7f4029a66f46ae7f599f041c2b514514b433593cd33fcdcd822d0a2c59daa19f

Analysis

max time kernel
149s
max time network
138s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20260513-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
01/10/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
x86_64
Size 161KB
Sample261001-w2tnwsyshs
SHA256 7f4029a66f46ae7f599f041c2b514514b433593cd33fcdcd822d0a2c59daa19f
MD5 d8061fee5b40e0c9d5b5a1b93098977a
SHA1 91d083b6a56111e4fc5bd40b4963f5efc2a66f83
SHA512 995cfc635ef8d6276d2cde0f1355edc946bc5bea7541665bd947af5d32c8c90e0edbc8fc9705e7c8b88594ae9d24735e5f75e08a10b7dabaa976ed8a87664ce7
SSDEEP 3072:4xCtr4tEt79YAcNbRzjWbMH6boeOnrBAqAVsbwLDcc9QVCvo+azceS:BF+EF9bqC06XetwsbeD2Vy
TLSH
T1DDF34B06F4C098FFC489D1708BDEC2B7A632F8992225769B27846F317F3EF61161A651
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

antivm discovery persistence

Malware Config

Signatures

Traces itself 1 IoCs

Traces itself to prevent debugging attempts

pid	Process
1506	x86_64

Enumerates active TCP sockets 1 TTPs 1 IoCs

Gets active TCP sockets from /proc virtual filesystem.

discovery

System Network Connections Discovery

T1049

description	ioc	Process
File opened for reading	/proc/net/tcp	network-dispatch

Enumerates running processes
Discovers information about currently running processes on the system

Write file to user bin folder 1 IoCs

persistence

description	ioc	Process
File opened for modification	/usr/local/bin/network-dispatch.k	x86_64

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	/bin/bash	1506	x86_64

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

System Checks

T1497.001

description	ioc	Process
File opened for reading	/proc/cpuinfo	x86_64

Reads system network configuration 1 TTPs 1 IoCs

Uses contents of /proc filesystem to enumerate network settings.

discovery

Internet Connection Discovery

T1016.001

description	ioc	Process
File opened for reading	/proc/net/tcp	network-dispatch

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/317/cmdline	x86_64
File opened for reading	/proc/84/cmdline	x86_64
File opened for reading	/proc/163/cmdline	x86_64
File opened for reading	/proc/173/cmdline	x86_64
File opened for reading	/proc/494/cmdline	x86_64
File opened for reading	/proc/584/fd	network-dispatch
File opened for reading	/proc/89/cmdline	x86_64
File opened for reading	/proc/505/cmdline	x86_64
File opened for reading	/proc/1042/cmdline	x86_64
File opened for reading	/proc/1054/cmdline	x86_64
File opened for reading	/proc/670/fd	network-dispatch
File opened for reading	/proc/968/fd	network-dispatch
File opened for reading	/proc/1352/cmdline	x86_64
File opened for reading	/proc/1496/cmdline	x86_64
File opened for reading	/proc/514/fd	network-dispatch
File opened for reading	/proc/4/cmdline	x86_64
File opened for reading	/proc/166/cmdline	x86_64
File opened for reading	/proc/1471/cmdline	x86_64
File opened for reading	/proc/1107/fd	network-dispatch
File opened for reading	/proc/1371/fd	network-dispatch
File opened for reading	/proc/982/cmdline	x86_64
File opened for reading	/proc/161/cmdline	x86_64
File opened for reading	/proc/175/cmdline	x86_64
File opened for reading	/proc/1050/cmdline	x86_64
File opened for reading	/proc/1371/cmdline	x86_64
File opened for reading	/proc/259/fd	network-dispatch
File opened for reading	/proc/1010/fd	network-dispatch
File opened for reading	/proc/991/cmdline	x86_64
File opened for reading	/proc/550/fd	network-dispatch
File opened for reading	/proc/943/fd	network-dispatch
File opened for reading	/proc/1186/cmdline	x86_64
File opened for reading	/proc/327/fd	network-dispatch
File opened for reading	/proc/535/cmdline	x86_64
File opened for reading	/proc/sys/kernel/osrelease	x86_64
File opened for reading	/proc/996/fd	network-dispatch
File opened for reading	/proc/1112/fd	network-dispatch
File opened for reading	/proc/13/cmdline	x86_64
File opened for reading	/proc/self/status	x86_64
File opened for reading	/proc/488/cmdline	x86_64
File opened for reading	/proc/988/fd	network-dispatch
File opened for reading	/proc/1101/fd	network-dispatch
File opened for reading	/proc/160/cmdline	x86_64
File opened for reading	/proc/12/cmdline	x86_64
File opened for reading	/proc/203/cmdline	x86_64
File opened for reading	/proc/470/cmdline	x86_64
File opened for reading	/proc/1068/cmdline	x86_64
File opened for reading	/proc/30/cmdline	x86_64
File opened for reading	/proc/34/cmdline	x86_64
File opened for reading	/proc/159/cmdline	x86_64
File opened for reading	/proc/1104/cmdline	x86_64
File opened for reading	/proc/926/fd	network-dispatch
File opened for reading	/proc/1471/fd	network-dispatch
File opened for reading	/proc/1112/cmdline	x86_64
File opened for reading	/proc/728/fd	network-dispatch
File opened for reading	/proc/6/cmdline	x86_64
File opened for reading	/proc/8/cmdline	x86_64
File opened for reading	/proc/14/cmdline	x86_64
File opened for reading	/proc/169/cmdline	x86_64
File opened for reading	/proc/486/cmdline	x86_64
File opened for reading	/proc/584/cmdline	x86_64
File opened for reading	/proc/535/fd	network-dispatch
File opened for reading	/proc/1029/fd	network-dispatch
File opened for reading	/proc/988/cmdline	x86_64
File opened for reading	/proc/1019/cmdline	x86_64

Writes file to shm directory 1 IoCs

Malware can drop malicious files in the shm directory which will run directly from RAM.

description	ioc	Process
File opened for modification	/dev/shm/.sys	x86_64

Writes file to tmp directory 2 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/.netd	x86_64
File opened for modification	/tmp/.netd.tmp	x86_64

/tmp/x86_64
/tmp/x86_64
1⤵
- Traces itself
- Write file to user bin folder
- Changes its process name
- Checks CPU configuration
- Reads runtime system information
- Writes file to shm directory
- Writes file to tmp directory
PID:1506
- /usr/local/bin/network-dispatch
  network-dispatch -p
  2⤵
  - Enumerates active TCP sockets
  - Reads system network configuration
  - Reads runtime system information
  PID:1510
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1518
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1519
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1520
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1521
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1522
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1523
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1524
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1525
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1526
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1527
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1528
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1529
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1530
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1531
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1532
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1533
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1534
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1535
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1536
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:1537
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1538
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:1539
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1540
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:1541
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1542
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:1543
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:1544
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:1545
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1546
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:1547
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:1548
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:1549
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:1550
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:1551
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:1552
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:1553
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:1554
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:1555
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:1556
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:1557
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:1558
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:1559
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:1560
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:1561
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1562
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:1563
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1564
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:1565
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1566
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:1567
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1568
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:1569
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:1570
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:1571
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:1572
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:1573
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1574
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:1575
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1576
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:1577
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1578
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:1579
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1580
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:1581
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1582
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:1583
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1584
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1585
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1586
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1587
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1588
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1589
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1590
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1591
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1592
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1593
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1594
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1595
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1596
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1597
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1598
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1599
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1600
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1601
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1602
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:1603
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1604
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:1605
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1606
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:1607
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1608
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:1609
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:1610
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:1611
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1612
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:1613
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:1614
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:1615
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:1616
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:1617
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:1618
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:1619
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:1620
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:1621
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:1622
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:1623
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:1624
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:1625
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:1626
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:1627
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1628
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:1629
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1630
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:1631
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1632
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:1633
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1634
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:1635
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:1636
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:1637
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:1638
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:1639
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1640
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:1641
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1642
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:1643
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1644
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:1645
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1646
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:1647
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1648
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:1649
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1650
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1651
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1652
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1653
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1654
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1655
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1656
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1657
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1658
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1659
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1660
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1661
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1662
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1663
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1664
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1665
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1666
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1667
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1668
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:1669
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1670
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:1671
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1672
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:1673
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1674
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:1675
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:1676
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:1677
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1678
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:1679
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:1680
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:1681
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:1682
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:1683
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:1684
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:1685
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:1686
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:1687
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:1688
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:1689
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:1690
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:1691
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:1692
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:1693
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1694
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:1695
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1696
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:1697
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1698
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:1699
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1700
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:1701
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:1702
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:1703
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:1704
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:1705
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1706
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:1707
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1708
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:1709
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1710
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:1711
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1712
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:1713
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1714
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:1715
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1716
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1717
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1718
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1719
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1720
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1721
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1722
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1723
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1724
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1725
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1726
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1727
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1728
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1729
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1730
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1731
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1732
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1733
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1734
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:1735
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1736
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:1737
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1738
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:1739
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1740
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:1741
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:1742
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:1743
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1744
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:1745
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:1746
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:1747
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:1748
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:1749
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:1750
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:1751
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:1752
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:1753
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:1754
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:1755
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:1756
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:1757
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:1758
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:1759
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1760
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:1761
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1762
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:1763
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1764
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:1765
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1766
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:1767
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:1768
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:1769
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:1770
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:1771
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1772
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:1773
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1774
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:1775
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1776
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:1777
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1778
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:1779
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1780
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:1781
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1782
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1783
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1784
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1785
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1786
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1787
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1788
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1789
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1790
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1791
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1792
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1793
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1794
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1795
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1796
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1797
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1798
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1799
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1800
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:1801
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1802
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:1803
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1804
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:1805
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1806
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:1807
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:1808
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:1809
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1810
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:1811
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:1812
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:1813
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:1814
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:1815
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:1816
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:1817
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:1818
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:1819
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:1820
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:1821
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:1822
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:1823
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:1824
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:1825
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1826
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:1827
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1828
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:1829
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1830
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:1831
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1832
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:1833
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:1834
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:1835
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:1836
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:1837
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1838
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:1839
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1840
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:1841
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1842
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:1843
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1844
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:1845
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1846
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:1847
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1850
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1851
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1852
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1853
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1854
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1855
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1856
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1857
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1858
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1859
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1860
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1861
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1862
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1863
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1864
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1865
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1866
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1867
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1868
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:1869
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1870
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:1871
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1872
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:1873
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1874
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:1875
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:1876
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:1877
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1878
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:1879
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:1880
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:1881
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:1882
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:1883
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:1884
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:1885
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:1886
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:1887
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:1888
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:1889
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:1890
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:1891
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:1892
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:1893
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1894
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:1895
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1896
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:1897
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1898
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:1899
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1900
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:1901
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:1902
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:1903
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:1904
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:1905
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1906
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:1907
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1908
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:1909
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1910
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:1911
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1912
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:1913
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1914
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:1915
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1916
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1917
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1918
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1919
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1920
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1921
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1922
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1923
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1924
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1925
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1926
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1927
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1928
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1929
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1930
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1931
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1932
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1933
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1934
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:1935
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1936
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:1937
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1938
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:1939
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1940
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:1941
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:1942
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:1943
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1944
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:1945
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:1946
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:1947
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:1948
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:1949
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:1950
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:1951
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:1952
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:1953
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:1954
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:1955
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:1956
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:1957
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:1958
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:1959
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1960
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:1961
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1962
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:1963
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1964
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:1965
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1966
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:1967
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:1968
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:1969
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:1970
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:1971
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1972
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:1973
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1974
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:1975
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1976
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:1977
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:1978
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:1979
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:1980
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:1981
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:1982
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:1983
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:1984
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:1985
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:1986
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:1987
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:1988
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:1989
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:1990
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:1991
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:1992
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:1993
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:1994
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:1995
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:1996
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:1997
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:1998
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:1999
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2000
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2001
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2002
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2003
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2004
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2005
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2006
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2007
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2008
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2009
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2010
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2011
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2012
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2013
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2014
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2015
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2016
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2017
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2018
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2019
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2020
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2021
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2022
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2023
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2024
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2025
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2026
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2027
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2028
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2029
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2030
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2031
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2032
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2033
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2034
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2035
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2036
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2037
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2038
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2039
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2040
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2041
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2042
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2043
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2044
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2045
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2046
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2047
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2048
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2049
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2050
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2051
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2052
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2053
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2054
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2055
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2056
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2057
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2058
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2059
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2060
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2061
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2062
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2063
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2064
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2065
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2066
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2067
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2068
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2069
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2070
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2071
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2072
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2073
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2074
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2075
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2076
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2077
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2078
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2079
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2080
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2081
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2082
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2083
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2084
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2085
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2086
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2087
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2088
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2089
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2090
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2091
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2092
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2093
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2094
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2095
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2096
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2097
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2098
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2099
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2100
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2101
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2102
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2103
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2104
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2105
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2106
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2107
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2108
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2109
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2110
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2111
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2112
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2113
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2114
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2115
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2116
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2117
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2118
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2119
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2120
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2121
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2122
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2123
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2124
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2125
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2126
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2127
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2128
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2129
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2130
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2131
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2132
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2133
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2134
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2135
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2136
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2137
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2138
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2139
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2140
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2141
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2142
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2143
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2144
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2145
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2146
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2147
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2148
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2149
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2150
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2151
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2152
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2153
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2154
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2155
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2156
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2157
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2158
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2159
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2160
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2161
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2162
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2163
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2164
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2165
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2166
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2167
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2168
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2169
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2170
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2171
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2172
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2173
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2174
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2175
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2176
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2177
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2178
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2179
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2180
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2181
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2182
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2183
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2184
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2185
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2186
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2187
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2188
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2189
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2190
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2191
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2192
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2193
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2194
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2195
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2196
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2197
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2198
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2199
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2200
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2201
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2202
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2203
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2204
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2205
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2206
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2207
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2208
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2209
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2210
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2211
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2212
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2213
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2214
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2215
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2216
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2217
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2218
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2219
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2220
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2221
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2222
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2223
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2224
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2225
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2226
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2227
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2228
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2229
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2230
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2231
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2232
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2233
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2234
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2235
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2236
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2237
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2238
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2239
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2240
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2241
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2242
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2243
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2244
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2245
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2246
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2247
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2248
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2249
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2250
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2251
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2252
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2253
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2254
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2255
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2256
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2257
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2258
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2259
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2260
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2261
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2262
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2263
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2264
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2265
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2266
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2267
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2268
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2269
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2270
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2271
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2272
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2273
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2274
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2275
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2276
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2277
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2278
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2279
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2280
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2281
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2282
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2283
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2284
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2285
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2286
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2287
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2288
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2289
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2290
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2291
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2292
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2293
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2294
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2295
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2296
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2297
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2298
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2299
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2300
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2301
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2302
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2303
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2304
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2305
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2306
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2307
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2308
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2309
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2310
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2311
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2312
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2313
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2314
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2315
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2316
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2317
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2318
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2319
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2320
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2321
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2322
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2323
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2324
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2325
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2326
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2327
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2328
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2329
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2330
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2331
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2332
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2333
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2334
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2335
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2336
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2337
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2338
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2339
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2340
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2341
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2342
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2343
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2344
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2345
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2346
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2347
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2348
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2349
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2350
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2351
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2352
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2353
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2354
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2355
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2356
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2357
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2358
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2359
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2360
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2361
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2362
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2363
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2364
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2365
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2366
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2367
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2368
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2369
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2370
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2371
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2372
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2373
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2374
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2375
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2376
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2377
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2378
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2379
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2380
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2381
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2382
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2383
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2384
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2385
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2386
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2387
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2388
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2389
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2390
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2391
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2392
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2393
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2394
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2395
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2396
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2397
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2398
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2399
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2400
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2401
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2402
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2403
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2404
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2405
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2406
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2407
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2408
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2409
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2410
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2411
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2412
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2413
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2414
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2415
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2416
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2417
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2418
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2419
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2420
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2421
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2422
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2423
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2424
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2425
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2426
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2427
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2428
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2429
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2430
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2431
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2432
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2433
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2434
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2435
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2436
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2437
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2438
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2439
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2440
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2441
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2442
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2443
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2444
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2445
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2446
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2447
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2448
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2449
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2450
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2451
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2452
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2453
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2454
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2455
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2456
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2457
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2458
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2459
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2460
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2461
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2462
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2463
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2464
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2465
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2466
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2467
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2468
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2469
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2470
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2471
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2472
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2473
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2474
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2475
- /bin/sh
  sh -c "rm -f /dev/shm/g >/dev/null 2>&1"
  2⤵
  PID:2476
- - /bin/rm
    rm -f /dev/shm/g
    3⤵
    PID:2477
- /bin/sh
  sh -c "rm -f /dev/shm/install.apk >/dev/null 2>&1"
  2⤵
  PID:2478
- - /bin/rm
    rm -f /dev/shm/install.apk
    3⤵
    PID:2479
- /bin/sh
  sh -c "rm -f /dev/shm/x.apk >/dev/null 2>&1"
  2⤵
  PID:2480
- - /bin/rm
    rm -f /dev/shm/x.apk
    3⤵
    PID:2481
- /bin/sh
  sh -c "rm -f /dev/shm/sh >/dev/null 2>&1"
  2⤵
  PID:2482
- - /bin/rm
    rm -f /dev/shm/sh
    3⤵
    PID:2483
- /bin/sh
  sh -c "rm -f /dev/shm/start.sh >/dev/null 2>&1"
  2⤵
  PID:2484
- - /bin/rm
    rm -f /dev/shm/start.sh
    3⤵
    PID:2485
- /bin/sh
  sh -c "rm -f /dev/shm/init.sh >/dev/null 2>&1"
  2⤵
  PID:2486
- - /bin/rm
    rm -f /dev/shm/init.sh
    3⤵
    PID:2487
- /bin/sh
  sh -c "rm -f /var/tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2488
- - /bin/rm
    rm -f /var/tmp/apk.apk
    3⤵
    PID:2489
- /bin/sh
  sh -c "rm -f /var/tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2490
- - /bin/rm
    rm -f /var/tmp/payload.apk
    3⤵
    PID:2491
- /bin/sh
  sh -c "rm -f /var/tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2492
- - /bin/rm
    rm -f /var/tmp/update.apk
    3⤵
    PID:2493
- /bin/sh
  sh -c "rm -f /var/tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2494
- - /bin/rm
    rm -f /var/tmp/bot.apk
    3⤵
    PID:2495
- /bin/sh
  sh -c "rm -f /var/tmp/f >/dev/null 2>&1"
  2⤵
  PID:2496
- - /bin/rm
    rm -f /var/tmp/f
    3⤵
    PID:2497
- /bin/sh
  sh -c "rm -f /var/tmp/g >/dev/null 2>&1"
  2⤵
  PID:2498
- - /bin/rm
    rm -f /var/tmp/g
    3⤵
    PID:2499
- /bin/sh
  sh -c "rm -f /var/tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2500
- - /bin/rm
    rm -f /var/tmp/install.apk
    3⤵
    PID:2501
- /bin/sh
  sh -c "rm -f /var/tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2502
- - /bin/rm
    rm -f /var/tmp/x.apk
    3⤵
    PID:2503
- /bin/sh
  sh -c "rm -f /var/tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2504
- - /bin/rm
    rm -f /var/tmp/sh
    3⤵
    PID:2505
- /bin/sh
  sh -c "rm -f /var/tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2506
- - /bin/rm
    rm -f /var/tmp/start.sh
    3⤵
    PID:2507
- /bin/sh
  sh -c "rm -f /var/tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2508
- - /bin/rm
    rm -f /var/tmp/init.sh
    3⤵
    PID:2509
- /bin/sh
  sh -c "rm -f /tmp/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2510
- - /bin/rm
    rm -f /tmp/apk.apk
    3⤵
    PID:2511
- /bin/sh
  sh -c "rm -f /tmp/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2512
- - /bin/rm
    rm -f /tmp/payload.apk
    3⤵
    PID:2513
- /bin/sh
  sh -c "rm -f /tmp/update.apk >/dev/null 2>&1"
  2⤵
  PID:2514
- - /bin/rm
    rm -f /tmp/update.apk
    3⤵
    PID:2515
- /bin/sh
  sh -c "rm -f /tmp/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2516
- - /bin/rm
    rm -f /tmp/bot.apk
    3⤵
    PID:2517
- /bin/sh
  sh -c "rm -f /tmp/f >/dev/null 2>&1"
  2⤵
  PID:2518
- - /bin/rm
    rm -f /tmp/f
    3⤵
    PID:2519
- /bin/sh
  sh -c "rm -f /tmp/g >/dev/null 2>&1"
  2⤵
  PID:2520
- - /bin/rm
    rm -f /tmp/g
    3⤵
    PID:2521
- /bin/sh
  sh -c "rm -f /tmp/install.apk >/dev/null 2>&1"
  2⤵
  PID:2522
- - /bin/rm
    rm -f /tmp/install.apk
    3⤵
    PID:2523
- /bin/sh
  sh -c "rm -f /tmp/x.apk >/dev/null 2>&1"
  2⤵
  PID:2524
- - /bin/rm
    rm -f /tmp/x.apk
    3⤵
    PID:2525
- /bin/sh
  sh -c "rm -f /tmp/sh >/dev/null 2>&1"
  2⤵
  PID:2526
- - /bin/rm
    rm -f /tmp/sh
    3⤵
    PID:2527
- /bin/sh
  sh -c "rm -f /tmp/start.sh >/dev/null 2>&1"
  2⤵
  PID:2528
- - /bin/rm
    rm -f /tmp/start.sh
    3⤵
    PID:2529
- /bin/sh
  sh -c "rm -f /tmp/init.sh >/dev/null 2>&1"
  2⤵
  PID:2530
- - /bin/rm
    rm -f /tmp/init.sh
    3⤵
    PID:2531
- /bin/sh
  sh -c "rm -f /dev/shm/apk.apk >/dev/null 2>&1"
  2⤵
  PID:2532
- - /bin/rm
    rm -f /dev/shm/apk.apk
    3⤵
    PID:2533
- /bin/sh
  sh -c "rm -f /dev/shm/payload.apk >/dev/null 2>&1"
  2⤵
  PID:2534
- - /bin/rm
    rm -f /dev/shm/payload.apk
    3⤵
    PID:2535
- /bin/sh
  sh -c "rm -f /dev/shm/update.apk >/dev/null 2>&1"
  2⤵
  PID:2536
- - /bin/rm
    rm -f /dev/shm/update.apk
    3⤵
    PID:2537
- /bin/sh
  sh -c "rm -f /dev/shm/bot.apk >/dev/null 2>&1"
  2⤵
  PID:2538
- - /bin/rm
    rm -f /dev/shm/bot.apk
    3⤵
    PID:2539
- /bin/sh
  sh -c "rm -f /dev/shm/f >/dev/null 2>&1"
  2⤵
  PID:2540
- - /bin/rm
    rm -f /dev/shm/f
    3⤵
    PID:2541

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Network Connections Discovery

T1049

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads