ece704037e20b9fece291345f76b56e33bbd18ab98f12d8ccf127ec1e3a7cbd1

Analysis

max time kernel
135s
platform
debian-9_armhf
resource
debian9-armhf-20260513-en
resource tags

arch:armhfimage:debian9-armhf-20260513-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
08/07/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
greper.sh
Size 1KB
Sample260708-ws2m5set4p
SHA256 ece704037e20b9fece291345f76b56e33bbd18ab98f12d8ccf127ec1e3a7cbd1
MD5 2908e69c4e7625f8597cfa35645ea8b8
SHA1 cf4a196c987dd9a32de0a02c07de9c2cd33fc1a9
SHA512 8cfe91911661735cd5c942bb0892af11302db116c60078624fb2ffe8a75415f8cdd3e00c433638d4aa8d3d32b32677b3349bb08669b755857a7a24449d3c48c8
TLSH
T13011664DD2B1EEB93C10C8768C9162AA18CEE41AC9B7B8147A1A25244F78219ED610A9
MD5 SHA1 SHA512 TLSH

Score

6^/10

discovery

Malware Config

Signatures

Enumerates running processes
Discovers information about currently running processes on the system

Reads CPU attributes 1 TTPs 64 IoCs

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	kill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	kill

Process Discovery 1 TTPs 16 IoCs

Adversaries may try to discover information about running processes.

discovery

Process Discovery

T1057

pid	Process
784	ps
889	ps
1015	ps
1059	ps
847	ps
908	ps
996	ps
1068	ps
1120	ps
1173	ps
758	ps
958	ps
1101	ps
856	ps
964	ps
1168	ps

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/853/stat	ps
File opened for reading	/proc/76/cmdline	pkill
File opened for reading	/proc/303/status	ps
File opened for reading	/proc/sys/kernel/pid_max	ps
File opened for reading	/proc/sys/kernel/osrelease	kill
File opened for reading	/proc/28/status	ps
File opened for reading	/proc/11/status	ps
File opened for reading	/proc/108/stat	ps
File opened for reading	/proc/15/cmdline	pkill
File opened for reading	/proc/filesystems	kill
File opened for reading	/proc/639/stat	ps
File opened for reading	/proc/1033/cmdline	ps
File opened for reading	/proc/2/cmdline	ps
File opened for reading	/proc/1064/cmdline	pkill
File opened for reading	/proc/1069/cmdline	ps
File opened for reading	/proc/42/stat	ps
File opened for reading	/proc/18/stat	ps
File opened for reading	/proc/339/stat	ps
File opened for reading	/proc/sys/kernel/osrelease	kill
File opened for reading	/proc/41/stat	ps
File opened for reading	/proc/28/status	ps
File opened for reading	/proc/sys/kernel/osrelease	kill
File opened for reading	/proc/17/status	pkill
File opened for reading	/proc/891/stat	ps
File opened for reading	/proc/909/stat	ps
File opened for reading	/proc/640/stat	ps
File opened for reading	/proc/27/stat	ps
File opened for reading	/proc/639/cmdline	pkill
File opened for reading	/proc/11/cmdline	ps
File opened for reading	/proc/filesystems	kill
File opened for reading	/proc/5/status	ps
File opened for reading	/proc/21/cmdline	ps
File opened for reading	/proc/876/cmdline	ps
File opened for reading	/proc/1177/stat	ps
File opened for reading	/proc/134/status	ps
File opened for reading	/proc/3/status	ps
File opened for reading	/proc/15/cmdline	ps
File opened for reading	/proc/640/cmdline	ps
File opened for reading	/proc/105/cmdline	ps
File opened for reading	/proc/24/status	pkill
File opened for reading	/proc/29/cmdline	ps
File opened for reading	/proc/22/stat	ps
File opened for reading	/proc/22/cmdline	ps
File opened for reading	/proc/13/status	ps
File opened for reading	/proc/1/stat	ps
File opened for reading	/proc/1043/stat	ps
File opened for reading	/proc/1123/cmdline	ps
File opened for reading	/proc/303/status	ps
File opened for reading	/proc/sys/kernel/osrelease	kill
File opened for reading	/proc/25/cmdline	ps
File opened for reading	/proc/7/status	ps
File opened for reading	/proc/105/stat	ps
File opened for reading	/proc/23/cmdline	ps
File opened for reading	/proc/640/stat	ps
File opened for reading	/proc/sys/kernel/osrelease	kill
File opened for reading	/proc/13/stat	ps
File opened for reading	/proc/105/status	ps
File opened for reading	/proc/3/cmdline	ps
File opened for reading	/proc/26/stat	ps
File opened for reading	/proc/43/status	ps
File opened for reading	/proc/14/status	ps
File opened for reading	/proc/951/stat	ps
File opened for reading	/proc/290/cmdline	pkill
File opened for reading	/proc/19/cmdline	ps

/tmp/greper.sh
/tmp/greper.sh
1⤵
PID:642
- /bin/grep
  grep -v "grep\\|\\["
  2⤵
  PID:646
- /bin/ps
  ps -fe
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:644
- /bin/grep
  grep javae
  2⤵
  PID:645
- /usr/bin/pkill
  pkill javae
  2⤵
  - Reads runtime system information
  PID:666
- /bin/sleep
  sleep 30
  2⤵
  PID:670
- /usr/bin/nohup
  nohup ./javae
  2⤵
  PID:669
- /tmp/javae
  ./javae
  2⤵
  PID:669
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:759
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:760
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:758
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:761
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:762
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:762
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:762
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:762
- - /sbin/kill
    kill -9 root
    3⤵
    PID:762
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:762
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:763
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:763
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:763
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:763
- - /sbin/kill
    kill -9 root
    3⤵
    PID:763
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:763
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:764
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:764
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:764
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:764
- - /sbin/kill
    kill -9 root
    3⤵
    PID:764
- - /bin/kill
    kill -9 root
    3⤵
    PID:764
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:765
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:765
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:765
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:765
- - /sbin/kill
    kill -9 root
    3⤵
    PID:765
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:765
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:766
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:766
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:766
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:766
- - /sbin/kill
    kill -9 root
    3⤵
    PID:766
- - /bin/kill
    kill -9 root
    3⤵
    PID:766
- - /usr/local/sbin/kill
    kill -9 daemon
    3⤵
    PID:767
- - /usr/local/bin/kill
    kill -9 daemon
    3⤵
    PID:767
- - /usr/sbin/kill
    kill -9 daemon
    3⤵
    PID:767
- - /usr/bin/kill
    kill -9 daemon
    3⤵
    PID:767
- - /sbin/kill
    kill -9 daemon
    3⤵
    PID:767
- - /bin/kill
    kill -9 daemon
    3⤵
    PID:767
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:768
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:768
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:768
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:768
- - /sbin/kill
    kill -9 root
    3⤵
    PID:768
- - /bin/kill
    kill -9 root
    3⤵
    PID:768
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:769
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:769
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:769
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:769
- - /sbin/kill
    kill -9 root
    3⤵
    PID:769
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:769
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:770
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:770
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:770
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:770
- - /sbin/kill
    kill -9 root
    3⤵
    PID:770
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:770
- - /usr/local/sbin/kill
    kill -9 message+
    3⤵
    PID:771
- - /usr/local/bin/kill
    kill -9 message+
    3⤵
    PID:771
- - /usr/sbin/kill
    kill -9 message+
    3⤵
    PID:771
- - /usr/bin/kill
    kill -9 message+
    3⤵
    PID:771
- - /sbin/kill
    kill -9 message+
    3⤵
    PID:771
- - /bin/kill
    kill -9 message+
    3⤵
    - Reads CPU attributes
    PID:771
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:772
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:772
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:772
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:772
- - /sbin/kill
    kill -9 root
    3⤵
    PID:772
- - /bin/kill
    kill -9 root
    3⤵
    PID:772
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:773
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:773
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:773
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:773
- - /sbin/kill
    kill -9 root
    3⤵
    PID:773
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:773
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:774
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:774
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:774
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:774
- - /sbin/kill
    kill -9 root
    3⤵
    PID:774
- - /bin/kill
    kill -9 root
    3⤵
    PID:774
- - /usr/local/sbin/kill
    kill -9 Debian-+
    3⤵
    PID:775
- - /usr/local/bin/kill
    kill -9 Debian-+
    3⤵
    PID:775
- - /usr/sbin/kill
    kill -9 Debian-+
    3⤵
    PID:775
- - /usr/bin/kill
    kill -9 Debian-+
    3⤵
    PID:775
- - /sbin/kill
    kill -9 Debian-+
    3⤵
    PID:775
- - /bin/kill
    kill -9 Debian-+
    3⤵
    - Reads CPU attributes
    PID:775
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:776
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:776
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:776
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:776
- - /sbin/kill
    kill -9 root
    3⤵
    PID:776
- - /bin/kill
    kill -9 root
    3⤵
    PID:776
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:777
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:777
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:777
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:777
- - /sbin/kill
    kill -9 root
    3⤵
    PID:777
- - /bin/kill
    kill -9 root
    3⤵
    PID:777
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:778
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:778
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:778
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:778
- - /sbin/kill
    kill -9 root
    3⤵
    PID:778
- - /bin/kill
    kill -9 root
    3⤵
    PID:778
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:779
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:779
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:779
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:779
- - /sbin/kill
    kill -9 root
    3⤵
    PID:779
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:779
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:780
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:780
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:780
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:780
- - /sbin/kill
    kill -9 root
    3⤵
    PID:780
- - /bin/kill
    kill -9 root
    3⤵
    PID:780
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:781
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:781
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:781
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:781
- - /sbin/kill
    kill -9 root
    3⤵
    PID:781
- - /bin/kill
    kill -9 root
    3⤵
    - Reads runtime system information
    PID:781
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:782
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:782
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:782
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:782
- - /sbin/kill
    kill -9 root
    3⤵
    PID:782
- - /bin/kill
    kill -9 root
    3⤵
    PID:782
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:783
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:783
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:783
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:783
- - /sbin/kill
    kill -9 root
    3⤵
    PID:783
- - /bin/kill
    kill -9 root
    3⤵
    PID:783
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:786
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:787
- - /usr/local/sbin/kill
    kill -9 1
    3⤵
    PID:788
- - /usr/local/bin/kill
    kill -9 1
    3⤵
    PID:788
- - /usr/sbin/kill
    kill -9 1
    3⤵
    PID:788
- - /usr/bin/kill
    kill -9 1
    3⤵
    PID:788
- - /sbin/kill
    kill -9 1
    3⤵
    PID:788
- - /bin/kill
    kill -9 1
    3⤵
    PID:788
- - /usr/local/sbin/kill
    kill -9 145
    3⤵
    PID:789
- - /usr/local/bin/kill
    kill -9 145
    3⤵
    PID:789
- - /usr/sbin/kill
    kill -9 145
    3⤵
    PID:789
- - /usr/bin/kill
    kill -9 145
    3⤵
    PID:789
- - /sbin/kill
    kill -9 145
    3⤵
    PID:789
- - /bin/kill
    kill -9 145
    3⤵
    PID:789
- - /usr/local/sbin/kill
    kill -9 168
    3⤵
    PID:791
- - /usr/local/bin/kill
    kill -9 168
    3⤵
    PID:791
- - /usr/sbin/kill
    kill -9 168
    3⤵
    PID:791
- - /usr/bin/kill
    kill -9 168
    3⤵
    PID:791
- - /sbin/kill
    kill -9 168
    3⤵
    PID:791
- - /bin/kill
    kill -9 168
    3⤵
    - Reads CPU attributes
    PID:791
- - /usr/local/sbin/kill
    kill -9 226
    3⤵
    PID:794
- - /usr/local/bin/kill
    kill -9 226
    3⤵
    PID:794
- - /usr/sbin/kill
    kill -9 226
    3⤵
    PID:794
- - /usr/bin/kill
    kill -9 226
    3⤵
    PID:794
- - /sbin/kill
    kill -9 226
    3⤵
    PID:794
- - /bin/kill
    kill -9 226
    3⤵
    PID:794
- - /usr/local/sbin/kill
    kill -9 288
    3⤵
    PID:798
- - /usr/local/bin/kill
    kill -9 288
    3⤵
    PID:798
- - /usr/sbin/kill
    kill -9 288
    3⤵
    PID:798
- - /usr/bin/kill
    kill -9 288
    3⤵
    PID:798
- - /sbin/kill
    kill -9 288
    3⤵
    PID:798
- - /bin/kill
    kill -9 288
    3⤵
    PID:798
- - /usr/local/sbin/kill
    kill -9 289
    3⤵
    PID:801
- - /usr/local/bin/kill
    kill -9 289
    3⤵
    PID:801
- - /usr/sbin/kill
    kill -9 289
    3⤵
    PID:801
- - /usr/bin/kill
    kill -9 289
    3⤵
    PID:801
- - /sbin/kill
    kill -9 289
    3⤵
    PID:801
- - /bin/kill
    kill -9 289
    3⤵
    PID:801
- - /usr/local/sbin/kill
    kill -9 290
    3⤵
    PID:803
- - /usr/local/bin/kill
    kill -9 290
    3⤵
    PID:803
- - /usr/sbin/kill
    kill -9 290
    3⤵
    PID:803
- - /usr/bin/kill
    kill -9 290
    3⤵
    PID:803
- - /sbin/kill
    kill -9 290
    3⤵
    PID:803
- - /bin/kill
    kill -9 290
    3⤵
    - Reads CPU attributes
    PID:803
- - /usr/local/sbin/kill
    kill -9 300
    3⤵
    PID:806
- - /usr/local/bin/kill
    kill -9 300
    3⤵
    PID:806
- - /usr/sbin/kill
    kill -9 300
    3⤵
    PID:806
- - /usr/bin/kill
    kill -9 300
    3⤵
    PID:806
- - /sbin/kill
    kill -9 300
    3⤵
    PID:806
- - /bin/kill
    kill -9 300
    3⤵
    PID:806
- - /usr/local/sbin/kill
    kill -9 303
    3⤵
    PID:808
- - /usr/local/bin/kill
    kill -9 303
    3⤵
    PID:808
- - /usr/sbin/kill
    kill -9 303
    3⤵
    PID:808
- - /usr/bin/kill
    kill -9 303
    3⤵
    PID:808
- - /sbin/kill
    kill -9 303
    3⤵
    PID:808
- - /bin/kill
    kill -9 303
    3⤵
    - Reads CPU attributes
    PID:808
- - /usr/local/sbin/kill
    kill -9 304
    3⤵
    PID:814
- - /usr/local/bin/kill
    kill -9 304
    3⤵
    PID:814
- - /usr/sbin/kill
    kill -9 304
    3⤵
    PID:814
- - /usr/bin/kill
    kill -9 304
    3⤵
    PID:814
- - /sbin/kill
    kill -9 304
    3⤵
    PID:814
- - /bin/kill
    kill -9 304
    3⤵
    PID:814
- - /usr/local/sbin/kill
    kill -9 316
    3⤵
    PID:816
- - /usr/local/bin/kill
    kill -9 316
    3⤵
    PID:816
- - /usr/sbin/kill
    kill -9 316
    3⤵
    PID:816
- - /usr/bin/kill
    kill -9 316
    3⤵
    PID:816
- - /sbin/kill
    kill -9 316
    3⤵
    PID:816
- - /bin/kill
    kill -9 316
    3⤵
    PID:816
- - /usr/local/sbin/kill
    kill -9 323
    3⤵
    PID:818
- - /usr/local/bin/kill
    kill -9 323
    3⤵
    PID:818
- - /usr/sbin/kill
    kill -9 323
    3⤵
    PID:818
- - /usr/bin/kill
    kill -9 323
    3⤵
    PID:818
- - /sbin/kill
    kill -9 323
    3⤵
    PID:818
- - /bin/kill
    kill -9 323
    3⤵
    - Reads CPU attributes
    - Reads runtime system information
    PID:818
- - /usr/local/sbin/kill
    kill -9 339
    3⤵
    PID:821
- - /usr/local/bin/kill
    kill -9 339
    3⤵
    PID:821
- - /usr/sbin/kill
    kill -9 339
    3⤵
    PID:821
- - /usr/bin/kill
    kill -9 339
    3⤵
    PID:821
- - /sbin/kill
    kill -9 339
    3⤵
    PID:821
- - /bin/kill
    kill -9 339
    3⤵
    PID:821
- - /usr/local/sbin/kill
    kill -9 564
    3⤵
    PID:825
- - /usr/local/bin/kill
    kill -9 564
    3⤵
    PID:825
- - /usr/sbin/kill
    kill -9 564
    3⤵
    PID:825
- - /usr/bin/kill
    kill -9 564
    3⤵
    PID:825
- - /sbin/kill
    kill -9 564
    3⤵
    PID:825
- - /bin/kill
    kill -9 564
    3⤵
    - Reads CPU attributes
    PID:825
- - /usr/local/sbin/kill
    kill -9 577
    3⤵
    PID:831
- - /usr/local/bin/kill
    kill -9 577
    3⤵
    PID:831
- - /usr/sbin/kill
    kill -9 577
    3⤵
    PID:831
- - /usr/bin/kill
    kill -9 577
    3⤵
    PID:831
- - /sbin/kill
    kill -9 577
    3⤵
    PID:831
- - /bin/kill
    kill -9 577
    3⤵
    PID:831
- - /usr/local/sbin/kill
    kill -9 579
    3⤵
    PID:836
- - /usr/local/bin/kill
    kill -9 579
    3⤵
    PID:836
- - /usr/sbin/kill
    kill -9 579
    3⤵
    PID:836
- - /usr/bin/kill
    kill -9 579
    3⤵
    PID:836
- - /sbin/kill
    kill -9 579
    3⤵
    PID:836
- - /bin/kill
    kill -9 579
    3⤵
    PID:836
- - /usr/local/sbin/kill
    kill -9 586
    3⤵
    PID:837
- - /usr/local/bin/kill
    kill -9 586
    3⤵
    PID:837
- - /usr/sbin/kill
    kill -9 586
    3⤵
    PID:837
- - /usr/bin/kill
    kill -9 586
    3⤵
    PID:837
- - /sbin/kill
    kill -9 586
    3⤵
    PID:837
- - /bin/kill
    kill -9 586
    3⤵
    PID:837
- - /usr/local/sbin/kill
    kill -9 588
    3⤵
    PID:841
- - /usr/local/bin/kill
    kill -9 588
    3⤵
    PID:841
- - /usr/sbin/kill
    kill -9 588
    3⤵
    PID:841
- - /usr/bin/kill
    kill -9 588
    3⤵
    PID:841
- - /sbin/kill
    kill -9 588
    3⤵
    PID:841
- - /bin/kill
    kill -9 588
    3⤵
    - Reads CPU attributes
    - Reads runtime system information
    PID:841
- - /usr/local/sbin/kill
    kill -9 655
    3⤵
    PID:842
- - /usr/local/bin/kill
    kill -9 655
    3⤵
    PID:842
- - /usr/sbin/kill
    kill -9 655
    3⤵
    PID:842
- - /usr/bin/kill
    kill -9 655
    3⤵
    PID:842
- - /sbin/kill
    kill -9 655
    3⤵
    PID:842
- - /bin/kill
    kill -9 655
    3⤵
    PID:842
- - /usr/local/sbin/kill
    kill -9 754
    3⤵
    PID:843
- - /usr/local/bin/kill
    kill -9 754
    3⤵
    PID:843
- - /usr/sbin/kill
    kill -9 754
    3⤵
    PID:843
- - /usr/bin/kill
    kill -9 754
    3⤵
    PID:843
- - /sbin/kill
    kill -9 754
    3⤵
    PID:843
- - /bin/kill
    kill -9 754
    3⤵
    - Reads runtime system information
    PID:843
- - /usr/local/sbin/kill
    kill -9 786
    3⤵
    PID:845
- - /usr/local/bin/kill
    kill -9 786
    3⤵
    PID:845
- - /usr/sbin/kill
    kill -9 786
    3⤵
    PID:845
- - /usr/bin/kill
    kill -9 786
    3⤵
    PID:845
- - /sbin/kill
    kill -9 786
    3⤵
    PID:845
- - /bin/kill
    kill -9 786
    3⤵
    PID:845
- - /usr/local/sbin/kill
    kill -9 787
    3⤵
    PID:846
- - /usr/local/bin/kill
    kill -9 787
    3⤵
    PID:846
- - /usr/sbin/kill
    kill -9 787
    3⤵
    PID:846
- - /usr/bin/kill
    kill -9 787
    3⤵
    PID:846
- - /sbin/kill
    kill -9 787
    3⤵
    PID:846
- - /bin/kill
    kill -9 787
    3⤵
    - Reads CPU attributes
    PID:846
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:785
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:784
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:851
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:850
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:849
- /bin/grep
  grep -v grep
  2⤵
  PID:848
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  PID:847
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:860
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:858
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:859
- /bin/grep
  grep -v grep
  2⤵
  PID:857
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  PID:856
- /bin/sleep
  sleep 0.1
  2⤵
  PID:861
- /bin/grep
  grep -v "grep\\|\\["
  2⤵
  PID:864
- /bin/ps
  ps -fe
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:862
- /bin/grep
  grep javae
  2⤵
  PID:863
- /usr/bin/pkill
  pkill javae
  2⤵
  - Reads runtime system information
  PID:865
- /bin/sleep
  sleep 30
  2⤵
  PID:867
- /usr/bin/nohup
  nohup ./javae
  2⤵
  PID:866
- /tmp/javae
  ./javae
  2⤵
  PID:866
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:892
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:893
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:893
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:893
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:893
- - /sbin/kill
    kill -9 root
    3⤵
    PID:893
- - /bin/kill
    kill -9 root
    3⤵
    PID:893
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:894
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:894
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:894
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:894
- - /sbin/kill
    kill -9 root
    3⤵
    PID:894
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:894
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:895
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:895
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:895
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:895
- - /sbin/kill
    kill -9 root
    3⤵
    PID:895
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:895
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:896
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:896
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:896
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:896
- - /sbin/kill
    kill -9 root
    3⤵
    PID:896
- - /bin/kill
    kill -9 root
    3⤵
    PID:896
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:897
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:897
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:897
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:897
- - /sbin/kill
    kill -9 root
    3⤵
    PID:897
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:897
- - /usr/local/sbin/kill
    kill -9 message+
    3⤵
    PID:898
- - /usr/local/bin/kill
    kill -9 message+
    3⤵
    PID:898
- - /usr/sbin/kill
    kill -9 message+
    3⤵
    PID:898
- - /usr/bin/kill
    kill -9 message+
    3⤵
    PID:898
- - /sbin/kill
    kill -9 message+
    3⤵
    PID:898
- - /bin/kill
    kill -9 message+
    3⤵
    - Reads CPU attributes
    PID:898
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:899
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:899
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:899
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:899
- - /sbin/kill
    kill -9 root
    3⤵
    PID:899
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    - Reads runtime system information
    PID:899
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:900
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:900
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:900
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:900
- - /sbin/kill
    kill -9 root
    3⤵
    PID:900
- - /bin/kill
    kill -9 root
    3⤵
    PID:900
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:901
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:901
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:901
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:901
- - /sbin/kill
    kill -9 root
    3⤵
    PID:901
- - /bin/kill
    kill -9 root
    3⤵
    - Reads runtime system information
    PID:901
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:902
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:902
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:902
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:902
- - /sbin/kill
    kill -9 root
    3⤵
    PID:902
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:902
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:903
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:903
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:903
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:903
- - /sbin/kill
    kill -9 root
    3⤵
    PID:903
- - /bin/kill
    kill -9 root
    3⤵
    PID:903
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:904
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:904
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:904
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:904
- - /sbin/kill
    kill -9 root
    3⤵
    PID:904
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:904
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:905
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:905
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:905
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:905
- - /sbin/kill
    kill -9 root
    3⤵
    PID:905
- - /bin/kill
    kill -9 root
    3⤵
    PID:905
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:906
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:906
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:906
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:906
- - /sbin/kill
    kill -9 root
    3⤵
    PID:906
- - /bin/kill
    kill -9 root
    3⤵
    PID:906
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:907
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:907
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:907
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:907
- - /sbin/kill
    kill -9 root
    3⤵
    PID:907
- - /bin/kill
    kill -9 root
    3⤵
    PID:907
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:890
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:891
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:889
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:910
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:908
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:909
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:911
- - /usr/local/sbin/kill
    kill -9 1
    3⤵
    PID:912
- - /usr/local/bin/kill
    kill -9 1
    3⤵
    PID:912
- - /usr/sbin/kill
    kill -9 1
    3⤵
    PID:912
- - /usr/bin/kill
    kill -9 1
    3⤵
    PID:912
- - /sbin/kill
    kill -9 1
    3⤵
    PID:912
- - /bin/kill
    kill -9 1
    3⤵
    - Reads CPU attributes
    PID:912
- - /usr/local/sbin/kill
    kill -9 792
    3⤵
    PID:913
- - /usr/local/bin/kill
    kill -9 792
    3⤵
    PID:913
- - /usr/sbin/kill
    kill -9 792
    3⤵
    PID:913
- - /usr/bin/kill
    kill -9 792
    3⤵
    PID:913
- - /sbin/kill
    kill -9 792
    3⤵
    PID:913
- - /bin/kill
    kill -9 792
    3⤵
    - Reads CPU attributes
    PID:913
- - /usr/local/sbin/kill
    kill -9 795
    3⤵
    PID:915
- - /usr/local/bin/kill
    kill -9 795
    3⤵
    PID:915
- - /usr/sbin/kill
    kill -9 795
    3⤵
    PID:915
- - /usr/bin/kill
    kill -9 795
    3⤵
    PID:915
- - /sbin/kill
    kill -9 795
    3⤵
    PID:915
- - /bin/kill
    kill -9 795
    3⤵
    - Reads CPU attributes
    PID:915
- - /usr/local/sbin/kill
    kill -9 805
    3⤵
    PID:918
- - /usr/local/bin/kill
    kill -9 805
    3⤵
    PID:918
- - /usr/sbin/kill
    kill -9 805
    3⤵
    PID:918
- - /usr/bin/kill
    kill -9 805
    3⤵
    PID:918
- - /sbin/kill
    kill -9 805
    3⤵
    PID:918
- - /bin/kill
    kill -9 805
    3⤵
    PID:918
- - /usr/local/sbin/kill
    kill -9 813
    3⤵
    PID:922
- - /usr/local/bin/kill
    kill -9 813
    3⤵
    PID:922
- - /usr/sbin/kill
    kill -9 813
    3⤵
    PID:922
- - /usr/bin/kill
    kill -9 813
    3⤵
    PID:922
- - /sbin/kill
    kill -9 813
    3⤵
    PID:922
- - /bin/kill
    kill -9 813
    3⤵
    - Reads CPU attributes
    PID:922
- - /usr/local/sbin/kill
    kill -9 817
    3⤵
    PID:925
- - /usr/local/bin/kill
    kill -9 817
    3⤵
    PID:925
- - /usr/sbin/kill
    kill -9 817
    3⤵
    PID:925
- - /usr/bin/kill
    kill -9 817
    3⤵
    PID:925
- - /sbin/kill
    kill -9 817
    3⤵
    PID:925
- - /bin/kill
    kill -9 817
    3⤵
    - Reads CPU attributes
    PID:925
- - /usr/local/sbin/kill
    kill -9 826
    3⤵
    PID:930
- - /usr/local/bin/kill
    kill -9 826
    3⤵
    PID:930
- - /usr/sbin/kill
    kill -9 826
    3⤵
    PID:930
- - /usr/bin/kill
    kill -9 826
    3⤵
    PID:930
- - /sbin/kill
    kill -9 826
    3⤵
    PID:930
- - /bin/kill
    kill -9 826
    3⤵
    PID:930
- - /usr/local/sbin/kill
    kill -9 827
    3⤵
    PID:937
- - /usr/local/bin/kill
    kill -9 827
    3⤵
    PID:937
- - /usr/sbin/kill
    kill -9 827
    3⤵
    PID:937
- - /usr/bin/kill
    kill -9 827
    3⤵
    PID:937
- - /sbin/kill
    kill -9 827
    3⤵
    PID:937
- - /bin/kill
    kill -9 827
    3⤵
    - Reads CPU attributes
    PID:937
- - /usr/local/sbin/kill
    kill -9 840
    3⤵
    PID:939
- - /usr/local/bin/kill
    kill -9 840
    3⤵
    PID:939
- - /usr/sbin/kill
    kill -9 840
    3⤵
    PID:939
- - /usr/bin/kill
    kill -9 840
    3⤵
    PID:939
- - /sbin/kill
    kill -9 840
    3⤵
    PID:939
- - /bin/kill
    kill -9 840
    3⤵
    PID:939
- - /usr/local/sbin/kill
    kill -9 852
    3⤵
    PID:943
- - /usr/local/bin/kill
    kill -9 852
    3⤵
    PID:943
- - /usr/sbin/kill
    kill -9 852
    3⤵
    PID:943
- - /usr/bin/kill
    kill -9 852
    3⤵
    PID:943
- - /sbin/kill
    kill -9 852
    3⤵
    PID:943
- - /bin/kill
    kill -9 852
    3⤵
    PID:943
- - /usr/local/sbin/kill
    kill -9 879
    3⤵
    PID:946
- - /usr/local/bin/kill
    kill -9 879
    3⤵
    PID:946
- - /usr/sbin/kill
    kill -9 879
    3⤵
    PID:946
- - /usr/bin/kill
    kill -9 879
    3⤵
    PID:946
- - /sbin/kill
    kill -9 879
    3⤵
    PID:946
- - /bin/kill
    kill -9 879
    3⤵
    - Reads CPU attributes
    PID:946
- - /usr/local/sbin/kill
    kill -9 880
    3⤵
    PID:947
- - /usr/local/bin/kill
    kill -9 880
    3⤵
    PID:947
- - /usr/sbin/kill
    kill -9 880
    3⤵
    PID:947
- - /usr/bin/kill
    kill -9 880
    3⤵
    PID:947
- - /sbin/kill
    kill -9 880
    3⤵
    PID:947
- - /bin/kill
    kill -9 880
    3⤵
    - Reads runtime system information
    PID:947
- - /usr/local/sbin/kill
    kill -9 888
    3⤵
    PID:952
- - /usr/local/bin/kill
    kill -9 888
    3⤵
    PID:952
- - /usr/sbin/kill
    kill -9 888
    3⤵
    PID:952
- - /usr/bin/kill
    kill -9 888
    3⤵
    PID:952
- - /sbin/kill
    kill -9 888
    3⤵
    PID:952
- - /bin/kill
    kill -9 888
    3⤵
    PID:952
- - /usr/local/sbin/kill
    kill -9 910
    3⤵
    PID:956
- - /usr/local/bin/kill
    kill -9 910
    3⤵
    PID:956
- - /usr/sbin/kill
    kill -9 910
    3⤵
    PID:956
- - /usr/bin/kill
    kill -9 910
    3⤵
    PID:956
- - /sbin/kill
    kill -9 910
    3⤵
    PID:956
- - /bin/kill
    kill -9 910
    3⤵
    PID:956
- - /usr/local/sbin/kill
    kill -9 911
    3⤵
    PID:957
- - /usr/local/bin/kill
    kill -9 911
    3⤵
    PID:957
- - /usr/sbin/kill
    kill -9 911
    3⤵
    PID:957
- - /usr/bin/kill
    kill -9 911
    3⤵
    PID:957
- - /sbin/kill
    kill -9 911
    3⤵
    PID:957
- - /bin/kill
    kill -9 911
    3⤵
    PID:957
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:962
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:961
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:960
- /bin/grep
  grep -v grep
  2⤵
  PID:959
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:958
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:968
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:966
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:967
- /bin/grep
  grep -v grep
  2⤵
  PID:965
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:964
- /bin/sleep
  sleep 0.1
  2⤵
  PID:969
- /bin/grep
  grep javae
  2⤵
  PID:971
- /bin/grep
  grep -v "grep\\|\\["
  2⤵
  PID:972
- /bin/ps
  ps -fe
  2⤵
  - Reads runtime system information
  PID:970
- /usr/bin/pkill
  pkill javae
  2⤵
  - Reads runtime system information
  PID:973
- /bin/sleep
  sleep 30
  2⤵
  PID:975
- /usr/bin/nohup
  nohup ./javae
  2⤵
  PID:974
- /tmp/javae
  ./javae
  2⤵
  PID:974
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:999
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1000
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1000
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1000
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1000
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1000
- - /bin/kill
    kill -9 root
    3⤵
    PID:1000
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1001
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1001
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1001
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1001
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1001
- - /bin/kill
    kill -9 root
    3⤵
    PID:1001
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1002
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1002
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1002
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1002
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1002
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1002
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1003
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1003
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1003
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1003
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1003
- - /bin/kill
    kill -9 root
    3⤵
    PID:1003
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1004
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1004
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1004
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1004
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1004
- - /bin/kill
    kill -9 root
    3⤵
    PID:1004
- - /usr/local/sbin/kill
    kill -9 message+
    3⤵
    PID:1005
- - /usr/local/bin/kill
    kill -9 message+
    3⤵
    PID:1005
- - /usr/sbin/kill
    kill -9 message+
    3⤵
    PID:1005
- - /usr/bin/kill
    kill -9 message+
    3⤵
    PID:1005
- - /sbin/kill
    kill -9 message+
    3⤵
    PID:1005
- - /bin/kill
    kill -9 message+
    3⤵
    PID:1005
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1006
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1006
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1006
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1006
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1006
- - /bin/kill
    kill -9 root
    3⤵
    PID:1006
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1007
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1007
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1007
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1007
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1007
- - /bin/kill
    kill -9 root
    3⤵
    PID:1007
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1008
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1008
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1008
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1008
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1008
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1008
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1009
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1009
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1009
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1009
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1009
- - /bin/kill
    kill -9 root
    3⤵
    PID:1009
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1010
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1010
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1010
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1010
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1010
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1010
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1011
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1011
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1011
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1011
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1011
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1011
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1012
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1012
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1012
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1012
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1012
- - /bin/kill
    kill -9 root
    3⤵
    PID:1012
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1013
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1013
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1013
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1013
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1013
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1013
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1014
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1014
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1014
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1014
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1014
- - /bin/kill
    kill -9 root
    3⤵
    PID:1014
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:997
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:996
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:998
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:1018
- - /usr/local/sbin/kill
    kill -9 1
    3⤵
    PID:1019
- - /usr/local/bin/kill
    kill -9 1
    3⤵
    PID:1019
- - /usr/sbin/kill
    kill -9 1
    3⤵
    PID:1019
- - /usr/bin/kill
    kill -9 1
    3⤵
    PID:1019
- - /sbin/kill
    kill -9 1
    3⤵
    PID:1019
- - /bin/kill
    kill -9 1
    3⤵
    PID:1019
- - /usr/local/sbin/kill
    kill -9 916
    3⤵
    PID:1020
- - /usr/local/bin/kill
    kill -9 916
    3⤵
    PID:1020
- - /usr/sbin/kill
    kill -9 916
    3⤵
    PID:1020
- - /usr/bin/kill
    kill -9 916
    3⤵
    PID:1020
- - /sbin/kill
    kill -9 916
    3⤵
    PID:1020
- - /bin/kill
    kill -9 916
    3⤵
    PID:1020
- - /usr/local/sbin/kill
    kill -9 919
    3⤵
    PID:1022
- - /usr/local/bin/kill
    kill -9 919
    3⤵
    PID:1022
- - /usr/sbin/kill
    kill -9 919
    3⤵
    PID:1022
- - /usr/bin/kill
    kill -9 919
    3⤵
    PID:1022
- - /sbin/kill
    kill -9 919
    3⤵
    PID:1022
- - /bin/kill
    kill -9 919
    3⤵
    PID:1022
- - /usr/local/sbin/kill
    kill -9 927
    3⤵
    PID:1025
- - /usr/local/bin/kill
    kill -9 927
    3⤵
    PID:1025
- - /usr/sbin/kill
    kill -9 927
    3⤵
    PID:1025
- - /usr/bin/kill
    kill -9 927
    3⤵
    PID:1025
- - /sbin/kill
    kill -9 927
    3⤵
    PID:1025
- - /bin/kill
    kill -9 927
    3⤵
    PID:1025
- - /usr/local/sbin/kill
    kill -9 934
    3⤵
    PID:1029
- - /usr/local/bin/kill
    kill -9 934
    3⤵
    PID:1029
- - /usr/sbin/kill
    kill -9 934
    3⤵
    PID:1029
- - /usr/bin/kill
    kill -9 934
    3⤵
    PID:1029
- - /sbin/kill
    kill -9 934
    3⤵
    PID:1029
- - /bin/kill
    kill -9 934
    3⤵
    PID:1029
- - /usr/local/sbin/kill
    kill -9 935
    3⤵
    PID:1034
- - /usr/local/bin/kill
    kill -9 935
    3⤵
    PID:1034
- - /usr/sbin/kill
    kill -9 935
    3⤵
    PID:1034
- - /usr/bin/kill
    kill -9 935
    3⤵
    PID:1034
- - /sbin/kill
    kill -9 935
    3⤵
    PID:1034
- - /bin/kill
    kill -9 935
    3⤵
    - Reads CPU attributes
    PID:1034
- - /usr/local/sbin/kill
    kill -9 941
    3⤵
    PID:1038
- - /usr/local/bin/kill
    kill -9 941
    3⤵
    PID:1038
- - /usr/sbin/kill
    kill -9 941
    3⤵
    PID:1038
- - /usr/bin/kill
    kill -9 941
    3⤵
    PID:1038
- - /sbin/kill
    kill -9 941
    3⤵
    PID:1038
- - /bin/kill
    kill -9 941
    3⤵
    - Reads CPU attributes
    PID:1038
- - /usr/local/sbin/kill
    kill -9 944
    3⤵
    PID:1042
- - /usr/local/bin/kill
    kill -9 944
    3⤵
    PID:1042
- - /usr/sbin/kill
    kill -9 944
    3⤵
    PID:1042
- - /usr/bin/kill
    kill -9 944
    3⤵
    PID:1042
- - /sbin/kill
    kill -9 944
    3⤵
    PID:1042
- - /bin/kill
    kill -9 944
    3⤵
    PID:1042
- - /usr/local/sbin/kill
    kill -9 948
    3⤵
    PID:1045
- - /usr/local/bin/kill
    kill -9 948
    3⤵
    PID:1045
- - /usr/sbin/kill
    kill -9 948
    3⤵
    PID:1045
- - /usr/bin/kill
    kill -9 948
    3⤵
    PID:1045
- - /sbin/kill
    kill -9 948
    3⤵
    PID:1045
- - /bin/kill
    kill -9 948
    3⤵
    - Reads CPU attributes
    PID:1045
- - /usr/local/sbin/kill
    kill -9 951
    3⤵
    PID:1046
- - /usr/local/bin/kill
    kill -9 951
    3⤵
    PID:1046
- - /usr/sbin/kill
    kill -9 951
    3⤵
    PID:1046
- - /usr/bin/kill
    kill -9 951
    3⤵
    PID:1046
- - /sbin/kill
    kill -9 951
    3⤵
    PID:1046
- - /bin/kill
    kill -9 951
    3⤵
    - Reads CPU attributes
    PID:1046
- - /usr/local/sbin/kill
    kill -9 984
    3⤵
    PID:1048
- - /usr/local/bin/kill
    kill -9 984
    3⤵
    PID:1048
- - /usr/sbin/kill
    kill -9 984
    3⤵
    PID:1048
- - /usr/bin/kill
    kill -9 984
    3⤵
    PID:1048
- - /sbin/kill
    kill -9 984
    3⤵
    PID:1048
- - /bin/kill
    kill -9 984
    3⤵
    - Reads CPU attributes
    PID:1048
- - /usr/local/sbin/kill
    kill -9 990
    3⤵
    PID:1053
- - /usr/local/bin/kill
    kill -9 990
    3⤵
    PID:1053
- - /usr/sbin/kill
    kill -9 990
    3⤵
    PID:1053
- - /usr/bin/kill
    kill -9 990
    3⤵
    PID:1053
- - /sbin/kill
    kill -9 990
    3⤵
    PID:1053
- - /bin/kill
    kill -9 990
    3⤵
    - Reads CPU attributes
    PID:1053
- - /usr/local/sbin/kill
    kill -9 995
    3⤵
    PID:1054
- - /usr/local/bin/kill
    kill -9 995
    3⤵
    PID:1054
- - /usr/sbin/kill
    kill -9 995
    3⤵
    PID:1054
- - /usr/bin/kill
    kill -9 995
    3⤵
    PID:1054
- - /sbin/kill
    kill -9 995
    3⤵
    PID:1054
- - /bin/kill
    kill -9 995
    3⤵
    PID:1054
- - /usr/local/sbin/kill
    kill -9 1017
    3⤵
    PID:1056
- - /usr/local/bin/kill
    kill -9 1017
    3⤵
    PID:1056
- - /usr/sbin/kill
    kill -9 1017
    3⤵
    PID:1056
- - /usr/bin/kill
    kill -9 1017
    3⤵
    PID:1056
- - /sbin/kill
    kill -9 1017
    3⤵
    PID:1056
- - /bin/kill
    kill -9 1017
    3⤵
    PID:1056
- - /usr/local/sbin/kill
    kill -9 1018
    3⤵
    PID:1058
- - /usr/local/bin/kill
    kill -9 1018
    3⤵
    PID:1058
- - /usr/sbin/kill
    kill -9 1018
    3⤵
    PID:1058
- - /usr/bin/kill
    kill -9 1018
    3⤵
    PID:1058
- - /sbin/kill
    kill -9 1018
    3⤵
    PID:1058
- - /bin/kill
    kill -9 1018
    3⤵
    PID:1058
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1017
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:1016
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:1015
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:1061
- /bin/grep
  grep -v grep
  2⤵
  PID:1060
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1059
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:1063
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1062
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:1070
- /bin/grep
  grep -v grep
  2⤵
  PID:1069
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1071
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:1072
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:1068
- /bin/sleep
  sleep 0.1
  2⤵
  PID:1073
- /bin/grep
  grep -v "grep\\|\\["
  2⤵
  PID:1076
- /bin/grep
  grep javae
  2⤵
  PID:1075
- /bin/ps
  ps -fe
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1074
- /usr/bin/pkill
  pkill javae
  2⤵
  - Reads runtime system information
  PID:1077
- /bin/sleep
  sleep 30
  2⤵
  PID:1079
- /usr/bin/nohup
  nohup ./javae
  2⤵
  PID:1078
- /tmp/javae
  ./javae
  2⤵
  PID:1078
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:1102
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  PID:1101
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1103
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:1104
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1105
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1105
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1105
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1105
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1105
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1105
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1106
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1106
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1106
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1106
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1106
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1106
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1107
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1107
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1107
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1107
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1107
- - /bin/kill
    kill -9 root
    3⤵
    PID:1107
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1108
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1108
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1108
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1108
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1108
- - /bin/kill
    kill -9 root
    3⤵
    PID:1108
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1109
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1109
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1109
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1109
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1109
- - /bin/kill
    kill -9 root
    3⤵
    PID:1109
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1110
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1110
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1110
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1110
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1110
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1110
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1111
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1111
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1111
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1111
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1111
- - /bin/kill
    kill -9 root
    3⤵
    PID:1111
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1112
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1112
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1112
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1112
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1112
- - /bin/kill
    kill -9 root
    3⤵
    PID:1112
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1113
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1113
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1113
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1113
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1113
- - /bin/kill
    kill -9 root
    3⤵
    PID:1113
- - /usr/local/sbin/kill
    kill -9 message+
    3⤵
    PID:1114
- - /usr/local/bin/kill
    kill -9 message+
    3⤵
    PID:1114
- - /usr/sbin/kill
    kill -9 message+
    3⤵
    PID:1114
- - /usr/bin/kill
    kill -9 message+
    3⤵
    PID:1114
- - /sbin/kill
    kill -9 message+
    3⤵
    PID:1114
- - /bin/kill
    kill -9 message+
    3⤵
    - Reads CPU attributes
    PID:1114
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1115
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1115
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1115
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1115
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1115
- - /bin/kill
    kill -9 root
    3⤵
    PID:1115
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1116
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1116
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1116
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1116
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1116
- - /bin/kill
    kill -9 root
    3⤵
    PID:1116
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1117
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1117
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1117
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1117
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1117
- - /bin/kill
    kill -9 root
    3⤵
    - Reads CPU attributes
    PID:1117
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1118
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1118
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1118
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1118
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1118
- - /bin/kill
    kill -9 root
    3⤵
    PID:1118
- - /usr/local/sbin/kill
    kill -9 root
    3⤵
    PID:1119
- - /usr/local/bin/kill
    kill -9 root
    3⤵
    PID:1119
- - /usr/sbin/kill
    kill -9 root
    3⤵
    PID:1119
- - /usr/bin/kill
    kill -9 root
    3⤵
    PID:1119
- - /sbin/kill
    kill -9 root
    3⤵
    PID:1119
- - /bin/kill
    kill -9 root
    3⤵
    PID:1119
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1122
- /bin/grep
  grep -v "grep\\|server.js\\|java \\|next-server\\|entrypoint.sh\\|npm\\|start.sh\\|node\\|bun\\|startup.sh\\|MainThread\\|Mem\\|CPU\\|Load\\|sh -i\\|sleep\\|PID\\|ps\\|\\[\\|8056\\|cat\\|nc\\|sh \\|jenkins.war"
  2⤵
  PID:1121
- /bin/ps
  ps aux
  2⤵
  - Process Discovery
  - Reads runtime system information
  PID:1120
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:1123
- - /usr/local/sbin/kill
    kill -9 1
    3⤵
    PID:1124
- - /usr/local/bin/kill
    kill -9 1
    3⤵
    PID:1124
- - /usr/sbin/kill
    kill -9 1
    3⤵
    PID:1124
- - /usr/bin/kill
    kill -9 1
    3⤵
    PID:1124
- - /sbin/kill
    kill -9 1
    3⤵
    PID:1124
- - /bin/kill
    kill -9 1
    3⤵
    PID:1124
- - /usr/local/sbin/kill
    kill -9 1023
    3⤵
    PID:1125
- - /usr/local/bin/kill
    kill -9 1023
    3⤵
    PID:1125
- - /usr/sbin/kill
    kill -9 1023
    3⤵
    PID:1125
- - /usr/bin/kill
    kill -9 1023
    3⤵
    PID:1125
- - /sbin/kill
    kill -9 1023
    3⤵
    PID:1125
- - /bin/kill
    kill -9 1023
    3⤵
    - Reads CPU attributes
    PID:1125
- - /usr/local/sbin/kill
    kill -9 1026
    3⤵
    PID:1127
- - /usr/local/bin/kill
    kill -9 1026
    3⤵
    PID:1127
- - /usr/sbin/kill
    kill -9 1026
    3⤵
    PID:1127
- - /usr/bin/kill
    kill -9 1026
    3⤵
    PID:1127
- - /sbin/kill
    kill -9 1026
    3⤵
    PID:1127
- - /bin/kill
    kill -9 1026
    3⤵
    PID:1127
- - /usr/local/sbin/kill
    kill -9 1031
    3⤵
    PID:1130
- - /usr/local/bin/kill
    kill -9 1031
    3⤵
    PID:1130
- - /usr/sbin/kill
    kill -9 1031
    3⤵
    PID:1130
- - /usr/bin/kill
    kill -9 1031
    3⤵
    PID:1130
- - /sbin/kill
    kill -9 1031
    3⤵
    PID:1130
- - /bin/kill
    kill -9 1031
    3⤵
    - Reads CPU attributes
    PID:1130
- - /usr/local/sbin/kill
    kill -9 1033
    3⤵
    PID:1134
- - /usr/local/bin/kill
    kill -9 1033
    3⤵
    PID:1134
- - /usr/sbin/kill
    kill -9 1033
    3⤵
    PID:1134
- - /usr/bin/kill
    kill -9 1033
    3⤵
    PID:1134
- - /sbin/kill
    kill -9 1033
    3⤵
    PID:1134
- - /bin/kill
    kill -9 1033
    3⤵
    - Reads CPU attributes
    PID:1134
- - /usr/local/sbin/kill
    kill -9 1043
    3⤵
    PID:1138
- - /usr/local/bin/kill
    kill -9 1043
    3⤵
    PID:1138
- - /usr/sbin/kill
    kill -9 1043
    3⤵
    PID:1138
- - /usr/bin/kill
    kill -9 1043
    3⤵
    PID:1138
- - /sbin/kill
    kill -9 1043
    3⤵
    PID:1138
- - /bin/kill
    kill -9 1043
    3⤵
    - Reads CPU attributes
    PID:1138
- - /usr/local/sbin/kill
    kill -9 1049
    3⤵
    PID:1146
- - /usr/local/bin/kill
    kill -9 1049
    3⤵
    PID:1146
- - /usr/sbin/kill
    kill -9 1049
    3⤵
    PID:1146
- - /usr/bin/kill
    kill -9 1049
    3⤵
    PID:1146
- - /sbin/kill
    kill -9 1049
    3⤵
    PID:1146
- - /bin/kill
    kill -9 1049
    3⤵
    - Reads CPU attributes
    PID:1146
- - /usr/local/sbin/kill
    kill -9 1050
    3⤵
    PID:1148
- - /usr/local/bin/kill
    kill -9 1050
    3⤵
    PID:1148
- - /usr/sbin/kill
    kill -9 1050
    3⤵
    PID:1148
- - /usr/bin/kill
    kill -9 1050
    3⤵
    PID:1148
- - /sbin/kill
    kill -9 1050
    3⤵
    PID:1148
- - /bin/kill
    kill -9 1050
    3⤵
    PID:1148
- - /usr/local/sbin/kill
    kill -9 1067
    3⤵
    PID:1149
- - /usr/local/bin/kill
    kill -9 1067
    3⤵
    PID:1149
- - /usr/sbin/kill
    kill -9 1067
    3⤵
    PID:1149
- - /usr/bin/kill
    kill -9 1067
    3⤵
    PID:1149
- - /sbin/kill
    kill -9 1067
    3⤵
    PID:1149
- - /bin/kill
    kill -9 1067
    3⤵
    - Reads CPU attributes
    PID:1149
- - /usr/local/sbin/kill
    kill -9 1088
    3⤵
    PID:1153
- - /usr/local/bin/kill
    kill -9 1088
    3⤵
    PID:1153
- - /usr/sbin/kill
    kill -9 1088
    3⤵
    PID:1153
- - /usr/bin/kill
    kill -9 1088
    3⤵
    PID:1153
- - /sbin/kill
    kill -9 1088
    3⤵
    PID:1153
- - /bin/kill
    kill -9 1088
    3⤵
    PID:1153
- - /usr/local/sbin/kill
    kill -9 1091
    3⤵
    PID:1158
- - /usr/local/bin/kill
    kill -9 1091
    3⤵
    PID:1158
- - /usr/sbin/kill
    kill -9 1091
    3⤵
    PID:1158
- - /usr/bin/kill
    kill -9 1091
    3⤵
    PID:1158
- - /sbin/kill
    kill -9 1091
    3⤵
    PID:1158
- - /bin/kill
    kill -9 1091
    3⤵
    PID:1158
- - /usr/local/sbin/kill
    kill -9 1092
    3⤵
    PID:1159
- - /usr/local/bin/kill
    kill -9 1092
    3⤵
    PID:1159
- - /usr/sbin/kill
    kill -9 1092
    3⤵
    PID:1159
- - /usr/bin/kill
    kill -9 1092
    3⤵
    PID:1159
- - /sbin/kill
    kill -9 1092
    3⤵
    PID:1159
- - /bin/kill
    kill -9 1092
    3⤵
    PID:1159
- - /usr/local/sbin/kill
    kill -9 1100
    3⤵
    PID:1162
- - /usr/local/bin/kill
    kill -9 1100
    3⤵
    PID:1162
- - /usr/sbin/kill
    kill -9 1100
    3⤵
    PID:1162
- - /usr/bin/kill
    kill -9 1100
    3⤵
    PID:1162
- - /sbin/kill
    kill -9 1100
    3⤵
    PID:1162
- - /bin/kill
    kill -9 1100
    3⤵
    - Reads CPU attributes
    PID:1162
- - /usr/local/sbin/kill
    kill -9 1122
    3⤵
    PID:1165
- - /usr/local/bin/kill
    kill -9 1122
    3⤵
    PID:1165
- - /usr/sbin/kill
    kill -9 1122
    3⤵
    PID:1165
- - /usr/bin/kill
    kill -9 1122
    3⤵
    PID:1165
- - /sbin/kill
    kill -9 1122
    3⤵
    PID:1165
- - /bin/kill
    kill -9 1122
    3⤵
    - Reads CPU attributes
    PID:1165
- - /usr/local/sbin/kill
    kill -9 1123
    3⤵
    PID:1166
- - /usr/local/bin/kill
    kill -9 1123
    3⤵
    PID:1166
- - /usr/sbin/kill
    kill -9 1123
    3⤵
    PID:1166
- - /usr/bin/kill
    kill -9 1123
    3⤵
    PID:1166
- - /sbin/kill
    kill -9 1123
    3⤵
    PID:1166
- - /bin/kill
    kill -9 1123
    3⤵
    - Reads CPU attributes
    PID:1166
- /bin/grep
  grep -v grep
  2⤵
  PID:1169
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1171
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1168
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:1172
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:1170
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  PID:1177
- /bin/grep
  grep "/tmp/\\|/var/tmp\\|/dev/shm\\|supportxmr\\|c3pool\\|--coin XMR"
  2⤵
  PID:1175
- /bin/grep
  grep -v grep
  2⤵
  PID:1174
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:1176
- /bin/ps
  ps aux
  2⤵
  - Reads CPU attributes
  - Process Discovery
  - Reads runtime system information
  PID:1173
- /bin/sleep
  sleep 0.1
  2⤵
  PID:1178
- /bin/grep
  grep -v "grep\\|\\["
  2⤵
  PID:1181
- /bin/grep
  grep javae
  2⤵
  PID:1180
- /bin/ps
  ps -fe
  2⤵
  - Reads runtime system information
  PID:1179
- /usr/bin/pkill
  pkill javae
  2⤵
  PID:1182
- /bin/sleep
  sleep 30
  2⤵
  PID:1184
- /usr/bin/nohup
  nohup ./javae
  2⤵
  PID:1183
- /tmp/javae
  ./javae
  2⤵
  PID:1183

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads