10c116642e72f44894503418820c479dbbd5de3ddc189c756cc7d0e8166d7264

Analysis

max time kernel
4s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
03/07/2026, 22:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Aether_Os/permissions_rollback.sh.null
Size 5KB
Sample260703-2hxt4agz21
SHA256 10c116642e72f44894503418820c479dbbd5de3ddc189c756cc7d0e8166d7264
MD5 777f779075eb74086a85c902b735cb8e
SHA1 80533319ac5cf801f86ec5b5fffc800f61ab59c7
SHA512 2791dc15a280c7e4affe462c66434e265e48bff643cc8e6a95d79597531d7a912e2b97f46b4853b845f852534da95bd1cf84441c3c0ca4af62ba1476c8b25b99
SSDEEP 48:5jLXOFP+/+/3vkVnnCL/hAd1rgvx/JYFnqXNHelkLR2FRuDT5ABizJ77ihG/VD:MTk0rhucs+HvZplihG/VD
TLSH
T11FB130F1E57C41317999E02EBA0D5081AFDB7D7A76AC361120ABFC60B3CC09D215ABB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery privilege_escalation

Malware Config

Signatures

File and Directory Permissions Modification 1 TTPs 5 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
677	chmod
679	chmod
680	chmod
682	chmod
683	chmod

Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 21 IoCs

Abuse sudo or cached sudo credentials to execute code.

privilege_escalation defense_evasion

Sudo and Sudo Caching

T1548.003

pid	Process
798	chmod
690	chmod
691	find
692	chmod
693	chmod
798	chmod
798	chmod
833	ls
692	chmod
692	chmod
692	chmod
693	chmod
798	chmod
798	chmod
693	chmod
693	chmod
693	chmod
798	chmod
692	chmod
692	chmod
693	chmod

Reads runtime system information 6 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	stat
File opened for reading	/proc/filesystems	ls
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	find
File opened for reading	/proc/filesystems	ls

System Network Configuration Discovery 1 TTPs 36 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
802	chmod
804	chmod
805	chmod
810	chmod
807	chmod
809	chmod
810	chmod
810	chmod
804	chmod
805	chmod
805	chmod
807	chmod
807	chmod
810	chmod
802	chmod
802	chmod
809	chmod
809	chmod
802	chmod
805	chmod
807	chmod
810	chmod
804	chmod
804	chmod
802	chmod
807	chmod
807	chmod
809	chmod
809	chmod
804	chmod
804	chmod
805	chmod
805	chmod
809	chmod
810	chmod
802	chmod

/tmp/Aether_Os/permissions_rollback.sh.null
/tmp/Aether_Os/permissions_rollback.sh.null
1⤵
PID:645

/usr/local/sbin/bash
bash /tmp/Aether_Os/permissions_rollback.sh.null
1⤵
PID:645

/usr/local/bin/bash
bash /tmp/Aether_Os/permissions_rollback.sh.null
1⤵
PID:645

/usr/sbin/bash
bash /tmp/Aether_Os/permissions_rollback.sh.null
1⤵
PID:645

/usr/bin/bash
bash /tmp/Aether_Os/permissions_rollback.sh.null
1⤵
PID:645

/sbin/bash
bash /tmp/Aether_Os/permissions_rollback.sh.null
1⤵
PID:645

/bin/bash
bash /tmp/Aether_Os/permissions_rollback.sh.null
1⤵
PID:645
- /bin/date
  date "+%T"
  2⤵
  PID:656
- /usr/bin/stat
  stat -c "%a" /dev/null
  2⤵
  - Reads runtime system information
  PID:661
- /usr/bin/stat
  stat -c "%F" /dev/null
  2⤵
  - Reads runtime system information
  PID:666
- /bin/ls
  ls -l /dev/null
  2⤵
  - Reads runtime system information
  PID:667
- /bin/date
  date "+%T"
  2⤵
  PID:673
- /bin/date
  date "+%T"
  2⤵
  PID:675
- /bin/chmod
  chmod 0755 "/usr/bin/brltty-*"
  2⤵
  - File and Directory Permissions Modification
  PID:677
- /bin/chmod
  chmod 0755 /usr/bin/gphoto2-config
  2⤵
  - File and Directory Permissions Modification
  PID:679
- /bin/chmod
  chmod 0755 /usr/bin/wsrep_sst_common
  2⤵
  - File and Directory Permissions Modification
  PID:680
- /bin/chmod
  chmod 0755 "/usr/bin/mono-*-gdb.py"
  2⤵
  - File and Directory Permissions Modification
  PID:682
- /bin/chmod
  chmod 0755 /usr/bin/nopt
  2⤵
  - File and Directory Permissions Modification
  PID:683
- /bin/date
  date "+%T"
  2⤵
  PID:684
- /bin/date
  date "+%T"
  2⤵
  PID:685
- /bin/chmod
  chmod 0600 /etc/shadow
  2⤵
  PID:686
- /bin/chmod
  chmod 0640 /etc/gshadow
  2⤵
  PID:687
- /bin/date
  date "+%T"
  2⤵
  PID:688
- /bin/chmod
  chmod 0750 /etc/sudoers.d
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  PID:690
- /usr/bin/find
  find /etc/sudoers.d -type f -exec chmod 0440 "{}" ";"
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  - Reads runtime system information
  PID:691
- - /usr/local/sbin/chmod
    chmod 0440 /etc/sudoers.d/user
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:692
- - /usr/local/bin/chmod
    chmod 0440 /etc/sudoers.d/user
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:692
- - /usr/sbin/chmod
    chmod 0440 /etc/sudoers.d/user
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:692
- - /usr/bin/chmod
    chmod 0440 /etc/sudoers.d/user
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:692
- - /sbin/chmod
    chmod 0440 /etc/sudoers.d/user
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:692
- - /bin/chmod
    chmod 0440 /etc/sudoers.d/user
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:692
- - /usr/local/sbin/chmod
    chmod 0440 /etc/sudoers.d/README
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:693
- - /usr/local/bin/chmod
    chmod 0440 /etc/sudoers.d/README
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:693
- - /usr/sbin/chmod
    chmod 0440 /etc/sudoers.d/README
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:693
- - /usr/bin/chmod
    chmod 0440 /etc/sudoers.d/README
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:693
- - /sbin/chmod
    chmod 0440 /etc/sudoers.d/README
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:693
- - /bin/chmod
    chmod 0440 /etc/sudoers.d/README
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:693
- /bin/chmod
  chmod 0664 /etc/default/useradd
  2⤵
  PID:694
- /bin/date
  date "+%T"
  2⤵
  PID:695
- /usr/bin/find
  find /etc -type f "(" -name "*.conf" -o -name "*.cfg" -o -name config ")" -not -path "/etc/shadow*" -not -path "/etc/gshadow*" -exec chmod 0644 "{}" ";"
  2⤵
  - Reads runtime system information
  PID:696
- - /usr/local/sbin/chmod
    chmod 0644 /etc/discover-modprobe.conf
    3⤵
    PID:697
- - /usr/local/bin/chmod
    chmod 0644 /etc/discover-modprobe.conf
    3⤵
    PID:697
- - /usr/sbin/chmod
    chmod 0644 /etc/discover-modprobe.conf
    3⤵
    PID:697
- - /usr/bin/chmod
    chmod 0644 /etc/discover-modprobe.conf
    3⤵
    PID:697
- - /sbin/chmod
    chmod 0644 /etc/discover-modprobe.conf
    3⤵
    PID:697
- - /bin/chmod
    chmod 0644 /etc/discover-modprobe.conf
    3⤵
    PID:697
- - /usr/local/sbin/chmod
    chmod 0644 /etc/libaudit.conf
    3⤵
    PID:698
- - /usr/local/bin/chmod
    chmod 0644 /etc/libaudit.conf
    3⤵
    PID:698
- - /usr/sbin/chmod
    chmod 0644 /etc/libaudit.conf
    3⤵
    PID:698
- - /usr/bin/chmod
    chmod 0644 /etc/libaudit.conf
    3⤵
    PID:698
- - /sbin/chmod
    chmod 0644 /etc/libaudit.conf
    3⤵
    PID:698
- - /bin/chmod
    chmod 0644 /etc/libaudit.conf
    3⤵
    PID:698
- - /usr/local/sbin/chmod
    chmod 0644 /etc/kernel-img.conf
    3⤵
    PID:699
- - /usr/local/bin/chmod
    chmod 0644 /etc/kernel-img.conf
    3⤵
    PID:699
- - /usr/sbin/chmod
    chmod 0644 /etc/kernel-img.conf
    3⤵
    PID:699
- - /usr/bin/chmod
    chmod 0644 /etc/kernel-img.conf
    3⤵
    PID:699
- - /sbin/chmod
    chmod 0644 /etc/kernel-img.conf
    3⤵
    PID:699
- - /bin/chmod
    chmod 0644 /etc/kernel-img.conf
    3⤵
    PID:699
- - /usr/local/sbin/chmod
    chmod 0644 /etc/debconf.conf
    3⤵
    PID:700
- - /usr/local/bin/chmod
    chmod 0644 /etc/debconf.conf
    3⤵
    PID:700
- - /usr/sbin/chmod
    chmod 0644 /etc/debconf.conf
    3⤵
    PID:700
- - /usr/bin/chmod
    chmod 0644 /etc/debconf.conf
    3⤵
    PID:700
- - /sbin/chmod
    chmod 0644 /etc/debconf.conf
    3⤵
    PID:700
- - /bin/chmod
    chmod 0644 /etc/debconf.conf
    3⤵
    PID:700
- - /usr/local/sbin/chmod
    chmod 0644 /etc/nsswitch.conf
    3⤵
    PID:701
- - /usr/local/bin/chmod
    chmod 0644 /etc/nsswitch.conf
    3⤵
    PID:701
- - /usr/sbin/chmod
    chmod 0644 /etc/nsswitch.conf
    3⤵
    PID:701
- - /usr/bin/chmod
    chmod 0644 /etc/nsswitch.conf
    3⤵
    PID:701
- - /sbin/chmod
    chmod 0644 /etc/nsswitch.conf
    3⤵
    PID:701
- - /bin/chmod
    chmod 0644 /etc/nsswitch.conf
    3⤵
    PID:701
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ld.so.conf
    3⤵
    PID:702
- - /usr/local/bin/chmod
    chmod 0644 /etc/ld.so.conf
    3⤵
    PID:702
- - /usr/sbin/chmod
    chmod 0644 /etc/ld.so.conf
    3⤵
    PID:702
- - /usr/bin/chmod
    chmod 0644 /etc/ld.so.conf
    3⤵
    PID:702
- - /sbin/chmod
    chmod 0644 /etc/ld.so.conf
    3⤵
    PID:702
- - /bin/chmod
    chmod 0644 /etc/ld.so.conf
    3⤵
    PID:702
- - /usr/local/sbin/chmod
    chmod 0644 /etc/initramfs-tools/update-initramfs.conf
    3⤵
    PID:703
- - /usr/local/bin/chmod
    chmod 0644 /etc/initramfs-tools/update-initramfs.conf
    3⤵
    PID:703
- - /usr/sbin/chmod
    chmod 0644 /etc/initramfs-tools/update-initramfs.conf
    3⤵
    PID:703
- - /usr/bin/chmod
    chmod 0644 /etc/initramfs-tools/update-initramfs.conf
    3⤵
    PID:703
- - /sbin/chmod
    chmod 0644 /etc/initramfs-tools/update-initramfs.conf
    3⤵
    PID:703
- - /bin/chmod
    chmod 0644 /etc/initramfs-tools/update-initramfs.conf
    3⤵
    PID:703
- - /usr/local/sbin/chmod
    chmod 0644 /etc/initramfs-tools/initramfs.conf
    3⤵
    PID:704
- - /usr/local/bin/chmod
    chmod 0644 /etc/initramfs-tools/initramfs.conf
    3⤵
    PID:704
- - /usr/sbin/chmod
    chmod 0644 /etc/initramfs-tools/initramfs.conf
    3⤵
    PID:704
- - /usr/bin/chmod
    chmod 0644 /etc/initramfs-tools/initramfs.conf
    3⤵
    PID:704
- - /sbin/chmod
    chmod 0644 /etc/initramfs-tools/initramfs.conf
    3⤵
    PID:704
- - /bin/chmod
    chmod 0644 /etc/initramfs-tools/initramfs.conf
    3⤵
    PID:704
- - /usr/local/sbin/chmod
    chmod 0644 /etc/udev/udev.conf
    3⤵
    PID:705
- - /usr/local/bin/chmod
    chmod 0644 /etc/udev/udev.conf
    3⤵
    PID:705
- - /usr/sbin/chmod
    chmod 0644 /etc/udev/udev.conf
    3⤵
    PID:705
- - /usr/bin/chmod
    chmod 0644 /etc/udev/udev.conf
    3⤵
    PID:705
- - /sbin/chmod
    chmod 0644 /etc/udev/udev.conf
    3⤵
    PID:705
- - /bin/chmod
    chmod 0644 /etc/udev/udev.conf
    3⤵
    PID:705
- - /usr/local/sbin/chmod
    chmod 0644 /etc/mke2fs.conf
    3⤵
    PID:706
- - /usr/local/bin/chmod
    chmod 0644 /etc/mke2fs.conf
    3⤵
    PID:706
- - /usr/sbin/chmod
    chmod 0644 /etc/mke2fs.conf
    3⤵
    PID:706
- - /usr/bin/chmod
    chmod 0644 /etc/mke2fs.conf
    3⤵
    PID:706
- - /sbin/chmod
    chmod 0644 /etc/mke2fs.conf
    3⤵
    PID:706
- - /bin/chmod
    chmod 0644 /etc/mke2fs.conf
    3⤵
    PID:706
- - /usr/local/sbin/chmod
    chmod 0644 /etc/resolv.conf
    3⤵
    PID:707
- - /usr/local/bin/chmod
    chmod 0644 /etc/resolv.conf
    3⤵
    PID:707
- - /usr/sbin/chmod
    chmod 0644 /etc/resolv.conf
    3⤵
    PID:707
- - /usr/bin/chmod
    chmod 0644 /etc/resolv.conf
    3⤵
    PID:707
- - /sbin/chmod
    chmod 0644 /etc/resolv.conf
    3⤵
    PID:707
- - /bin/chmod
    chmod 0644 /etc/resolv.conf
    3⤵
    PID:707
- - /usr/local/sbin/chmod
    chmod 0644 /etc/sestatus.conf
    3⤵
    PID:708
- - /usr/local/bin/chmod
    chmod 0644 /etc/sestatus.conf
    3⤵
    PID:708
- - /usr/sbin/chmod
    chmod 0644 /etc/sestatus.conf
    3⤵
    PID:708
- - /usr/bin/chmod
    chmod 0644 /etc/sestatus.conf
    3⤵
    PID:708
- - /sbin/chmod
    chmod 0644 /etc/sestatus.conf
    3⤵
    PID:708
- - /bin/chmod
    chmod 0644 /etc/sestatus.conf
    3⤵
    PID:708
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans.conf
    3⤵
    PID:709
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans.conf
    3⤵
    PID:709
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans.conf
    3⤵
    PID:709
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans.conf
    3⤵
    PID:709
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans.conf
    3⤵
    PID:709
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans.conf
    3⤵
    PID:709
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/65-droid-sans-fallback.conf
    3⤵
    PID:710
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/65-droid-sans-fallback.conf
    3⤵
    PID:710
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/65-droid-sans-fallback.conf
    3⤵
    PID:710
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/65-droid-sans-fallback.conf
    3⤵
    PID:710
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/65-droid-sans-fallback.conf
    3⤵
    PID:710
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/65-droid-sans-fallback.conf
    3⤵
    PID:710
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans.conf
    3⤵
    PID:711
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans.conf
    3⤵
    PID:711
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans.conf
    3⤵
    PID:711
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans.conf
    3⤵
    PID:711
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans.conf
    3⤵
    PID:711
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans.conf
    3⤵
    PID:711
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/30-droid-noto-mono.conf
    3⤵
    PID:712
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/30-droid-noto-mono.conf
    3⤵
    PID:712
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/30-droid-noto-mono.conf
    3⤵
    PID:712
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/30-droid-noto-mono.conf
    3⤵
    PID:712
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/30-droid-noto-mono.conf
    3⤵
    PID:712
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/30-droid-noto-mono.conf
    3⤵
    PID:712
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-serif.conf
    3⤵
    PID:713
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-serif.conf
    3⤵
    PID:713
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-serif.conf
    3⤵
    PID:713
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-serif.conf
    3⤵
    PID:713
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-serif.conf
    3⤵
    PID:713
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-serif.conf
    3⤵
    PID:713
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf
    3⤵
    PID:714
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf
    3⤵
    PID:714
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf
    3⤵
    PID:714
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf
    3⤵
    PID:714
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf
    3⤵
    PID:714
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-serif.conf
    3⤵
    PID:714
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf
    3⤵
    PID:715
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf
    3⤵
    PID:715
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf
    3⤵
    PID:715
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf
    3⤵
    PID:715
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf
    3⤵
    PID:715
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans-mono.conf
    3⤵
    PID:715
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-serif.conf
    3⤵
    PID:716
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-serif.conf
    3⤵
    PID:716
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-serif.conf
    3⤵
    PID:716
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-serif.conf
    3⤵
    PID:716
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-serif.conf
    3⤵
    PID:716
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-serif.conf
    3⤵
    PID:716
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-serif.conf
    3⤵
    PID:717
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-serif.conf
    3⤵
    PID:717
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-serif.conf
    3⤵
    PID:717
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-serif.conf
    3⤵
    PID:717
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-serif.conf
    3⤵
    PID:717
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-serif.conf
    3⤵
    PID:717
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf
    3⤵
    PID:718
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf
    3⤵
    PID:718
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf
    3⤵
    PID:718
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf
    3⤵
    PID:718
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf
    3⤵
    PID:718
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/58-dejavu-lgc-sans-mono.conf
    3⤵
    PID:718
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans-mono.conf
    3⤵
    PID:719
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans-mono.conf
    3⤵
    PID:719
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans-mono.conf
    3⤵
    PID:719
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans-mono.conf
    3⤵
    PID:719
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans-mono.conf
    3⤵
    PID:719
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/57-dejavu-sans-mono.conf
    3⤵
    PID:719
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf
    3⤵
    PID:720
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf
    3⤵
    PID:720
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf
    3⤵
    PID:720
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf
    3⤵
    PID:720
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf
    3⤵
    PID:720
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans-mono.conf
    3⤵
    PID:720
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans.conf
    3⤵
    PID:721
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans.conf
    3⤵
    PID:721
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans.conf
    3⤵
    PID:721
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans.conf
    3⤵
    PID:721
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans.conf
    3⤵
    PID:721
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-sans.conf
    3⤵
    PID:721
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf
    3⤵
    PID:722
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf
    3⤵
    PID:722
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf
    3⤵
    PID:722
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf
    3⤵
    PID:722
- - /sbin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf
    3⤵
    PID:722
- - /bin/chmod
    chmod 0644 /etc/fonts/conf.avail/20-unhint-small-dejavu-lgc-sans.conf
    3⤵
    PID:722
- - /usr/local/sbin/chmod
    chmod 0644 /etc/fonts/fonts.conf
    3⤵
    PID:723
- - /usr/local/bin/chmod
    chmod 0644 /etc/fonts/fonts.conf
    3⤵
    PID:723
- - /usr/sbin/chmod
    chmod 0644 /etc/fonts/fonts.conf
    3⤵
    PID:723
- - /usr/bin/chmod
    chmod 0644 /etc/fonts/fonts.conf
    3⤵
    PID:723
- - /sbin/chmod
    chmod 0644 /etc/fonts/fonts.conf
    3⤵
    PID:723
- - /bin/chmod
    chmod 0644 /etc/fonts/fonts.conf
    3⤵
    PID:723
- - /usr/local/sbin/chmod
    chmod 0644 /etc/security/sepermit.conf
    3⤵
    PID:724
- - /usr/local/bin/chmod
    chmod 0644 /etc/security/sepermit.conf
    3⤵
    PID:724
- - /usr/sbin/chmod
    chmod 0644 /etc/security/sepermit.conf
    3⤵
    PID:724
- - /usr/bin/chmod
    chmod 0644 /etc/security/sepermit.conf
    3⤵
    PID:724
- - /sbin/chmod
    chmod 0644 /etc/security/sepermit.conf
    3⤵
    PID:724
- - /bin/chmod
    chmod 0644 /etc/security/sepermit.conf
    3⤵
    PID:724
- - /usr/local/sbin/chmod
    chmod 0644 /etc/security/access.conf
    3⤵
    PID:725
- - /usr/local/bin/chmod
    chmod 0644 /etc/security/access.conf
    3⤵
    PID:725
- - /usr/sbin/chmod
    chmod 0644 /etc/security/access.conf
    3⤵
    PID:725
- - /usr/bin/chmod
    chmod 0644 /etc/security/access.conf
    3⤵
    PID:725
- - /sbin/chmod
    chmod 0644 /etc/security/access.conf
    3⤵
    PID:725
- - /bin/chmod
    chmod 0644 /etc/security/access.conf
    3⤵
    PID:725
- - /usr/local/sbin/chmod
    chmod 0644 /etc/security/group.conf
    3⤵
    PID:726
- - /usr/local/bin/chmod
    chmod 0644 /etc/security/group.conf
    3⤵
    PID:726
- - /usr/sbin/chmod
    chmod 0644 /etc/security/group.conf
    3⤵
    PID:726
- - /usr/bin/chmod
    chmod 0644 /etc/security/group.conf
    3⤵
    PID:726
- - /sbin/chmod
    chmod 0644 /etc/security/group.conf
    3⤵
    PID:726
- - /bin/chmod
    chmod 0644 /etc/security/group.conf
    3⤵
    PID:726
- - /usr/local/sbin/chmod
    chmod 0644 /etc/security/namespace.conf
    3⤵
    PID:727
- - /usr/local/bin/chmod
    chmod 0644 /etc/security/namespace.conf
    3⤵
    PID:727
- - /usr/sbin/chmod
    chmod 0644 /etc/security/namespace.conf
    3⤵
    PID:727
- - /usr/bin/chmod
    chmod 0644 /etc/security/namespace.conf
    3⤵
    PID:727
- - /sbin/chmod
    chmod 0644 /etc/security/namespace.conf
    3⤵
    PID:727
- - /bin/chmod
    chmod 0644 /etc/security/namespace.conf
    3⤵
    PID:727
- - /usr/local/sbin/chmod
    chmod 0644 /etc/security/pam_env.conf
    3⤵
    PID:728
- - /usr/local/bin/chmod
    chmod 0644 /etc/security/pam_env.conf
    3⤵
    PID:728
- - /usr/sbin/chmod
    chmod 0644 /etc/security/pam_env.conf
    3⤵
    PID:728
- - /usr/bin/chmod
    chmod 0644 /etc/security/pam_env.conf
    3⤵
    PID:728
- - /sbin/chmod
    chmod 0644 /etc/security/pam_env.conf
    3⤵
    PID:728
- - /bin/chmod
    chmod 0644 /etc/security/pam_env.conf
    3⤵
    PID:728
- - /usr/local/sbin/chmod
    chmod 0644 /etc/security/limits.conf
    3⤵
    PID:729
- - /usr/local/bin/chmod
    chmod 0644 /etc/security/limits.conf
    3⤵
    PID:729
- - /usr/sbin/chmod
    chmod 0644 /etc/security/limits.conf
    3⤵
    PID:729
- - /usr/bin/chmod
    chmod 0644 /etc/security/limits.conf
    3⤵
    PID:729
- - /sbin/chmod
    chmod 0644 /etc/security/limits.conf
    3⤵
    PID:729
- - /bin/chmod
    chmod 0644 /etc/security/limits.conf
    3⤵
    PID:729
- - /usr/local/sbin/chmod
    chmod 0644 /etc/security/time.conf
    3⤵
    PID:730
- - /usr/local/bin/chmod
    chmod 0644 /etc/security/time.conf
    3⤵
    PID:730
- - /usr/sbin/chmod
    chmod 0644 /etc/security/time.conf
    3⤵
    PID:730
- - /usr/bin/chmod
    chmod 0644 /etc/security/time.conf
    3⤵
    PID:730
- - /sbin/chmod
    chmod 0644 /etc/security/time.conf
    3⤵
    PID:730
- - /bin/chmod
    chmod 0644 /etc/security/time.conf
    3⤵
    PID:730
- - /usr/local/sbin/chmod
    chmod 0644 /etc/deluser.conf
    3⤵
    PID:731
- - /usr/local/bin/chmod
    chmod 0644 /etc/deluser.conf
    3⤵
    PID:731
- - /usr/sbin/chmod
    chmod 0644 /etc/deluser.conf
    3⤵
    PID:731
- - /usr/bin/chmod
    chmod 0644 /etc/deluser.conf
    3⤵
    PID:731
- - /sbin/chmod
    chmod 0644 /etc/deluser.conf
    3⤵
    PID:731
- - /bin/chmod
    chmod 0644 /etc/deluser.conf
    3⤵
    PID:731
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ca-certificates.conf
    3⤵
    PID:732
- - /usr/local/bin/chmod
    chmod 0644 /etc/ca-certificates.conf
    3⤵
    PID:732
- - /usr/sbin/chmod
    chmod 0644 /etc/ca-certificates.conf
    3⤵
    PID:732
- - /usr/bin/chmod
    chmod 0644 /etc/ca-certificates.conf
    3⤵
    PID:732
- - /sbin/chmod
    chmod 0644 /etc/ca-certificates.conf
    3⤵
    PID:732
- - /bin/chmod
    chmod 0644 /etc/ca-certificates.conf
    3⤵
    PID:732
- - /usr/local/sbin/chmod
    chmod 0644 /etc/audisp/audispd.conf
    3⤵
    PID:733
- - /usr/local/bin/chmod
    chmod 0644 /etc/audisp/audispd.conf
    3⤵
    PID:733
- - /usr/sbin/chmod
    chmod 0644 /etc/audisp/audispd.conf
    3⤵
    PID:733
- - /usr/bin/chmod
    chmod 0644 /etc/audisp/audispd.conf
    3⤵
    PID:733
- - /sbin/chmod
    chmod 0644 /etc/audisp/audispd.conf
    3⤵
    PID:733
- - /bin/chmod
    chmod 0644 /etc/audisp/audispd.conf
    3⤵
    PID:733
- - /usr/local/sbin/chmod
    chmod 0644 /etc/audisp/plugins.d/syslog.conf
    3⤵
    PID:734
- - /usr/local/bin/chmod
    chmod 0644 /etc/audisp/plugins.d/syslog.conf
    3⤵
    PID:734
- - /usr/sbin/chmod
    chmod 0644 /etc/audisp/plugins.d/syslog.conf
    3⤵
    PID:734
- - /usr/bin/chmod
    chmod 0644 /etc/audisp/plugins.d/syslog.conf
    3⤵
    PID:734
- - /sbin/chmod
    chmod 0644 /etc/audisp/plugins.d/syslog.conf
    3⤵
    PID:734
- - /bin/chmod
    chmod 0644 /etc/audisp/plugins.d/syslog.conf
    3⤵
    PID:734
- - /usr/local/sbin/chmod
    chmod 0644 /etc/audisp/plugins.d/af_unix.conf
    3⤵
    PID:735
- - /usr/local/bin/chmod
    chmod 0644 /etc/audisp/plugins.d/af_unix.conf
    3⤵
    PID:735
- - /usr/sbin/chmod
    chmod 0644 /etc/audisp/plugins.d/af_unix.conf
    3⤵
    PID:735
- - /usr/bin/chmod
    chmod 0644 /etc/audisp/plugins.d/af_unix.conf
    3⤵
    PID:735
- - /sbin/chmod
    chmod 0644 /etc/audisp/plugins.d/af_unix.conf
    3⤵
    PID:735
- - /bin/chmod
    chmod 0644 /etc/audisp/plugins.d/af_unix.conf
    3⤵
    PID:735
- - /usr/local/sbin/chmod
    chmod 0644 /etc/perl/Net/libnet.cfg
    3⤵
    PID:736
- - /usr/local/bin/chmod
    chmod 0644 /etc/perl/Net/libnet.cfg
    3⤵
    PID:736
- - /usr/sbin/chmod
    chmod 0644 /etc/perl/Net/libnet.cfg
    3⤵
    PID:736
- - /usr/bin/chmod
    chmod 0644 /etc/perl/Net/libnet.cfg
    3⤵
    PID:736
- - /sbin/chmod
    chmod 0644 /etc/perl/Net/libnet.cfg
    3⤵
    PID:736
- - /bin/chmod
    chmod 0644 /etc/perl/Net/libnet.cfg
    3⤵
    PID:736
- - /usr/local/sbin/chmod
    chmod 0644 /etc/gai.conf
    3⤵
    PID:737
- - /usr/local/bin/chmod
    chmod 0644 /etc/gai.conf
    3⤵
    PID:737
- - /usr/sbin/chmod
    chmod 0644 /etc/gai.conf
    3⤵
    PID:737
- - /usr/bin/chmod
    chmod 0644 /etc/gai.conf
    3⤵
    PID:737
- - /sbin/chmod
    chmod 0644 /etc/gai.conf
    3⤵
    PID:737
- - /bin/chmod
    chmod 0644 /etc/gai.conf
    3⤵
    PID:737
- - /usr/local/sbin/chmod
    chmod 0644 /etc/host.conf
    3⤵
    PID:738
- - /usr/local/bin/chmod
    chmod 0644 /etc/host.conf
    3⤵
    PID:738
- - /usr/sbin/chmod
    chmod 0644 /etc/host.conf
    3⤵
    PID:738
- - /usr/bin/chmod
    chmod 0644 /etc/host.conf
    3⤵
    PID:738
- - /sbin/chmod
    chmod 0644 /etc/host.conf
    3⤵
    PID:738
- - /bin/chmod
    chmod 0644 /etc/host.conf
    3⤵
    PID:738
- - /usr/local/sbin/chmod
    chmod 0644 /etc/nftables.conf
    3⤵
    PID:739
- - /usr/local/bin/chmod
    chmod 0644 /etc/nftables.conf
    3⤵
    PID:739
- - /usr/sbin/chmod
    chmod 0644 /etc/nftables.conf
    3⤵
    PID:739
- - /usr/bin/chmod
    chmod 0644 /etc/nftables.conf
    3⤵
    PID:739
- - /sbin/chmod
    chmod 0644 /etc/nftables.conf
    3⤵
    PID:739
- - /bin/chmod
    chmod 0644 /etc/nftables.conf
    3⤵
    PID:739
- - /usr/local/sbin/chmod
    chmod 0644 /etc/pam.conf
    3⤵
    PID:740
- - /usr/local/bin/chmod
    chmod 0644 /etc/pam.conf
    3⤵
    PID:740
- - /usr/sbin/chmod
    chmod 0644 /etc/pam.conf
    3⤵
    PID:740
- - /usr/bin/chmod
    chmod 0644 /etc/pam.conf
    3⤵
    PID:740
- - /sbin/chmod
    chmod 0644 /etc/pam.conf
    3⤵
    PID:740
- - /bin/chmod
    chmod 0644 /etc/pam.conf
    3⤵
    PID:740
- - /usr/local/sbin/chmod
    chmod 0644 /etc/systemd/system.conf
    3⤵
    PID:741
- - /usr/local/bin/chmod
    chmod 0644 /etc/systemd/system.conf
    3⤵
    PID:741
- - /usr/sbin/chmod
    chmod 0644 /etc/systemd/system.conf
    3⤵
    PID:741
- - /usr/bin/chmod
    chmod 0644 /etc/systemd/system.conf
    3⤵
    PID:741
- - /sbin/chmod
    chmod 0644 /etc/systemd/system.conf
    3⤵
    PID:741
- - /bin/chmod
    chmod 0644 /etc/systemd/system.conf
    3⤵
    PID:741
- - /usr/local/sbin/chmod
    chmod 0644 /etc/systemd/logind.conf
    3⤵
    PID:742
- - /usr/local/bin/chmod
    chmod 0644 /etc/systemd/logind.conf
    3⤵
    PID:742
- - /usr/sbin/chmod
    chmod 0644 /etc/systemd/logind.conf
    3⤵
    PID:742
- - /usr/bin/chmod
    chmod 0644 /etc/systemd/logind.conf
    3⤵
    PID:742
- - /sbin/chmod
    chmod 0644 /etc/systemd/logind.conf
    3⤵
    PID:742
- - /bin/chmod
    chmod 0644 /etc/systemd/logind.conf
    3⤵
    PID:742
- - /usr/local/sbin/chmod
    chmod 0644 /etc/systemd/user.conf
    3⤵
    PID:743
- - /usr/local/bin/chmod
    chmod 0644 /etc/systemd/user.conf
    3⤵
    PID:743
- - /usr/sbin/chmod
    chmod 0644 /etc/systemd/user.conf
    3⤵
    PID:743
- - /usr/bin/chmod
    chmod 0644 /etc/systemd/user.conf
    3⤵
    PID:743
- - /sbin/chmod
    chmod 0644 /etc/systemd/user.conf
    3⤵
    PID:743
- - /bin/chmod
    chmod 0644 /etc/systemd/user.conf
    3⤵
    PID:743
- - /usr/local/sbin/chmod
    chmod 0644 /etc/systemd/resolved.conf
    3⤵
    PID:744
- - /usr/local/bin/chmod
    chmod 0644 /etc/systemd/resolved.conf
    3⤵
    PID:744
- - /usr/sbin/chmod
    chmod 0644 /etc/systemd/resolved.conf
    3⤵
    PID:744
- - /usr/bin/chmod
    chmod 0644 /etc/systemd/resolved.conf
    3⤵
    PID:744
- - /sbin/chmod
    chmod 0644 /etc/systemd/resolved.conf
    3⤵
    PID:744
- - /bin/chmod
    chmod 0644 /etc/systemd/resolved.conf
    3⤵
    PID:744
- - /usr/local/sbin/chmod
    chmod 0644 /etc/systemd/timesyncd.conf
    3⤵
    PID:745
- - /usr/local/bin/chmod
    chmod 0644 /etc/systemd/timesyncd.conf
    3⤵
    PID:745
- - /usr/sbin/chmod
    chmod 0644 /etc/systemd/timesyncd.conf
    3⤵
    PID:745
- - /usr/bin/chmod
    chmod 0644 /etc/systemd/timesyncd.conf
    3⤵
    PID:745
- - /sbin/chmod
    chmod 0644 /etc/systemd/timesyncd.conf
    3⤵
    PID:745
- - /bin/chmod
    chmod 0644 /etc/systemd/timesyncd.conf
    3⤵
    PID:745
- - /usr/local/sbin/chmod
    chmod 0644 /etc/systemd/journald.conf
    3⤵
    PID:746
- - /usr/local/bin/chmod
    chmod 0644 /etc/systemd/journald.conf
    3⤵
    PID:746
- - /usr/sbin/chmod
    chmod 0644 /etc/systemd/journald.conf
    3⤵
    PID:746
- - /usr/bin/chmod
    chmod 0644 /etc/systemd/journald.conf
    3⤵
    PID:746
- - /sbin/chmod
    chmod 0644 /etc/systemd/journald.conf
    3⤵
    PID:746
- - /bin/chmod
    chmod 0644 /etc/systemd/journald.conf
    3⤵
    PID:746
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dhcp/dhclient.conf
    3⤵
    PID:747
- - /usr/local/bin/chmod
    chmod 0644 /etc/dhcp/dhclient.conf
    3⤵
    PID:747
- - /usr/sbin/chmod
    chmod 0644 /etc/dhcp/dhclient.conf
    3⤵
    PID:747
- - /usr/bin/chmod
    chmod 0644 /etc/dhcp/dhclient.conf
    3⤵
    PID:747
- - /sbin/chmod
    chmod 0644 /etc/dhcp/dhclient.conf
    3⤵
    PID:747
- - /bin/chmod
    chmod 0644 /etc/dhcp/dhclient.conf
    3⤵
    PID:747
- - /usr/local/sbin/chmod
    chmod 0644 /etc/xdg/user-dirs.conf
    3⤵
    PID:748
- - /usr/local/bin/chmod
    chmod 0644 /etc/xdg/user-dirs.conf
    3⤵
    PID:748
- - /usr/sbin/chmod
    chmod 0644 /etc/xdg/user-dirs.conf
    3⤵
    PID:748
- - /usr/bin/chmod
    chmod 0644 /etc/xdg/user-dirs.conf
    3⤵
    PID:748
- - /sbin/chmod
    chmod 0644 /etc/xdg/user-dirs.conf
    3⤵
    PID:748
- - /bin/chmod
    chmod 0644 /etc/xdg/user-dirs.conf
    3⤵
    PID:748
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ldap/ldap.conf
    3⤵
    PID:749
- - /usr/local/bin/chmod
    chmod 0644 /etc/ldap/ldap.conf
    3⤵
    PID:749
- - /usr/sbin/chmod
    chmod 0644 /etc/ldap/ldap.conf
    3⤵
    PID:749
- - /usr/bin/chmod
    chmod 0644 /etc/ldap/ldap.conf
    3⤵
    PID:749
- - /sbin/chmod
    chmod 0644 /etc/ldap/ldap.conf
    3⤵
    PID:749
- - /bin/chmod
    chmod 0644 /etc/ldap/ldap.conf
    3⤵
    PID:749
- - /usr/local/sbin/chmod
    chmod 0644 /etc/logrotate.conf
    3⤵
    PID:750
- - /usr/local/bin/chmod
    chmod 0644 /etc/logrotate.conf
    3⤵
    PID:750
- - /usr/sbin/chmod
    chmod 0644 /etc/logrotate.conf
    3⤵
    PID:750
- - /usr/bin/chmod
    chmod 0644 /etc/logrotate.conf
    3⤵
    PID:750
- - /sbin/chmod
    chmod 0644 /etc/logrotate.conf
    3⤵
    PID:750
- - /bin/chmod
    chmod 0644 /etc/logrotate.conf
    3⤵
    PID:750
- - /usr/local/sbin/chmod
    chmod 0644 /etc/selinux/semanage.conf
    3⤵
    PID:751
- - /usr/local/bin/chmod
    chmod 0644 /etc/selinux/semanage.conf
    3⤵
    PID:751
- - /usr/sbin/chmod
    chmod 0644 /etc/selinux/semanage.conf
    3⤵
    PID:751
- - /usr/bin/chmod
    chmod 0644 /etc/selinux/semanage.conf
    3⤵
    PID:751
- - /sbin/chmod
    chmod 0644 /etc/selinux/semanage.conf
    3⤵
    PID:751
- - /bin/chmod
    chmod 0644 /etc/selinux/semanage.conf
    3⤵
    PID:751
- - /usr/local/sbin/chmod
    chmod 0644 /etc/selinux/config
    3⤵
    PID:752
- - /usr/local/bin/chmod
    chmod 0644 /etc/selinux/config
    3⤵
    PID:752
- - /usr/sbin/chmod
    chmod 0644 /etc/selinux/config
    3⤵
    PID:752
- - /usr/bin/chmod
    chmod 0644 /etc/selinux/config
    3⤵
    PID:752
- - /sbin/chmod
    chmod 0644 /etc/selinux/config
    3⤵
    PID:752
- - /bin/chmod
    chmod 0644 /etc/selinux/config
    3⤵
    PID:752
- - /usr/local/sbin/chmod
    chmod 0644 /etc/selinux/default/setrans.conf
    3⤵
    PID:753
- - /usr/local/bin/chmod
    chmod 0644 /etc/selinux/default/setrans.conf
    3⤵
    PID:753
- - /usr/sbin/chmod
    chmod 0644 /etc/selinux/default/setrans.conf
    3⤵
    PID:753
- - /usr/bin/chmod
    chmod 0644 /etc/selinux/default/setrans.conf
    3⤵
    PID:753
- - /sbin/chmod
    chmod 0644 /etc/selinux/default/setrans.conf
    3⤵
    PID:753
- - /bin/chmod
    chmod 0644 /etc/selinux/default/setrans.conf
    3⤵
    PID:753
- - /usr/local/sbin/chmod
    chmod 0644 /etc/exim4/update-exim4.conf.conf
    3⤵
    PID:756
- - /usr/local/bin/chmod
    chmod 0644 /etc/exim4/update-exim4.conf.conf
    3⤵
    PID:756
- - /usr/sbin/chmod
    chmod 0644 /etc/exim4/update-exim4.conf.conf
    3⤵
    PID:756
- - /usr/bin/chmod
    chmod 0644 /etc/exim4/update-exim4.conf.conf
    3⤵
    PID:756
- - /sbin/chmod
    chmod 0644 /etc/exim4/update-exim4.conf.conf
    3⤵
    PID:756
- - /bin/chmod
    chmod 0644 /etc/exim4/update-exim4.conf.conf
    3⤵
    PID:756
- - /usr/local/sbin/chmod
    chmod 0644 /etc/sysctl.conf
    3⤵
    PID:757
- - /usr/local/bin/chmod
    chmod 0644 /etc/sysctl.conf
    3⤵
    PID:757
- - /usr/sbin/chmod
    chmod 0644 /etc/sysctl.conf
    3⤵
    PID:757
- - /usr/bin/chmod
    chmod 0644 /etc/sysctl.conf
    3⤵
    PID:757
- - /sbin/chmod
    chmod 0644 /etc/sysctl.conf
    3⤵
    PID:757
- - /bin/chmod
    chmod 0644 /etc/sysctl.conf
    3⤵
    PID:757
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/libc.conf
    3⤵
    PID:759
- - /usr/local/bin/chmod
    chmod 0644 /etc/ld.so.conf.d/libc.conf
    3⤵
    PID:759
- - /usr/sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/libc.conf
    3⤵
    PID:759
- - /usr/bin/chmod
    chmod 0644 /etc/ld.so.conf.d/libc.conf
    3⤵
    PID:759
- - /sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/libc.conf
    3⤵
    PID:759
- - /bin/chmod
    chmod 0644 /etc/ld.so.conf.d/libc.conf
    3⤵
    PID:759
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/fakeroot-arm-linux-gnueabihf.conf
    3⤵
    PID:761
- - /usr/local/bin/chmod
    chmod 0644 /etc/ld.so.conf.d/fakeroot-arm-linux-gnueabihf.conf
    3⤵
    PID:761
- - /usr/sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/fakeroot-arm-linux-gnueabihf.conf
    3⤵
    PID:761
- - /usr/bin/chmod
    chmod 0644 /etc/ld.so.conf.d/fakeroot-arm-linux-gnueabihf.conf
    3⤵
    PID:761
- - /sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/fakeroot-arm-linux-gnueabihf.conf
    3⤵
    PID:761
- - /bin/chmod
    chmod 0644 /etc/ld.so.conf.d/fakeroot-arm-linux-gnueabihf.conf
    3⤵
    PID:761
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/arm-linux-gnueabihf.conf
    3⤵
    PID:762
- - /usr/local/bin/chmod
    chmod 0644 /etc/ld.so.conf.d/arm-linux-gnueabihf.conf
    3⤵
    PID:762
- - /usr/sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/arm-linux-gnueabihf.conf
    3⤵
    PID:762
- - /usr/bin/chmod
    chmod 0644 /etc/ld.so.conf.d/arm-linux-gnueabihf.conf
    3⤵
    PID:762
- - /sbin/chmod
    chmod 0644 /etc/ld.so.conf.d/arm-linux-gnueabihf.conf
    3⤵
    PID:762
- - /bin/chmod
    chmod 0644 /etc/ld.so.conf.d/arm-linux-gnueabihf.conf
    3⤵
    PID:762
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/network-interface.conf
    3⤵
    PID:764
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/network-interface.conf
    3⤵
    PID:764
- - /usr/sbin/chmod
    chmod 0644 /etc/init/network-interface.conf
    3⤵
    PID:764
- - /usr/bin/chmod
    chmod 0644 /etc/init/network-interface.conf
    3⤵
    PID:764
- - /sbin/chmod
    chmod 0644 /etc/init/network-interface.conf
    3⤵
    PID:764
- - /bin/chmod
    chmod 0644 /etc/init/network-interface.conf
    3⤵
    PID:764
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/udevmonitor.conf
    3⤵
    PID:766
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/udevmonitor.conf
    3⤵
    PID:766
- - /usr/sbin/chmod
    chmod 0644 /etc/init/udevmonitor.conf
    3⤵
    PID:766
- - /usr/bin/chmod
    chmod 0644 /etc/init/udevmonitor.conf
    3⤵
    PID:766
- - /sbin/chmod
    chmod 0644 /etc/init/udevmonitor.conf
    3⤵
    PID:766
- - /bin/chmod
    chmod 0644 /etc/init/udevmonitor.conf
    3⤵
    PID:766
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/networking.conf
    3⤵
    PID:767
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/networking.conf
    3⤵
    PID:767
- - /usr/sbin/chmod
    chmod 0644 /etc/init/networking.conf
    3⤵
    PID:767
- - /usr/bin/chmod
    chmod 0644 /etc/init/networking.conf
    3⤵
    PID:767
- - /sbin/chmod
    chmod 0644 /etc/init/networking.conf
    3⤵
    PID:767
- - /bin/chmod
    chmod 0644 /etc/init/networking.conf
    3⤵
    PID:767
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/ssh.conf
    3⤵
    PID:769
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/ssh.conf
    3⤵
    PID:769
- - /usr/sbin/chmod
    chmod 0644 /etc/init/ssh.conf
    3⤵
    PID:769
- - /usr/bin/chmod
    chmod 0644 /etc/init/ssh.conf
    3⤵
    PID:769
- - /sbin/chmod
    chmod 0644 /etc/init/ssh.conf
    3⤵
    PID:769
- - /bin/chmod
    chmod 0644 /etc/init/ssh.conf
    3⤵
    PID:769
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/network-interface-security.conf
    3⤵
    PID:771
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/network-interface-security.conf
    3⤵
    PID:771
- - /usr/sbin/chmod
    chmod 0644 /etc/init/network-interface-security.conf
    3⤵
    PID:771
- - /usr/bin/chmod
    chmod 0644 /etc/init/network-interface-security.conf
    3⤵
    PID:771
- - /sbin/chmod
    chmod 0644 /etc/init/network-interface-security.conf
    3⤵
    PID:771
- - /bin/chmod
    chmod 0644 /etc/init/network-interface-security.conf
    3⤵
    PID:771
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/network-interface-container.conf
    3⤵
    PID:772
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/network-interface-container.conf
    3⤵
    PID:772
- - /usr/sbin/chmod
    chmod 0644 /etc/init/network-interface-container.conf
    3⤵
    PID:772
- - /usr/bin/chmod
    chmod 0644 /etc/init/network-interface-container.conf
    3⤵
    PID:772
- - /sbin/chmod
    chmod 0644 /etc/init/network-interface-container.conf
    3⤵
    PID:772
- - /bin/chmod
    chmod 0644 /etc/init/network-interface-container.conf
    3⤵
    PID:772
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/udevtrigger.conf
    3⤵
    PID:774
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/udevtrigger.conf
    3⤵
    PID:774
- - /usr/sbin/chmod
    chmod 0644 /etc/init/udevtrigger.conf
    3⤵
    PID:774
- - /usr/bin/chmod
    chmod 0644 /etc/init/udevtrigger.conf
    3⤵
    PID:774
- - /sbin/chmod
    chmod 0644 /etc/init/udevtrigger.conf
    3⤵
    PID:774
- - /bin/chmod
    chmod 0644 /etc/init/udevtrigger.conf
    3⤵
    PID:774
- - /usr/local/sbin/chmod
    chmod 0644 /etc/init/udev.conf
    3⤵
    PID:776
- - /usr/local/bin/chmod
    chmod 0644 /etc/init/udev.conf
    3⤵
    PID:776
- - /usr/sbin/chmod
    chmod 0644 /etc/init/udev.conf
    3⤵
    PID:776
- - /usr/bin/chmod
    chmod 0644 /etc/init/udev.conf
    3⤵
    PID:776
- - /sbin/chmod
    chmod 0644 /etc/init/udev.conf
    3⤵
    PID:776
- - /bin/chmod
    chmod 0644 /etc/init/udev.conf
    3⤵
    PID:776
- - /usr/local/sbin/chmod
    chmod 0644 /etc/adduser.conf
    3⤵
    PID:777
- - /usr/local/bin/chmod
    chmod 0644 /etc/adduser.conf
    3⤵
    PID:777
- - /usr/sbin/chmod
    chmod 0644 /etc/adduser.conf
    3⤵
    PID:777
- - /usr/bin/chmod
    chmod 0644 /etc/adduser.conf
    3⤵
    PID:777
- - /sbin/chmod
    chmod 0644 /etc/adduser.conf
    3⤵
    PID:777
- - /bin/chmod
    chmod 0644 /etc/adduser.conf
    3⤵
    PID:777
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.network1.conf
    3⤵
    PID:779
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.network1.conf
    3⤵
    PID:779
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.network1.conf
    3⤵
    PID:779
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.network1.conf
    3⤵
    PID:779
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.network1.conf
    3⤵
    PID:779
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.network1.conf
    3⤵
    PID:779
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.hostname1.conf
    3⤵
    PID:781
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.hostname1.conf
    3⤵
    PID:781
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.hostname1.conf
    3⤵
    PID:781
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.hostname1.conf
    3⤵
    PID:781
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.hostname1.conf
    3⤵
    PID:781
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.hostname1.conf
    3⤵
    PID:781
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.login1.conf
    3⤵
    PID:782
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.login1.conf
    3⤵
    PID:782
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.login1.conf
    3⤵
    PID:782
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.login1.conf
    3⤵
    PID:782
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.login1.conf
    3⤵
    PID:782
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.login1.conf
    3⤵
    PID:782
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.resolve1.conf
    3⤵
    PID:784
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.resolve1.conf
    3⤵
    PID:784
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.resolve1.conf
    3⤵
    PID:784
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.resolve1.conf
    3⤵
    PID:784
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.resolve1.conf
    3⤵
    PID:784
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.resolve1.conf
    3⤵
    PID:784
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.systemd1.conf
    3⤵
    PID:786
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.systemd1.conf
    3⤵
    PID:786
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.systemd1.conf
    3⤵
    PID:786
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.systemd1.conf
    3⤵
    PID:786
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.systemd1.conf
    3⤵
    PID:786
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.systemd1.conf
    3⤵
    PID:786
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.timedate1.conf
    3⤵
    PID:788
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.timedate1.conf
    3⤵
    PID:788
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.timedate1.conf
    3⤵
    PID:788
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.timedate1.conf
    3⤵
    PID:788
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.timedate1.conf
    3⤵
    PID:788
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.timedate1.conf
    3⤵
    PID:788
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.locale1.conf
    3⤵
    PID:789
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.locale1.conf
    3⤵
    PID:789
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.locale1.conf
    3⤵
    PID:789
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.locale1.conf
    3⤵
    PID:789
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.locale1.conf
    3⤵
    PID:789
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.locale1.conf
    3⤵
    PID:789
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
    3⤵
    PID:791
- - /usr/local/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
    3⤵
    PID:791
- - /usr/sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
    3⤵
    PID:791
- - /usr/bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
    3⤵
    PID:791
- - /sbin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
    3⤵
    PID:791
- - /bin/chmod
    chmod 0644 /etc/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
    3⤵
    PID:791
- - /usr/local/sbin/chmod
    chmod 0644 /etc/dpkg/dpkg.cfg
    3⤵
    PID:793
- - /usr/local/bin/chmod
    chmod 0644 /etc/dpkg/dpkg.cfg
    3⤵
    PID:793
- - /usr/sbin/chmod
    chmod 0644 /etc/dpkg/dpkg.cfg
    3⤵
    PID:793
- - /usr/bin/chmod
    chmod 0644 /etc/dpkg/dpkg.cfg
    3⤵
    PID:793
- - /sbin/chmod
    chmod 0644 /etc/dpkg/dpkg.cfg
    3⤵
    PID:793
- - /bin/chmod
    chmod 0644 /etc/dpkg/dpkg.cfg
    3⤵
    PID:793
- - /usr/local/sbin/chmod
    chmod 0644 /etc/polkit-1/nullbackend.conf.d/50-nullbackend.conf
    3⤵
    PID:795
- - /usr/local/bin/chmod
    chmod 0644 /etc/polkit-1/nullbackend.conf.d/50-nullbackend.conf
    3⤵
    PID:795
- - /usr/sbin/chmod
    chmod 0644 /etc/polkit-1/nullbackend.conf.d/50-nullbackend.conf
    3⤵
    PID:795
- - /usr/bin/chmod
    chmod 0644 /etc/polkit-1/nullbackend.conf.d/50-nullbackend.conf
    3⤵
    PID:795
- - /sbin/chmod
    chmod 0644 /etc/polkit-1/nullbackend.conf.d/50-nullbackend.conf
    3⤵
    PID:795
- - /bin/chmod
    chmod 0644 /etc/polkit-1/nullbackend.conf.d/50-nullbackend.conf
    3⤵
    PID:795
- - /usr/local/sbin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/50-localauthority.conf
    3⤵
    PID:796
- - /usr/local/bin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/50-localauthority.conf
    3⤵
    PID:796
- - /usr/sbin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/50-localauthority.conf
    3⤵
    PID:796
- - /usr/bin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/50-localauthority.conf
    3⤵
    PID:796
- - /sbin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/50-localauthority.conf
    3⤵
    PID:796
- - /bin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/50-localauthority.conf
    3⤵
    PID:796
- - /usr/local/sbin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/51-debian-sudo.conf
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:798
- - /usr/local/bin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/51-debian-sudo.conf
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:798
- - /usr/sbin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/51-debian-sudo.conf
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:798
- - /usr/bin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/51-debian-sudo.conf
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:798
- - /sbin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/51-debian-sudo.conf
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:798
- - /bin/chmod
    chmod 0644 /etc/polkit-1/localauthority.conf.d/51-debian-sudo.conf
    3⤵
    - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
    PID:798
- - /usr/local/sbin/chmod
    chmod 0644 /etc/rsyslog.conf
    3⤵
    PID:800
- - /usr/local/bin/chmod
    chmod 0644 /etc/rsyslog.conf
    3⤵
    PID:800
- - /usr/sbin/chmod
    chmod 0644 /etc/rsyslog.conf
    3⤵
    PID:800
- - /usr/bin/chmod
    chmod 0644 /etc/rsyslog.conf
    3⤵
    PID:800
- - /sbin/chmod
    chmod 0644 /etc/rsyslog.conf
    3⤵
    PID:800
- - /bin/chmod
    chmod 0644 /etc/rsyslog.conf
    3⤵
    PID:800
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf
    3⤵
    - System Network Configuration Discovery
    PID:802
- - /usr/local/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf
    3⤵
    - System Network Configuration Discovery
    PID:802
- - /usr/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf
    3⤵
    - System Network Configuration Discovery
    PID:802
- - /usr/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf
    3⤵
    - System Network Configuration Discovery
    PID:802
- - /sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf
    3⤵
    - System Network Configuration Discovery
    PID:802
- - /bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-cns1.conf
    3⤵
    - System Network Configuration Discovery
    PID:802
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-gb1.conf
    3⤵
    - System Network Configuration Discovery
    PID:804
- - /usr/local/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-gb1.conf
    3⤵
    - System Network Configuration Discovery
    PID:804
- - /usr/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-gb1.conf
    3⤵
    - System Network Configuration Discovery
    PID:804
- - /usr/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-gb1.conf
    3⤵
    - System Network Configuration Discovery
    PID:804
- - /sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-gb1.conf
    3⤵
    - System Network Configuration Discovery
    PID:804
- - /bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-gb1.conf
    3⤵
    - System Network Configuration Discovery
    PID:804
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-korea1.conf
    3⤵
    - System Network Configuration Discovery
    PID:805
- - /usr/local/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-korea1.conf
    3⤵
    - System Network Configuration Discovery
    PID:805
- - /usr/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-korea1.conf
    3⤵
    - System Network Configuration Discovery
    PID:805
- - /usr/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-korea1.conf
    3⤵
    - System Network Configuration Discovery
    PID:805
- - /sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-korea1.conf
    3⤵
    - System Network Configuration Discovery
    PID:805
- - /bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-korea1.conf
    3⤵
    - System Network Configuration Discovery
    PID:805
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan1.conf
    3⤵
    - System Network Configuration Discovery
    PID:807
- - /usr/local/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan1.conf
    3⤵
    - System Network Configuration Discovery
    PID:807
- - /usr/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan1.conf
    3⤵
    - System Network Configuration Discovery
    PID:807
- - /usr/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan1.conf
    3⤵
    - System Network Configuration Discovery
    PID:807
- - /sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan1.conf
    3⤵
    - System Network Configuration Discovery
    PID:807
- - /bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan1.conf
    3⤵
    - System Network Configuration Discovery
    PID:807
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan2.conf
    3⤵
    - System Network Configuration Discovery
    PID:809
- - /usr/local/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan2.conf
    3⤵
    - System Network Configuration Discovery
    PID:809
- - /usr/sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan2.conf
    3⤵
    - System Network Configuration Discovery
    PID:809
- - /usr/bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan2.conf
    3⤵
    - System Network Configuration Discovery
    PID:809
- - /sbin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan2.conf
    3⤵
    - System Network Configuration Discovery
    PID:809
- - /bin/chmod
    chmod 0644 /etc/ghostscript/cidfmap.d/90gs-cjk-resource-japan2.conf
    3⤵
    - System Network Configuration Discovery
    PID:809
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ghostscript/fontmap.d/10gsfonts.conf
    3⤵
    - System Network Configuration Discovery
    PID:810
- - /usr/local/bin/chmod
    chmod 0644 /etc/ghostscript/fontmap.d/10gsfonts.conf
    3⤵
    - System Network Configuration Discovery
    PID:810
- - /usr/sbin/chmod
    chmod 0644 /etc/ghostscript/fontmap.d/10gsfonts.conf
    3⤵
    - System Network Configuration Discovery
    PID:810
- - /usr/bin/chmod
    chmod 0644 /etc/ghostscript/fontmap.d/10gsfonts.conf
    3⤵
    - System Network Configuration Discovery
    PID:810
- - /sbin/chmod
    chmod 0644 /etc/ghostscript/fontmap.d/10gsfonts.conf
    3⤵
    - System Network Configuration Discovery
    PID:810
- - /bin/chmod
    chmod 0644 /etc/ghostscript/fontmap.d/10gsfonts.conf
    3⤵
    - System Network Configuration Discovery
    PID:810
- - /usr/local/sbin/chmod
    chmod 0644 /etc/audit/auditd.conf
    3⤵
    PID:812
- - /usr/local/bin/chmod
    chmod 0644 /etc/audit/auditd.conf
    3⤵
    PID:812
- - /usr/sbin/chmod
    chmod 0644 /etc/audit/auditd.conf
    3⤵
    PID:812
- - /usr/bin/chmod
    chmod 0644 /etc/audit/auditd.conf
    3⤵
    PID:812
- - /sbin/chmod
    chmod 0644 /etc/audit/auditd.conf
    3⤵
    PID:812
- - /bin/chmod
    chmod 0644 /etc/audit/auditd.conf
    3⤵
    PID:812
- - /usr/local/sbin/chmod
    chmod 0644 /etc/ucf.conf
    3⤵
    PID:814
- - /usr/local/bin/chmod
    chmod 0644 /etc/ucf.conf
    3⤵
    PID:814
- - /usr/sbin/chmod
    chmod 0644 /etc/ucf.conf
    3⤵
    PID:814
- - /usr/bin/chmod
    chmod 0644 /etc/ucf.conf
    3⤵
    PID:814
- - /sbin/chmod
    chmod 0644 /etc/ucf.conf
    3⤵
    PID:814
- - /bin/chmod
    chmod 0644 /etc/ucf.conf
    3⤵
    PID:814
- /bin/date
  date "+%T"
  2⤵
  PID:815
- /bin/chmod
  chmod 0775 /etc/cron.daily
  2⤵
  PID:817
- /bin/chmod
  chmod 0775 /etc/cron.hourly
  2⤵
  PID:819
- /bin/chmod
  chmod 0775 /etc/cron.weekly
  2⤵
  PID:821
- /bin/chmod
  chmod 0775 /etc/cron.monthly
  2⤵
  PID:824
- /bin/date
  date "+%T"
  2⤵
  PID:826
- /bin/chmod
  chmod 0700 /root
  2⤵
  PID:827
- /bin/date
  date "+%T"
  2⤵
  PID:829
- /bin/ls
  ls -l /dev/null /etc/shadow /etc/gshadow /usr/lib/utempter/utempter /etc/sudoers.d /root
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  - Reads runtime system information
  PID:833

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads