile\$|docker-compose\\.yml\$|dockershim\\.sock\$|containerd\\.sock\$|crio\\.sock\$|frakti\\.sock\$|rktlet\\.sock\$|\\.docker\$"2⤵PID:2335
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2334
-
-
/usr/bin/headhead -n 702⤵PID:2345
-
-
/usr/bin/uniquniq2⤵PID:2344
-
-
/usr/bin/sortsort2⤵PID:2343
-
-
/bin/grepgrep -E "\\.mozilla\$|Firefox\$"2⤵PID:2342
-
-
/bin/grepgrep -E "^"2⤵PID:2341
-
-
/usr/bin/headhead -n 702⤵PID:2352
-
-
/usr/bin/uniquniq2⤵PID:2351
-
-
/usr/bin/sortsort2⤵PID:2350
-
-
/bin/grepgrep -E "google-chrome\$|Chrome\$"2⤵PID:2349
-
-
/bin/grepgrep -E "^"2⤵PID:2348
-
-
/usr/bin/headhead -n 702⤵PID:2359
-
-
/usr/bin/uniquniq2⤵PID:2358
-
-
/usr/bin/sortsort2⤵PID:2357
-
-
/bin/grepgrep -E "com\\.operasoftware\\.Opera\$"2⤵PID:2356
-
-
/bin/grepgrep -E "^"2⤵PID:2355
-
-
/usr/bin/headhead -n 702⤵PID:2366
-
-
/usr/bin/uniquniq2⤵PID:2365
-
-
/usr/bin/sortsort2⤵PID:2364
-
-
/bin/grepgrep -E "Safari\$"2⤵PID:2363
-
-
/bin/grepgrep -E "^"2⤵PID:2362
-
-
/usr/bin/headhead -n 702⤵PID:2373
-
-
/usr/bin/uniquniq2⤵PID:2372
-
-
/usr/bin/sortsort2⤵PID:2371
-
-
/bin/grepgrep -E "autologin\$|autologin\\.conf\$"2⤵PID:2370
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2369
-
-
/usr/bin/headhead -n 702⤵PID:2380
-
-
/usr/bin/uniquniq2⤵PID:2379
-
-
/usr/bin/sortsort2⤵PID:2378
-
-
/bin/grepgrep -E "fastcgi_params\$"2⤵PID:2377
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2376
-
-
/usr/bin/headhead -n 702⤵PID:2387
-
-
/usr/bin/uniquniq2⤵PID:2386
-
-
/usr/bin/sortsort2⤵PID:2385
-
-
/bin/grepgrep -E "fat\\.config\$"2⤵PID:2384
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2383
-
-
/usr/bin/headhead -n 702⤵PID:2394
-
-
/usr/bin/uniquniq2⤵PID:2393
-
-
/usr/bin/sortsort2⤵PID:2392
-
-
/bin/grepgrep -E "api_key\$"2⤵PID:2391
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2390
-
-
/usr/bin/headhead -n 702⤵PID:2401
-
-
/usr/bin/uniquniq2⤵PID:2400
-
-
/usr/bin/sortsort2⤵PID:2399
-
-
/bin/grepgrep -E "\\.flyrc\$|concourse-auth\$|concourse-keys\$"2⤵PID:2398
-
-
/bin/grepgrep -E "^/applications|^/concourse-keys|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/concourse-auth|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2397
-
-
/usr/bin/headhead -n 702⤵PID:2408
-
-
/usr/bin/uniquniq2⤵PID:2407
-
-
/usr/bin/sortsort2⤵PID:2406
-
-
/bin/grepgrep -E "\\.boto\$"2⤵PID:2405
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2404
-
-
/usr/bin/headhead -n 702⤵PID:2415
-
-
/usr/bin/uniquniq2⤵PID:2414
-
-
/usr/bin/sortsort2⤵PID:2413
-
-
/bin/grepgrep -E "snmpd\\.conf\$"2⤵PID:2412
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2411
-
-
/usr/bin/headhead -n 702⤵PID:2422
-
-
/usr/bin/uniquniq2⤵PID:2421
-
-
/usr/bin/sortsort2⤵PID:2420
-
-
/bin/grepgrep -E "\\.pypirc\$"2⤵PID:2419
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2418
-
-
/usr/bin/headhead -n 702⤵PID:2429
-
-
/usr/bin/uniquniq2⤵PID:2428
-
-
/usr/bin/sortsort2⤵PID:2427
-
-
/bin/grepgrep -E "aliases\$|postfix\$"2⤵PID:2426
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2425
-
-
/usr/bin/headhead -n 702⤵PID:2436
-
-
/usr/bin/uniquniq2⤵PID:2435
-
-
/usr/bin/sortsort2⤵PID:2434
-
-
/bin/grepgrep -E "\\.cloudflared\$"2⤵PID:2433
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2432
-
-
/usr/bin/headhead -n 702⤵PID:2443
-
-
/usr/bin/uniquniq2⤵PID:2442
-
-
/usr/bin/sortsort2⤵PID:2441
-
-
/bin/grepgrep -E ".*_history.*\$"2⤵PID:2440
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2439
-
-
/usr/bin/headhead -n 702⤵PID:2450
-
-
/usr/bin/uniquniq2⤵PID:2449
-
-
/usr/bin/sortsort2⤵PID:2448
-
-
/bin/grepgrep -E "httpd\\.conf\$"2⤵PID:2447
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2446
-
-
/usr/bin/headhead -n 702⤵PID:2457
-
-
/usr/bin/uniquniq2⤵PID:2456
-
-
/usr/bin/sortsort2⤵PID:2455
-
-
/bin/grepgrep -E "\\.htpasswd\$"2⤵PID:2454
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2453
-
-
/usr/bin/headhead -n 702⤵PID:2464
-
-
/usr/bin/uniquniq2⤵PID:2463
-
-
/usr/bin/sortsort2⤵PID:2462
-
-
/bin/grepgrep -E "\\.ldaprc\$"2⤵PID:2461
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2460
-
-
/usr/bin/headhead -n 702⤵PID:2472
-
-
/usr/bin/uniquniq2⤵PID:2471
-
-
/usr/bin/sortsort2⤵PID:2470
-
-
/bin/grepgrep -E "\\.env.*\$"2⤵PID:2469
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2468
-
-
/bin/grepgrep -v -E example2⤵PID:2467
-
-
/usr/bin/headhead -n 702⤵PID:2480
-
-
/usr/bin/uniquniq2⤵PID:2479
-
-
/usr/bin/sortsort2⤵PID:2478
-
-
/bin/grepgrep -E "environment\$|apt\\.conf\$|apt\\.conf\\.d\$"2⤵PID:2477
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2476
-
-
/bin/grepgrep -E "^/etc/environment\$"2⤵PID:2475
-
-
/usr/bin/headhead -n 702⤵PID:2487
-
-
/usr/bin/uniquniq2⤵PID:2486
-
-
/usr/bin/sortsort2⤵PID:2485
-
-
/bin/grepgrep -E ".*\\.pcap\$|.*\\.pcapng\$|keys\\.log\$|sslkeylog\\.log\$"2⤵PID:2484
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2483
-
-
/usr/bin/headhead -n 702⤵PID:2494
-
-
/usr/bin/uniquniq2⤵PID:2493
-
-
/usr/bin/sortsort2⤵PID:2492
-
-
/bin/grepgrep -E "\\.msmtprc\$"2⤵PID:2491
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2490
-
-
/usr/bin/headhead -n 702⤵PID:2501
-
-
/usr/bin/uniquniq2⤵PID:2500
-
-
/usr/bin/sortsort2⤵PID:2499
-
-
/bin/grepgrep -E "influxdb\\.conf\$"2⤵PID:2498
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2497
-
-
/usr/bin/headhead -n 702⤵PID:2508
-
-
/usr/bin/uniquniq2⤵PID:2507
-
-
/bin/grepgrep -E "zabbix_server\\.conf\$|zabbix_agentd\\.conf\$|zabbix\$"2⤵PID:2505
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2504
-
-
/usr/bin/sortsort2⤵PID:2506
-
-
/usr/bin/headhead -n 702⤵PID:2515
-
-
/usr/bin/uniquniq2⤵PID:2514
-
-
/usr/bin/sortsort2⤵PID:2513
-
-
/bin/grepgrep -E "\\.github\$|\\.gitconfig\$|\\.git-credentials\$|\\.git\$"2⤵PID:2512
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2511
-
-
/usr/bin/headhead -n 702⤵PID:2522
-
-
/usr/bin/uniquniq2⤵PID:2521
-
-
/usr/bin/sortsort2⤵PID:2520
-
-
/bin/grepgrep -E "\\.svn\$"2⤵PID:2519
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2518
-
-
/usr/bin/headhead -n 702⤵PID:2529
-
-
/usr/bin/uniquniq2⤵PID:2528
-
-
/usr/bin/sortsort2⤵PID:2527
-
-
/bin/grepgrep -E ".*\\.kdbx\$|KeePass\\.config.*\$|KeePass\\.ini\$|KeePass\\.enforced.*\$"2⤵PID:2526
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2525
-
-
/usr/bin/headhead -n 702⤵PID:2536
-
-
/usr/bin/uniquniq2⤵PID:2535
-
-
/usr/bin/sortsort2⤵PID:2534
-
-
/bin/grepgrep -E ".*\\.psk\$"2⤵PID:2533
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2532
-
-
/usr/bin/headhead -n 702⤵PID:2543
-
-
/usr/bin/uniquniq2⤵PID:2542
-
-
/usr/bin/sortsort2⤵PID:2541
-
-
/bin/grepgrep -E "\\.password-store\$"2⤵PID:2540
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2539
-
-
/usr/bin/headhead -n 702⤵PID:2550
-
-
/usr/bin/uniquniq2⤵PID:2549
-
-
/usr/bin/sortsort2⤵PID:2548
-
-
/bin/grepgrep -E "vsftpd\\.conf\$|.*\\.ftpconfig\$|ffftp\\.ini\$|ftp\\.ini\$|ftp\\.config\$|sites\\.ini\$|wcx_ftp\\.ini\$|winscp\\.ini\$|ws_ftp\\.ini\$"2⤵PID:2547
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2546
-
-
/usr/bin/headhead -n 702⤵PID:2557
-
-
/usr/bin/uniquniq2⤵PID:2556
-
-
/usr/bin/sortsort2⤵PID:2555
-
-
/bin/grepgrep -E "smb\\.conf\$"2⤵PID:2554
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2553
-
-
/usr/bin/headhead -n 702⤵PID:2564
-
-
/usr/bin/uniquniq2⤵PID:2563
-
-
/usr/bin/sortsort2⤵PID:2562
-
-
/bin/grepgrep -E "bind\$"2⤵PID:2561
-
-
/bin/grepgrep -E "^/usr|^/var|^/etc"2⤵PID:2560
-
-
/usr/bin/headhead -n 702⤵PID:2571
-
-
/usr/bin/uniquniq2⤵PID:2570
-
-
/usr/bin/sortsort2⤵PID:2569
-
-
/bin/grepgrep -E "seeddms.*\$"2⤵PID:2568
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2567
-
-
/usr/bin/headhead -n 702⤵PID:2578
-
-
/usr/bin/uniquniq2⤵PID:2577
-
-
/usr/bin/sortsort2⤵PID:2576
-
-
/bin/grepgrep -E "ddclient\\.conf\$"2⤵PID:2575
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2574
-
-
/usr/bin/headhead -n 702⤵PID:2585
-
-
/usr/bin/uniquniq2⤵PID:2584
-
-
/usr/bin/sortsort2⤵PID:2583
-
-
/bin/grepgrep -E "kcpassword\$"2⤵PID:2582
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2581
-
-
/usr/bin/headhead -n 702⤵PID:2592
-
-
/usr/bin/uniquniq2⤵PID:2591
-
-
/usr/bin/sortsort2⤵PID:2590
-
-
/bin/grepgrep -E "sentry\$|sentry\\.conf\\.py\$"2⤵PID:2589
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2588
-
-
/usr/bin/headhead -n 702⤵PID:2599
-
-
/usr/bin/uniquniq2⤵PID:2598
-
-
/usr/bin/sortsort2⤵PID:2597
-
-
/bin/grepgrep -E "environments\$"2⤵PID:2596
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2595
-
-
/usr/bin/headhead -n 702⤵PID:2606
-
-
/usr/bin/uniquniq2⤵PID:2605
-
-
/usr/bin/sortsort2⤵PID:2604
-
-
/bin/grepgrep -E "cacti\$"2⤵PID:2603
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2602
-
-
/usr/bin/headhead -n 702⤵PID:2613
-
-
/usr/bin/uniquniq2⤵PID:2612
-
-
/usr/bin/sortsort2⤵PID:2611
-
-
/bin/grepgrep -E "roundcube\$"2⤵PID:2610
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2609
-
-
/usr/bin/headhead -n 702⤵PID:2620
-
-
/usr/bin/uniquniq2⤵PID:2619
-
-
/usr/bin/sortsort2⤵PID:2618
-
-
/bin/grepgrep -E "passbolt\\.php\$"2⤵PID:2617
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2616
-
-
/usr/bin/headhead -n 702⤵PID:2627
-
-
/usr/bin/uniquniq2⤵PID:2626
-
-
/usr/bin/sortsort2⤵PID:2625
-
-
/bin/grepgrep -E "jetty-realm\\.properties\$"2⤵PID:2624
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2623
-
-
/usr/bin/headhead -n 702⤵PID:2634
-
-
/usr/bin/uniquniq2⤵PID:2633
-
-
/usr/bin/sortsort2⤵PID:2632
-
-
/bin/grepgrep -E "master\\.key\$|hudson\\.util\\.Secret\$|credentials\\.xml\$|config\\.xml\$|.*jenkins\$"2⤵PID:2631
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2630
-
-
/usr/bin/headhead -n 702⤵PID:2641
-
-
/usr/bin/uniquniq2⤵PID:2640
-
-
/usr/bin/sortsort2⤵PID:2639
-
-
/bin/grepgrep -E "\\.wgetrc\$"2⤵PID:2638
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2637
-
-
/usr/bin/headhead -n 702⤵PID:2648
-
-
/usr/bin/uniquniq2⤵PID:2647
-
-
/usr/bin/sortsort2⤵PID:2646
-
-
/bin/grepgrep -E "access\\.log\$|error\\.log\$"2⤵PID:2645
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2644
-
-
/usr/bin/headhead -n 702⤵PID:2655
-
-
/usr/bin/uniquniq2⤵PID:2654
-
-
/usr/bin/sortsort2⤵PID:2653
-
-
/bin/grepgrep -E "\\.bashrc\$|\\.google_authenticator\$|hosts\\.equiv\$|\\.lesshst\$|\\.plan\$|\\.profile\$|\\.recently-used\\.xbel\$|\\.rhosts\$|\\.sudo_as_admin_successful\$"2⤵PID:2652
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2651
-
-
/usr/bin/headhead -n 702⤵PID:2662
-
-
/usr/bin/uniquniq2⤵PID:2661
-
-
/usr/bin/sortsort2⤵PID:2660
-
-
/bin/grepgrep -E ".*\\.rdg\$|AppEvent\\.Evt\$|autounattend\\.xml\$|ConsoleHost_history\\.txt\$|FreeSSHDservice\\.ini\$|NetSetup\\.log\$|Ntds\\.dit\$|protecteduserkey\\.bin\$|RDCMan\\.settings\$|SAM\$|SYSTEM\$|SecEvent\\.Evt\$|appcmd\\.exe\$|bash\\.exe\$|datasources\\.xml\$|default\\.sav\$|drives\\.xml\$|groups\\.xml\$|https-xampp\\.conf\$|https\\.conf\$|iis6\\.log\$|index\\.dat\$|my\\.cnf\$|my\\.ini\$|ntuser\\.dat\$|pagefile\\.sys\$|printers\\.xml\$|recentservers\\.xml\$|scclient\\.exe\$|scheduledtasks\\.xml\$|security\\.sav\$|server\\.xml\$|setupinfo\$|setupinfo\\.bak\$|sitemanager\\.xml\$|sites\\.ini\$|software\$|software\\.sav\$|sysprep\\.inf\$|sysprep\\.xml\$|system\\.sav\$|unattend\\.inf\$|unattend\\.txt\$|unattend\\.xml\$|unattended\\.xml\$|wcx_ftp\\.ini\$|ws_ftp\\.ini\$|web.*\\.config\$|winscp\\.ini\$|wsl\\.exe\$|plum\\.sqlite\$"2⤵PID:2659
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2658
-
-
/usr/bin/headhead -n 702⤵PID:2670
-
-
/usr/bin/uniquniq2⤵PID:2669
-
-
/usr/bin/sortsort2⤵PID:2668
-
-
/bin/grepgrep -E ".*\\.db\$|.*\\.sqlite\$|.*\\.sqlite3\$"2⤵PID:2667
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2666
-
-
/bin/grepgrep -v -E "/man/|/usr/|/var/cache/|thumbcache|iconcache|IconCache|/man/|/usr/|/var/cache/"2⤵PID:2665
-
-
/usr/bin/headhead -n 702⤵PID:2677
-
-
/usr/bin/uniquniq2⤵PID:2676
-
-
/usr/bin/sortsort2⤵PID:2675
-
-
/bin/grepgrep -E "backup\$|backups\$"2⤵PID:2674
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2673
-
-
/usr/bin/headhead -n 702⤵PID:2684
-
-
/usr/bin/uniquniq2⤵PID:2683
-
-
/usr/bin/sortsort2⤵PID:2682
-
-
/bin/grepgrep -E ".*password.*\$|.*credential.*\$|creds.*\$|.*\\.maintenance.*\$|.*\\.key\$"2⤵PID:2681
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2680
-
-
/usr/bin/headhead -n 702⤵PID:2691
-
-
/usr/bin/uniquniq2⤵PID:2690
-
-
/usr/bin/sortsort2⤵PID:2689
-
-
/bin/grepgrep -E "crontab\\.db\$|crontab-ui\\.service\$"2⤵PID:2688
-
-
/bin/grepgrep -E "^/applications|^/bin|^/tmp|^/.cache|^/cdrom|^/home/|/Users/|/root/|/var/www|^/opt|^/var|^/etc|^/srv|^/snap|^/private|^/sbin|^/usr|^/mnt|^/media"2⤵PID:2687
-
-
/usr/bin/trtr "\\n" " "2⤵PID:2694
-
-
/usr/bin/trtr "\\n" "|"2⤵PID:2699
-
-
/bin/grepgrep "^/"2⤵PID:2698
-
-
/usr/bin/cutcut -d " " -f52⤵PID:2697
-
-
/bin/catcat /proc/self/mountinfo2⤵PID:2700
-
-
/bin/grepgrep -E "\\W/\\W"2⤵PID:2704
-
-
/bin/grepgrep -v "#"2⤵PID:2703
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:2705
-
-
/bin/catcat /etc/fstab2⤵PID:2702
-
-
/usr/bin/trtr "\\n" "|"2⤵PID:2712
-
-
/bin/grepgrep -Ev "/sys|/proc|/dev|/dev/pts|/run|/|/sys/kernel/security|/dev/shm|/run/lock|/sys/fs/cgroup|/sys/fs/cgroup/unified|/sys/fs/cgroup/systemd|/sys/fs/pstore|/sys/fs/cgroup/freezer|/sys/fs/cgroup/net_cls,net_prio|/sys/fs/cgroup/cpu,cpuacct|/sys/fs/cgroup/cpuset|/sys/fs/cgroup/blkio|/sys/fs/cgroup/perf_event|/sys/fs/cgroup/memory|/sys/fs/cgroup/pids|/sys/fs/cgroup/devices|/sys/fs/cgroup/rdma|/sys/fs/cgroup/hugetlb|/proc/sys/fs/binfmt_misc|/dev/hugepages|/dev/mqueue|/sys/kernel/debug|/sys/fs/fuse/connections|/sys/kernel/config|/proc/sys/fs/binfmt_misc|/run/user/0|/run/user/0/gvfs|/sys/kernel/debug/tracing|UUID=040d9bdb-513b-4ecf-adde-309e7b54b137"2⤵PID:2711
-
-
/usr/bin/awkawk "{print \$1}"2⤵PID:2710
-
-
/bin/grepgrep -Ev "swap|/cdrom|/floppy|/dev/shm"2⤵PID:2709
-
-
/bin/grepgrep "^/"2⤵PID:2708
-
-
/bin/catcat /etc/fstab2⤵PID:2707
-
-
/usr/bin/trtr " " "|"2⤵PID:2715
-
-
/usr/bin/groupsgroups2⤵PID:2714
-
-
/usr/bin/trtr " " "|"2⤵PID:2719
-
-
/usr/bin/cutcut -d : -f 22⤵PID:2718
-
-
/usr/bin/groupsgroups root2⤵PID:2717
-
-
/usr/bin/whoamiwhoami2⤵PID:2721
-
-
/usr/bin/idid -u root2⤵PID:2720
-
-
/usr/bin/whoamiwhoami2⤵PID:2722
-
-
/bin/sedsed "s/:/\$|^/g"2⤵PID:2732
-
-
/bin/sedsed "s/^\\.://g"2⤵PID:2731
-
-
/bin/sedsed "s/:\\.\$//g"2⤵PID:2730
-
-
/bin/sedsed "s/:\\.:/:/g"2⤵PID:2729
-
-
/bin/sedsed "s/|sys|/|sys[[:space:]:]|^sys\$|/"2⤵PID:2740
-
-
/bin/sedsed "s/|daemon|/|daemon[[:space:]:]|^daemon\$|/"2⤵PID:2741
-
-
/bin/sedsed "s/|bin|/|bin[[:space:]:]|^bin\$|/"2⤵PID:2739
-
-
/usr/bin/trtr "\\n" "|"2⤵PID:2738
-
-
/usr/bin/cutcut -d : -f 12⤵PID:2737
-
-
/bin/grepgrep -i "sh\$"2⤵PID:2736
-
-
/bin/grepgrep -v "^root:"2⤵PID:2735
-
-
/bin/catcat /etc/passwd2⤵PID:2734
-
-
/bin/sedsed "s/|bin|/|bin[[:space:]:]|^bin\$|/"2⤵PID:2748
-
-
/usr/bin/trtr "\\n" "|"2⤵PID:2747
-
-
/usr/bin/cutcut -d : -f 12⤵PID:2746
-
-
/usr/bin/sortsort2⤵PID:2745
-
-
/bin/grepgrep -i -v "sh\$"2⤵PID:2744
-
-
/bin/catcat /etc/passwd2⤵PID:2743
-
-
/bin/catcat2⤵PID:2750
-
-
/bin/catcat2⤵PID:2751
-
-
/bin/catcat2⤵PID:2752
-
-
/bin/catcat2⤵PID:2754
-
-
/bin/catcat2⤵PID:2756
-
-
/bin/catcat2⤵PID:2757
-
-
/bin/catcat2⤵PID:2758
-
-
/bin/catcat2⤵PID:2759
-
-
/bin/catcat2⤵PID:2760
-
-
/bin/catcat2⤵PID:2761
-
-
/bin/catcat2⤵PID:2762
-
-
/bin/catcat2⤵PID:2763
-
-
/bin/catcat2⤵PID:2764
-
-
/bin/catcat2⤵PID:2765
-
-
/bin/catcat2⤵PID:2766
-
-
/bin/catcat2⤵PID:2767
-
-
/bin/catcat2⤵PID:2768
-
-
/bin/catcat2⤵PID:2769
-
-
/bin/catcat2⤵PID:2770
-
-
/bin/catcat2⤵PID:2771
-
-
/bin/catcat2⤵PID:2772
-
-
/usr/bin/wcwc -l2⤵PID:2775
-
-
/bin/psps auxwww2⤵
- Reads runtime system information
PID:2774
-
-
/bin/grepgrep -q system_information2⤵PID:2777
-
-
/usr/bin/wcwc -c2⤵PID:2780
-
-
/usr/bin/seqseq 1 302⤵PID:2781
-
-
/usr/bin/seqseq 1 192⤵PID:2782
-
-
/usr/bin/seqseq 1 302⤵PID:2783
-
-
/usr/bin/seqseq 1 302⤵PID:2784
-
-
/usr/bin/seqseq 1 302⤵PID:2785
-
-
/usr/bin/seqseq 1 192⤵PID:2786
-
-
/bin/sedsed -E "s,2.6.18-274.17.1.el5|2.6.18-274.18.1.el5|2.6.18-308.el5|2.6.18-308.1.1.el5|2.6.18-308.4.1.el5|2.6.18-308.8.1.el5|2.6.18-308.8.2.el5|2.6.18-308.11.1.el5|2.6.18-308.13.1.el5|2.6.18-308.16.1.el5|2.6.18-308.20.1.el5|2.6.18-308.24.1.el5|2.6.18-348.el5|2.6.18-348.1.1.el5|2.6.18-348.2.1.el5|2.6.18-348.3.1.el5|2.6.18-348.4.1.el5|2.6.18-348.6.1.el5|2.6.18-348.12.1.el5|2.6.18-348.16.1.el5|2.6.18-348.18.1.el5|2.6.18-348.19.1.el5|2.6.18-348.21.1.el5|2.6.18-348.22.1.el5|2.6.18-348.23.1.el5|2.6.18-348.25.1.el5|2.6.18-348.27.1.el5|2.6.18-348.28.1.el5|2.6.18-348.29.1.el5|2.6.18-348.30.1.el5|2.6.18-348.31.2.el5|2.6.18-371.el5|2.6.18-371.1.2.el5|2.6.18-371.3.1.el5|2.6.18-371.4.1.el5|2.6.18-371.6.1.el5|2.6.18-371.8.1.el5|2.6.18-371.9.1.el5|2.6.18-371.11.1.el5|2.6.18-371.12.1.el5|2.6.18-398.el5|2.6.18-400.el5|2.6.18-400.1.1.el5|2.6.18-402.el5|2.6.18-404.el5|2.6.18-406.el5|2.6.18-407.el5|2.6.18-408.el5|2.6.18-409.el5|2.6.18-410.el5|2.6.18-411.el5|2.6.18-412.el5,[1;31;103m&[0m,"2⤵PID:2801
-
-
/bin/sedsed -E "s,2.6.33.9-rt31.66.el6rt|2.6.33.9-rt31.74.el6rt|2.6.33.9-rt31.75.el6rt|2.6.33.9-rt31.79.el6rt|3.0.9-rt26.45.el6rt|3.0.9-rt26.46.el6rt|3.0.18-rt34.53.el6rt|3.0.25-rt44.57.el6rt|3.0.30-rt50.62.el6rt|3.0.36-rt57.66.el6rt|3.2.23-rt37.56.el6rt|3.2.33-rt50.66.el6rt|3.6.11-rt28.20.el6rt|3.6.11-rt30.25.el6rt|3.6.11.2-rt33.39.el6rt|3.6.11.5-rt37.55.el6rt|3.8.13-rt14.20.el6rt|3.8.13-rt14.25.el6rt|3.8.13-rt27.33.el6rt|3.8.13-rt27.34.el6rt|3.8.13-rt27.40.el6rt|3.10.0-229.rt56.144.el6rt|3.10.0-229.rt56.147.el6rt|3.10.0-229.rt56.149.el6rt|3.10.0-229.rt56.151.el6rt|3.10.0-229.rt56.153.el6rt|3.10.0-229.rt56.158.el6rt|3.10.0-229.rt56.161.el6rt|3.10.0-229.rt56.162.el6rt|3.10.0-327.rt56.170.el6rt|3.10.0-327.rt56.171.el6rt|3.10.0-327.rt56.176.el6rt|3.10.0-327.rt56.183.el6rt|3.10.0-327.rt56.190.el6rt|3.10.0-327.rt56.194.el6rt|3.10.0-327.rt56.195.el6rt|3.10.0-327.rt56.197.el6rt|3.10.33-rt32.33.el6rt|3.10.33-rt32.34.el6rt|3.10.33-rt32.43.el6rt|3.10.33-rt32.45.el6rt|3.10.33-rt32.51.el6rt|3.10.33-rt32.52.el6rt|3.10.58-rt62.58.el6rt|3.10.58-rt62.60.el6rt|2.6.32-71.7.1.el6|2.6.32-71.14.1.el6|2.6.32-71.18.1.el6|2.6.32-71.18.2.el6|2.6.32-71.24.1.el6|2.6.32-71.29.1.el6|2.6.32-71.31.1.el6|2.6.32-71.34.1.el6|2.6.32-71.35.1.el6|2.6.32-71.36.1.el6|2.6.32-71.37.1.el6|2.6.32-71.38.1.el6|2.6.32-71.39.1.el6|2.6.32-71.40.1.el6|2.6.32-131.0.15.el6|2.6.32-131.2.1.el6|2.6.32-131.4.1.el6|2.6.32-131.6.1.el6|2.6.32-131.12.1.el6,[1;31;103m&[0m,"2⤵PID:2802
-
-
/bin/sedsed -E "s,2.6.32-131.17.1.el6|2.6.32-131.21.1.el6|2.6.32-131.22.1.el6|2.6.32-131.25.1.el6|2.6.32-131.26.1.el6|2.6.32-131.28.1.el6|2.6.32-131.29.1.el6|2.6.32-131.30.1.el6|2.6.32-131.30.2.el6|2.6.32-131.33.1.el6|2.6.32-131.35.1.el6|2.6.32-131.36.1.el6|2.6.32-131.37.1.el6|2.6.32-131.38.1.el6|2.6.32-131.39.1.el6|2.6.32-220.el6|2.6.32-220.2.1.el6|2.6.32-220.4.1.el6|2.6.32-220.4.2.el6|2.6.32-220.4.7.bgq.el6|2.6.32-220.7.1.el6|2.6.32-220.7.3.p7ih.el6|2.6.32-220.7.4.p7ih.el6|2.6.32-220.7.6.p7ih.el6|2.6.32-220.7.7.p7ih.el6|2.6.32-220.13.1.el6|2.6.32-220.17.1.el6|2.6.32-220.23.1.el6|2.6.32-220.24.1.el6|2.6.32-220.25.1.el6|2.6.32-220.26.1.el6|2.6.32-220.28.1.el6|2.6.32-220.30.1.el6|2.6.32-220.31.1.el6|2.6.32-220.32.1.el6|2.6.32-220.34.1.el6|2.6.32-220.34.2.el6|2.6.32-220.38.1.el6|2.6.32-220.39.1.el6|2.6.32-220.41.1.el6|2.6.32-220.42.1.el6|2.6.32-220.45.1.el6|2.6.32-220.46.1.el6|2.6.32-220.48.1.el6|2.6.32-220.51.1.el6|2.6.32-220.52.1.el6|2.6.32-220.53.1.el6|2.6.32-220.54.1.el6|2.6.32-220.55.1.el6|2.6.32-220.56.1.el6|2.6.32-220.57.1.el6|2.6.32-220.58.1.el6|2.6.32-220.60.2.el6|2.6.32-220.62.1.el6|2.6.32-220.63.2.el6|2.6.32-220.64.1.el6|2.6.32-220.65.1.el6|2.6.32-220.66.1.el6|2.6.32-220.67.1.el6|2.6.32-279.el6|2.6.32-279.1.1.el6|2.6.32-279.2.1.el6|2.6.32-279.5.1.el6|2.6.32-279.5.2.el6|2.6.32-279.9.1.el6|2.6.32-279.11.1.el6|2.6.32-279.14.1.bgq.el6|2.6.32-279.14.1.el6|2.6.32-279.19.1.el6|2.6.32-279.22.1.el6|2.6.32-279.23.1.el6|2.6.32-279.25.1.el6|2.6.32-279.25.2.el6|2.6.32-279.31.1.el6|2.6.32-279.33.1.el6|2.6.32-279.34.1.el6|2.6.32-279.37.2.el6|2.6.32-279.39.1.el6,[1;31;103m&[0m,"2⤵PID:2803
-
-
/bin/sedsed -E "s,3.10.0-229.rt56.141.el7|3.10.0-229.1.2.rt56.141.2.el7_1|3.10.0-229.4.2.rt56.141.6.el7_1|3.10.0-229.7.2.rt56.141.6.el7_1|3.10.0-229.11.1.rt56.141.11.el7_1|3.10.0-229.14.1.rt56.141.13.el7_1|3.10.0-229.20.1.rt56.141.14.el7_1|3.10.0-229.rt56.141.el7|3.10.0-327.rt56.204.el7|3.10.0-327.4.5.rt56.206.el7_2|3.10.0-327.10.1.rt56.211.el7_2|3.10.0-327.13.1.rt56.216.el7_2|3.10.0-327.18.2.rt56.223.el7_2|3.10.0-327.22.2.rt56.230.el7_2|3.10.0-327.28.2.rt56.234.el7_2|3.10.0-327.28.3.rt56.235.el7|3.10.0-327.36.1.rt56.237.el7|3.10.0-123.el7|3.10.0-123.1.2.el7|3.10.0-123.4.2.el7|3.10.0-123.4.4.el7|3.10.0-123.6.3.el7|3.10.0-123.8.1.el7|3.10.0-123.9.2.el7|3.10.0-123.9.3.el7|3.10.0-123.13.1.el7|3.10.0-123.13.2.el7|3.10.0-123.20.1.el7|3.10.0-229.el7|3.10.0-229.1.2.el7|3.10.0-229.4.2.el7|3.10.0-229.7.2.el7|3.10.0-229.11.1.el7|3.10.0-229.14.1.el7|3.10.0-229.20.1.el7|3.10.0-229.24.2.el7|3.10.0-229.26.2.el7|3.10.0-229.28.1.el7|3.10.0-229.30.1.el7|3.10.0-229.34.1.el7|3.10.0-229.38.1.el7|3.10.0-229.40.1.el7|3.10.0-229.42.1.el7|3.10.0-327.el7|3.10.0-327.3.1.el7|3.10.0-327.4.4.el7|3.10.0-327.4.5.el7|3.10.0-327.10.1.el7|3.10.0-327.13.1.el7|3.10.0-327.18.2.el7|3.10.0-327.22.2.el7|3.10.0-327.28.2.el7|3.10.0-327.28.3.el7|3.10.0-327.36.1.el7|3.10.0-327.36.2.el7|3.10.0-229.1.2.ael7b|3.10.0-229.4.2.ael7b|3.10.0-229.7.2.ael7b|3.10.0-229.11.1.ael7b|3.10.0-229.14.1.ael7b|3.10.0-229.20.1.ael7b|3.10.0-229.24.2.ael7b|3.10.0-229.26.2.ael7b|3.10.0-229.28.1.ael7b|3.10.0-229.30.1.ael7b|3.10.0-229.34.1.ael7b|3.10.0-229.38.1.ael7b|3.10.0-229.40.1.ael7b|3.10.0-229.42.1.ael7b|4.2.0-0.21.el7,[1;31;103m&[0m,"2⤵PID:2806
-
-
/bin/sedsed -E "s,3.2.0-84-generic-pae|3.2.0-84-virtual|3.2.0-85-generic|3.2.0-85-generic-pae|3.2.0-85-virtual|3.2.0-86-generic|3.2.0-86-generic-pae|3.2.0-86-virtual|3.2.0-87-generic|3.2.0-87-generic-pae|3.2.0-87-virtual|3.2.0-88-generic|3.2.0-88-generic-pae|3.2.0-88-virtual|3.2.0-89-generic|3.2.0-89-generic-pae|3.2.0-89-virtual|3.2.0-90-generic|3.2.0-90-generic-pae|3.2.0-90-virtual|3.2.0-91-generic|3.2.0-91-generic-pae|3.2.0-91-virtual|3.2.0-92-generic|3.2.0-92-generic-pae|3.2.0-92-virtual|3.2.0-93-generic|3.2.0-93-generic-pae|3.2.0-93-virtual|3.2.0-94-generic|3.2.0-94-generic-pae|3.2.0-94-virtual|3.2.0-95-generic|3.2.0-95-generic-pae|3.2.0-95-virtual|3.2.0-96-generic|3.2.0-96-generic-pae|3.2.0-96-virtual|3.2.0-97-generic|3.2.0-97-generic-pae|3.2.0-97-virtual|3.2.0-98-generic|3.2.0-98-generic-pae|3.2.0-98-virtual|3.2.0-99-generic|3.2.0-99-generic-pae|3.2.0-99-virtual|3.5.0-40-generic|3.5.0-41-generic|3.5.0-42-generic|3.5.0-43-generic|3.5.0-44-generic|3.5.0-45-generic|3.5.0-46-generic|3.5.0-49-generic|3.5.0-51-generic|3.5.0-52-generic|3.5.0-54-generic|3.8.0-19-generic|3.8.0-21-generic|3.8.0-22-generic|3.8.0-23-generic|3.8.0-27-generic|3.8.0-29-generic|3.8.0-30-generic|3.8.0-31-generic|3.8.0-32-generic|3.8.0-33-generic|3.8.0-34-generic|3.8.0-35-generic|3.8.0-36-generic|3.8.0-37-generic|3.8.0-38-generic|3.8.0-39-generic|3.8.0-41-generic|3.8.0-42-generic,[1;31;103m&[0m,"2⤵PID:2793
-
-
/bin/sedsed -E "s,3.13.0-24-generic|3.13.0-24-generic-lpae|3.13.0-24-lowlatency|3.13.0-24-powerpc-e500|3.13.0-24-powerpc-e500mc|3.13.0-24-powerpc-smp|3.13.0-24-powerpc64-emb|3.13.0-24-powerpc64-smp|3.13.0-27-generic|3.13.0-27-lowlatency|3.13.0-29-generic|3.13.0-29-lowlatency|3.13.0-3-exynos5|3.13.0-30-generic|3.13.0-30-lowlatency|3.13.0-32-generic|3.13.0-32-lowlatency|3.13.0-33-generic|3.13.0-33-lowlatency|3.13.0-34-generic|3.13.0-34-lowlatency|3.13.0-35-generic|3.13.0-35-lowlatency|3.13.0-36-generic|3.13.0-36-lowlatency|3.13.0-37-generic|3.13.0-37-lowlatency|3.13.0-39-generic|3.13.0-39-lowlatency|3.13.0-40-generic|3.13.0-40-lowlatency|3.13.0-41-generic|3.13.0-41-lowlatency|3.13.0-43-generic|3.13.0-43-lowlatency|3.13.0-44-generic|3.13.0-44-lowlatency|3.13.0-46-generic|3.13.0-46-lowlatency|3.13.0-48-generic|3.13.0-48-lowlatency|3.13.0-49-generic|3.13.0-49-lowlatency|3.13.0-51-generic|3.13.0-51-lowlatency|3.13.0-52-generic|3.13.0-52-lowlatency|3.13.0-53-generic|3.13.0-53-lowlatency|3.13.0-54-generic|3.13.0-54-lowlatency|3.13.0-55-generic|3.13.0-55-lowlatency|3.13.0-57-generic|3.13.0-57-lowlatency|3.13.0-58-generic|3.13.0-58-lowlatency|3.13.0-59-generic|3.13.0-59-lowlatency|3.13.0-61-generic|3.13.0-61-lowlatency|3.13.0-62-generic|3.13.0-62-lowlatency|3.13.0-63-generic|3.13.0-63-lowlatency|3.13.0-65-generic|3.13.0-65-lowlatency|3.13.0-66-generic|3.13.0-66-lowlatency,[1;31;103m&[0m,"2⤵PID:2794
-
-
/bin/sedsed -E "s,4.4.0-1009-raspi2|4.4.0-1012-snapdragon|4.4.0-21-generic|4.4.0-21-generic-lpae|4.4.0-21-lowlatency|4.4.0-21-powerpc-e500mc|4.4.0-21-powerpc-smp|4.4.0-21-powerpc64-emb|4.4.0-21-powerpc64-smp|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"2⤵PID:2798
-
-
/bin/sedsed -E "s,3.13.0-67-generic|3.13.0-67-lowlatency|3.13.0-68-generic|3.13.0-68-lowlatency|3.13.0-70-generic|3.13.0-70-lowlatency|3.13.0-71-generic|3.13.0-71-lowlatency|3.13.0-73-generic|3.13.0-73-lowlatency|3.13.0-74-generic|3.13.0-74-lowlatency|3.13.0-76-generic|3.13.0-76-lowlatency|3.13.0-77-generic|3.13.0-77-lowlatency|3.13.0-79-generic|3.13.0-79-lowlatency|3.13.0-83-generic|3.13.0-83-lowlatency|3.13.0-85-generic|3.13.0-85-lowlatency|3.13.0-86-generic|3.13.0-86-lowlatency|3.13.0-87-generic|3.13.0-87-lowlatency|3.13.0-88-generic|3.13.0-88-lowlatency|3.13.0-91-generic|3.13.0-91-lowlatency|3.13.0-92-generic|3.13.0-92-lowlatency|3.13.0-93-generic|3.13.0-93-lowlatency|3.13.0-95-generic|3.13.0-95-lowlatency|3.13.0-96-generic|3.13.0-96-lowlatency|3.13.0-98-generic|3.13.0-98-lowlatency|3.16.0-25-generic|3.16.0-25-lowlatency|3.16.0-26-generic|3.16.0-26-lowlatency|3.16.0-28-generic|3.16.0-28-lowlatency|3.16.0-29-generic|3.16.0-29-lowlatency|3.16.0-31-generic|3.16.0-31-lowlatency|3.16.0-33-generic|3.16.0-33-lowlatency|3.16.0-34-generic|3.16.0-34-lowlatency|3.16.0-36-generic|3.16.0-36-lowlatency|3.16.0-37-generic|3.16.0-37-lowlatency|3.16.0-38-generic|3.16.0-38-lowlatency|3.16.0-39-generic|3.16.0-39-lowlatency|3.16.0-41-generic|3.16.0-41-lowlatency|3.16.0-43-generic|3.16.0-43-lowlatency|3.16.0-44-generic|3.16.0-44-lowlatency|3.16.0-45-generic,[1;31;103m&[0m,"2⤵PID:2795
-
-
/bin/sedsed -E "s,3.16.0-45-lowlatency|3.16.0-46-generic|3.16.0-46-lowlatency|3.16.0-48-generic|3.16.0-48-lowlatency|3.16.0-49-generic|3.16.0-49-lowlatency|3.16.0-50-generic|3.16.0-50-lowlatency|3.16.0-51-generic|3.16.0-51-lowlatency|3.16.0-52-generic|3.16.0-52-lowlatency|3.16.0-53-generic|3.16.0-53-lowlatency|3.16.0-55-generic|3.16.0-55-lowlatency|3.16.0-56-generic|3.16.0-56-lowlatency|3.16.0-57-generic|3.16.0-57-lowlatency|3.16.0-59-generic|3.16.0-59-lowlatency|3.16.0-60-generic|3.16.0-60-lowlatency|3.16.0-62-generic|3.16.0-62-lowlatency|3.16.0-67-generic|3.16.0-67-lowlatency|3.16.0-69-generic|3.16.0-69-lowlatency|3.16.0-70-generic|3.16.0-70-lowlatency|3.16.0-71-generic|3.16.0-71-lowlatency|3.16.0-73-generic|3.16.0-73-lowlatency|3.16.0-76-generic|3.16.0-76-lowlatency|3.16.0-77-generic|3.16.0-77-lowlatency|3.19.0-20-generic|3.19.0-20-lowlatency|3.19.0-21-generic|3.19.0-21-lowlatency|3.19.0-22-generic|3.19.0-22-lowlatency|3.19.0-23-generic|3.19.0-23-lowlatency|3.19.0-25-generic|3.19.0-25-lowlatency|3.19.0-26-generic|3.19.0-26-lowlatency|3.19.0-28-generic|3.19.0-28-lowlatency|3.19.0-30-generic|3.19.0-30-lowlatency|3.19.0-31-generic|3.19.0-31-lowlatency|3.19.0-32-generic|3.19.0-32-lowlatency|3.19.0-33-generic|3.19.0-33-lowlatency|3.19.0-37-generic|3.19.0-37-lowlatency|3.19.0-39-generic|3.19.0-39-lowlatency|3.19.0-41-generic|3.19.0-41-lowlatency|3.19.0-42-generic,[1;31;103m&[0m,"2⤵PID:2796
-
-
/bin/sedsed -E "s,3.19.0-42-lowlatency|3.19.0-43-generic|3.19.0-43-lowlatency|3.19.0-47-generic|3.19.0-47-lowlatency|3.19.0-49-generic|3.19.0-49-lowlatency|3.19.0-51-generic|3.19.0-51-lowlatency|3.19.0-56-generic|3.19.0-56-lowlatency|3.19.0-58-generic|3.19.0-58-lowlatency|3.19.0-59-generic|3.19.0-59-lowlatency|3.19.0-61-generic|3.19.0-61-lowlatency|3.19.0-64-generic|3.19.0-64-lowlatency|3.19.0-65-generic|3.19.0-65-lowlatency|3.19.0-66-generic|3.19.0-66-lowlatency|3.19.0-68-generic|3.19.0-68-lowlatency|3.19.0-69-generic|3.19.0-69-lowlatency|3.19.0-71-generic|3.19.0-71-lowlatency|3.4.0-5-chromebook|4.2.0-18-generic|4.2.0-18-lowlatency|4.2.0-19-generic|4.2.0-19-lowlatency|4.2.0-21-generic|4.2.0-21-lowlatency|4.2.0-22-generic|4.2.0-22-lowlatency|4.2.0-23-generic|4.2.0-23-lowlatency|4.2.0-25-generic|4.2.0-25-lowlatency|4.2.0-27-generic|4.2.0-27-lowlatency|4.2.0-30-generic|4.2.0-30-lowlatency|4.2.0-34-generic|4.2.0-34-lowlatency|4.2.0-35-generic|4.2.0-35-lowlatency|4.2.0-36-generic|4.2.0-36-lowlatency|4.2.0-38-generic|4.2.0-38-lowlatency|4.2.0-41-generic|4.2.0-41-lowlatency|4.4.0-21-generic|4.4.0-21-lowlatency|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"2⤵PID:2797
-
-
/bin/sedsed -E "s,2.6.24.7-74.el5rt|2.6.24.7-81.el5rt|2.6.24.7-93.el5rt|2.6.24.7-101.el5rt|2.6.24.7-108.el5rt|2.6.24.7-111.el5rt|2.6.24.7-117.el5rt|2.6.24.7-126.el5rt|2.6.24.7-132.el5rt|2.6.24.7-137.el5rt|2.6.24.7-139.el5rt|2.6.24.7-146.el5rt|2.6.24.7-149.el5rt|2.6.24.7-161.el5rt|2.6.24.7-169.el5rt|2.6.33.7-rt29.45.el5rt|2.6.33.7-rt29.47.el5rt|2.6.33.7-rt29.55.el5rt|2.6.33.9-rt31.64.el5rt|2.6.33.9-rt31.67.el5rt|2.6.33.9-rt31.86.el5rt|2.6.18-8.1.1.el5|2.6.18-8.1.3.el5|2.6.18-8.1.4.el5|2.6.18-8.1.6.el5|2.6.18-8.1.8.el5|2.6.18-8.1.10.el5|2.6.18-8.1.14.el5|2.6.18-8.1.15.el5|2.6.18-53.el5|2.6.18-53.1.4.el5|2.6.18-53.1.6.el5|2.6.18-53.1.13.el5|2.6.18-53.1.14.el5|2.6.18-53.1.19.el5|2.6.18-53.1.21.el5|2.6.18-92.el5|2.6.18-92.1.1.el5|2.6.18-92.1.6.el5|2.6.18-92.1.10.el5|2.6.18-92.1.13.el5|2.6.18-92.1.18.el5|2.6.18-92.1.22.el5|2.6.18-92.1.24.el5|2.6.18-92.1.26.el5|2.6.18-92.1.27.el5|2.6.18-92.1.28.el5|2.6.18-92.1.29.el5|2.6.18-92.1.32.el5|2.6.18-92.1.35.el5|2.6.18-92.1.38.el5|2.6.18-128.el5|2.6.18-128.1.1.el5|2.6.18-128.1.6.el5|2.6.18-128.1.10.el5|2.6.18-128.1.14.el5|2.6.18-128.1.16.el5|2.6.18-128.2.1.el5|2.6.18-128.4.1.el5|2.6.18-128.4.1.el5|2.6.18-128.7.1.el5|2.6.18-128.8.1.el5|2.6.18-128.11.1.el5|2.6.18-128.12.1.el5|2.6.18-128.14.1.el5|2.6.18-128.16.1.el5|2.6.18-128.17.1.el5|2.6.18-128.18.1.el5|2.6.18-128.23.1.el5|2.6.18-128.23.2.el5|2.6.18-128.25.1.el5|2.6.18-128.26.1.el5|2.6.18-128.27.1.el5,[1;31;103m&[0m,"2⤵PID:2799
-
-
/bin/sedsed -E "s,2.6.18-128.29.1.el5|2.6.18-128.30.1.el5|2.6.18-128.31.1.el5|2.6.18-128.32.1.el5|2.6.18-128.35.1.el5|2.6.18-128.36.1.el5|2.6.18-128.37.1.el5|2.6.18-128.38.1.el5|2.6.18-128.39.1.el5|2.6.18-128.40.1.el5|2.6.18-128.41.1.el5|2.6.18-164.el5|2.6.18-164.2.1.el5|2.6.18-164.6.1.el5|2.6.18-164.9.1.el5|2.6.18-164.10.1.el5|2.6.18-164.11.1.el5|2.6.18-164.15.1.el5|2.6.18-164.17.1.el5|2.6.18-164.19.1.el5|2.6.18-164.21.1.el5|2.6.18-164.25.1.el5|2.6.18-164.25.2.el5|2.6.18-164.28.1.el5|2.6.18-164.30.1.el5|2.6.18-164.32.1.el5|2.6.18-164.34.1.el5|2.6.18-164.36.1.el5|2.6.18-164.37.1.el5|2.6.18-164.38.1.el5|2.6.18-194.el5|2.6.18-194.3.1.el5|2.6.18-194.8.1.el5|2.6.18-194.11.1.el5|2.6.18-194.11.3.el5|2.6.18-194.11.4.el5|2.6.18-194.17.1.el5|2.6.18-194.17.4.el5|2.6.18-194.26.1.el5|2.6.18-194.32.1.el5|2.6.18-238.el5|2.6.18-238.1.1.el5|2.6.18-238.5.1.el5|2.6.18-238.9.1.el5|2.6.18-238.12.1.el5|2.6.18-238.19.1.el5|2.6.18-238.21.1.el5|2.6.18-238.27.1.el5|2.6.18-238.28.1.el5|2.6.18-238.31.1.el5|2.6.18-238.33.1.el5|2.6.18-238.35.1.el5|2.6.18-238.37.1.el5|2.6.18-238.39.1.el5|2.6.18-238.40.1.el5|2.6.18-238.44.1.el5|2.6.18-238.45.1.el5|2.6.18-238.47.1.el5|2.6.18-238.48.1.el5|2.6.18-238.49.1.el5|2.6.18-238.50.1.el5|2.6.18-238.51.1.el5|2.6.18-238.52.1.el5|2.6.18-238.53.1.el5|2.6.18-238.54.1.el5|2.6.18-238.55.1.el5|2.6.18-238.56.1.el5|2.6.18-274.el5|2.6.18-274.3.1.el5|2.6.18-274.7.1.el5|2.6.18-274.12.1.el5,[1;31;103m&[0m,"2⤵PID:2800
-
-
/bin/sedsed -E "s, 4.0.[0-9]+| 4.1.[0-9]+| 4.2.[0-9]+| 4.3.[0-9]+| 4.4.[0-9]+| 4.5.[0-9]+| 4.6.[0-9]+| 4.7.[0-9]+| 4.8.[0-9]+| 4.9.[0-9]+| 4.10.[0-9]+| 4.11.[0-9]+| 4.12.[0-9]+| 4.13.[0-9]+| 3.9.6| 3.9.0| 3.9| 3.8.9| 3.8.8| 3.8.7| 3.8.6| 3.8.5| 3.8.4| 3.8.3| 3.8.2| 3.8.1| 3.8.0| 3.8| 3.7.6| 3.7.0| 3.7| 3.6.0| 3.6| 3.5.0| 3.5| 3.4.9| 3.4.8| 3.4.6| 3.4.5| 3.4.4| 3.4.3| 3.4.2| 3.4.1| 3.4.0| 3.4| 3.3| 3.2| 3.19.0| 3.16.0| 3.15| 3.14| 3.13.1| 3.13.0| 3.13| 3.12.0| 3.12| 3.11.0| 3.11| 3.10.6| 3.10.0| 3.10| 3.1.0| 3.0.6| 3.0.5| 3.0.4| 3.0.3| 3.0.2| 3.0.1| 3.0.0| 2.6.9| 2.6.8| 2.6.7| 2.6.6| 2.6.5| 2.6.4| 2.6.39| 2.6.38| 2.6.37| 2.6.36| 2.6.35| 2.6.34| 2.6.33| 2.6.32| 2.6.31| 2.6.30| 2.6.3| 2.6.29| 2.6.28| 2.6.27| 2.6.26| 2.6.25| 2.6.24.1| 2.6.24| 2.6.23| 2.6.22| 2.6.21| 2.6.20| 2.6.2| 2.6.19| 2.6.18| 2.6.17| 2.6.16| 2.6.15| 2.6.14| 2.6.13| 2.6.12| 2.6.11| 2.6.10| 2.6.1| 2.6.0| 2.4.9| 2.4.8| 2.4.7| 2.4.6| 2.4.5| 2.4.4| 2.4.37| 2.4.36| 2.4.35| 2.4.34| 2.4.33| 2.4.32| 2.4.31| 2.4.30| 2.4.29| 2.4.28| 2.4.27| 2.4.26| 2.4.25| 2.4.24| 2.4.23| 2.4.22| 2.4.21| 2.4.20| 2.4.19| 2.4.18| 2.4.17| 2.4.16| 2.4.15| 2.4.14| 2.4.13| 2.4.12| 2.4.11| 2.4.10| 2.2.24,[1;31m&[0m,"2⤵PID:2807
-
-
/bin/sedsed -E "s,3.2.0-68-generic-pae|3.2.0-68-lowlatency|3.2.0-68-lowlatency-pae|3.2.0-68-virtual|3.2.0-69-generic|3.2.0-69-generic-pae|3.2.0-69-lowlatency|3.2.0-69-lowlatency-pae|3.2.0-69-virtual|3.2.0-70-generic|3.2.0-70-generic-pae|3.2.0-70-lowlatency|3.2.0-70-lowlatency-pae|3.2.0-70-virtual|3.2.0-72-generic|3.2.0-72-generic-pae|3.2.0-72-lowlatency|3.2.0-72-lowlatency-pae|3.2.0-72-virtual|3.2.0-73-generic|3.2.0-73-generic-pae|3.2.0-73-lowlatency|3.2.0-73-lowlatency-pae|3.2.0-73-virtual|3.2.0-74-generic|3.2.0-74-generic-pae|3.2.0-74-lowlatency|3.2.0-74-lowlatency-pae|3.2.0-74-virtual|3.2.0-75-generic|3.2.0-75-generic-pae|3.2.0-75-lowlatency|3.2.0-75-lowlatency-pae|3.2.0-75-virtual|3.2.0-76-generic|3.2.0-76-generic-pae|3.2.0-76-lowlatency|3.2.0-76-lowlatency-pae|3.2.0-76-virtual|3.2.0-77-generic|3.2.0-77-generic-pae|3.2.0-77-lowlatency|3.2.0-77-lowlatency-pae|3.2.0-77-virtual|3.2.0-79-generic|3.2.0-79-generic-pae|3.2.0-79-lowlatency|3.2.0-79-lowlatency-pae|3.2.0-79-virtual|3.2.0-80-generic|3.2.0-80-generic-pae|3.2.0-80-lowlatency|3.2.0-80-lowlatency-pae|3.2.0-80-virtual|3.2.0-82-generic|3.2.0-82-generic-pae|3.2.0-82-lowlatency|3.2.0-82-lowlatency-pae|3.2.0-82-virtual|3.2.0-83-generic|3.2.0-83-generic-pae|3.2.0-83-virtual|3.2.0-84-generic,[1;31;103m&[0m,"2⤵PID:2792
-
-
/bin/sedsed -E "s,2.6.32-431.71.1.el6|2.6.32-431.72.1.el6|2.6.32-431.73.2.el6|2.6.32-431.74.1.el6|2.6.32-504.el6|2.6.32-504.1.3.el6|2.6.32-504.3.3.el6|2.6.32-504.8.1.el6|2.6.32-504.8.2.bgq.el6|2.6.32-504.12.2.el6|2.6.32-504.16.2.el6|2.6.32-504.23.4.el6|2.6.32-504.30.3.el6|2.6.32-504.30.5.p7ih.el6|2.6.32-504.33.2.el6|2.6.32-504.36.1.el6|2.6.32-504.38.1.el6|2.6.32-504.40.1.el6|2.6.32-504.43.1.el6|2.6.32-504.46.1.el6|2.6.32-504.49.1.el6|2.6.32-504.50.1.el6|2.6.32-504.51.1.el6|2.6.32-504.52.1.el6|2.6.32-573.el6|2.6.32-573.1.1.el6|2.6.32-573.3.1.el6|2.6.32-573.4.2.bgq.el6|2.6.32-573.7.1.el6|2.6.32-573.8.1.el6|2.6.32-573.12.1.el6|2.6.32-573.18.1.el6|2.6.32-573.22.1.el6|2.6.32-573.26.1.el6|2.6.32-573.30.1.el6|2.6.32-573.32.1.el6|2.6.32-573.34.1.el6|2.6.32-642.el6|2.6.32-642.1.1.el6|2.6.32-642.3.1.el6|2.6.32-642.4.2.el6|2.6.32-642.6.1.el6,[1;31;103m&[0m,"2⤵PID:2805
-
-
/bin/sedsed -E "s,2.6.32-279.41.1.el6|2.6.32-279.42.1.el6|2.6.32-279.43.1.el6|2.6.32-279.43.2.el6|2.6.32-279.46.1.el6|2.6.32-358.el6|2.6.32-358.0.1.el6|2.6.32-358.2.1.el6|2.6.32-358.6.1.el6|2.6.32-358.6.2.el6|2.6.32-358.6.3.p7ih.el6|2.6.32-358.11.1.bgq.el6|2.6.32-358.11.1.el6|2.6.32-358.14.1.el6|2.6.32-358.18.1.el6|2.6.32-358.23.2.el6|2.6.32-358.28.1.el6|2.6.32-358.32.3.el6|2.6.32-358.37.1.el6|2.6.32-358.41.1.el6|2.6.32-358.44.1.el6|2.6.32-358.46.1.el6|2.6.32-358.46.2.el6|2.6.32-358.48.1.el6|2.6.32-358.49.1.el6|2.6.32-358.51.1.el6|2.6.32-358.51.2.el6|2.6.32-358.55.1.el6|2.6.32-358.56.1.el6|2.6.32-358.59.1.el6|2.6.32-358.61.1.el6|2.6.32-358.62.1.el6|2.6.32-358.65.1.el6|2.6.32-358.67.1.el6|2.6.32-358.68.1.el6|2.6.32-358.69.1.el6|2.6.32-358.70.1.el6|2.6.32-358.71.1.el6|2.6.32-358.72.1.el6|2.6.32-358.73.1.el6|2.6.32-358.111.1.openstack.el6|2.6.32-358.114.1.openstack.el6|2.6.32-358.118.1.openstack.el6|2.6.32-358.123.4.openstack.el6|2.6.32-431.el6|2.6.32-431.1.1.bgq.el6|2.6.32-431.1.2.el6|2.6.32-431.3.1.el6|2.6.32-431.5.1.el6|2.6.32-431.11.2.el6|2.6.32-431.17.1.el6|2.6.32-431.20.3.el6|2.6.32-431.20.5.el6|2.6.32-431.23.3.el6|2.6.32-431.29.2.el6|2.6.32-431.37.1.el6|2.6.32-431.40.1.el6|2.6.32-431.40.2.el6|2.6.32-431.46.2.el6|2.6.32-431.50.1.el6|2.6.32-431.53.2.el6|2.6.32-431.56.1.el6|2.6.32-431.59.1.el6|2.6.32-431.61.2.el6|2.6.32-431.64.1.el6|2.6.32-431.66.1.el6|2.6.32-431.68.1.el6|2.6.32-431.69.1.el6|2.6.32-431.70.1.el6,[1;31;103m&[0m,"2⤵PID:2804
-
-
/bin/sedsed -E "s,3.2.0-53-generic-pae|3.2.0-53-lowlatency|3.2.0-53-lowlatency-pae|3.2.0-53-virtual|3.2.0-54-generic|3.2.0-54-generic-pae|3.2.0-54-lowlatency|3.2.0-54-lowlatency-pae|3.2.0-54-virtual|3.2.0-55-generic|3.2.0-55-generic-pae|3.2.0-55-lowlatency|3.2.0-55-lowlatency-pae|3.2.0-55-virtual|3.2.0-56-generic|3.2.0-56-generic-pae|3.2.0-56-lowlatency|3.2.0-56-lowlatency-pae|3.2.0-56-virtual|3.2.0-57-generic|3.2.0-57-generic-pae|3.2.0-57-lowlatency|3.2.0-57-lowlatency-pae|3.2.0-57-virtual|3.2.0-58-generic|3.2.0-58-generic-pae|3.2.0-58-lowlatency|3.2.0-58-lowlatency-pae|3.2.0-58-virtual|3.2.0-59-generic|3.2.0-59-generic-pae|3.2.0-59-lowlatency|3.2.0-59-lowlatency-pae|3.2.0-59-virtual|3.2.0-60-generic|3.2.0-60-generic-pae|3.2.0-60-lowlatency|3.2.0-60-lowlatency-pae|3.2.0-60-virtual|3.2.0-61-generic|3.2.0-61-generic-pae|3.2.0-61-virtual|3.2.0-63-generic|3.2.0-63-generic-pae|3.2.0-63-lowlatency|3.2.0-63-lowlatency-pae|3.2.0-63-virtual|3.2.0-64-generic|3.2.0-64-generic-pae|3.2.0-64-lowlatency|3.2.0-64-lowlatency-pae|3.2.0-64-virtual|3.2.0-65-generic|3.2.0-65-generic-pae|3.2.0-65-lowlatency|3.2.0-65-lowlatency-pae|3.2.0-65-virtual|3.2.0-67-generic|3.2.0-67-generic-pae|3.2.0-67-lowlatency|3.2.0-67-lowlatency-pae|3.2.0-67-virtual|3.2.0-68-generic,[1;31;103m&[0m,"2⤵PID:2791
-
-
/bin/sedsed -E "s,3.2.0-36-generic|3.2.0-36-generic-pae|3.2.0-36-lowlatency|3.2.0-36-lowlatency-pae|3.2.0-36-virtual|3.2.0-37-generic|3.2.0-37-generic-pae|3.2.0-37-lowlatency|3.2.0-37-lowlatency-pae|3.2.0-37-virtual|3.2.0-38-generic|3.2.0-38-generic-pae|3.2.0-38-lowlatency|3.2.0-38-lowlatency-pae|3.2.0-38-virtual|3.2.0-39-generic|3.2.0-39-generic-pae|3.2.0-39-lowlatency|3.2.0-39-lowlatency-pae|3.2.0-39-virtual|3.2.0-40-generic|3.2.0-40-generic-pae|3.2.0-40-lowlatency|3.2.0-40-lowlatency-pae|3.2.0-40-virtual|3.2.0-41-generic|3.2.0-41-generic-pae|3.2.0-41-lowlatency|3.2.0-41-lowlatency-pae|3.2.0-41-virtual|3.2.0-43-generic|3.2.0-43-generic-pae|3.2.0-43-virtual|3.2.0-44-generic|3.2.0-44-generic-pae|3.2.0-44-lowlatency|3.2.0-44-lowlatency-pae|3.2.0-44-virtual|3.2.0-45-generic|3.2.0-45-generic-pae|3.2.0-45-virtual|3.2.0-48-generic|3.2.0-48-generic-pae|3.2.0-48-lowlatency|3.2.0-48-lowlatency-pae|3.2.0-48-virtual|3.2.0-51-generic|3.2.0-51-generic-pae|3.2.0-51-lowlatency|3.2.0-51-lowlatency-pae|3.2.0-51-virtual|3.2.0-52-generic|3.2.0-52-generic-pae|3.2.0-52-lowlatency|3.2.0-52-lowlatency-pae|3.2.0-52-virtual|3.2.0-53-generic,[1;31;103m&[0m,"2⤵PID:2790
-
-
/bin/sedsed -E "s,3.2.0-104-generic|3.2.0-104-generic-pae|3.2.0-104-virtual|3.2.0-105-generic|3.2.0-105-generic-pae|3.2.0-105-virtual|3.2.0-106-generic|3.2.0-106-generic-pae|3.2.0-106-virtual|3.2.0-107-generic|3.2.0-107-generic-pae|3.2.0-107-virtual|3.2.0-109-generic|3.2.0-109-generic-pae|3.2.0-109-virtual|3.2.0-110-generic|3.2.0-110-generic-pae|3.2.0-110-virtual|3.2.0-111-generic|3.2.0-111-generic-pae|3.2.0-111-virtual|3.2.0-1412-omap4|3.2.0-1602-armadaxp|3.2.0-23-generic|3.2.0-23-generic-pae|3.2.0-23-lowlatency|3.2.0-23-lowlatency-pae|3.2.0-23-omap|3.2.0-23-powerpc-smp|3.2.0-23-powerpc64-smp|3.2.0-23-virtual|3.2.0-24-generic|3.2.0-24-generic-pae|3.2.0-24-virtual|3.2.0-25-generic|3.2.0-25-generic-pae|3.2.0-25-virtual|3.2.0-26-generic|3.2.0-26-generic-pae|3.2.0-26-virtual|3.2.0-27-generic|3.2.0-27-generic-pae|3.2.0-27-virtual|3.2.0-29-generic|3.2.0-29-generic-pae|3.2.0-29-virtual|3.2.0-31-generic|3.2.0-31-generic-pae|3.2.0-31-virtual|3.2.0-32-generic|3.2.0-32-generic-pae|3.2.0-32-virtual|3.2.0-33-generic|3.2.0-33-generic-pae|3.2.0-33-lowlatency|3.2.0-33-lowlatency-pae|3.2.0-33-virtual|3.2.0-34-generic|3.2.0-34-generic-pae|3.2.0-34-virtual|3.2.0-35-generic|3.2.0-35-generic-pae|3.2.0-35-lowlatency|3.2.0-35-lowlatency-pae|3.2.0-35-virtual,[1;31;103m&[0m,"2⤵PID:2789
-
-
/bin/sedsed -E "s,3.1.1-1400-linaro-lt-mx5|3.11.0-13-generic|3.11.0-14-generic|3.11.0-15-generic|3.11.0-17-generic|3.11.0-18-generic|3.11.0-20-generic|3.11.0-22-generic|3.11.0-23-generic|3.11.0-24-generic|3.11.0-26-generic|3.13.0-100-generic|3.13.0-24-generic|3.13.0-27-generic|3.13.0-29-generic|3.13.0-30-generic|3.13.0-32-generic|3.13.0-33-generic|3.13.0-34-generic|3.13.0-35-generic|3.13.0-36-generic|3.13.0-37-generic|3.13.0-39-generic|3.13.0-40-generic|3.13.0-41-generic|3.13.0-43-generic|3.13.0-44-generic|3.13.0-46-generic|3.13.0-48-generic|3.13.0-49-generic|3.13.0-51-generic|3.13.0-52-generic|3.13.0-53-generic|3.13.0-54-generic|3.13.0-55-generic|3.13.0-57-generic|3.13.0-58-generic|3.13.0-59-generic|3.13.0-61-generic|3.13.0-62-generic|3.13.0-63-generic|3.13.0-65-generic|3.13.0-66-generic|3.13.0-67-generic|3.13.0-68-generic|3.13.0-71-generic|3.13.0-73-generic|3.13.0-74-generic|3.13.0-76-generic|3.13.0-77-generic|3.13.0-79-generic|3.13.0-83-generic|3.13.0-85-generic|3.13.0-86-generic|3.13.0-88-generic|3.13.0-91-generic|3.13.0-92-generic|3.13.0-93-generic|3.13.0-95-generic|3.13.0-96-generic|3.13.0-98-generic|3.2.0-101-generic|3.2.0-101-generic-pae|3.2.0-101-virtual|3.2.0-102-generic|3.2.0-102-generic-pae|3.2.0-102-virtual,[1;31;103m&[0m,"2⤵PID:2788
-
-
/bin/catcat /proc/version2⤵PID:2808
-
-
/usr/bin/lsb_releaselsb_release -a2⤵PID:2809
-
/usr/local/sbin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security3⤵PID:2810
-
-
/usr/local/bin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security3⤵PID:2810
-
-
/usr/sbin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security3⤵PID:2810
-
-
/usr/bin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security3⤵PID:2810
-
-
-
/bin/sedsed -E "s,[01].[012345678].[0-9]+|1.9.[01234][^0-9]|1.9.[01234]\$|1.9.5p1|1\\.9\\.[6-9]|1\\.9\\.1[0-6]|1\\.9\\.17([^p]|\$),[1;31m&[0m,"2⤵PID:2814
-
-
/bin/grepgrep "Sudo ver"2⤵PID:2813
-
-
/usr/bin/sudosudo -V2⤵PID:2812
-
-
/bin/grepgrep -q com.ubuntu.USBCreator2⤵PID:2817
-
-
/usr/bin/busctlbusctl list2⤵PID:2816
-
-
/bin/grepgrep -oP "[0-9][0-9a-zA-Z\\.]+"2⤵PID:2821
-
-
/bin/grepgrep policykit-desktop-privileges2⤵PID:2820
-
-
/usr/bin/dpkgdpkg -l2⤵
- Software Deployment Tools
PID:2819
-
-
/usr/local/sbin/dpkg-querydpkg-query --list --2⤵PID:2819
-
-
/usr/local/bin/dpkg-querydpkg-query --list --2⤵PID:2819
-
-
/usr/sbin/dpkg-querydpkg-query --list --2⤵PID:2819
-
-
/usr/bin/dpkg-querydpkg-query --list --2⤵
- Software Deployment Tools
PID:2819
-
-
/usr/bin/cutcut -d. -f12⤵PID:2824
-
-
/usr/bin/cutcut -d. -f22⤵PID:2827
-
-
/bin/datedate2⤵PID:2828
-
-
/usr/bin/uptimeuptime2⤵
- Virtualization/Sandbox Evasion: Time Based Evasion
PID:2829
-
-
/bin/sedsed -E "s,\\Wsuid|\\Wuser|\\Wexec,[1;31m&[0m,g"2⤵PID:2836
-
-
/bin/sedsed -E "s,nosuid|nouser|noexec,[1;32m&[0m,g"2⤵PID:2837
-
-
/bin/sedsed -E "s,/|/bin|/boot|/boot/grub|/boot/grub/fonts|/boot/grub/i386-pc|/boot/grub/locale|/.cache|/dev|/dev/block|/dev/bsg|/dev/bus|/dev/bus/usb|/dev/char|/dev/disk|/dev/disk/by-id|/dev/disk/by-partuuid|/dev/disk/by-path|/dev/disk/by-uuid|/dev/dri|/dev/dri/by-path|/dev/hugepages|/dev/input|/dev/input/by-id|/dev/input/by-path|/dev/mapper|/dev/mqueue|/dev/net|/dev/pts|/dev/shm|/dev/snd|/dev/vfio|/etc|/etc/acpi|/etc/acpi/events|/etc/alternatives|/etc/apm|/etc/apm/event.d|/etc/apm/resume.d|/etc/apm/scripts.d|/etc/apm/suspend.d|/etc/apparmor|/etc/apparmor.d|/etc/apparmor.d/abstractions|/etc/apparmor.d/cache|/etc/apparmor.d/disable|/etc/apparmor.d/force-complain|/etc/apparmor.d/local|/etc/apparmor.d/tunables|/etc/apparmor/init|/etc/apport|/etc/apport/blacklist.d|/etc/apport/native-origins.d|/etc/apt|/etc/apt/apt.conf.d|/etc/apt/auth.conf.d|/etc/apt/keyrings|/etc/apt/preferences.d|/etc/apt/sources.list.d|/etc/apt/trusted.gpg.d|/etc/audisp|/etc/audisp/plugins.d|/etc/audit|/etc/audit/rules.d|/etc/avahi|/etc/avahi/services|/etc/bash_completion.d|/etc/binfmt.d|/etc/bluetooth|/etc/brltty|/etc/brltty/Attributes|/etc/brltty/Contraction|/etc/brltty/Input|/etc/brltty/Keyboard|/etc/brltty/Text|/etc/ca-certificates|/etc/ca-certificates/update.d|/etc/calendar|/etc/chatscripts|/etc/console-setup|/etc/cracklib|/etc/cron.d|/etc/cron.daily|/etc/cron.hourly|/etc/cron.monthly|/etc/cron.weekly|/etc/cups|/etc/cupshelpers|/etc/cups/interfaces|/etc/cups/ppd|/etc/cups/ssl|/etc/dbus-1|/etc/dbus-1/session.d|/etc/dbus-1/system.d|/etc/dconf|/etc/dconf/db|/etc/dconf/profile|/etc/default|/etc/depmod.d|/etc/dhcp|/etc/dhcp/dhclient-enter-hooks.d|/etc/dhcp/dhclient-exit-hooks.d|/etc/dictionaries-common|/etc/dpkg|/etc/dpkg/dpkg.cfg.d|/etc/dpkg/origins|/etc/emacs|/etc/emacs/site-start.d|/etc/firefox|/etc/firefox/policies|/etc/firefox/pref|/etc/fonts|/etc/fonts/conf.avail|/etc/fonts/conf.d|/etc/fwupd|/etc/fwupd/remotes.d|/etc/gdb|/etc/gdm3|/etc/gdm3/Init|/etc/gdm3/PostLogin|/etc/gdm3/PostSession|/etc/gdm3/PreSession|/etc/gdm3/Prime|/etc/gdm3/PrimeOff|/etc/geoclue|/etc/ghostscript|/etc/ghostscript/cidfmap.d|/etc/ghostscript/fontmap.d|/etc/glvnd|/etc/glvnd/egl_vendor.d|/etc/gnome|/etc/groff|/etc/grub.d|/etc/gss|/etc/gss/mech.d|/etc/gtk-2.0|/etc/gtk-3.0|/etc/hp|/etc/ifplugd|/etc/ifplugd/action.d|/etc/ImageMagick-6|/etc/init|/etc/init.d|/etc/initramfs-tools|/etc/initramfs-tools/conf.d|/etc/initramfs-tools/hooks|/etc/initramfs-tools/scripts|/etc/insserv.conf.d|/etc/iproute2|/etc/iproute2/rt_protos.d|/etc/iproute2/rt_tables.d|/etc/kernel|/etc/kernel/install.d|/etc/kernel/postinst.d|/etc/kernel/postrm.d|/etc/kernel/preinst.d|/etc/ldap|/etc/ld.so.conf.d|/etc/libblockdev|/etc/libblockdev/conf.d|/etc/libnl-3|/etc/libpaper.d|/etc/libreoffice|/etc/logcheck|/etc/logcheck/ignore.d.paranoid|/etc/logcheck/ignore.d.server|/etc/logrotate.d|/etc/modprobe.d|/etc/modules-load.d|/etc/netplan|/etc/network|/etc/networkd-dispatcher|/etc/networkd-dispatcher/dormant.d|/etc/networkd-dispatcher/no-carrier.d|/etc/networkd-dispatcher/off.d|/etc/networkd-dispatcher/routable.d|/etc/network/if-down.d|/etc/network/if-post-down.d|/etc/network/if-pre-up.d|/etc/network/if-up.d|/etc/network/interfaces.d|/etc/NetworkManager|/etc/NetworkManager/conf.d|/etc/NetworkManager/dispatcher.d|/etc/NetworkManager/dnsmasq.d|/etc/NetworkManager/dnsmasq-shared.d|/etc/NetworkManager/system-connections|/etc/newt|/etc/opt|/etc/PackageKit|/etc/pam.d|/etc/pcmcia|/etc/perl|/etc/perl/CPAN|/etc/perl/Net|/etc/perl/XML|/etc/pki|/etc/pki/fwupd|/etc/pki/fwupd-metadata|/etc/pm|/etc/pm/sleep.d|/etc/polkit-1|/etc/polkit-1/localauthority|/etc/polkit-1/localauthority.conf.d|/etc/polkit-1/nullbackend.conf.d|/etc/ppp|/etc/ppp/ip-down.d|/etc/ppp/ip-up.d|/etc/ppp/ipv6-down.d|/etc/ppp/ipv6-up.d|/etc/ppp/peers|/etc/ppp/resolv|/etc/profile.d|/etc/pulse|/etc/python|/etc/python2.7|/etc/python3|/etc/python3.6|/etc/rc0.d|/etc/rc1.d|/etc/rc2.d|/etc/rc3.d|/etc/rc4.d|/etc/rc5.d|/etc/rc6.d|/etc/rcS.d|/etc/resolvconf|/etc/resolvconf/update-libc.d|/etc/rsyslog.d|/etc/sane.d|/etc/sane.d/dll.d|/etc/security|/etc/security/limits.d|/etc/security/namespace.d|/etc/selinux|/etc/selinux/default|/etc/sensors.d|/etc/skel|/etc/speech-dispatcher|/etc/speech-dispatcher/clients|/etc/speech-dispatcher/modules|/etc/ssh|/etc/ssl|/etc/ssl/certs|/etc/ssl/private|/etc/sudoers.d|/etc/sysctl.d|/etc/systemd|/etc/systemd/network|/etc/systemd/system|/etc/systemd/user|/etc/terminfo|/etc/thunderbird|/etc/tmpfiles.d|/etc/ubuntu-advantage|/etc/udev|/etc/udev/hwdb.d|/etc/udev/rules.d|/etc/udisks2|/etc/ufw|/etc/ufw/applications.d|/etc/update-manager|/etc/update-manager/release-upgrades.d|/etc/update-motd.d|/etc/update-notifier|/etc/UPower|/etc/usb_modeswitch.d|/etc/vim|/etc/wpa_supplicant|/etc/X11|/etc/X11/app-defaults|/etc/X11/cursors|/etc/X11/fonts|/etc/X11/xinit|/etc/X11/xkb|/etc/X11/Xreset.d|/etc/X11/Xresources|/etc/X11/Xsession.d|/etc/X11/xsm|/etc/xdg|/etc/xdg/autostart|/etc/xdg/menus|/etc/xdg/systemd|/home|/lib|/lib64|/lib/apparmor|/lib/brltty|/lib/console-setup|/lib/crda|/lib/crda/pubkeys|/lib/firmware|/lib/firmware/3com|/lib/firmware/acenic|/lib/firmware/adaptec|/lib/firmware/advansys|/lib/firmware/amdgpu|/lib/firmware/amd-ucode|/lib/firmware/ar3k|/lib/firmware/asihpi|/lib/firmware/ath10k|/lib/firmware/ath6k|/lib/firmware/ath9k_htc|/lib/firmware/atmel|/lib/firmware/atusb|/lib/firmware/av7110|/lib/firmware/bnx2|/lib/firmware/bnx2x|/lib/firmware/brcm|/lib/firmware/carl9170fw|/lib/firmware/cavium|/lib/firmware/cis|/lib/firmware/cpia2|/lib/firmware/cxgb3|/lib/firmware/cxgb4|/lib/firmware/dsp56k|/lib/firmware/e100|/lib/firmware/ea|/lib/firmware/edgeport|/lib/firmware/emi26|/lib/firmware/emi62|/lib/firmware/ene-ub6250|/lib/firmware/ess|/lib/firmware/go7007|/lib/firmware/hp|/lib/firmware/i915|/lib/firmware/imx|/lib/firmware/intel|/lib/firmware/intel-ucode|/lib/firmware/isci|/lib/firmware/kaweth|/lib/firmware/keyspan|/lib/firmware/keyspan_pda|/lib/firmware/korg|/lib/firmware/libertas|/lib/firmware/liquidio|/lib/firmware/matrox|/lib/firmware/mediatek|/lib/firmware/mellanox|/lib/firmware/moxa|/lib/firmware/mrvl|/lib/firmware/mwl8k|/lib/firmware/mwlwifi|/lib/firmware/netronome|/lib/firmware/nvidia|/lib/firmware/ositech|/lib/firmware/qca|/lib/firmware/qcom|/lib/firmware/qed|/lib/firmware/qlogic|/lib/firmware/r128|/lib/firmware/radeon|/lib/firmware/rockchip|/lib/firmware/rsi|/lib/firmware/RTL8192E|/lib/firmware/rtl_bt|/lib/firmware/rtl_nic|/lib/firmware/rtlwifi|/lib/firmware/rtw88|/lib/firmware/sb16|/lib/firmware/slicoss|/lib/firmware/sun|/lib/firmware/tehuti|/lib/firmware/ti-connectivity|/lib/firmware/tigon|/lib/firmware/ti-keystone|/lib/firmware/ttusb-budget|/lib/firmware/ueagle-atm|/lib/firmware/usbdux|/lib/firmware/vicam|/lib/firmware/vxge|/lib/firmware/yam|/lib/firmware/yamaha|/lib/firmware/zd1211|/lib/hdparm|/lib/ifupdown|/lib/init|/lib/linux-sound-base|/lib/lsb|/lib/lsb/init-functions.d|/lib/modprobe.d|/lib/modules|/lib/modules/4.15.0-213-generic|/lib/netplan|/lib/recovery-mode|/lib/recovery-mode/options|/lib/systemd|/lib/systemd/network|/lib/systemd/system|/lib/systemd/system-generators|/lib/systemd/system-preset|/lib/systemd/system-shutdown|/lib/systemd/system-sleep|/lib/terminfo|/lib/terminfo/a|/lib/terminfo/c|/lib/terminfo/d|/lib/terminfo/E|/lib/terminfo/h|/lib/terminfo/l|/lib/terminfo/m|/lib/terminfo/p|/lib/terminfo/r|/lib/terminfo/s|/lib/terminfo/v|/lib/terminfo/w|/lib/terminfo/x|/lib/udev|/lib/udev/hwdb.d|/lib/udev/rules.d|/lib/ufw|/lib/x86_64-linux-gnu|/lib/x86_64-linux-gnu/security|/lost+found|/media|/media/floppy0|/mnt|/opt|/proc|/root|/root/.cache|/root/.cache/dconf|/root/.cache/doc|/root/.cache/evolution|/root/.cache/gnome-software|/root/.cache/ibus|/root/.cache/ibus-table|/root/.cache/libgweather|/root/.cache/mozilla|/root/.cache/wallpaper|/root/.config|/root/.config/dconf|/root/.config/evolution|/root/.config/gnome-session|/root/.config/goa-1.0|/root/.config/gtk-3.0|/root/.config/ibus|/root/.config/mozilla|/root/.config/nautilus|/root/.config/systemd|/root/.dbus|/root/.dbus/session-bus|/root/Desktop|/root/Documents|/root/Downloads|/root/.gnupg|/root/.gnupg/private-keys-v1.d|/root/.gvfs|/root/.local|/root/.local/share|/root/Music|/root/Pictures|/root/Public|/root/Templates|/root/Videos|/run|/run/boltd|/run/boltd/power|/run/console-setup|/run/cups|/run/dbus|/run/gdm3|/run/initramfs|/run/lock|/run/lock/subsys|/run/log|/run/mount|/run/network|/run/NetworkManager|/run/NetworkManager/conf.d|/run/NetworkManager/devices|/run/NetworkManager/system-connections|/run/pppconfig|/run/sendsigs.omit.d|/run/spice-vdagentd|/run/sshd|/run/sudo|/run/sudo/ts|/run/systemd|/run/systemd/ask-password|/run/systemd/generator|/run/systemd/generator.late|/run/systemd/inaccessible|/run/systemd/inhibit|/run/systemd/initctl|/run/systemd/journal|/run/systemd/machines|/run/systemd/seats|/run/systemd/sessions|/run/systemd/shutdown|/run/systemd/system|/run/systemd/transient|/run/systemd/unit-root|/run/systemd/units|/run/systemd/users|/run/tmpfiles.d|/run/udev|/run/udev/data|/run/udev/links|/run/udev/static_node-tags|/run/udev/tags|/run/udev/watch|/run/udisks2|/run/user|/run/user/0|/run/uuidd|/sbin|/snap|/srv|/sys|/sys/block|/sys/bus|/sys/bus/acpi|/sys/bus/clockevents|/sys/bus/clocksource|/sys/bus/container|/sys/bus/cpu|/sys/bus/edac|/sys/bus/event_source|/sys/bus/gpio|/sys/bus/hid|/sys/bus/i2c|/sys/bus/isa|/sys/bus/machinecheck|/sys/bus/mdio_bus|/sys/bus/memory|/sys/bus/mipi-dsi|/sys/bus/mmc|/sys/bus/nd|/sys/bus/node|/sys/bus/nvmem|/sys/bus/parport|/sys/bus/pci|/sys/bus/pci-epf|/sys/bus/pci_express|/sys/bus/platform|/sys/bus/pnp|/sys/bus/rapidio|/sys/bus/scsi|/sys/bus/sdio|/sys/bus/serial|/sys/bus/serio|/sys/bus/spi|/sys/bus/usb|/sys/bus/virtio|/sys/bus/vme|/sys/bus/workqueue|/sys/bus/xen|/sys/bus/xen-backend|/sys/class|/sys/class/ata_device|/sys/class/ata_link|/sys/class/ata_port|/sys/class/backlight|/sys/class/bdi|/sys/class/block|/sys/class/bsg|/sys/class/devcoredump|/sys/class/devfreq|/sys/class/devfreq-event|/sys/class/dma|/sys/class/dmi|/sys/class/drm|/sys/class/drm_dp_aux_dev|/sys/class/extcon|/sys/class/firmware|/sys/class/gpio|/sys/class/graphics|/sys/class/hidraw|/sys/class/hmm_device|/sys/class/hwmon|/sys/class/i2c-adapter|/sys/class/i2c-dev|/sys/class/input|/sys/class/iommu|/sys/class/leds|/sys/class/mdio_bus|/sys/class/mem|/sys/class/misc|/sys/class/mmc_host|/sys/class/nd|/sys/class/net|/sys/class/pci_bus|/sys/class/pci_epc|/sys/class/phy|/sys/class/powercap|/sys/class/power_supply|/sys/class/ppdev|/sys/class/ppp|/sys/class/printer|/sys/class/pwm|/sys/class/rapidio_port|/sys/class/regulator|/sys/class/rfkill|/sys/class/rtc|/sys/class/scsi_device|/sys/class/scsi_disk|/sys/class/scsi_generic|/sys/class/scsi_host|/sys/class/spi_master|/sys/class/spi_slave|/sys/class/thermal|/sys/class/tpm|/sys/class/tpmrm|/sys/class/tty|/sys/class/vc|/sys/class/virtio-ports|/sys/class/vtconsole|/sys/class/watchdog|/sys/dev|/sys/dev/block|/sys/dev/char|/sys/devices|/sys/devices/breakpoint|/sys/devices/cpu|/sys/devices/isa|/sys/devices/LNXSYSTM:00|/sys/devices/msr|/sys/devices/parport0|/sys/devices/pci0000:00|/sys/devices/platform|/sys/devices/pnp0|/sys/devices/software|/sys/devices/system|/sys/devices/tracepoint|/sys/devices/virtual|/sys/firmware|/sys/firmware/acpi|/sys/firmware/dmi|/sys/firmware/memmap|/sys/fs|/sys/fs/bpf|/sys/fs/cgroup|/sys/fs/ecryptfs|/sys/fs/ext4|/sys/fs/fuse|/sys/fs/pstore|/sys/hypervisor|/sys/kernel|/sys/kernel/boot_params|/sys/kernel/cgroup|/sys/kernel/config|/sys/kernel/debug|/sys/kernel/iommu_groups|/sys/kernel/irq|/sys/kernel/livepatch|/sys/kernel/mm|/sys/kernel/security|/sys/kernel/slab|/sys/kernel/tracing|/sys/module|/sys/module/8139cp|/sys/module/8139too|/sys/module/8250|/sys/module/acpi|/sys/module/acpi_cpufreq|/sys/module/acpiphp|/sys/module/aesni_intel|/sys/module/aes_x86_64|/sys/module/ahci|/sys/module/apparmor|/sys/module/ata_generic|/sys/module/ata_piix|/sys/module/autofs4|/sys/module/battery|/sys/module/binfmt_misc|/sys/module/block|/sys/module/button|/sys/module/configfs|/sys/module/cpufreq|/sys/module/cpuidle|/sys/module/crc32_pclmul|/sys/module/crct10dif_pclmul|/sys/module/cryptd|/sys/module/cryptomgr|/sys/module/crypto_simd|/sys/module/debug_core|/sys/module/dm_mod|/sys/module/dns_resolver|/sys/module/drm|/sys/module/drm_kms_helper|/sys/module/dynamic_debug|/sys/module/edac_core|/sys/module/edd|/sys/module/efivars|/sys/module/ehci_hcd|/sys/module/elants_i2c|/sys/module/ext4|/sys/module/fb|/sys/module/fb_sys_fops|/sys/module/firmware_class|/sys/module/floppy|/sys/module/fscrypto|/sys/module/fuse|/sys/module/ghash_clmulni_intel|/sys/module/glue_helper|/sys/module/gpiolib_acpi|/sys/module/hid|/sys/module/hid_generic|/sys/module/i2c_piix4|/sys/module/i8042|/sys/module/ima|/sys/module/input_leds|/sys/module/intel_idle|/sys/module/ip_tables|/sys/module/ipv6|/sys/module/joydev|/sys/module/kdb|/sys/module/kernel|/sys/module/keyboard|/sys/module/kgdb_nmi|/sys/module/kgdboc|/sys/module/libahci|/sys/module/libata|/sys/module/loop|/sys/module/lp|/sys/module/mac_hid|/sys/module/md_mod|/sys/module/mii|/sys/module/module|/sys/module/mousedev|/sys/module/netpoll|/sys/module/nfnetlink|/sys/module/nf_tables|/sys/module/nf_tables_inet|/sys/module/nf_tables_ipv4|/sys/module/nf_tables_ipv6|/sys/module/parport|/sys/module/parport_pc|/sys/module/pata_acpi|/sys/module/pata_sis|/sys/module/pcbc|/sys/module/pcc_cpufreq|/sys/module/pcie_aspm|/sys/module/pciehp|/sys/module/pci_hotplug|/sys/module/ppdev|/sys/module/ppp_generic|/sys/module/printk|/sys/module/processor|/sys/module/psmouse|/sys/module/pstore|/sys/module/random|/sys/module/rcupdate|/sys/module/rcutree|/sys/module/rfkill|/sys/module/rng_core|/sys/module/sch_fq_codel|/sys/module/scsi_mod|/sys/module/serio_raw|/sys/module/sg|/sys/module/spurious|/sys/module/srcutree|/sys/module/sr_mod|/sys/module/stahp|/sys/module/suspend|/sys/module/syscopyarea|/sys/module/sysfillrect|/sys/module/sysimgblt|/sys/module/sysrq|/sys/module/tcp_cubic|/sys/module/thermal|/sys/module/tpm|/sys/module/tpm_crb|/sys/module/tpm_tis|/sys/module/tpm_tis_core|/sys/module/ttm|/sys/module/uhci_hcd|/sys/module/uinput|/sys/module/usbcore|/sys/module/usbhid|/sys/module/virtio_balloon|/sys/module/virtio_blk|/sys/module/virtio_gpu|/sys/module/virtio_mmio|/sys/module/virtio_pci|/sys/module/vt|/sys/module/watchdog|/sys/module/workqueue|/sys/module/xen|/sys/module/xen_acpi_processor|/sys/module/xen_blkfront|/sys/module/xen_netfront|/sys/module/xhci_hcd|/sys/module/x_tables|/sys/module/xz_dec|/sys/module/zswap|/sys/power|/tmp|/tmp/.font-unix|/tmp/.ICE-unix|/tmp/netplan_lx3vfqo2|/tmp/snap-private-tmp|/tmp/ssh-dw52Rekv8XIC|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-bolt.service-6hCFSA|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-bolt.service-6hCFSA/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-colord.service-YVjWiF|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-colord.service-YVjWiF/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-ModemManager.service-cISTPY|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-ModemManager.service-cISTPY/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-resolved.service-qzf14b|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-resolved.service-qzf14b/tmp|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-timedated.service-C8mze2|/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-timedated.service-C8mze2/tmp|/tmp/.Test-unix|/tmp/.X11-unix|/tmp/.XIM-unix|/usr|/usr/bin|/usr/games|/usr/include|/usr/include/arpa|/usr/include/asm-generic|/usr/include/c++|/usr/include/drm|/usr/include/linux|/usr/include/misc|/usr/include/mtd|/usr/include/net|/usr/include/netash|/usr/include/netatalk|/usr/include/netax25|/usr/include/neteconet|/usr/include/netinet|/usr/include/netipx|/usr/include/netiucv|/usr/include/netpacket|/usr/include/netrom|/usr/include/netrose|/usr/include/nfs|/usr/include/node|/usr/include/openssl|/usr/include/protocols|/usr/include/python3.6m|/usr/include/rdma|/usr/include/reglib|/usr/include/rpc|/usr/include/rpcsvc|/usr/include/scsi|/usr/include/sound|/usr/include/video|/usr/include/X11|/usr/include/x86_64-linux-gnu|/usr/include/xen|/usr/include/xorg|/usr/lib|/usr/lib/accountsservice|/usr/lib/apg|/usr/lib/apt|/usr/lib/aspell|/usr/lib/at-spi2-core|/usr/lib/avahi|/usr/lib/bfd-plugins|/usr/lib/binfmt.d|/usr/lib/bluetooth|/usr/lib/colord|/usr/lib/compat-ld|/usr/lib/cups|/usr/lib/dbus-1.0|/usr/lib/dconf|/usr/lib/debug|/usr/lib/deja-dup|/usr/lib/dpkg|/usr/lib/eject|/usr/lib/emacsen-common|/usr/lib/environment.d|/usr/lib/evince|/usr/lib/evolution|/usr/lib/evolution-data-server|/usr/libexec|/usr/lib/file|/usr/lib/firefox|/usr/lib/firefox-addons|/usr/lib/fwupd|/usr/lib/gcc|/usr/lib/gcr|/usr/lib/gdm3|/usr/lib/geoclue-2.0|/usr/lib/gettext|/usr/lib/ghostscript|/usr/lib/girepository-1.0|/usr/lib/gjs|/usr/lib/glib-networking|/usr/lib/gnome-control-center|/usr/lib/gnome-disk-utility|/usr/lib/gnome-initial-setup|/usr/lib/gnome-online-accounts|/usr/lib/gnome-session|/usr/lib/gnome-settings-daemon|/usr/lib/gnome-settings-daemon-3.0|/usr/lib/gnome-shell|/usr/lib/gnome-terminal|/usr/lib/gnupg|/usr/lib/gnupg2|/usr/lib/gold-ld|/usr/lib/groff|/usr/lib/grub|/usr/lib/grub-legacy|/usr/lib/gvfs|/usr/lib/ibus|/usr/lib/initramfs-tools|/usr/lib/ispell|/usr/lib/kernel|/usr/lib/klibc|/usr/lib/language-selector|/usr/lib/libmbim|/usr/lib/libqmi|/usr/lib/libreoffice|/usr/lib/linux|/usr/lib/linux-boot-probes|/usr/lib/locale|/usr/lib/lp_solve|/usr/lib/man-db|/usr/lib/memtest86+|/usr/lib/mime|/usr/lib/modules-load.d|/usr/lib/mozilla|/usr/lib/mutter|/usr/lib/networkd-dispatcher|/usr/lib/NetworkManager|/usr/lib/node_modules|/usr/lib/notification-daemon|/usr/lib/nvidia|/usr/lib/openssh|/usr/lib/os-prober|/usr/lib/os-probes|/usr/lib/packagekit|/usr/lib/pcmciautils|/usr/lib/pkgconfig|/usr/lib/pm-utils|/usr/lib/policykit-1|/usr/lib/pppd|/usr/lib/pulse-11.1|/usr/lib/python2.7|/usr/lib/python3|/usr/lib/python3.6|/usr/lib/python3.7|/usr/lib/python3.8|/usr/lib/rhythmbox|/usr/lib/rsyslog|/usr/lib/rtkit|/usr/lib/sasl2|/usr/lib/selinux|/usr/lib/shotwell|/usr/lib/snapd|/usr/lib/software-properties|/usr/lib/speech-dispatcher-modules|/usr/lib/ssl|/usr/lib/sudo|/usr/lib/sysctl.d|/usr/lib/syslinux|/usr/lib/SYSLINUX|/usr/lib/syslinux-legacy|/usr/lib/systemd|/usr/lib/system-service|/usr/lib/sysusers.d|/usr/lib/tar|/usr/lib/tasksel|/usr/lib/tc|/usr/lib/thunderbird|/usr/lib/thunderbird-addons|/usr/lib/tmpfiles.d|/usr/lib/ubiquity|/usr/lib/ubuntu-advantage|/usr/lib/ubuntu-release-upgrader|/usr/lib/udisks2|/usr/lib/unity-settings-daemon-1.0|/usr/lib/update-notifier|/usr/lib/upower|/usr/lib/valgrind|/usr/lib/vino|/usr/lib/X11|/usr/lib/x86_64-linux-gnu|/usr/lib/xorg|/usr/lib/xserver-xorg-video-intel|/usr/lib/zeitgeist|/usr/local|/usr/local/bin|/usr/local/etc|/usr/local/games|/usr/local/include|/usr/local/lib|/usr/local/sbin|/usr/local/share|/usr/local/src|/usr/sbin|/usr/share|/usr/share/aclocal|/usr/share/acpi-support|/usr/share/adduser|/usr/share/adium|/usr/share/aisleriot|/usr/share/alsa|/usr/share/alsa-base|/usr/share/appdata|/usr/share/app-info|/usr/share/app-install|/usr/share/application-registry|/usr/share/applications|/usr/share/apport|/usr/share/apps|/usr/share/apturl|/usr/share/aspell|/usr/share/avahi|/usr/share/awk|/usr/share/backgrounds|/usr/share/base-files|/usr/share/base-passwd|/usr/share/bash-completion|/usr/share/binfmts|/usr/share/branding|/usr/share/brltty|/usr/share/bug|/usr/share/build-essential|/usr/share/ca-certificates|/usr/share/calendar|/usr/share/cmake|/usr/share/cogl|/usr/share/color|/usr/share/colord|/usr/share/command-not-found|/usr/share/common-licenses|/usr/share/consolefonts|/usr/share/console-setup|/usr/share/consoletrans|/usr/share/cups|/usr/share/dbus-1|/usr/share/dconf|/usr/share/debconf|/usr/share/debhelper|/usr/share/debianutils|/usr/share/defaults|/usr/share/desktop-directories|/usr/share/dict|/usr/share/dictionaries-common|/usr/share/distro-info|/usr/share/djvu|/usr/share/dns|/usr/share/dnsmasq-base|/usr/share/doc|/usr/share/doc-base|/usr/share/dpkg|/usr/share/drirc.d|/usr/share/emacs|/usr/share/enchant|/usr/share/eog|/usr/share/evince|/usr/share/evolution-data-server|/usr/share/example-content|/usr/share/file|/usr/share/file-roller|/usr/share/fish|/usr/share/fontconfig|/usr/share/fonts|/usr/share/fonts-droid-fallback|/usr/share/fonts-sil-padauk|/usr/share/foo2qpdl|/usr/share/foo2zjs|/usr/share/fwupd|/usr/share/gcc-8|/usr/share/GConf|/usr/share/gdb|/usr/share/gdm|/usr/share/gedit|/usr/share/GeoIP|/usr/share/gettext|/usr/share/gettext-0.19.8|/usr/share/ghostscript|/usr/share/glib-2.0|/usr/share/glvnd|/usr/share/gnome|/usr/share/gnome-background-properties|/usr/share/gnome-bluetooth|/usr/share/gnome-control-center|/usr/share/gnome-mahjongg|/usr/share/gnome-mines|/usr/share/gnome-session|/usr/share/gnome-settings-daemon|/usr/share/gnome-shell|/usr/share/gnome-software|/usr/share/gnome-sudoku|/usr/share/gnome-todo|/usr/share/gnome-video-effects|/usr/share/gnupg|/usr/share/goa-1.0|/usr/share/grilo-plugins|/usr/share/groff|/usr/share/grub|/usr/share/grub-gfxpayload-lists|/usr/share/gst-plugins-base|/usr/share/gstreamer-1.0|/usr/share/gtk-doc|/usr/share/gtk-engines|/usr/share/gtksourceview-3.0|/usr/share/guile|/usr/share/gutenprint|/usr/share/gvfs|/usr/share/hal|/usr/share/help|/usr/share/help-langpack|/usr/share/hplip|/usr/share/hunspell|/usr/share/hyphen|/usr/share/i18n|/usr/share/ibus|/usr/share/ibus-table|/usr/share/icons|/usr/share/ImageMagick-6|/usr/share/im-config|/usr/share/indicators|/usr/share/info|/usr/share/initramfs-tools|/usr/share/installation-report|/usr/share/intltool-debian|/usr/share/iptables|/usr/share/iso-codes|/usr/share/java|/usr/share/kde4|/usr/share/keyrings|/usr/share/language-selector|/usr/share/language-support|/usr/share/language-tools|/usr/share/libaudio2|/usr/share/libc-bin|/usr/share/libdrm|/usr/share/libexttextcat|/usr/share/libgnomekbd|/usr/share/libgphoto2|/usr/share/libgweather|/usr/share/liblangtag|/usr/share/liblouis|/usr/share/liblouisutdml|/usr/share/libparse-debianchangelog-perl|/usr/share/libreoffice|/usr/share/librevenge|/usr/share/libsensors4|/usr/share/libthai|/usr/share/libwacom|/usr/share/lightdm|/usr/share/lintian|/usr/share/linux-sound-base|/usr/share/locale|/usr/share/locale-langpack|/usr/share/locales|/usr/share/m2300w|/usr/share/man|/usr/share/man-db|/usr/share/maven-repo|/usr/share/media-player-info|/usr/share/menu|/usr/share/metainfo|/usr/share/mime|/usr/share/mime-info|/usr/share/mimelnk|/usr/share/misc|/usr/share/mobile-broadband-provider-info|/usr/share/mousetweaks|/usr/share/mozilla|/usr/share/mythes|/usr/share/nano|/usr/share/nautilus-share|/usr/share/netpbm|/usr/share/netplan|/usr/share/numpy3|/usr/share/openssh|/usr/share/orca|/usr/share/os-prober|/usr/share/p11-kit|/usr/share/package-data-downloads|/usr/share/PackageKit|/usr/share/pam|/usr/share/pam-configs|/usr/share/perl|/usr/share/perl5|/usr/share/perl-openssl-defaults|/usr/share/pixmaps|/usr/share/pkgconfig|/usr/share/plymouth|/usr/share/pnm2ppa|/usr/share/polkit-1|/usr/share/poppler|/usr/share/popularity-contest|/usr/share/ppd|/usr/share/ppp|/usr/share/publicsuffix|/usr/share/pulseaudio|/usr/share/pyshared|/usr/share/python|/usr/share/python3|/usr/share/python-apt|/usr/share/readline|/usr/share/remmina|/usr/share/rhythmbox|/usr/share/rsyslog|/usr/share/seahorse|/usr/share/secureboot|/usr/share/selinux|/usr/share/selinux-basics|/usr/share/sensible-utils|/usr/share/session-migration|/usr/share/simple-scan|/usr/share/snmp|/usr/share/software-properties|/usr/share/sounds|/usr/share/speech-dispatcher|/usr/share/ssl-cert|/usr/share/system-config-printer|/usr/share/systemd|/usr/share/systemtap|/usr/share/tabset|/usr/share/tasksel|/usr/share/terminfo|/usr/share/themes|/usr/share/thumbnailers|/usr/share/totem|/usr/share/transmission|/usr/share/ubuntu|/usr/share/ubuntu-drivers-common|/usr/share/ubuntu-release-upgrader|/usr/share/ubuntu-wayland|/usr/share/ufw|/usr/share/unattended-upgrades|/usr/share/unity|/usr/share/update-manager|/usr/share/update-notifier|/usr/share/upstart|/usr/share/usb-creator|/usr/share/usb_modeswitch|/usr/share/vim|/usr/share/wayland-sessions|/usr/share/X11|/usr/share/xdg-desktop-portal|/usr/share/xml|/usr/share/xsessions|/usr/share/yelp|/usr/share/yelp-xsl|/usr/share/zeitgeist|/usr/share/zenity|/usr/share/zoneinfo|/usr/share/zsh|/usr/src|/usr/src/linux-headers-4.15.0-213|/usr/src/linux-headers-4.15.0-213-generic|/var|/var/backups|/var/cache|/var/cache/apparmor|/var/cache/app-info|/var/cache/apt|/var/cache/cracklib|/var/cache/cups|/var/cache/debconf|/var/cache/dictionaries-common|/var/cache/fontconfig|/var/cache/gdm|/var/cache/ldconfig|/var/cache/PackageKit|/var/cache/snapd|/var/crash|/var/lib|/var/lib/AccountsService|/var/lib/acpi-support|/var/lib/alsa|/var/lib/app-info|/var/lib/apport|/var/lib/apt|/var/lib/aspell|/var/lib/bluetooth|/var/lib/boltd|/var/lib/command-not-found|/var/lib/dbus|/var/lib/dhcp|/var/lib/dictionaries-common|/var/lib/dpkg|/var/lib/emacsen-common|/var/lib/fwupd|/var/lib/ghostscript|/var/lib/grub|/var/lib/hp|/var/lib/initramfs-tools|/var/lib/ispell|/var/lib/libreoffice|/var/lib/libxml-sax-perl|/var/lib/locales|/var/lib/logrotate|/var/lib/man-db|/var/lib/misc|/var/lib/mlocate|/var/lib/NetworkManager|/var/lib/os-prober|/var/lib/PackageKit|/var/lib/pam|/var/lib/plymouth|/var/lib/polkit-1|/var/lib/private|/var/lib/python|/var/lib/selinux|/var/lib/sepolgen|/var/lib/snapd|/var/lib/snmp|/var/lib/sudo|/var/lib/systemd|/var/lib/ubuntu-advantage|/var/lib/ubuntu-drivers-common|/var/lib/ubuntu-release-upgrader|/var/lib/ucf|/var/lib/udisks2|/var/lib/unattended-upgrades|/var/lib/update-manager|/var/lib/update-notifier|/var/lib/upower|/var/lib/ureadahead|/var/lib/usb_modeswitch|/var/lib/usbutils|/var/lib/vim|/var/lib/whoopsie|/var/lib/xfonts|/var/lib/xkb|/var/local|/var/log|/var/log/apt|/var/log/audit|/var/log/cups|/var/log/dist-upgrade|/var/log/gdm3|/var/log/hp|/var/log/installer|/var/log/journal|/var/log/unattended-upgrades|/var/mail|/var/metrics|/var/opt|/var/snap|/var/spool|/var/spool/anacron|/var/spool/cron|/var/spool/cups|/var/spool/libreoffice|/var/tmp|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-bolt.service-phU6e7|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-colord.service-bwmMmd|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-ModemManager.service-rxKhGn|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-resolved.service-xGzwZz|/var/tmp/systemd-private-c3d0c1f2483547ec8a16a15065ee6c0d-systemd-timedated.service-Tc9erG|[a-zA-Z]+[a-zA-Z0-9]* +\\*,[1;31m&[0m,"2⤵PID:2835
-
-
/bin/sedsed -E "s%/sys|/proc|/dev|/dev/pts|/run|/|/sys/kernel/security|/dev/shm|/run/lock|/sys/fs/cgroup|/sys/fs/cgroup/unified|/sys/fs/cgroup/systemd|/sys/fs/pstore|/sys/fs/cgroup/freezer|/sys/fs/cgroup/net_cls,net_prio|/sys/fs/cgroup/cpu,cpuacct|/sys/fs/cgroup/cpuset|/sys/fs/cgroup/blkio|/sys/fs/cgroup/perf_event|/sys/fs/cgroup/memory|/sys/fs/cgroup/pids|/sys/fs/cgroup/devices|/sys/fs/cgroup/rdma|/sys/fs/cgroup/hugetlb|/proc/sys/fs/binfmt_misc|/dev/hugepages|/dev/mqueue|/sys/kernel/debug|/sys/fs/fuse/connections|/sys/kernel/config|/proc/sys/fs/binfmt_misc|/run/user/0|/run/user/0/gvfs|/sys/kernel/debug/tracing|UUID=040d9bdb-513b-4ecf-adde-309e7b54b137%[1;34m&[0m%g"2⤵PID:2834
-
-
/bin/sedsed -E "s,ImPoSSssSiBlEee,[1;31m&[0m,g"2⤵PID:2833
-
-
/bin/sedsed -E "s,swap|/cdrom|/floppy|/dev/shm,[1;32m&[0m,g"2⤵PID:2832
-
-
/bin/grepgrep -Ev "\\W+\\#|^#"2⤵PID:2831
-
-
/bin/grepgrep -v "^#" /etc/fstab2⤵PID:2830
-
-
/usr/bin/headhead -n 202⤵PID:2841
-
-
/bin/sedsed "s,crypt,[1;31m&[0m,"2⤵PID:2840
-
-
/bin/grepgrep -Ei "^sd|^disk"2⤵PID:2839
-
-
/bin/lsls /dev2⤵PID:2838
-
-
/bin/sedsed -E "s,[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY]|KRB5CCNAME|[aA][pP][iI][_][kK][eE][yY]|[aA][wW][sS]|[aA][zZ][uU][rR][eE]|[gG][cC][pP]|[aA][pP][iI]|[sS][eE][cC][rR][eE][tT]|[sS][qQ][lL]|[dD][aA][tT][aA][bB][aA][sS][eE]|[tT][oO][kK][eE][nN],[1;31m&[0m,g"2⤵PID:2847
-
-
/bin/grepgrep -Eiv "LESS_TERMCAP|JOURNAL_STREAM|XDG_SESSION|DBUS_SESSION|systemd\\/sessions|systemd_exec|MEMORY_PRESSURE_WATCH|RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs|USEFUL_SOFTWARE|PSTORAGE_|^PATH=|^INVOCATION_ID=|^WATCHDOG_PID=|^LISTEN_PID="2⤵PID:2846
-
-
/usr/bin/envenv2⤵PID:2848
-
-
/bin/grepgrep signature2⤵PID:2852
-
-
/bin/dmesgdmesg2⤵PID:2851
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"2⤵PID:2855
-
-
/usr/sbin/aa-statusaa-status2⤵PID:2854
-
-
/bin/sedsed "s,kernel,[1;32m&[0m,"2⤵PID:2858
-
-
/bin/sedsed "s,unconfined,[1;31m&[0m,"2⤵PID:2857
-
-
/bin/catcat /proc/self/attr/current2⤵PID:2859
-
-
/bin/grepgrep s390x2⤵PID:2863
-
-
/bin/unameuname -a2⤵PID:2862
-
-
/bin/grepgrep "\\-grsec"2⤵PID:2867
-
-
/bin/unameuname -r2⤵PID:2866
-
-
/bin/grepgrep grsecurity /etc/sysctl.conf2⤵PID:2865
-
-
/bin/sedsed "s,=0,[1;31m&[0m,"2⤵PID:2870
-
-
/bin/grepgrep exec-shield /etc/sysctl.conf2⤵PID:2871
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"2⤵PID:2873
-
-
/usr/sbin/sestatussestatus2⤵PID:2874
-
-
/bin/sedsed "s,enabled,[1;32m&[0m,"2⤵PID:2877
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"2⤵PID:2876
-
-
/bin/grepgrep -v 02⤵PID:2880
-
-
/bin/grepgrep Seccomp /proc/self/status2⤵PID:2879
-
-
/bin/catcat /proc/self/uid_map2⤵PID:2881
-
-
/bin/sedsed "s,enabled,[1;32m&[0m,"2⤵PID:2883
-
-
/bin/catcat /proc/sys/kernel/unprivileged_userns_clone2⤵PID:2884
-
-
/bin/sedsed -E "s,.*,[1;31m&[0m,g"2⤵PID:2886
-
-
/bin/catcat /proc/sys/kernel/unprivileged_bpf_disabled2⤵PID:2887
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"2⤵PID:2889
-
-
/bin/sedsed "s,enabled,[1;32m&[0m,"2⤵PID:2892
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"2⤵PID:2891
-
-
/bin/grepgrep cgroup2 /proc/filesystems2⤵PID:2893
-
-
/bin/catcat /proc/sys/kernel/kptr_restrict2⤵PID:2894
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"2⤵PID:2896
-
-
/bin/catcat /proc/sys/kernel/dmesg_restrict2⤵PID:2897
-
-
/bin/sedsed -E "s,0,[1;31m&[0m,"2⤵PID:2899
-
-
/bin/catcat /proc/sys/kernel/yama/ptrace_scope2⤵PID:2900
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"2⤵PID:2902
-
-
/bin/catcat /proc/sys/fs/protected_symlinks2⤵PID:2903
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"2⤵PID:2905
-
-
/bin/catcat /proc/sys/fs/protected_hardlinks2⤵PID:2906
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"2⤵PID:2908
-
-
/bin/catcat /proc/sys/kernel/perf_event_paranoid2⤵PID:2909
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"2⤵PID:2911
-
-
/bin/catcat /proc/sys/vm/mmap_min_addr2⤵PID:2912
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"2⤵PID:2914
-
-
/bin/unameuname -r2⤵PID:2915
-
-
/bin/unameuname -r2⤵PID:2916
-
-
/bin/grepgrep -E "CONFIG_RANDOMIZE_BASE|CONFIG_STACKPROTECTOR|CONFIG_SLAB_FREELIST_|CONFIG_KASAN" /boot/config-4.15.0-213-generic2⤵PID:2917
-
-
/bin/catcat /proc/sys/kernel/randomize_va_space2⤵PID:2918
-
-
/usr/bin/lpstatlpstat -a2⤵PID:2920
-
-
/bin/grepgrep hypervisor2⤵PID:2923
-
-
/bin/grepgrep flags /proc/cpuinfo2⤵
- Checks CPU configuration
PID:2922
-
-
/usr/bin/systemd-detect-virtsystemd-detect-virt2⤵
- Checks hardware identifiers (DMI)
- Reads hardware information
- Checks CPU configuration
PID:2925
-
-
/bin/sedsed -E "s,.*,[1;31m&[0m,g"2⤵PID:2928
-
-
/bin/grepgrep -Ev "root\\s+root"2⤵PID:2927
-
-
/usr/bin/findfind /lib/modules -type f -name "*.ko" -ls2⤵PID:2926
-
-
/bin/catcat /proc/sys/kernel/modules_disabled2⤵PID:2929
-
-
/bin/sedsed -E "s,.*,[1;31m&[0m,g"2⤵PID:2931
-
-
/bin/catcat /sys/module/module/parameters/sig_enforce2⤵PID:2932
-
-
/bin/sedsed -E "s,.*,[1;31m&[0m,g"2⤵PID:2934
-
-
/bin/unameuname -s2⤵PID:2937
-
-
/usr/bin/timeouttimeout 12 python3 -c "import ctypes, os, sys try: if hasattr(os, \"splice\"): sys.exit(0) libc = ctypes.CDLL(None, use_errno=True) sys.exit(0 if hasattr(libc, \"splice\") else 1) except Exception: sys.exit(1) "2⤵PID:2938
-
/usr/local/sbin/python3python3 -c "import ctypes, os, sys try: if hasattr(os, \"splice\"): sys.exit(0) libc = ctypes.CDLL(None, use_errno=True) sys.exit(0 if hasattr(libc, \"splice\") else 1) except Exception: sys.exit(1) "3⤵PID:2939
-
-
/usr/local/bin/python3python3 -c "import ctypes, os, sys try: if hasattr(os, \"splice\"): sys.exit(0) libc = ctypes.CDLL(None, use_errno=True) sys.exit(0 if hasattr(libc, \"splice\") else 1) except Exception: sys.exit(1) "3⤵PID:2939
-
-
/usr/sbin/python3python3 -c "import ctypes, os, sys try: if hasattr(os, \"splice\"): sys.exit(0) libc = ctypes.CDLL(None, use_errno=True) sys.exit(0 if hasattr(libc, \"splice\") else 1) except Exception: sys.exit(1) "3⤵PID:2939
-
-
/usr/bin/python3python3 -c "import ctypes, os, sys try: if hasattr(os, \"splice\"): sys.exit(0) libc = ctypes.CDLL(None, use_errno=True) sys.exit(0 if hasattr(libc, \"splice\") else 1) except Exception: sys.exit(1) "3⤵PID:2939
-
-
-
/bin/catcat2⤵PID:2942
-
-
/usr/bin/timeouttimeout 12 python3 /tmp/cf31-probe-1518.py2⤵PID:2943
-
/usr/local/sbin/python3python3 /tmp/cf31-probe-1518.py3⤵
- Command and Scripting Interpreter: Python
PID:2944
-
-
/usr/local/bin/python3python3 /tmp/cf31-probe-1518.py3⤵
- Command and Scripting Interpreter: Python
PID:2944
-
-
/usr/sbin/python3python3 /tmp/cf31-probe-1518.py3⤵
- Command and Scripting Interpreter: Python
PID:2944
-
-
/usr/bin/python3python3 /tmp/cf31-probe-1518.py3⤵
- Command and Scripting Interpreter: Python
- Writes file to tmp directory
PID:2944
-
-
-
/bin/sedsed -E "s,.*,[1;31;103m&[0m,"2⤵PID:2961
-
-
/bin/unameuname -s2⤵PID:2962
-
-
/bin/unameuname -r2⤵PID:2963
-
-
/bin/sedsed "s/\\.\$//"2⤵PID:2970
-
-
/bin/sedsed "s/^\\.//"2⤵PID:2969
-
-
/bin/sedsed "s/\\.\\./\\./g"2⤵PID:2968
-
-
/bin/sedsed "s/[^0-9.].*\$//"2⤵PID:2967
-
-
/usr/bin/trtr - .2⤵PID:2966
-
-
/bin/unameuname -m2⤵PID:2971
-
-
/bin/grepgrep -Eq "^pkg=|^ver|CONFIG_|sysctl:|cmd:|,pkg=|,ver|,CONFIG_|,sysctl:|,cmd:"2⤵PID:2975
-
-
/usr/bin/trtr "," "\\n"2⤵PID:2978
-
-
/bin/sedsed "s/^ *//;s/ *\$//"2⤵PID:2981
-
-
/bin/grepgrep -q "^pkg="2⤵PID:2983
-
-
/bin/sedsed "s/^ *//;s/ *\$//"2⤵PID:2986
-
-
/bin/grepgrep -q "^pkg="2⤵PID:2988
-
-
/bin/grepgrep -q "^ver"2⤵PID:2990
-
-
/bin/sedsed -E "s/^ver(<=|>=|=|<|>).*/\\1/"2⤵PID:2993
-
-
/bin/sedsed -E "s/^ver(<=|>=|=|<|>)//"2⤵PID:2996
-
-
/bin/sedsed "s/\\.\$//"2⤵PID:3003
-
-
/bin/sedsed "s/^\\.//"2⤵PID:3002
-
-
/bin/sedsed "s/\\.\\./\\./g"2⤵PID:3001
-
-
/bin/sedsed "s/[^0-9.].*\$//"2⤵PID:3000
-
-
/usr/bin/trtr - .2⤵PID:2999
-
-
/bin/sedsed "s/\\.\$//"2⤵PID:3010
-
-
/bin/sedsed "s/^\\.//"2⤵PID:3009
-
-
/bin/sedsed "s/\\.\\./\\./g"2⤵PID:3008
-
-
/bin/sedsed "s/[^0-9.].*\$//"2⤵PID:3007
-
-
/usr/bin/trtr - .2⤵PID:3006
-
-
/usr/bin/awkawk -v "a=4.15.0.213" -v "b=2.4.29" " function clean(v){gsub(/[^0-9]/,\"\",v); if(v==\"\")v=0; return v+0} BEGIN{ na=split(a,A,\".\"); nb=split(b,B,\".\"); n=(na>nb?na:nb); for(i=1;i<=n;i++){ va=(i<=na?clean(A[i]):0); vb=(i<=nb?clean(B[i]):0); if(va<vb){print -1; exit} if(va>vb){print 1; exit} } print 0 }"2⤵PID:3011
-
-
/bin/grepgrep -Eq "^pkg=|^ver|CONFIG_|sysctl:|cmd:|,pkg=|,ver|,CONFIG_|,sysctl:|,cmd:"2⤵PID:3013
-
-
/usr/bin/trtr "," "\\n"2⤵PID:3016
-
-
/bin/sedsed "s/^ *//;s/ *\$//"2⤵PID:3019
-
-
/bin/grepgrep -q "^pkg="2⤵PID:3021
-
-
/bin/sedsed "s/^ *//;s/ *\$//"2⤵PID:3024
-
-
/bin/grepgrep -q "^pkg="2⤵PID:3026
-
-
/bin/grepgrep -q "^ver"2⤵PID:3028
-
Network
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Python
1Software Deployment Tools
1Defense Evasion
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1Virtualization/Sandbox Evasion
4System Checks
3Time Based Evasion
1Credential Access
OS Credential Dumping
2/etc/passwd and /etc/shadow
1Proc Filesystem
1Discovery
Process Discovery
1Remote System Discovery
1System Information Discovery
4System Network Configuration Discovery
3Internet Connection Discovery
1System Network Connections Discovery
2Virtualization/Sandbox Evasion
4System Checks
3Time Based Evasion
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path /root/.gnupg/.#lk0x000055884c021500.ubuntu1804-amd64-20260126-en-2.25501
- Size 42B
- SHA256 9d0d238f157ee679b710633961de8e68d5af5077d6f4fe61107888bdad559cbc
- MD5 48149fdff82f68b9cb4c471907c5cf02
- SHA1 b166f8b16e96c51822c8fed3a03b63b3cf6f0060
- SHA512 c3af6b7975ce33faeba2c519c3860d2a778fd8421028a823b1c8470a7b16bac2cb45bb3b508d080cfe27b912c2d9ed9d83e69f5b5e366ca1e34141c94ea739c6
- MD5 SHA1 SHA512
- Path /tmp/cf31-check-t4c0b1i4/sentinel
- Size 4KB
- SHA256 6896d9ea3f73a4434f5832bc65714e7d066f177373f36f34dc8a6f735daa41b1
- MD5 82a7348c2e03731109d0cf45a7325b88
- SHA1 608cabc0f2fa18c260cafd974516865c772363d5
- SHA512 0b0f6d1974a86bb9f1d50d404a780d008dd7d05883286ba456325e91a381d44b5e8e27e0fb01f43cfda1132d66c363b9131c2132e8ee005949b7237f6afc9cdc
- MD5 SHA1 SHA512
- Path /tmp/cf31-probe-1518.py
- Size 4KB
- SHA256 ecc7504d76025c1c6f9792d121829fcd98c529e0a6b6bfe59e8cd34bcb60d108
- MD5 92f142037edbcc39a54fc615bea37c45
- SHA1 d6aa5e47dc905e230fe7548e6cefb4fdb31140be
- SHA512 b494ae5491248bbb730a4e5798fa00e67a2fc9802628981f99cd9e20e933d6c5923c3722dfb4877c75367e4a83cb10a7ac605a4f46403a1b48aacd2dc49d6128
- SSDEEP 96:kefRB6l6he1SKoKckje6NsmD8R2CwuwdHhqeI5m/13bT:keskKLVzNsmAR5w1n/1X
- TLSH T1B69151076E2464E3E393E66D44A2E4412734B94748568E757FEC8B703F47134C6B2EA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /tmp/fileutl.message.1POTK8
- Size 235KB
- SHA256 7552d5ab0c3879756a860aaab8e7c2f8ffb9409ea9ff9e65fc046ba5c519ebe5
- MD5 373fe2f2ef99005d2550a482f09a3e51
- SHA1 68e6572b55b1e77f7d171ebac7b2579b7a6bd51d
- SHA512 def9e854b824d2fddc6a15f898be73cfb679ac38563f5af854546f49c9d5d2316a40176dc41d6b360bda7b65de53863a53e4eedadf6336000b031b77a113607b
- SSDEEP 3072:t18aY9GIuZ6V6EjuocG6dW9kzceITEjV3rmug/ng:tHu7uMVFT6dWCfV3q/g
- TLSH T19A3431D42934ADB3456AE70717A15481BB2C5C8036B29CDDB04D9DE2CBF6BCE5BEB408
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /tmp/irbhblyb
- Size 4B
- SHA256 f02285fb90ed8c81531fe78cf4e2abb68a62be73ee7d317623e2c3e3aefdfff2
- MD5 3f1d1d8d87177d3d8d897d7e421f84d6
- SHA1 dd082d742a5cb751290f1db2bd519c286aa86d95
- SHA512 2ae2b3936f31756332ca7a4b877d18f3fcc50e41e9472b5cd45a70bea82e29a0fa956ee6a9ee0e02f23d9db56b41d19cb51d88aac06e9c923a820a21023752a9
- MD5 SHA1 SHA512