Analysis
- max time kernel
149s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
03/10/2026, 16:43
Static task
static1
Behavioral task
behavioral1
Sample
2026-10-02_17f84e657b8ee6fc507453934a026932_glassworm_qnapcrypt
Resource
ubuntu1804-amd64-20260513-en
General
- Target 2026-10-02_17f84e657b8ee6fc507453934a026932_glassworm_qnapcrypt
- Size 3.9MB
- Sample261003-t8b2basfpe
- SHA256 602f6821df5aff54410bb81caadc8e0fc0f12c583b57fd8738ce896326c04bff
- MD5 17f84e657b8ee6fc507453934a026932
- SHA1 36e9704def8c781d149bed429bacb0e2334d8b5e
- SHA512 f7e74c857c575db864fd1dd804c1a6259ff807cc3b42475f0f4d5df776131d3497898e84850a464bc2e931909b40d06210e87023f8b1259b141e41a642cab4c9
- SSDEEP 24576:cWo6h2UBLC6CPg2g+rR0o/tdGGoCSH3PdJwuZyWVn1WvIYBSFA1aY4MwFsAvLYrM:cMLi60BxiA1azsAvUCmo7l1cprME6Pv
- TLSH T13B16BF45ED8725B5D7021A3648EF56DB0B2CBF072F319B87B9447BAA613709B14F222C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Creates Raw socket 7 IoCs
Creates a socket that captures raw packets at the device level
pid Process 30264 Process not Found 30264 Process not Found 30264 Process not Found 30279 Process not Found 30279 Process not Found 30284 Process not Found 30284 Process not Found - OS Credential Dumping 1 TTPs 1 IoCs
Adversaries may attempt to dump credentials to use it in password cracking.
description ioc Process File opened for reading /etc/shadow Process not Found - Abuse Elevation Control Mechanism: Sudo and Sudo Caching 1 TTPs 64 IoCs
Abuse sudo or cached sudo credentials to execute code.
pid Process 2106 Process not Found 6725 Process not Found 1676 find 21767 Process not Found 31418 Process not Found 31433 Process not Found 6016 Process not Found 7742 Process not Found 22035 Process not Found 30491 Process not Found 2116 Process not Found 9254 Process not Found 22777 Process not Found 26913 Process not Found 2493 Process not Found 6795 Process not Found 8605 Process not Found 1728 find 26080 Process not Found 31407 Process not Found 3659 Process not Found 3980 Process not Found 5117 Process not Found 1859 Process not Found 22119 Process not Found 31373 Process not Found 2491 Process not Found 4040 Process not Found 4293 Process not Found 7740 Process not Found 1573 sed 21804 Process not Found 22063 Process not Found 22287 Process not Found 22637 Process not Found 22902 Process not Found 23065 Process not Found 26757 Process not Found 22091 Process not Found 26695 Process not Found 30454 Process not Found 9324 Process not Found 22273 Process not Found 28059 Process not Found 30465 Process not Found 31510 Process not Found 4701 Process not Found 5707 Process not Found 21965 Process not Found 26066 Process not Found 3342 Process not Found 3352 Process not Found 30438 Process not Found 30485 Process not Found 31866 Process not Found 26664 Process not Found 31499 Process not Found 4771 Process not Found 22567 Process not Found 30447 Process not Found 4042 Process not Found 6018 Process not Found 22147 Process not Found 22189 Process not Found - Reads AppArmor ptrace settings 1 TTPs 3 IoCs
Discovery of allowed ptrace capabilities by AppArmor.
description ioc Process File opened for reading /sys/kernel/security/apparmor/features/ptrace find File opened for reading /sys/kernel/security/apparmor/features/ptrace Process not Found File opened for reading /sys/kernel/security/apparmor/features/ptrace Process not Found - Checks hardware identifiers (DMI) 1 TTPs 4 IoCs
Checks DMI information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /sys/class/dmi/id/product_name systemd-detect-virt File opened for reading /sys/class/dmi/id/sys_vendor systemd-detect-virt File opened for reading /sys/class/dmi/id/board_vendor systemd-detect-virt File opened for reading /sys/class/dmi/id/bios_vendor systemd-detect-virt - Checks mountinfo of local process 1 TTPs 64 IoCs
Checks mountinfo of running processes which indicate if it is running in chroot jail.
description ioc Process File opened for reading /proc/675/mountinfo Process not Found File opened for reading /proc/714/mountinfo Process not Found File opened for reading /proc/940/mountinfo Process not Found File opened for reading /proc/972/mountinfo Process not Found File opened for reading /proc/1068/mountinfo Process not Found File opened for reading /proc/1298/mountinfo Process not Found File opened for reading /proc/963/mountinfo Process not Found File opened for reading /proc/1019/mountinfo Process not Found File opened for reading /proc/1304/mountinfo Process not Found File opened for reading /proc/1343/mountinfo Process not Found File opened for reading /proc/926/mountinfo Process not Found File opened for reading /proc/1091/mountinfo Process not Found File opened for reading /proc/946/mountinfo Process not Found File opened for reading /proc/439/mountinfo Process not Found File opened for reading /proc/468/mountinfo Process not Found File opened for reading /proc/603/mountinfo Process not Found File opened for reading /proc/1306/mountinfo Process not Found File opened for reading /proc/413/mountinfo Process not Found File opened for reading /proc/449/mountinfo Process not Found File opened for reading /proc/654/mountinfo Process not Found File opened for reading /proc/907/mountinfo Process not Found File opened for reading /proc/1023/mountinfo Process not Found File opened for reading /proc/1456/mountinfo Process not Found File opened for reading /proc/346/mountinfo Process not Found File opened for reading /proc/485/mountinfo Process not Found File opened for reading /proc/490/mountinfo Process not Found File opened for reading /proc/493/mountinfo Process not Found File opened for reading /proc/522/mountinfo Process not Found File opened for reading /proc/709/mountinfo Process not Found File opened for reading /proc/1045/mountinfo Process not Found File opened for reading /proc/1190/mountinfo Process not Found File opened for reading /proc/458/mountinfo Process not Found File opened for reading /proc/899/mountinfo Process not Found File opened for reading /proc/967/mountinfo Process not Found File opened for reading /proc/995/mountinfo Process not Found File opened for reading /proc/1031/mountinfo Process not Found File opened for reading /proc/1035/mountinfo Process not Found File opened for reading /proc/1062/mountinfo Process not Found File opened for reading /proc/1087/mountinfo Process not Found File opened for reading /proc/921/mountinfo Process not Found File opened for reading /proc/1064/mountinfo Process not Found File opened for reading /proc/1085/mountinfo Process not Found File opened for reading /proc/1246/mountinfo Process not Found File opened for reading /proc/1529/mountinfo Process not Found File opened for reading /proc/249/mountinfo Process not Found File opened for reading /proc/481/mountinfo Process not Found File opened for reading /proc/1027/mountinfo Process not Found File opened for reading /proc/1050/mountinfo Process not Found File opened for reading /proc/348/mountinfo Process not Found File opened for reading /proc/966/mountinfo Process not Found File opened for reading /proc/1009/mountinfo Process not Found File opened for reading /proc/465/mountinfo Process not Found File opened for reading /proc/487/mountinfo Process not Found File opened for reading /proc/531/mountinfo Process not Found File opened for reading /proc/986/mountinfo Process not Found File opened for reading /proc/1078/mountinfo Process not Found File opened for reading /proc/1082/mountinfo Process not Found File opened for reading /proc/1153/mountinfo Process not Found File opened for reading /proc/1240/mountinfo Process not Found File opened for reading /proc/444/mountinfo Process not Found File opened for reading /proc/574/mountinfo Process not Found File opened for reading /proc/602/mountinfo Process not Found File opened for reading /proc/657/mountinfo Process not Found File opened for reading /proc/897/mountinfo Process not Found - Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp Process not Found - Enumerates running processes
Discovers information about currently running processes on the system
- Reads data from the clipboard 64 IoCs
Attempts to collect data stored in the clipboard using xclip tool.
pid Process 31139 Process not Found 30584 Process not Found 30749 Process not Found 31039 Process not Found 31144 Process not Found 31154 Process not Found 31284 Process not Found 2972 Process not Found 3479 Process not Found 31014 Process not Found 30539 Process not Found 30754 Process not Found 30964 Process not Found 31194 Process not Found 31274 Process not Found 5176 Process not Found 30694 Process not Found 30769 Process not Found 30814 Process not Found 30884 Process not Found 30929 Process not Found 31204 Process not Found 31349 Process not Found 30458 Process not Found 30674 Process not Found 31239 Process not Found 31344 Process not Found 7801 Process not Found 30433 Process not Found 30664 Process not Found 30699 Process not Found 30714 Process not Found 30819 Process not Found 31059 Process not Found 31304 Process not Found 752 Process not Found 31354 Process not Found 1926 Process not Found 7173 Process not Found 30644 Process not Found 30709 Process not Found 30849 Process not Found 30859 Process not Found 31024 Process not Found 31114 Process not Found 31299 Process not Found 32740 Process not Found 30544 Process not Found 30729 Process not Found 30999 Process not Found 31064 Process not Found 31149 Process not Found 31189 Process not Found 31209 Process not Found 32741 Process not Found 30834 Process not Found 30879 Process not Found 31004 Process not Found 31074 Process not Found 31199 Process not Found 31339 Process not Found 456 Process not Found 4101 Process not Found 30794 Process not Found - Reads hardware information 1 TTPs 4 IoCs
Accesses system info like serial numbers, manufacturer names etc.
description ioc Process File opened for reading /sys/class/dmi/id/product_version systemd-detect-virt File opened for reading /sys/devices/virtual/dmi/id/power Process not Found File opened for reading /sys/devices/virtual/dmi/id/power Process not Found File opened for reading /sys/devices/virtual/dmi/id/power find - Reads list of loaded kernel modules 1 TTPs 15 IoCs
Reads the list of currently loaded kernel modules, possibly to detect virtual environments.
description ioc Process File opened for reading /proc/modules grep File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found File opened for reading /proc/modules grep File opened for reading /proc/modules grep File opened for reading /proc/modules Process not Found File opened for reading /proc/modules Process not Found - Reads network interface configuration 2 TTPs 36 IoCs
Fetches information about one or more active network interfaces.
description ioc Process File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits find File opened for reading /sys/devices/virtual/net/lo/power find File opened for reading /sys/devices/virtual/net/lo/power Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power find File opened for reading /sys/devices/virtual/net/lo/queues/tx-0 find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power Process not Found File opened for reading /sys/devices/virtual/net/lo/queues Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues find File opened for reading /sys/devices/virtual/net/lo/statistics find File opened for reading /sys/devices/virtual/net/lo/queues find File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics Process not Found File opened for reading /sys/devices/virtual/net/lo/statistics Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues Process not Found File opened for reading /sys/devices/virtual/net/lo/queues Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/tx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/statistics Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/tx-0/byte_queue_limits Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/power Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 Process not Found File opened for reading /sys/devices/virtual/net/lo/power Process not Found File opened for reading /sys/devices/virtual/net/lo/queues/rx-0 Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/statistics find File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:03.0/net/ens3/queues/rx-0 Process not Found - Uses Polkit to run commands 2 IoCs
Uses Polkit pkexec as a proxy to execute commands, possibly to bypass security restrictions.
pid Process 31387 Process not Found 31389 Process not Found - Virtualization/Sandbox Evasion: Time Based Evasion 1 TTPs 1 IoCs
Adversaries may detect and evade virtualized environments and sandboxes.
pid Process 2831 uptime - Reads process memory 1 TTPs 64 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
description ioc Process File opened for reading /proc/1/maps Process not Found File opened for reading /proc/36/maps Process not Found File opened for reading /proc/661/maps Process not Found File opened for reading /proc/963/maps Process not Found File opened for reading /proc/487/maps Process not Found File opened for reading /proc/522/maps Process not Found File opened for reading /proc/602/maps Process not Found File opened for reading /proc/6/maps Process not Found File opened for reading /proc/161/maps Process not Found File opened for reading /proc/904/maps Process not Found File opened for reading /proc/531/maps Process not Found File opened for reading /proc/86/maps Process not Found File opened for reading /proc/115/maps Process not Found File opened for reading /proc/458/maps Process not Found File opened for reading /proc/689/maps Process not Found File opened for reading /proc/495/maps Process not Found File opened for reading /proc/899/maps Process not Found File opened for reading /proc/15/maps Process not Found File opened for reading /proc/26/maps Process not Found File opened for reading /proc/82/maps Process not Found File opened for reading /proc/174/maps Process not Found File opened for reading /proc/493/maps Process not Found File opened for reading /proc/548/maps Process not Found File opened for reading /proc/926/maps Process not Found File opened for reading /proc/675/maps Process not Found File opened for reading /proc/907/maps Process not Found File opened for reading /proc/966/maps Process not Found File opened for reading /proc/967/maps Process not Found File opened for reading /proc/986/maps Process not Found File opened for reading /proc/714/maps Process not Found File opened for reading /proc/972/maps Process not Found File opened for reading /proc/11/maps Process not Found File opened for reading /proc/982/maps Process not Found File opened for reading /proc/166/maps Process not Found File opened for reading /proc/170/maps Process not Found File opened for reading /proc/346/maps Process not Found File opened for reading /proc/602/maps Process not Found File opened for reading /proc/413/maps Process not Found File opened for reading /proc/490/maps Process not Found File opened for reading /proc/946/maps Process not Found File opened for reading /proc/10/maps Process not Found File opened for reading /proc/17/maps Process not Found File opened for reading /proc/81/maps Process not Found File opened for reading /proc/176/maps Process not Found File opened for reading /proc/413/maps Process not Found File opened for reading /proc/18/maps Process not Found File opened for reading /proc/439/maps Process not Found File opened for reading /proc/714/maps Process not Found File opened for reading /proc/171/maps Process not Found File opened for reading /proc/465/maps Process not Found File opened for reading /proc/574/maps Process not Found File opened for reading /proc/972/maps Process not Found File opened for reading /proc/654/maps Process not Found File opened for reading /proc/659/maps Process not Found File opened for reading /proc/159/maps Process not Found File opened for reading /proc/163/maps Process not Found File opened for reading /proc/495/maps Process not Found File opened for reading /proc/921/maps Process not Found File opened for reading /proc/8/maps Process not Found File opened for reading /proc/16/maps Process not Found File opened for reading /proc/19/maps Process not Found File opened for reading /proc/22/maps Process not Found File opened for reading /proc/25/maps Process not Found File opened for reading /proc/83/maps Process not Found - Deobfuscate/Decode Files or Information 1 TTPs 1 IoCs
Adversaries may deobfuscate or decode files or information to evade detection mechanisms.
pid Process 1491 base64 - Checks CPU configuration 1 TTPs 3 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo grep File opened for reading /proc/cpuinfo grep File opened for reading /proc/cpuinfo systemd-detect-virt - Discovers running processes 1 TTPs 5 IoCs
Running process information can be used to identify security tools or plan follow-on actions.
pid Process 30174 Process not Found 30251 Process not Found 30289 Process not Found 31526 Process not Found 32587 Process not Found - Reads CPU attributes 1 TTPs 64 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index0 Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index0 Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/power Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpuidle Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index1 Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/power Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/topology find File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/topology Process not Found File opened for reading /sys/devices/system/cpu/hotplug find File opened for reading /sys/devices/system/cpu/cpu0/cache/index3 find File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/cpu0/cache/index3 Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found File opened for reading /sys/devices/system/cpu/online Process not Found - Reads system network configuration 1 TTPs 20 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/netlink Process not Found File opened for reading /proc/net/raw6 Process not Found File opened for reading /proc/net/sockstat6 Process not Found File opened for reading /proc/net/tcp6 Process not Found File opened for reading /proc/net/udp Process not Found File opened for reading /proc/net/dev Process not Found File opened for reading /proc/net/ax25 Process not Found File opened for reading /proc/net/raw Process not Found File opened for reading /proc/net/packet Process not Found File opened for reading /proc/net/udp6 Process not Found File opened for reading /proc/net/udplite Process not Found File opened for reading /proc/net/sctp/eps Process not Found File opened for reading /proc/net/ipx Process not Found File opened for reading /proc/net/unix Process not Found File opened for reading /proc/net/sockstat Process not Found File opened for reading /proc/net/sctp/assocs Process not Found File opened for reading /proc/net/dev Process not Found File opened for reading /proc/net/udplite6 Process not Found File opened for reading /proc/net/tcp Process not Found File opened for reading /proc/net/icmp Process not Found -
pid Process 3123 Process not Found 3123 Process not Found 3123 Process not Found 3123 Process not Found - Enumerates kernel/hardware configuration 1 TTPs 64 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/devices/virtual/misc/vga_arbiter/power find File opened for reading /sys/devices/isa Process not Found File opened for reading /sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1d Process not Found File opened for reading /sys/kernel/debug/tracing/events/kmem/mm_page_free_batched Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:06.0/virtio1/block/vda/slaves Process not Found File opened for reading /sys/kernel/debug/tracing/events/msr find File opened for reading /sys/kernel/debug/tracing/events/wbt/wbt_step find File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_sync_file_range find File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_membarrier find File opened for reading /sys/devices/pci0000:00/0000:00:04.0/ata5 find File opened for reading /sys/kernel/slab/:0000064 Process not Found File opened for reading /sys/kernel/debug/tracing/events/xhci-hcd/xhci_free_virt_device Process not Found File opened for reading /sys/kernel/debug/tracing/events/regulator/regulator_disable Process not Found File opened for reading /sys/devices/LNXSYSTM:00/LNXSYBUS:00/power find File opened for reading /sys/kernel/slab/:0004096/cgroup Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_statfs Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:01.1/ata2/host1/scsi_host/host1/power Process not Found File opened for reading /sys/devices/virtual/drm Process not Found File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_ext_convert_to_initialized_enter Process not Found File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_ind_map_blocks_exit Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_shmdt Process not Found File opened for reading /sys/kernel/slab/iint_cache find File opened for reading /sys/devices/platform/floppy.0/block/fd0/queue find File opened for reading /sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:12 Process not Found File opened for reading /sys/fs/cgroup/unified/user.slice/user-0.slice/[email protected]/gvfs-udisks2-volume-monitor.service Process not Found File opened for reading /sys/module/aesni_intel/sections Process not Found File opened for reading /sys/kernel/security/apparmor/features/rlimit Process not Found File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_zero_range Process not Found File opened for reading /sys/devices/virtual/tty/tty6 Process not Found File opened for reading /sys/devices/virtual/block/loop6/holders find File opened for reading /sys/kernel/slab/request_sock_TCP Process not Found File opened for reading /sys/kernel/irq/9 Process not Found File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_mballoc_free Process not Found File opened for reading /sys/devices/pnp0/00:04/tty Process not Found File opened for reading /sys/devices/platform/serial8250/tty/ttyS11/power Process not Found File opened for reading /sys/devices/virtual/tty/tty54/power Process not Found File opened for reading /sys/module/dynamic_debug Process not Found File opened for reading /sys/devices/virtual/misc/tun find File opened for reading /sys/fs/cgroup/devices/system.slice/systemd-logind.service find File opened for reading /sys/bus/pci_express find File opened for reading /sys/module/ahci/parameters find File opened for reading /sys/module/ipv6/parameters find File opened for reading /sys/kernel/slab/anon_vma/cgroup Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_inotify_rm_watch Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_enter_pipe Process not Found File opened for reading /sys/kernel/debug/tracing/events/writeback/sb_mark_inode_writeback find File opened for reading /sys/kernel/debug/tracing/events/sched/sched_stat_blocked find File opened for reading /sys/kernel/debug/tracing/events/irq_vectors/threshold_apic_exit find File opened for reading /sys/bus/node/drivers find File opened for reading /sys/kernel/debug/tracing/events/ext4/ext4_mb_new_group_pa Process not Found File opened for reading /sys/kernel/debug/tracing/events/sched Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_getgid Process not Found File opened for reading /sys/module/af_alg Process not Found File opened for reading /sys/fs/cgroup/systemd find File opened for reading /sys/module/hid/sections find File opened for reading /sys/kernel/slab/:a-0000064/cgroup Process not Found File opened for reading /sys/kernel/debug/tracing/events/net Process not Found File opened for reading /sys/kernel/debug/tracing/events/filemap/mm_filemap_add_to_page_cache Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_fchownat Process not Found File opened for reading /sys/kernel/debug/tracing/events/exceptions/page_fault_kernel Process not Found File opened for reading /sys/kernel/debug/tracing/events/syscalls/sys_exit_mkdirat Process not Found File opened for reading /sys/devices/pci0000:00/0000:00:06.0/power find File opened for reading /sys/firmware/acpi/interrupts find File opened for reading /sys/kernel/debug/tracing/events/xen/xen_mc_entry_alloc Process not Found -
description ioc Process File opened for reading /proc/1023/status Process not Found File opened for reading /proc/1027/status Process not Found File opened for reading /proc/714/status Process not Found File opened for reading /proc/1009/status Process not Found File opened for reading /proc/169/stat Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/self/maps Process not Found File opened for reading /proc/1023/fdinfo/3 Process not Found File opened for reading /proc/654/status Process not Found File opened for reading /proc/meminfo Process not Found File opened for reading /proc/201/stat Process not Found File opened for reading /proc/1491/cmdline Process not Found File opened for reading /proc/959/stat Process not Found File opened for reading /proc/self/maps Process not Found File opened for reading /proc/1050/stat Process not Found File opened for reading /proc/458/status Process not Found File opened for reading /proc/1171/status Process not Found File opened for reading /proc/1019/stat Process not Found File opened for reading /proc/1491/stat Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/995/cmdline Process not Found File opened for reading /proc/self/maps Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/249/fdinfo/118 Process not Found File opened for reading /proc/137/stat Process not Found File opened for reading /proc/548/status Process not Found File opened for reading /proc/80/task/80/fd Process not Found File opened for reading /proc/523/net Process not Found File opened for reading /proc/959/task/961/attr Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/268/stat Process not Found File opened for reading /proc/81/task/81/attr/smack Process not Found File opened for reading /proc/1483/net/dev_snmp6 Process not Found File opened for reading /proc/82/task/82/net/stat Process not Found File opened for reading /proc/201/task/201 Process not Found File opened for reading /proc/1082/attr Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/159/stat Process not Found File opened for reading /proc/83/net/stat Process not Found File opened for reading /proc/1061/task/1081/attr/apparmor Process not Found File opened for reading /proc/495/fdinfo Process not Found File opened for reading /proc/1119/task/1137/ns Process not Found File opened for reading /proc/1487/task/1489/attr/smack Process not Found File opened for reading /proc/1484/cmdline Process not Found File opened for reading /proc/28538/fdinfo/5 Process not Found File opened for reading /proc/1483/status Process not Found File opened for reading /proc/465/stat Process not Found File opened for reading /proc/966/status Process not Found File opened for reading /proc/24/stat Process not Found File opened for reading /proc/172/task/172/net/netfilter Process not Found File opened for reading /proc/986/attr/smack Process not Found File opened for reading /proc/filesystems Process not Found File opened for reading /proc/1027/status Process not Found File opened for reading /proc/1343/fd Process not Found File opened for reading /proc/1048/status Process not Found File opened for reading /proc/1314/cmdline Process not Found File opened for reading /proc/161/status Process not Found File opened for reading /proc/17/stat Process not Found File opened for reading /proc/36/stat Process not Found File opened for reading /proc/602/fdinfo/27 Process not Found File opened for reading /proc/25/cmdline Process not Found File opened for reading /proc/531/status Process not Found File opened for reading /proc/176/cmdline Process not Found File opened for reading /proc/669/net/dev_snmp6 Process not Found - Remote System Discovery 1 TTPs 1 IoCs
Adversaries may try to discover information about remote systems in a network.
pid Process 30375 Process not Found - System Network Configuration Discovery 1 TTPs 64 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 28368 Process not Found 28631 Process not Found 1809 Process not Found 4046 Process not Found 26127 Process not Found 28384 Process not Found 28784 Process not Found 24815 Process not Found 8634 Process not Found 15836 Process not Found 15962 Process not Found 28118 Process not Found 28163 Process not Found 28469 Process not Found 28777 Process not Found 28190 Process not Found 28208 Process not Found 28298 Process not Found 1494 Process not Found 1554 Process not Found 6695 Process not Found 10257 Process not Found 28152 Process not Found 28874 Process not Found 2441 Process not Found 8625 Process not Found 2218 grep 24187 Process not Found 26642 Process not Found 4755 Process not Found 13046 Process not Found 28379 Process not Found 7118 Process not Found 29862 Process not Found 780 Process not Found 28377 Process not Found 28856 Process not Found 32137 Process not Found 2186 Process not Found 7435 Process not Found 8312 Process not Found 23413 Process not Found 27496 Process not Found 28161 Process not Found 28325 Process not Found 28386 Process not Found 28397 Process not Found 28413 Process not Found 28676 Process not Found 28487 Process not Found 28521 Process not Found 7663 Process not Found 28271 Process not Found 28811 Process not Found 28901 Process not Found 28903 Process not Found 29050 Process not Found 24481 Process not Found 11166 Process not Found 28849 Process not Found 30275 Process not Found 6807 Process not Found 2112 grep 394 Process not Found - Writes file to tmp directory 21 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/linpeas_host_checker_1492.err sh File opened for modification /tmp/fileutl.message.ZPX3uZ Process not Found File opened for modification /tmp/fileutl.message.levPsV Process not Found File opened for modification /tmp/fileutl.message.RVAUpJ Process not Found File opened for modification /tmp/fileutl.message.XEZPrB Process not Found File opened for modification /tmp/fileutl.message.lPlQtx Process not Found File opened for modification /tmp/fileutl.message.d7MkqF Process not Found File opened for modification /tmp/fileutl.message.Fbnkwt Process not Found File opened for modification /tmp/fileutl.message.ldBIGh Process not Found File opened for modification /tmp/fileutl.message.xtN9Kd Process not Found File opened for modification /tmp/fileutl.message.vsOuV5 Process not Found File opened for modification /tmp/linpeas_host_checker_1492.json sh File opened for modification /tmp/cf31-probe-1492.py sh File opened for modification /tmp/z3xxvhmd Process not Found File opened for modification /tmp/cf31-check-o786vuvx/sentinel Process not Found File opened for modification /tmp/fileutl.message.XkMizp Process not Found File opened for modification /tmp/fileutl.message.BvfLCl Process not Found File opened for modification /tmp/fileutl.message.f7Q4P9 Process not Found File opened for modification /tmp/fileutl.message.nUAxz3 Process not Found File opened for modification /tmp/fileutl.message.jtrarR Process not Found File opened for modification /tmp/fileutl.message.3TyZpN Process not Found -
pid Process 3038 Process not Found 3042 Process not Found 3045 Process not Found 30156 Process not Found 2821 dpkg 30156 Process not Found 31682 Process not Found 31682 Process not Found 32682 Process not Found 32690 Process not Found 2821 dpkg-query
Processes
-
/tmp/2026-10-02_17f84e657b8ee6fc507453934a026932_glassworm_qnapcrypt/tmp/2026-10-02_17f84e657b8ee6fc507453934a026932_glassworm_qnapcrypt1⤵PID:1487
-
/usr/bin/base64base64 -d2⤵
- Deobfuscate/Decode Files or Information
PID:1491
-
-
/bin/sh/bin/sh2⤵
- Writes file to tmp directory
PID:1492 -
/usr/bin/id/usr/bin/id -u3⤵PID:1496
-
-
/bin/grepgrep -q Darwin3⤵PID:1499
-
-
/bin/unameuname3⤵PID:1498
-
-
/bin/grepgrep -q Darwin3⤵PID:1501
-
-
/usr/bin/uname/usr/bin/uname3⤵PID:1500
-
-
/bin/grepgrep -c processor /proc/cpuinfo3⤵
- Checks CPU configuration
PID:1505
-
-
/usr/bin/trtr -d "\\n"3⤵PID:1504
-
-
/bin/sedsed -E s/o/a/3⤵PID:1507
-
-
/bin/bash/bin/bash -c "printf ' \\e[38;2;26;43;21mâ–„\\e[38;2;58;91;50mâ–„\\e[48;2;116;117;116m\\e[38;2;68;119;56mâ–„\\e[48;2;98;98;98m\\e[38;2;86;143;70mâ–„\\e[48;2;98;98;98m\\e[38;2;100;153;87mâ–„\\e[48;2;63;65;63m\\e[38;2;102;164;86mâ–„\\e[48;2;46;49;44m\\e[38;2;98;168;79mâ–„\\e[48;2;43;45;43m\\e[38;2;91;155;75mâ–„\\e[48;2;61;62;61m\\e[38;2;78;137;63mâ–„\\e[48;2;102;101;102m\\e[38;2;64;112;52mâ–„\\e[0m\\e[38;2;38;67;32mâ–„\\e[38;2;20;35;16mâ–„\\e[38;2;10;20;8mâ–„\\e[38;2;15;21;13mâ–„\\e[0m \\e[38;2;49;80;41mâ–„\\e[38;2;73;133;59mâ–„\\e[48;2;20;21;20m\\e[38;2;91;163;72mâ–„\\e[48;2;14;27;12m\\e[38;2;96;174;76mâ–„\\e[48;2;51;92;41m\\e[38;2;98;177;78mâ–„\\e[48;2;86;155;68m\\e[38;2;98;177;78mâ–„\\e[48;2;96;173;77m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;97;175;76m\\e[38;2;98;177;78mâ–„\\e[48;2;93;168;74m\\e[38;2;98;177;78mâ–„\\e[48;2;99;163;83m\\e[38;2;97;177;77mâ–„\\e[48;2;99;151;86m\\e[38;2;98;177;78mâ–„\\e[48;2;35;57;29m\\e[38;2;98;176;78mâ–„\\e[48;2;19;21;19m\\e[38;2;94;169;75mâ–„\\e[0m\\e[38;2;70;125;56mâ–„\\e[0m \\e[38;2;42;65;36mâ–„\\e[38;2;62;106;52mâ–„\\e[48;2;94;95;94m\\e[38;2;86;152;70mâ–„\\e[48;2;57;72;53m\\e[38;2;96;174;77mâ–„\\e[48;2;57;96;47m\\e[38;2;98;177;78mâ–„\\e[48;2;78;136;62m\\e[38;2;98;177;78mâ–„\\e[48;2;95;167;76m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;77mâ–„\\e[48;2;98;177;78m\\e[38;2;91;165;72mâ–„\\e[48;2;98;177;78m\\e[38;2;76;137;60mâ–„\\e[48;2;98;177;78m\\e[38;2;54;97;42mâ–„\\e[48;2;99;179;79m\\e[38;2;39;71;30mâ–„\\e[48;2;100;181;79m\\e[38;2;35;60;30mâ–„\\e[48;2;101;181;81m\\e[38;2;42;66;37mâ–„\\e[48;2;100;177;80m\\e[38;2;52;73;45mâ–„\\e[48;2;95;175;76m\\e[38;2;47;75;40mâ–„\\e[48;2;94;178;73m\\e[38;2;41;75;33mâ–„\\e[48;2;98;179;78m\\e[38;2;42;73;34mâ–„\\e[48;2;99;180;79m\\e[38;2;40;70;33mâ–„\\e[48;2;99;179;78m\\e[38;2;44;75;36mâ–„\\e[48;2;97;177;77m\\e[38;2;55;93;46mâ–„\\e[48;2;97;176;77m\\e[38;2;65;113;52mâ–„\\e[48;2;98;177;78m\\e[38;2;79;141;63mâ–„\\e[48;2;98;177;78m\\e[38;2;93;166;75mâ–„\\e[48;2;98;177;78m\\e[38;2;99;177;79mâ–„\\e[48;2;98;177;78m\\e[38;2;97;177;78mâ–„\\e[48;2;98;177;78m\\e[38;2;97;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;94;170;75m\\e[38;2;98;177;78mâ–„\\e[48;2;71;128;56m\\e[38;2;98;177;78mâ–„\\e[48;2;34;56;28m\\e[38;2;97;175;77mâ–„\\e[48;2;64;66;64m\\e[38;2;78;140;62mâ–„\\e[0m \\e[48;2;66;112;54m\\e[38;2;98;177;78mâ–„\\e[48;2;80;133;66m\\e[38;2;98;177;78mâ–„\\e[48;2;95;162;76m\\e[38;2;98;177;78mâ–„\\e[48;2;96;171;76m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;98;177;78m\\e[38;2;96;174;76mâ–„\\e[48;2;98;177;78m\\e[38;2;74;130;59mâ–„\\e[48;2;98;176;78m\\e[38;2;32;49;27mâ–„\\e[48;2;95;166;76m\\e[38;2;18;29;15mâ–„\\e[48;2;73;126;59m\\e[38;2;65;113;53mâ–„\\e[48;2;40;62;34m\\e[38;2;107;209;83mâ–„\\e[48;2;23;43;19m\\e[38;2;77;220;42mâ–„\\e[48;2;32;72;22m\\e[38;2;72;218;36mâ–„\\e[48;2;55;155;30m\\e[38;2;73;217;37mâ–„\\e[48;2;71;203;38m\\e[38;2;73;217;37mâ–„\\e[48;2;79;212;46m\\e[38;2;73;218;37mâ–„\\e[48;2;81;216;48m\\e[38;2;73;218;37mâ–„\\e[48;2;82;220;48m\\e[38;2;73;218;37mâ–„\\e[48;2;79;221;44m\\e[38;2;73;218;37mâ–„\\e[48;2;76;219;40m\\e[38;2;73;218;37mâ–„\\e[48;2;76;218;40m\\e[38;2;73;218;37mâ–„\\e[48;2;75;213;41m\\e[38;2;73;218;37mâ–„\\e[48;2;79;203;48m\\e[38;2;73;218;37mâ–„\\e[48;2;76;175;52m\\e[38;2;73;218;37mâ–„\\e[48;2;52;127;33m\\e[38;2;73;218;37mâ–„\\e[48;2;29;75;18m\\e[38;2;73;217;37mâ–„\\e[48;2;19;45;12m\\e[38;2;73;218;36mâ–„\\e[48;2;45;74;38m\\e[38;2;65;196;33mâ–„\\e[48;2;76;127;62m\\e[38;2;44;132;24mâ–„\\e[48;2;90;158;72m\\e[38;2;16;45;10mâ–„\\e[48;2;97;175;77m\\e[38;2;28;50;22mâ–„\\e[48;2;98;177;78m\\e[38;2;80;145;64mâ–„\\e[48;2;98;177;78m\\e[38;2;97;175;77mâ–„\\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78mâ–„\\e[48;2;98;177;78m\\e[38;2;98;177;77mâ–„\\e[48;2;97;173;78m\\e[38;2;98;177;78mâ–„\\e[48;2;69;114;56m\\e[38;2;98;177;78mâ–„\\e[48;2;30;38;28m\\e[38;2;103;179;83mâ–„\\e[0m\\e[38;2;99;149;87mâ–„\\e[0m \\e[48;2;98;177;78m\\e[38;2;98;177;77mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;178;78mâ–„\\e[48;2;98;177;78m\\e[38;2;98;178;78mâ–„\\e[48;2;98;177;78m\\e[38;2;83;150;66mâ–„\\e[48;2;98;177;78m\\e[38;2;44;80;34mâ–„\\e[48;2;99;179;78m\\e[38;2;33;49;28mâ–„\\e[48;2;87;159;69m\\e[38;2;68;97;61mâ–„\\e[48;2;46;84;37m\\e[38;2;87;165;68mâ–„\\e[48;2;25;37;21m\\e[38;2;83;208;52mâ–„\\e[48;2;59;131;42m\\e[38;2;73;219;37mâ–„\\e[48;2;74;199;43m\\e[38;2;74;223;37mâ–„\\e[48;2;72;213;38m\\e[38;2;67;204;35mâ–„\\e[48;2;73;218;37m\\e[38;2;55;171;29mâ–„\\e[48;2;72;218;36m\\e[38;2;59;136;22mâ–„\\e[48;2;72;218;36m\\e[38;2;103;132;15mâ–„\\e[48;2;73;219;37m\\e[38;2;149;133;9mâ–„\\e[48;2;72;220;37m\\e[38;2;168;130;7mâ–„\\e[48;2;73;220;37m\\e[38;2;167;118;5mâ–„\\e[48;2;72;218;37m\\e[38;2;106;78;4mâ–„\\e[48;2;69;210;36m\\e[38;2;93;69;4mâ–„\\e[48;2;66;199;34m\\e[38;2;173;117;4mâ–„\\e[48;2;63;192;32m\\e[38;2;177;119;4mâ–„\\e[48;2;62;186;32m\\e[38;2;173;116;4mâ–„\\e[48;2;61;186;31m\\e[38;2;176;115;4mâ–„\\e[48;2;63;191;32m\\e[38;2;174;115;4mâ–„\\e[48;2;67;202;34m\\e[38;2;170;113;4mâ–„\\e[48;2;70;213;36m\\e[38;2;180;118;3mâ–„\\e[48;2;72;219;37m\\e[38;2;175;117;4mâ–„\\e[48;2;73;220;37m\\e[38;2;154;120;7mâ–„\\e[48;2;73;220;37m\\e[38;2;80;94;11mâ–„\\e[48;2;73;219;37m\\e[38;2;48;93;15mâ–„\\e[48;2;73;218;37m\\e[38;2;41;112;19mâ–„\\e[48;2;72;215;36m\\e[38;2;45;144;25mâ–„\\e[48;2;64;192;32m\\e[38;2;63;191;32mâ–„\\e[48;2;32;99;16m\\e[38;2;73;218;37mâ–„\\e[48;2;21;41;16m\\e[38;2;72;210;38mâ–„\\e[48;2;38;66;30m\\e[38;2;67;177;41mâ–„\\e[48;2;79;141;63m\\e[38;2;53;123;36mâ–„\\e[48;2;98;178;78m\\e[38;2;32;57;25mâ–„\\e[48;2;98;179;77m\\e[38;2;25;46;20mâ–„\\e[48;2;97;177;77m\\e[38;2;56;100;46mâ–„\\e[48;2;98;177;78m\\e[38;2;93;165;75mâ–„\\e[48;2;97;176;77m\\e[38;2;100;181;80mâ–„\\e[48;2;98;177;77m\\e[38;2;97;176;76mâ–„\\e[48;2;97;176;78m\\e[38;2;98;177;78mâ–„\\e[48;2;99;174;79m\\e[38;2;98;177;78mâ–„\\e[0m \\e[48;2;98;178;78m\\e[38;2;46;76;38mâ–„\\e[48;2;100;178;80m\\e[38;2;50;69;45mâ–„\\e[48;2;99;176;80m\\e[38;2;35;46;33mâ–„\\e[48;2;82;148;65m\\e[38;2;7;9;6mâ–„\\e[48;2;64;117;50m\\e[38;2;35;54;30mâ–„\\e[48;2;42;77;34m\\e[38;2;52;107;39mâ–„\\e[48;2;26;46;21m\\e[38;2;80;194;52mâ–„\\e[48;2;34;71;26m\\e[38;2;73;216;38mâ–„\\e[48;2;54;133;35m\\e[38;2;67;192;32mâ–„\\e[48;2;81;199;52m\\e[38;2;81;158;23mâ–„\\e[48;2;80;218;46m\\e[38;2;100;110;11mâ–„\\e[48;2;66;199;33m\\e[38;2;152;98;2mâ–„\\e[48;2;60;157;26m\\e[38;2;220;129;1mâ–„\\e[48;2;80;128;18m\\e[38;2;251;145;0mâ–„\\e[48;2;120;110;9m\\e[38;2;255;147;0mâ–„\\e[48;2;154;106;4m\\e[38;2;255;147;0mâ–„\\e[48;2;181;114;2m\\e[38;2;255;147;0mâ–„\\e[48;2;230;134;0m\\e[38;2;255;147;0mâ–„\\e[48;2;251;144;0m\\e[38;2;255;147;0mâ–„\\e[48;2;254;146;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;163;94;0m\\e[38;2;134;78;0mâ–„\\e[48;2;2;1;0m\\e[38;2;58;33;0mâ–„\\e[48;2;13;7;0m\\e[38;2;133;76;0mâ–„\\e[48;2;64;38;0m\\e[38;2;12;7;0mâ–„\\e[48;2;250;144;0m\\e[38;2;234;135;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;249;146;0m\\e[38;2;255;147;0mâ–„\\e[48;2;239;143;2m\\e[38;2;255;147;0mâ–„\\e[48;2;223;131;1m\\e[38;2;255;147;0mâ–„\\e[48;2;192;120;2m\\e[38;2;255;147;0mâ–„\\e[48;2;130;96;5m\\e[38;2;255;147;0mâ–„\\e[48;2;82;88;9m\\e[38;2;255;148;0mâ–„\\e[48;2;62;104;15m\\e[38;2;247;147;1mâ–„\\e[48;2;49;132;22m\\e[38;2;212;134;3mâ–„\\e[48;2;57;165;32m\\e[38;2;144;95;3mâ–„\\e[48;2;53;117;38m\\e[38;2;74;61;8mâ–„\\e[48;2;50;97;39m\\e[38;2;47;60;21mâ–„\\e[48;2;35;56;29m\\e[38;2;47;81;33mâ–„\\e[48;2;17;22;15m\\e[38;2;20;34;19mâ–„\\e[48;2;31;50;26m\\e[38;2;48;73;42mâ–„\\e[48;2;55;90;47m\\e[38;2;37;56;33mâ–„\\e[48;2;78;132;64m\\e[38;2;21;31;18mâ–„\\e[48;2;95;167;78m\\e[38;2;18;26;16mâ–„\\e[0m \\e[48;2;48;74;43m\\e[38;2;51;78;45mâ–„\\e[48;2;48;74;43m\\e[38;2;50;76;44mâ–„\\e[48;2;46;71;42m\\e[38;2;12;17;11mâ–„\\e[48;2;32;54;28m\\e[38;2;45;93;35mâ–„\\e[48;2;58;112;46m\\e[38;2;26;45;17mâ–„\\e[48;2;55;130;37m\\e[38;2;121;83;5mâ–„\\e[48;2;57;133;27m\\e[38;2;232;138;0mâ–„\\e[48;2;101;96;8m\\e[38;2;253;146;0mâ–„\\e[48;2;200;118;1m\\e[38;2;254;147;0mâ–„\\e[48;2;248;144;0m\\e[38;2;255;147;0mâ–„\\e[48;2;254;147;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;173;100;0m\\e[38;2;210;122;0mâ–„\\e[48;2;172;100;0m\\e[38;2;76;44;0mâ–„\\e[48;2;214;123;0m\\e[38;2;153;88;0mâ–„\\e[48;2;36;21;0m\\e[38;2;162;94;0mâ–„\\e[48;2;201;116;0m\\e[38;2;20;12;0mâ–„\\e[48;2;254;147;0m\\e[38;2;238;137;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;255;147;0mâ–„\\e[48;2;241;143;1m\\e[38;2;255;147;0mâ–„\\e[48;2;213;125;0m\\e[38;2;255;147;0mâ–„\\e[48;2;117;73;3m\\e[38;2;252;147;1mâ–„\\e[48;2;25;36;21m\\e[38;2;94;69;18mâ–„\\e[48;2;50;77;44m\\e[38;2;39;59;33mâ–„\\e[48;2;51;78;45m \\e[48;2;51;78;44m\\e[38;2;51;78;45mâ–„\\e[0m \\e[48;2;51;78;45m\\e[38;2;50;76;44mâ–„\\e[48;2;40;58;34m\\e[38;2;43;36;13mâ–„\\e[48;2;38;37;6m\\e[38;2;240;143;2mâ–„\\e[48;2;149;95;6m\\e[38;2;254;147;0mâ–„\\e[48;2;226;134;1m\\e[38;2;255;147;0mâ–„\\e[48;2;253;146;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;243;140;0mâ–„\\e[48;2;116;67;0m\\e[38;2;90;52;0mâ–„\\e[48;2;237;137;0m\\e[38;2;254;147;0mâ–„\\e[48;2;248;143;0m\\e[38;2;255;147;0mâ–„\\e[48;2;250;144;0m\\e[38;2;255;147;0mâ–„\\e[48;2;45;25;0m\\e[38;2;191;110;0mâ–„\\e[48;2;64;36;0m\\e[38;2;32;18;0mâ–„\\e[48;2;245;141;0m\\e[38;2;152;87;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;255;147;0mâ–„\\e[48;2;230;140;6m\\e[38;2;254;147;0mâ–„\\e[48;2;25;21;7m\\e[38;2;143;86;2mâ–„\\e[48;2;48;74;42m\\e[38;2;39;60;34mâ–„\\e[48;2;51;78;45m \\e[0m \\e[48;2;41;63;37m\\e[38;2;40;47;23mâ–„\\e[48;2;119;70;1m\\e[38;2;230;135;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;180;104;0m\\e[38;2;120;68;0mâ–„\\e[48;2;135;78;0m\\e[38;2;158;91;0mâ–„\\e[48;2;255;147;0m\\e[38;2;250;145;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;146;0mâ–„\\e[48;2;252;145;0m\\e[38;2;209;120;0mâ–„\\e[48;2;54;31;0m\\e[38;2;61;35;0mâ–„\\e[48;2;94;54;0m\\e[38;2;159;91;0mâ–„\\e[48;2;254;146;0m\\e[38;2;244;140;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;240;144;1m\\e[38;2;255;147;0mâ–„\\e[48;2;36;40;18m\\e[38;2;70;49;6mâ–„\\e[48;2;50;78;45m\\e[38;2;45;69;40mâ–„\\e[0m \\e[48;2;65;48;9m\\e[38;2;98;64;6mâ–„\\e[48;2;255;149;0m\\e[38;2;255;147;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;254;147;0m\\e[38;2;254;146;0mâ–„\\e[48;2;225;130;0m\\e[38;2;175;100;0mâ–„\\e[48;2;210;120;0m\\e[38;2;253;146;0mâ–„\\e[48;2;209;121;0m\\e[38;2;254;147;0mâ–„\\e[48;2;86;49;0m\\e[38;2;189;109;0mâ–„\\e[48;2;254;146;0m\\e[38;2;142;81;0mâ–„\\e[48;2;255;147;0m\\e[38;2;102;59;0mâ–„\\e[48;2;199;115;0m\\e[38;2;69;40;0mâ–„\\e[48;2;244;141;0m\\e[38;2;238;138;0mâ–„\\e[48;2;253;146;0m\\e[38;2;184;105;0mâ–„\\e[48;2;200;115;0m\\e[38;2;231;134;0mâ–„\\e[48;2;253;147;0m\\e[38;2;254;146;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;149;98;7m\\e[38;2;215;132;5mâ–„\\e[48;2;35;54;32m\\e[38;2;31;42;22mâ–„\\e[0m \\e[48;2;133;82;3m\\e[38;2;153;89;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;255;146;0mâ–„\\e[48;2;255;147;0m\\e[38;2;255;146;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;148;0mâ–„\\e[48;2;255;147;0m\\e[38;2;248;147;0mâ–„\\e[48;2;254;147;0m\\e[38;2;242;142;0mâ–„\\e[48;2;204;116;0m\\e[38;2;224;131;0mâ–„\\e[48;2;200;115;0m\\e[38;2;205;124;1mâ–„\\e[48;2;199;115;0m\\e[38;2;175;109;2mâ–„\\e[48;2;172;100;0m\\e[38;2;157;102;2mâ–„\\e[48;2;168;97;0m\\e[38;2;172;114;3mâ–„\\e[48;2;206;119;0m\\e[38;2;156;115;5mâ–„\\e[48;2;215;125;0m\\e[38;2;138;111;7mâ–„\\e[48;2;180;105;0m\\e[38;2;121;105;8mâ–„\\e[48;2;233;136;0m\\e[38;2;120;109;8mâ–„\\e[48;2;254;148;0m\\e[38;2;116;111;9mâ–„\\e[48;2;254;148;0m\\e[38;2;112;111;10mâ–„\\e[48;2;255;148;0m\\e[38;2;130;121;10mâ–„\\e[48;2;254;148;0m\\e[38;2;103;105;10mâ–„\\e[48;2;254;148;0m\\e[38;2;99;99;9mâ–„\\e[48;2;254;148;0m\\e[38;2;106;98;8mâ–„\\e[48;2;254;148;0m\\e[38;2;106;96;8mâ–„\\e[48;2;255;148;0m\\e[38;2;118;98;7mâ–„\\e[48;2;255;147;0m\\e[38;2;123;101;7mâ–„\\e[48;2;255;147;0m\\e[38;2;129;99;6mâ–„\\e[48;2;255;147;0m\\e[38;2;141;100;5mâ–„\\e[48;2;255;147;0m\\e[38;2;166;111;4mâ–„\\e[48;2;255;147;0m\\e[38;2;189;122;4mâ–„\\e[48;2;255;147;0m\\e[38;2;217;131;1mâ–„\\e[48;2;255;147;0m\\e[38;2;248;145;0mâ–„\\e[48;2;255;147;0m\\e[38;2;250;148;0mâ–„\\e[48;2;255;147;0m\\e[38;2;254;149;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;249;147;1m\\e[38;2;254;147;0mâ–„\\e[48;2;47;44;15m\\e[38;2;81;54;7mâ–„\\e[0m \\e[48;2;163;95;0m\\e[38;2;176;103;0mâ–„\\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m \\e[48;2;255;147;0m\\e[38;2;254;147;0mâ–„\\e[48;2;255;147;0m\\e[38;2;250;144;0mâ–„\\e[48;2;255;147;0m\\e[38;2;238;146;1mâ–„\\e[48;2;254;147;0m\\e[38;2;170;117;4mâ–„\\e[48;2;252;147;0m\\e[38;2;78;65;5mâ–„\\e[48;2;239;144;1m\\e[38;2;36;71;11mâ–„\\e[48;2;220;136;2m\\e[38;2;41;122;21mâ–„\\e[48;2;193;124;2m\\e[38;2;59;179;31mâ–„\\e[48;2;178;119;4m\\e[38;2;69;210;35mâ–„\\e[48;2;129;104;6m\\e[38;2;73;219;37mâ–„\\e[48;2;67;87;10m\\e[38;2;73;219;37mâ–„\\e[48;2;61;106;15m\\e[38;2;73;218;37mâ–„\\e[48;2;52;126;21m\\e[38;2;73;218;37mâ–„\\e[48;2;52;150;25m\\e[38;2;73;218;37mâ–„\\e[48;2;58;177;30m\\e[38;2;73;218;37mâ–„\\e[48;2;63;194;33m\\e[38;2;73;218;37mâ–„\\e[48;2;66;204;34m\\e[38;2;73;218;37mâ–„\\e[48;2;69;212;36m\\e[38;2;73;218;37mâ–„\\e[48;2;72;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;72;219;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;74;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;219;37m\\e[38;2;73;218;37mâ–„\\e[48;2;72;214;36m\\e[38;2;73;218;37mâ–„\\e[48;2;68;207;35m\\e[38;2;73;218;37mâ–„\\e[48;2;65;197;34m\\e[38;2;73;218;37mâ–„\\e[48;2;61;185;32m\\e[38;2;73;218;37mâ–„\\e[48;2;51;157;27m\\e[38;2;73;218;37mâ–„\\e[48;2;41;125;21m\\e[38;2;73;218;37mâ–„\\e[48;2;40;106;18m\\e[38;2;73;218;37mâ–„\\e[48;2;75;92;10m\\e[38;2;73;218;37mâ–„\\e[48;2;76;85;10m\\e[38;2;73;219;37mâ–„\\e[48;2;112;94;7m\\e[38;2;72;216;36mâ–„\\e[48;2;162;113;5m\\e[38;2;64;194;33mâ–„\\e[48;2;219;131;0m\\e[38;2;50;152;26mâ–„\\e[48;2;231;138;1m\\e[38;2;30;65;14mâ–„\\e[48;2;252;147;0m\\e[38;2;106;71;5mâ–„\\e[48;2;97;61;4m\\e[38;2;30;31;7mâ–„\\e[0m \\e[48;2;186;108;0m\\e[38;2;185;108;0mâ–„\\e[48;2;255;147;0m\\e[38;2;254;148;0mâ–„\\e[48;2;255;147;0m\\e[38;2;247;144;0mâ–„\\e[48;2;255;147;0m\\e[38;2;188;113;1mâ–„\\e[48;2;255;147;0m\\e[38;2;110;100;8mâ–„\\e[48;2;248;147;0m\\e[38;2;72;136;20mâ–„\\e[48;2;206;124;1m\\e[38;2;62;175;29mâ–„\\e[48;2;115;81;4m\\e[38;2;67;204;34mâ–„\\e[48;2;55;92;13m\\e[38;2;72;217;36mâ–„\\e[48;2;60;157;26m\\e[38;2;73;218;37mâ–„\\e[48;2;66;195;32m\\e[38;2;73;218;37mâ–„\\e[48;2;70;212;35m\\e[38;2;73;218;37mâ–„\\e[48;2;72;215;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;210;37m\\e[38;2;71;214;37mâ–„\\e[48;2;58;142;37m\\e[38;2;57;136;37mâ–„\\e[48;2;51;109;39m\\e[38;2;54;109;40mâ–„\\e[48;2;36;76;26m\\e[38;2;38;71;31mâ–„\\e[0m \\e[48;2;73;63;12m\\e[38;2;24;46;20mâ–„\\e[48;2;89;67;7m\\e[38;2;54;120;38mâ–„\\e[48;2;67;119;19m\\e[38;2;66;192;35mâ–„\\e[48;2;61;177;29m\\e[38;2;73;217;37mâ–„\\e[48;2;71;213;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;214;35m\\e[38;2;42;129;21mâ–„\\e[48;2;43;131;22m\\e[38;2;4;10;2mâ–„\\e[48;2;37;111;19m\\e[38;2;4;10;2mâ–„\\e[48;2;60;180;30m\\e[38;2;7;22;3mâ–„\\e[48;2;73;218;37m\\e[38;2;62;187;31mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;72;217;36mâ–„\\e[48;2;69;208;35m\\e[38;2;20;61;10mâ–„\\e[48;2;43;129;22m\\e[38;2;4;11;2mâ–„\\e[48;2;38;116;19m\\e[38;2;3;8;1mâ–„\\e[48;2;64;192;32m\\e[38;2;19;57;10mâ–„\\e[48;2;73;218;37m\\e[38;2;73;219;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;214;36m\\e[38;2;71;213;36mâ–„\\e[48;2;55;130;37m\\e[38;2;55;123;38mâ–„\\e[48;2;54;108;41m\\e[38;2;56;110;44mâ–„\\e[48;2;35;60;30m\\e[38;2;35;57;30mâ–„\\e[0m \\e[48;2;37;68;29m\\e[38;2;38;61;33mâ–„\\e[48;2;58;132;39m\\e[38;2;62;134;45mâ–„\\e[48;2;64;179;36m\\e[38;2;55;129;37mâ–„\\e[48;2;72;217;36m\\e[38;2;71;210;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;27;82;14m\\e[38;2;59;178;30mâ–„\\e[48;2;4;11;3m\\e[38;2;3;9;1mâ–„\\e[48;2;0;0;0m\\e[38;2;8;18;4mâ–„\\e[48;2;1;3;1m\\e[38;2;4;12;2mâ–„\\e[48;2;36;112;19m\\e[38;2;54;163;27mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;70;210;36m\\e[38;2;72;217;36mâ–„\\e[48;2;4;11;1m\\e[38;2;9;28;4mâ–„\\e[48;2;0;0;0m\\e[38;2;6;16;3mâ–„\\e[48;2;1;3;1m\\e[38;2;6;15;3mâ–„\\e[48;2;13;39;6m\\e[38;2;32;94;15mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;70;207;36m\\e[38;2;67;196;36mâ–„\\e[48;2;52;110;38m \\e[48;2;57;101;47m\\e[38;2;56;90;47mâ–„\\e[48;2;36;55;31m\\e[38;2;38;58;33mâ–„\\e[0m \\e[48;2;40;63;35m\\e[38;2;43;67;38mâ–„\\e[48;2;61;117;48m\\e[38;2;45;80;38mâ–„\\e[48;2;54;114;39m\\e[38;2;52;110;38mâ–„\\e[48;2;64;177;36m\\e[38;2;59;150;37mâ–„\\e[48;2;72;217;36m\\e[38;2;72;214;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;61;182;30m\\e[38;2;73;218;37mâ–„\\e[48;2;45;135;22m\\e[38;2;73;218;37mâ–„\\e[48;2;58;174;29m\\e[38;2;73;218;37mâ–„\\e[48;2;72;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;71;212;35m\\e[38;2;72;216;36mâ–„\\e[48;2;34;101;17m\\e[38;2;11;32;5mâ–„\\e[48;2;34;101;17m\\e[38;2;1;2;1mâ–„\\e[48;2;34;98;18m\\e[38;2;1;3;1mâ–„\\e[48;2;35;101;18m\\e[38;2;1;1;1mâ–„\\e[48;2;35;100;17m\\e[38;2;1;3;1mâ–„\\e[48;2;57;170;29m\\e[38;2;56;168;28mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;72;218;36mâ–„\\e[48;2;66;197;33m\\e[38;2;72;217;36mâ–„\\e[48;2;46;139;23m\\e[38;2;73;217;37mâ–„\\e[48;2;54;163;27m\\e[38;2;72;217;37mâ–„\\e[48;2;71;212;36m\\e[38;2;72;217;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;37m\\e[38;2;70;204;36mâ–„\\e[48;2;60;158;37m\\e[38;2;53;122;37mâ–„\\e[48;2;52;103;38m\\e[38;2;52;104;40mâ–„\\e[48;2;33;54;28m\\e[38;2;21;34;18mâ–„\\e[48;2;46;70;41m\\e[38;2;49;76;44mâ–„\\e[0m \\e[48;2;49;76;44m\\e[38;2;51;78;45mâ–„\\e[48;2;32;51;28m\\e[38;2;43;65;37mâ–„\\e[48;2;61;125;45m\\e[38;2;81;124;71mâ–„\\e[48;2;54;124;38m\\e[38;2;53;113;40mâ–„\\e[48;2;68;202;36m\\e[38;2;60;156;37mâ–„\\e[48;2;73;218;37m\\e[38;2;72;215;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;216;37mâ–„\\e[48;2;73;217;37m\\e[38;2;93;205;61mâ–„\\e[48;2;79;213;44m\\e[38;2;121;189;95mâ–„\\e[48;2;85;210;51m\\e[38;2;132;184;108mâ–„\\e[48;2;82;211;47m\\e[38;2;121;191;93mâ–„\\e[48;2;73;217;37m\\e[38;2;85;210;52mâ–„\\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;37;111;20m\\e[38;2;71;214;36mâ–„\\e[48;2;1;2;0m\\e[38;2;44;128;22mâ–„\\e[48;2;2;4;2m\\e[38;2;15;39;8mâ–„\\e[48;2;1;1;1m\\e[38;2;29;82;14mâ–„\\e[48;2;13;37;7m\\e[38;2;68;204;34mâ–„\\e[48;2;70;210;35m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;217;37m\\e[38;2;74;216;38mâ–„\\e[48;2;82;211;47m\\e[38;2;118;191;90mâ–„\\e[48;2;100;200;70m\\e[38;2;132;185;108mâ–„\\e[48;2;103;201;72m\\e[38;2;127;187;101mâ–„\\e[48;2;98;203;67m\\e[38;2;125;189;100mâ–„\\e[48;2;85;209;52m\\e[38;2;116;192;88mâ–„\\e[48;2;73;217;37m\\e[38;2;80;211;44mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;72;217;36m\\e[38;2;68;200;35mâ–„\\e[48;2;63;170;35m\\e[38;2;54;125;36mâ–„\\e[48;2;51;103;38m\\e[38;2;51;99;38mâ–„\\e[48;2;49;101;36m\\e[38;2;22;45;17mâ–„\\e[48;2;30;47;26m\\e[38;2;45;69;39mâ–„\\e[48;2;51;78;45m \\e[0m \\e[48;2;51;78;45m \\e[48;2;49;75;43m\\e[38;2;51;78;45mâ–„\\e[48;2;30;38;27m\\e[38;2;39;59;35mâ–„\\e[48;2;63;123;49m\\e[38;2;71;110;62mâ–„\\e[48;2;54;121;37m\\e[38;2;56;119;40mâ–„\\e[48;2;68;198;37m\\e[38;2;60;158;37mâ–„\\e[48;2;73;218;37m\\e[38;2;71;216;36mâ–„\\e[48;2;73;217;37m\\e[38;2;73;216;38mâ–„\\e[48;2;91;206;58m\\e[38;2;110;196;81mâ–„\\e[48;2;122;191;95m\\e[38;2;126;188;100mâ–„\\e[48;2;128;186;102m\\e[38;2;130;187;104mâ–„\\e[48;2;140;180;116m\\e[38;2;128;187;103mâ–„\\e[48;2;126;188;100m\\e[38;2;106;197;76mâ–„\\e[48;2;96;202;64m\\e[38;2;75;215;39mâ–„\\e[48;2;73;217;37m\\e[38;2;72;218;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;74;220;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;74;217;38m\\e[38;2;73;217;37mâ–„\\e[48;2;114;194;86m\\e[38;2;76;215;40mâ–„\\e[48;2;142;178;121m\\e[38;2;94;205;62mâ–„\\e[48;2;150;176;129m\\e[38;2;109;196;81mâ–„\\e[48;2;142;180;120m\\e[38;2;95;203;63mâ–„\\e[48;2;116;193;88m\\e[38;2;76;214;41mâ–„\\e[48;2;78;213;44m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;67;196;36mâ–„\\e[48;2;71;209;37m\\e[38;2;60;154;36mâ–„\\e[48;2;59;152;36m\\e[38;2;57;138;37mâ–„\\e[48;2;52;110;38m\\e[38;2;56;130;37mâ–„\\e[48;2;51;104;38m\\e[38;2;30;71;21mâ–„\\e[48;2;20;31;17m\\e[38;2;45;69;39mâ–„\\e[48;2;50;78;44m\\e[38;2;51;78;45mâ–„\\e[48;2;51;78;45m \\e[0m \\e[48;2;51;78;45m\\e[38;2;28;43;24mâ–„\\e[48;2;51;78;45m\\e[38;2;43;64;38mâ–„\\e[48;2;51;78;45m\\e[38;2;52;79;46mâ–„\\e[48;2;34;53;30m\\e[38;2;46;71;41mâ–„\\e[48;2;64;124;48m\\e[38;2;49;106;36mâ–„\\e[48;2;53;115;38m\\e[38;2;57;124;40mâ–„\\e[48;2;63;175;36m\\e[38;2;55;126;38mâ–„\\e[48;2;73;217;37m\\e[38;2;66;186;36mâ–„\\e[48;2;89;208;56m\\e[38;2;73;217;37mâ–„\\e[48;2;111;195;82m\\e[38;2;75;215;40mâ–„\\e[48;2;109;197;80m\\e[38;2;74;216;38mâ–„\\e[48;2;85;209;52m\\e[38;2;73;218;36mâ–„\\e[48;2;73;216;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;217;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;37m\\e[38;2;73;218;37mâ–„\\e[48;2;73;217;36m\\e[38;2;73;218;37mâ–„\\e[48;2;73;218;37m\\e[38;2;71;214;36mâ–„\\e[48;2;71;212;36m\\e[38;2;63;172;36mâ–„\\e[48;2;63;174;35m\\e[38;2;57;138;37mâ–„\\e[48;2;58;146;36m\\e[38;2;57;137;38mâ–„\\e[48;2;58;139;37m\\e[38;2;57;138;37mâ–„\\e[48;2;58;138;37m\\e[38;2;54;128;35mâ–„\\e[48;2;50;117;34m\\e[38;2;20;44;14mâ–„\\e[48;2;20;32;17m\\e[38;2;39;61;34mâ–„\\e[48;2;51;77;44m\\e[38;2;45;69;40mâ–„\\e[48;2;51;78;45m\\e[38;2;45;69;40mâ–„\\e[48;2;51;78;45m\\e[38;2;49;75;43mâ–„\\e[0m \\e[48;2;84;151;67m\\e[38;2;98;177;78mâ–„\\e[48;2;43;80;34m\\e[38;2;98;177;78mâ–„\\e[48;2;22;39;19m\\e[38;2;98;178;78mâ–„\\e[48;2;43;67;38m\\e[38;2;81;148;64mâ–„\\e[48;2;40;70;33m\\e[38;2;44;78;36mâ–„\\e[48;2;54;127;36m\\e[38;2;21;47;15mâ–„\\e[48;2;55;120;39m\\e[38;2;54;117;39mâ–„\\e[48;2;56;133;37m\\e[38;2;59;133;40mâ–„\\e[48;2;71;211;36m\\e[38;2;61;164;37mâ–„\\e[48;2;73;217;36m\\e[38;2;71;211;36mâ–„\\e[48;2;73;218;37m\\e[38;2;72;218;36mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;72;217;36mâ–„\\e[48;2;73;218;37m\\e[38;2;67;203;34mâ–„\\e[48;2;68;194;37m\\e[38;2;40;116;21mâ–„\\e[48;2;58;142;36m\\e[38;2;8;21;5mâ–„\\e[48;2;49;120;31m\\e[38;2;6;10;5mâ–„\\e[48;2;25;59;16m\\e[38;2;73;108;65mâ–„\\e[48;2;15;33;11m\\e[38;2;95;157;79mâ–„\\e[48;2;12;25;9m\\e[38;2;97;175;77mâ–„\\e[48;2;21;32;19m\\e[38;2;99;179;79mâ–„\\e[48;2;23;35;19m\\e[38;2;98;178;78mâ–„\\e[48;2;20;34;17m\\e[38;2;98;178;78mâ–„\\e[48;2;13;24;11m\\e[38;2;98;178;78mâ–„\\e[48;2;16;26;14m\\e[38;2;98;177;78mâ–„\\e[0m \\e[48;2;97;176;77m\\e[38;2;58;103;46mâ–„\\e[48;2;98;177;78m\\e[38;2;94;170;75mâ–„\\e[48;2;98;177;78m\\e[38;2;99;179;79mâ–„\\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;97;176;77m\\e[38;2;98;177;78mâ–„\\e[48;2;91;165;72m\\e[38;2;98;177;78mâ–„\\e[48;2;55;100;44m\\e[38;2;98;177;78mâ–„\\e[48;2;15;27;10m\\e[38;2;92;168;73mâ–„\\e[48;2;24;46;18m\\e[38;2;76;138;61mâ–„\\e[48;2;73;154;53m\\e[38;2;54;96;43mâ–„\\e[48;2;74;213;39m\\e[38;2;24;48;18mâ–„\\e[48;2;74;222;37m\\e[38;2;20;55;11mâ–„\\e[48;2;73;217;37m\\e[38;2;31;91;16mâ–„\\e[48;2;73;218;37m\\e[38;2;49;145;24mâ–„\\e[48;2;73;218;37m\\e[38;2;68;201;35mâ–„\\e[48;2;73;218;37m\\e[38;2;73;217;37mâ–„\\e[48;2;73;218;37m\\e[38;2;74;220;37mâ–„\\e[48;2;73;218;37m\\e[38;2;73;219;37mâ–„\\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m \\e[48;2;73;218;37m\\e[38;2;73;220;37mâ–„\\e[48;2;73;218;37m\\e[38;2;72;214;37mâ–„\\e[48;2;73;218;37m\\e[38;2;63;187;32mâ–„\\e[48;2;72;217;36m\\e[38;2;41;120;22mâ–„\\e[48;2;74;222;36m\\e[38;2;21;52;13mâ–„\\e[48;2;67;203;34m\\e[38;2;39;62;34mâ–„\\e[48;2;40;117;21m\\e[38;2;64;103;54mâ–„\\e[48;2;14;43;7m\\e[38;2;72;126;57mâ–„\\e[48;2;4;12;2m\\e[38;2;87;156;69mâ–„\\e[48;2;25;45;21m\\e[38;2;97;174;78mâ–„\\e[48;2;71;124;57m\\e[38;2;99;177;80mâ–„\\e[48;2;97;168;78m\\e[38;2;94;170;75mâ–„\\e[48;2;96;175;77m\\e[38;2;103;177;84mâ–„\\e[48;2;98;176;79m\\e[38;2;109;183;90mâ–„\\e[48;2;100;178;80m\\e[38;2;112;185;94mâ–„\\e[48;2;100;177;80m\\e[38;2;111;184;92mâ–„\\e[48;2;99;177;80m\\e[38;2;107;182;89mâ–„\\e[48;2;98;177;78m\\e[38;2;105;182;85mâ–„\\e[48;2;98;177;78m\\e[38;2;103;180;83mâ–„\\e[48;2;98;177;78m\\e[38;2;99;177;79mâ–„\\e[0m \\e[38;2;54;79;47mâ–€\\e[38;2;72;123;60mâ–€\\e[48;2;97;176;78m\\e[38;2;65;87;60mâ–„\\e[48;2;98;177;78m\\e[38;2;73;130;59mâ–„\\e[48;2;98;177;78m\\e[38;2;91;165;72mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;96;172;77m\\e[38;2;98;177;78mâ–„\\e[48;2;82;147;65m\\e[38;2;98;177;78mâ–„\\e[48;2;66;116;52m\\e[38;2;98;177;78mâ–„\\e[48;2;46;78;38m\\e[38;2;98;177;78mâ–„\\e[48;2;27;51;20m\\e[38;2;98;177;78mâ–„\\e[48;2;28;60;20m\\e[38;2;94;169;74mâ–„\\e[48;2;28;67;19m\\e[38;2;86;155;69mâ–„\\e[48;2;34;96;19m\\e[38;2;69;123;54mâ–„\\e[48;2;42;126;21m\\e[38;2;48;86;39mâ–„\\e[48;2;51;148;27m\\e[38;2;36;64;28mâ–„\\e[48;2;55;164;28m\\e[38;2;26;46;20mâ–„\\e[48;2;60;180;30m\\e[38;2;23;39;18mâ–„\\e[48;2;62;186;31m\\e[38;2;21;40;17mâ–„\\e[48;2;61;181;31m\\e[38;2;19;36;16mâ–„\\e[48;2;67;176;40m\\e[38;2;18;32;14mâ–„\\e[48;2;63;173;35m\\e[38;2;23;36;19mâ–„\\e[48;2;56;168;29m\\e[38;2;27;42;23mâ–„\\e[48;2;53;160;27m\\e[38;2;29;45;24mâ–„\\e[48;2;44;133;22m\\e[38;2;30;53;25mâ–„\\e[48;2;34;102;17m\\e[38;2;52;89;43mâ–„\\e[48;2;20;60;10m\\e[38;2;88;148;71mâ–„\\e[48;2;24;47;19m\\e[38;2;97;171;78mâ–„\\e[48;2;34;62;27m\\e[38;2;98;177;78mâ–„\\e[48;2;55;99;44m\\e[38;2;98;177;78mâ–„\\e[48;2;80;144;64m\\e[38;2;98;177;78mâ–„\\e[48;2;99;176;79m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;99;177;79mâ–„\\e[48;2;99;177;79m\\e[38;2;96;172;76mâ–„\\e[48;2;99;175;79m\\e[38;2;85;151;68mâ–„\\e[48;2;95;169;76m\\e[38;2;72;121;60mâ–„\\e[48;2;109;180;92m\\e[38;2;37;57;32mâ–„\\e[48;2;100;159;85m\\e[38;2;38;41;36mâ–„\\e[48;2;72;107;62m\\e[38;2;74;74;74mâ–„\\e[0m\\e[38;2;44;65;38mâ–€\\e[38;2;31;48;27mâ–€\\e[38;2;31;48;26mâ–€\\e[38;2;31;52;25mâ–€\\e[38;2;41;71;34mâ–€\\e[38;2;59;97;50mâ–€\\e[0m \\e[38;2;95;106;94mâ–€\\e[38;2;81;137;65mâ–€\\e[38;2;91;166;73mâ–€\\e[48;2;95;174;76m\\e[38;2;61;73;59mâ–„\\e[48;2;98;177;78m\\e[38;2;33;66;26mâ–„\\e[48;2;98;177;78m\\e[38;2;81;143;65mâ–„\\e[48;2;98;177;78m\\e[38;2;102;182;81mâ–„\\e[48;2;98;177;78m\\e[38;2;97;176;77mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;99;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;178;78m\\e[38;2;98;177;78mâ–„\\e[48;2;98;179;78m\\e[38;2;98;177;78mâ–„\\e[48;2;97;177;77m\\e[38;2;98;177;78mâ–„\\e[48;2;98;177;78m \\e[48;2;98;177;78m \\e[48;2;98;177;78m\\e[38;2;98;176;78mâ–„\\e[48;2;98;177;78m\\e[38;2;99;179;78mâ–„\\e[48;2;98;177;78m\\e[38;2;93;169;74mâ–„\\e[48;2;98;177;78m\\e[38;2;56;106;44mâ–„\\e[48;2;96;174;77m\\e[38;2;16;31;13mâ–„\\e[48;2;68;126;54m\\e[38;2;58;58;58mâ–„\\e[0m\\e[38;2;28;50;23mâ–€\\e[38;2;20;22;20mâ–€\\e[0m \\e[38;2;41;52;39mâ–€\\e[38;2;39;76;30mâ–€\\e[38;2;73;136;57mâ–€\\e[48;2;90;162;72m\\e[38;2;96;100;95mâ–„\\e[48;2;99;175;79m\\e[38;2;60;69;58mâ–„\\e[48;2;98;177;78m\\e[38;2;46;59;43mâ–„\\e[48;2;98;177;78m\\e[38;2;32;51;27mâ–„\\e[48;2;98;178;78m\\e[38;2;28;50;23mâ–„\\e[48;2;98;178;78m\\e[38;2;28;55;22mâ–„\\e[48;2;98;178;78m\\e[38;2;35;64;28mâ–„\\e[48;2;98;177;78m\\e[38;2;41;75;33mâ–„\\e[48;2;98;177;78m\\e[38;2;50;89;41mâ–„\\e[48;2;98;177;77m\\e[38;2;54;89;45mâ–„\\e[48;2;98;177;77m\\e[38;2;53;89;44mâ–„\\e[48;2;98;177;78m\\e[38;2;49;86;39mâ–„\\e[48;2;98;177;78m\\e[38;2;45;83;36mâ–„\\e[48;2;98;177;78m\\e[38;2;40;74;32mâ–„\\e[48;2;98;177;78m\\e[38;2;35;64;28mâ–„\\e[48;2;98;178;78m\\e[38;2;39;60;33mâ–„\\e[48;2;90;163;71m\\e[38;2;55;61;53mâ–„\\e[0m\\e[38;2;53;97;41mâ–€\\e[38;2;24;44;19mâ–€\\e[38;2;36;41;35mâ–€\\e[0m '"3⤵PID:1509
-
-
/bin/sedsed "s,LEGEND,[1;4m&[0m,"3⤵PID:1512
-
-
/bin/sedsed "s,RED/YELLOW,[1;31;103m&[0m,"3⤵PID:1514
-
-
/bin/sedsed "s,RED,[1;31m&[0m,"3⤵PID:1516
-
-
/bin/sedsed "s,LightCyan,[1;96m&[0m,"3⤵PID:1518
-
-
/bin/sedsed "s,Blue,[1;34m&[0m,"3⤵PID:1520
-
-
/bin/sedsed "s,Green,[1;32m&[0m,"3⤵PID:1522
-
-
/bin/sedsed "s,LightMagenta,[1;95m&[0m,"3⤵PID:1524
-
-
/bin/sedsed "s,YOU ARE ALREADY ROOT!!!,[1;31;103m&[0m,"3⤵PID:1526
-
-
/bin/sleepsleep 33⤵PID:1527
-
-
/usr/bin/wcwc -c3⤵PID:1535
-
-
/usr/bin/seqseq 1 313⤵PID:1536
-
-
/usr/bin/seqseq 1 183⤵PID:1537
-
-
/usr/bin/seqseq 1 313⤵PID:1538
-
-
/usr/bin/seqseq 1 313⤵PID:1539
-
-
/usr/bin/seqseq 1 313⤵PID:1540
-
-
/usr/bin/seqseq 1 183⤵PID:1541
-
-
/bin/catcat /proc/version3⤵PID:1543
-
-
/usr/bin/idid3⤵PID:1545
-
-
/bin/hostnamehostname3⤵PID:1546
-
-
/usr/bin/whoamiwhoami3⤵PID:1555
-
-
/usr/bin/groupsgroups root3⤵PID:1557
-
-
/usr/bin/cutcut -d : -f23⤵PID:1558
-
-
/bin/sedsed -e "s/ -or\$//"3⤵PID:1561
-
-
/usr/bin/sortsort3⤵PID:1564
-
-
/usr/bin/findfind / -maxdepth 3 -type d "!" -path "/proc/*" "(" "(" -user root ")" -or "(" -perm "-o=w" ")" -or "(" -perm "-g=w" -and "(" -group root ")" ")" ")"3⤵PID:1563
-
-
/usr/bin/trtr "\\n" "|"3⤵PID:1567
-
-
/bin/grepgrep /shm3⤵PID:1570
-
-
/usr/bin/headhead -n13⤵PID:1571
-
-
/bin/sedsed -E "s,/|/bin|/boot|/boot/grub|/boot/grub/fonts|/boot/grub/i386-pc|/boot/grub/locale|/.cache|/dev|/dev/block|/dev/bsg|/dev/bus|/dev/bus/usb|/dev/char|/dev/disk|/dev/disk/by-id|/dev/disk/by-partuuid|/dev/disk/by-path|/dev/disk/by-uuid|/dev/dri|/dev/dri/by-path|/dev/hugepages|/dev/input|/dev/input/by-id|/dev/input/by-path|/dev/mapper|/dev/mqueue|/dev/net|/dev/pts|/dev/shm|/dev/snd|/dev/vfio|/etc|/etc/acpi|/etc/acpi/events|/etc/alternatives|/etc/apm|/etc/apm/event.d|/etc/apm/resume.d|/etc/apm/scripts.d|/etc/apm/suspend.d|/etc/apparmor|/etc/apparmor.d|/etc/apparmor.d/abstractions|/etc/apparmor.d/cache|/etc/apparmor.d/disable|/etc/apparmor.d/force-complain|/etc/apparmor.d/local|/etc/apparmor.d/tunables|/etc/apparmor/init|/etc/apport|/etc/apport/blacklist.d|/etc/apport/native-origins.d|/etc/apt|/etc/apt/apt.conf.d|/etc/apt/auth.conf.d|/etc/apt/keyrings|/etc/apt/preferences.d|/etc/apt/sources.list.d|/etc/apt/trusted.gpg.d|/etc/audisp|/etc/audisp/plugins.d|/etc/audit|/etc/audit/rules.d|/etc/avahi|/etc/avahi/services|/etc/bash_completion.d|/etc/binfmt.d|/etc/bluetooth|/etc/brltty|/etc/brltty/Attributes|/etc/brltty/Contraction|/etc/brltty/Input|/etc/brltty/Keyboard|/etc/brltty/Text|/etc/ca-certificates|/etc/ca-certificates/update.d|/etc/calendar|/etc/chatscripts|/etc/console-setup|/etc/cracklib|/etc/cron.d|/etc/cron.daily|/etc/cron.hourly|/etc/cron.monthly|/etc/cron.weekly|/etc/cups|/etc/cupshelpers|/etc/cups/interfaces|/etc/cups/ppd|/etc/cups/ssl|/etc/dbus-1|/etc/dbus-1/session.d|/etc/dbus-1/system.d|/etc/dconf|/etc/dconf/db|/etc/dconf/profile|/etc/default|/etc/depmod.d|/etc/dhcp|/etc/dhcp/dhclient-enter-hooks.d|/etc/dhcp/dhclient-exit-hooks.d|/etc/dictionaries-common|/etc/dpkg|/etc/dpkg/dpkg.cfg.d|/etc/dpkg/origins|/etc/emacs|/etc/emacs/site-start.d|/etc/firefox|/etc/firefox/policies|/etc/firefox/pref|/etc/fonts|/etc/fonts/conf.avail|/etc/fonts/conf.d|/etc/fwupd|/etc/fwupd/remotes.d|/etc/gdb|/etc/gdm3|/etc/gdm3/Init|/etc/gdm3/PostLogin|/etc/gdm3/PostSession|/etc/gdm3/PreSession|/etc/gdm3/Prime|/etc/gdm3/PrimeOff|/etc/geoclue|/etc/ghostscript|/etc/ghostscript/cidfmap.d|/etc/ghostscript/fontmap.d|/etc/glvnd|/etc/glvnd/egl_vendor.d|/etc/gnome|/etc/groff|/etc/grub.d|/etc/gss|/etc/gss/mech.d|/etc/gtk-2.0|/etc/gtk-3.0|/etc/hp|/etc/ifplugd|/etc/ifplugd/action.d|/etc/ImageMagick-6|/etc/init|/etc/init.d|/etc/initramfs-tools|/etc/initramfs-tools/conf.d|/etc/initramfs-tools/hooks|/etc/initramfs-tools/scripts|/etc/insserv.conf.d|/etc/iproute2|/etc/iproute2/rt_protos.d|/etc/iproute2/rt_tables.d|/etc/kernel|/etc/kernel/install.d|/etc/kernel/postinst.d|/etc/kernel/postrm.d|/etc/kernel/preinst.d|/etc/ldap|/etc/ld.so.conf.d|/etc/libblockdev|/etc/libblockdev/conf.d|/etc/libnl-3|/etc/libpaper.d|/etc/libreoffice|/etc/logcheck|/etc/logcheck/ignore.d.paranoid|/etc/logcheck/ignore.d.server|/etc/logrotate.d|/etc/modprobe.d|/etc/modules-load.d|/etc/netplan|/etc/network|/etc/networkd-dispatcher|/etc/networkd-dispatcher/dormant.d|/etc/networkd-dispatcher/no-carrier.d|/etc/networkd-dispatcher/off.d|/etc/networkd-dispatcher/routable.d|/etc/network/if-down.d|/etc/network/if-post-down.d|/etc/network/if-pre-up.d|/etc/network/if-up.d|/etc/network/interfaces.d|/etc/NetworkManager|/etc/NetworkManager/conf.d|/etc/NetworkManager/dispatcher.d|/etc/NetworkManager/dnsmasq.d|/etc/NetworkManager/dnsmasq-shared.d|/etc/NetworkManager/system-connections|/etc/newt|/etc/opt|/etc/PackageKit|/etc/pam.d|/etc/pcmcia|/etc/perl|/etc/perl/CPAN|/etc/perl/Net|/etc/perl/XML|/etc/pki|/etc/pki/fwupd|/etc/pki/fwupd-metadata|/etc/pm|/etc/pm/sleep.d|/etc/polkit-1|/etc/polkit-1/localauthority|/etc/polkit-1/localauthority.conf.d|/etc/polkit-1/nullbackend.conf.d|/etc/ppp|/etc/ppp/ip-down.d|/etc/ppp/ip-up.d|/etc/ppp/ipv6-down.d|/etc/ppp/ipv6-up.d|/etc/ppp/peers|/etc/ppp/resolv|/etc/profile.d|/etc/pulse|/etc/python|/etc/python2.7|/etc/python3|/etc/python3.6|/etc/rc0.d|/etc/rc1.d|/etc/rc2.d|/etc/rc3.d|/etc/rc4.d|/etc/rc5.d|/etc/rc6.d|/etc/rcS.d|/etc/resolvconf|/etc/resolvconf/update-libc.d|/etc/rsyslog.d|/etc/sane.d|/etc/sane.d/dll.d|/etc/security|/etc/security/limits.d|/etc/security/namespace.d|/etc/selinux|/etc/selinux/default|/etc/sensors.d|/etc/skel|/etc/speech-dispatcher|/etc/speech-dispatcher/clients|/etc/speech-dispatcher/modules|/etc/ssh|/etc/ssl|/etc/ssl/certs|/etc/ssl/private|/etc/sudoers.d|/etc/sysctl.d|/etc/systemd|/etc/systemd/network|/etc/systemd/system|/etc/systemd/user|/etc/terminfo|/etc/thunderbird|/etc/tmpfiles.d|/etc/ubuntu-advantage|/etc/udev|/etc/udev/hwdb.d|/etc/udev/rules.d|/etc/udisks2|/etc/ufw|/etc/ufw/applications.d|/etc/update-manager|/etc/update-manager/release-upgrades.d|/etc/update-motd.d|/etc/update-notifier|/etc/UPower|/etc/usb_modeswitch.d|/etc/vim|/etc/wpa_supplicant|/etc/X11|/etc/X11/app-defaults|/etc/X11/cursors|/etc/X11/fonts|/etc/X11/xinit|/etc/X11/xkb|/etc/X11/Xreset.d|/etc/X11/Xresources|/etc/X11/Xsession.d|/etc/X11/xsm|/etc/xdg|/etc/xdg/autostart|/etc/xdg/menus|/etc/xdg/systemd|/home|/lib|/lib64|/lib/apparmor|/lib/brltty|/lib/console-setup|/lib/crda|/lib/crda/pubkeys|/lib/firmware|/lib/firmware/3com|/lib/firmware/acenic|/lib/firmware/adaptec|/lib/firmware/advansys|/lib/firmware/amdgpu|/lib/firmware/amd-ucode|/lib/firmware/ar3k|/lib/firmware/asihpi|/lib/firmware/ath10k|/lib/firmware/ath6k|/lib/firmware/ath9k_htc|/lib/firmware/atmel|/lib/firmware/atusb|/lib/firmware/av7110|/lib/firmware/bnx2|/lib/firmware/bnx2x|/lib/firmware/brcm|/lib/firmware/carl9170fw|/lib/firmware/cavium|/lib/firmware/cis|/lib/firmware/cpia2|/lib/firmware/cxgb3|/lib/firmware/cxgb4|/lib/firmware/dsp56k|/lib/firmware/e100|/lib/firmware/ea|/lib/firmware/edgeport|/lib/firmware/emi26|/lib/firmware/emi62|/lib/firmware/ene-ub6250|/lib/firmware/ess|/lib/firmware/go7007|/lib/firmware/hp|/lib/firmware/i915|/lib/firmware/imx|/lib/firmware/intel|/lib/firmware/intel-ucode|/lib/firmware/isci|/lib/firmware/kaweth|/lib/firmware/keyspan|/lib/firmware/keyspan_pda|/lib/firmware/korg|/lib/firmware/libertas|/lib/firmware/liquidio|/lib/firmware/matrox|/lib/firmware/mediatek|/lib/firmware/mellanox|/lib/firmware/moxa|/lib/firmware/mrvl|/lib/firmware/mwl8k|/lib/firmware/mwlwifi|/lib/firmware/netronome|/lib/firmware/nvidia|/lib/firmware/ositech|/lib/firmware/qca|/lib/firmware/qcom|/lib/firmware/qed|/lib/firmware/qlogic|/lib/firmware/r128|/lib/firmware/radeon|/lib/firmware/rockchip|/lib/firmware/rsi|/lib/firmware/RTL8192E|/lib/firmware/rtl_bt|/lib/firmware/rtl_nic|/lib/firmware/rtlwifi|/lib/firmware/rtw88|/lib/firmware/sb16|/lib/firmware/slicoss|/lib/firmware/sun|/lib/firmware/tehuti|/lib/firmware/ti-connectivity|/lib/firmware/tigon|/lib/firmware/ti-keystone|/lib/firmware/ttusb-budget|/lib/firmware/ueagle-atm|/lib/firmware/usbdux|/lib/firmware/vicam|/lib/firmware/vxge|/lib/firmware/yam|/lib/firmware/yamaha|/lib/firmware/zd1211|/lib/hdparm|/lib/ifupdown|/lib/init|/lib/linux-sound-base|/lib/lsb|/lib/lsb/init-functions.d|/lib/modprobe.d|/lib/modules|/lib/modules/4.15.0-213-generic|/lib/netplan|/lib/recovery-mode|/lib/recovery-mode/options|/lib/systemd|/lib/systemd/network|/lib/systemd/system|/lib/systemd/system-generators|/lib/systemd/system-preset|/lib/systemd/system-shutdown|/lib/systemd/system-sleep|/lib/terminfo|/lib/terminfo/a|/lib/terminfo/c|/lib/terminfo/d|/lib/terminfo/E|/lib/terminfo/h|/lib/terminfo/l|/lib/terminfo/m|/lib/terminfo/p|/lib/terminfo/r|/lib/terminfo/s|/lib/terminfo/v|/lib/terminfo/w|/lib/terminfo/x|/lib/udev|/lib/udev/hwdb.d|/lib/udev/rules.d|/lib/ufw|/lib/x86_64-linux-gnu|/lib/x86_64-linux-gnu/security|/lost+found|/media|/media/floppy0|/mnt|/opt|/proc|/root|/root/.cache|/root/.cache/dconf|/root/.cache/doc|/root/.cache/evolution|/root/.cache/gnome-software|/root/.cache/ibus|/root/.cache/ibus-table|/root/.cache/libgweather|/root/.cache/mozilla|/root/.cache/wallpaper|/root/.config|/root/.config/dconf|/root/.config/evolution|/root/.config/gnome-session|/root/.config/goa-1.0|/root/.config/gtk-3.0|/root/.config/ibus|/root/.config/mozilla|/root/.config/nautilus|/root/.config/systemd|/root/.dbus|/root/.dbus/session-bus|/root/Desktop|/root/Documents|/root/Downloads|/root/.gnupg|/root/.gnupg/private-keys-v1.d|/root/.gvfs|/root/.local|/root/.local/share|/root/Music|/root/Pictures|/root/Public|/root/Templates|/root/Videos|/run|/run/boltd|/run/boltd/power|/run/console-setup|/run/cups|/run/dbus|/run/gdm3|/run/initramfs|/run/lock|/run/lock/subsys|/run/log|/run/mount|/run/network|/run/NetworkManager|/run/NetworkManager/conf.d|/run/NetworkManager/devices|/run/NetworkManager/system-connections|/run/pppconfig|/run/sendsigs.omit.d|/run/spice-vdagentd|/run/sshd|/run/sudo|/run/sudo/ts|/run/systemd|/run/systemd/ask-password|/run/systemd/generator|/run/systemd/generator.late|/run/systemd/inaccessible|/run/systemd/inhibit|/run/systemd/initctl|/run/systemd/journal|/run/systemd/machines|/run/systemd/seats|/run/systemd/sessions|/run/systemd/shutdown|/run/systemd/system|/run/systemd/transient|/run/systemd/unit-root|/run/systemd/units|/run/systemd/users|/run/tmpfiles.d|/run/udev|/run/udev/data|/run/udev/links|/run/udev/static_node-tags|/run/udev/tags|/run/udev/watch|/run/udisks2|/run/user|/run/user/0|/run/uuidd|/sbin|/snap|/srv|/sys|/sys/block|/sys/bus|/sys/bus/acpi|/sys/bus/clockevents|/sys/bus/clocksource|/sys/bus/container|/sys/bus/cpu|/sys/bus/edac|/sys/bus/event_source|/sys/bus/gpio|/sys/bus/hid|/sys/bus/i2c|/sys/bus/isa|/sys/bus/machinecheck|/sys/bus/mdio_bus|/sys/bus/memory|/sys/bus/mipi-dsi|/sys/bus/mmc|/sys/bus/nd|/sys/bus/node|/sys/bus/nvmem|/sys/bus/parport|/sys/bus/pci|/sys/bus/pci-epf|/sys/bus/pci_express|/sys/bus/platform|/sys/bus/pnp|/sys/bus/rapidio|/sys/bus/scsi|/sys/bus/sdio|/sys/bus/serial|/sys/bus/serio|/sys/bus/spi|/sys/bus/usb|/sys/bus/virtio|/sys/bus/vme|/sys/bus/workqueue|/sys/bus/xen|/sys/bus/xen-backend|/sys/class|/sys/class/ata_device|/sys/class/ata_link|/sys/class/ata_port|/sys/class/backlight|/sys/class/bdi|/sys/class/block|/sys/class/bsg|/sys/class/devcoredump|/sys/class/devfreq|/sys/class/devfreq-event|/sys/class/dma|/sys/class/dmi|/sys/class/drm|/sys/class/drm_dp_aux_dev|/sys/class/extcon|/sys/class/firmware|/sys/class/gpio|/sys/class/graphics|/sys/class/hidraw|/sys/class/hmm_device|/sys/class/hwmon|/sys/class/i2c-adapter|/sys/class/i2c-dev|/sys/class/input|/sys/class/iommu|/sys/class/leds|/sys/class/mdio_bus|/sys/class/mem|/sys/class/misc|/sys/class/mmc_host|/sys/class/nd|/sys/class/net|/sys/class/pci_bus|/sys/class/pci_epc|/sys/class/phy|/sys/class/powercap|/sys/class/power_supply|/sys/class/ppdev|/sys/class/ppp|/sys/class/printer|/sys/class/pwm|/sys/class/rapidio_port|/sys/class/regulator|/sys/class/rfkill|/sys/class/rtc|/sys/class/scsi_device|/sys/class/scsi_disk|/sys/class/scsi_generic|/sys/class/scsi_host|/sys/class/spi_master|/sys/class/spi_slave|/sys/class/thermal|/sys/class/tpm|/sys/class/tpmrm|/sys/class/tty|/sys/class/vc|/sys/class/virtio-ports|/sys/class/vtconsole|/sys/class/watchdog|/sys/dev|/sys/dev/block|/sys/dev/char|/sys/devices|/sys/devices/breakpoint|/sys/devices/cpu|/sys/devices/isa|/sys/devices/LNXSYSTM:00|/sys/devices/msr|/sys/devices/parport0|/sys/devices/pci0000:00|/sys/devices/platform|/sys/devices/pnp0|/sys/devices/software|/sys/devices/system|/sys/devices/tracepoint|/sys/devices/virtual|/sys/firmware|/sys/firmware/acpi|/sys/firmware/dmi|/sys/firmware/memmap|/sys/fs|/sys/fs/bpf|/sys/fs/cgroup|/sys/fs/ecryptfs|/sys/fs/ext4|/sys/fs/fuse|/sys/fs/pstore|/sys/hypervisor|/sys/kernel|/sys/kernel/boot_params|/sys/kernel/cgroup|/sys/kernel/config|/sys/kernel/debug|/sys/kernel/iommu_groups|/sys/kernel/irq|/sys/kernel/livepatch|/sys/kernel/mm|/sys/kernel/security|/sys/kernel/slab|/sys/kernel/tracing|/sys/module|/sys/module/8139cp|/sys/module/8139too|/sys/module/8250|/sys/module/acpi|/sys/module/acpi_cpufreq|/sys/module/acpiphp|/sys/module/aesni_intel|/sys/module/aes_x86_64|/sys/module/ahci|/sys/module/apparmor|/sys/module/ata_generic|/sys/module/ata_piix|/sys/module/autofs4|/sys/module/battery|/sys/module/binfmt_misc|/sys/module/block|/sys/module/button|/sys/module/configfs|/sys/module/cpufreq|/sys/module/cpuidle|/sys/module/crc32_pclmul|/sys/module/crct10dif_pclmul|/sys/module/cryptd|/sys/module/cryptomgr|/sys/module/crypto_simd|/sys/module/debug_core|/sys/module/dm_mod|/sys/module/dns_resolver|/sys/module/drm|/sys/module/drm_kms_helper|/sys/module/dynamic_debug|/sys/module/edac_core|/sys/module/edd|/sys/module/efivars|/sys/module/ehci_hcd|/sys/module/elants_i2c|/sys/module/ext4|/sys/module/fb|/sys/module/fb_sys_fops|/sys/module/firmware_class|/sys/module/floppy|/sys/module/fscrypto|/sys/module/fuse|/sys/module/ghash_clmulni_intel|/sys/module/glue_helper|/sys/module/gpiolib_acpi|/sys/module/hid|/sys/module/hid_generic|/sys/module/i2c_piix4|/sys/module/i8042|/sys/module/ima|/sys/module/input_leds|/sys/module/intel_idle|/sys/module/ip_tables|/sys/module/ipv6|/sys/module/joydev|/sys/module/kdb|/sys/module/kernel|/sys/module/keyboard|/sys/module/kgdb_nmi|/sys/module/kgdboc|/sys/module/libahci|/sys/module/libata|/sys/module/loop|/sys/module/lp|/sys/module/mac_hid|/sys/module/md_mod|/sys/module/mii|/sys/module/module|/sys/module/mousedev|/sys/module/netpoll|/sys/module/nfnetlink|/sys/module/nf_tables|/sys/module/nf_tables_inet|/sys/module/nf_tables_ipv4|/sys/module/nf_tables_ipv6|/sys/module/parport|/sys/module/parport_pc|/sys/module/pata_acpi|/sys/module/pata_sis|/sys/module/pcbc|/sys/module/pcc_cpufreq|/sys/module/pcie_aspm|/sys/module/pciehp|/sys/module/pci_hotplug|/sys/module/ppdev|/sys/module/ppp_generic|/sys/module/printk|/sys/module/processor|/sys/module/psmouse|/sys/module/pstore|/sys/module/random|/sys/module/rcupdate|/sys/module/rcutree|/sys/module/rfkill|/sys/module/rng_core|/sys/module/sch_fq_codel|/sys/module/scsi_mod|/sys/module/serio_raw|/sys/module/sg|/sys/module/spurious|/sys/module/srcutree|/sys/module/sr_mod|/sys/module/stahp|/sys/module/suspend|/sys/module/syscopyarea|/sys/module/sysfillrect|/sys/module/sysimgblt|/sys/module/sysrq|/sys/module/tcp_cubic|/sys/module/thermal|/sys/module/tpm|/sys/module/tpm_crb|/sys/module/tpm_tis|/sys/module/tpm_tis_core|/sys/module/ttm|/sys/module/uhci_hcd|/sys/module/uinput|/sys/module/usbcore|/sys/module/usbhid|/sys/module/virtio_balloon|/sys/module/virtio_blk|/sys/module/virtio_gpu|/sys/module/virtio_mmio|/sys/module/virtio_pci|/sys/module/vt|/sys/module/watchdog|/sys/module/workqueue|/sys/module/xen|/sys/module/xen_acpi_processor|/sys/module/xen_blkfront|/sys/module/xen_netfront|/sys/module/xhci_hcd|/sys/module/x_tables|/sys/module/xz_dec|/sys/module/zswap|/sys/power|/tmp|/tmp/.font-unix|/tmp/.ICE-unix|/tmp/netplan_hhxorfho|/tmp/snap-private-tmp|/tmp/ssh-e1FSCn0S0Q3J|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-bolt.service-2heAjY|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-bolt.service-2heAjY/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-colord.service-R9zTU7|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-colord.service-R9zTU7/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-ModemManager.service-SBCgQa|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-ModemManager.service-SBCgQa/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-resolved.service-hNg3wl|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-resolved.service-hNg3wl/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-timedated.service-Nz3rUA|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-timedated.service-Nz3rUA/tmp|/tmp/.Test-unix|/tmp/.X11-unix|/tmp/.XIM-unix|/usr|/usr/bin|/usr/games|/usr/include|/usr/include/arpa|/usr/include/asm-generic|/usr/include/c++|/usr/include/drm|/usr/include/linux|/usr/include/misc|/usr/include/mtd|/usr/include/net|/usr/include/netash|/usr/include/netatalk|/usr/include/netax25|/usr/include/neteconet|/usr/include/netinet|/usr/include/netipx|/usr/include/netiucv|/usr/include/netpacket|/usr/include/netrom|/usr/include/netrose|/usr/include/nfs|/usr/include/node|/usr/include/openssl|/usr/include/protocols|/usr/include/python3.6m|/usr/include/rdma|/usr/include/reglib|/usr/include/rpc|/usr/include/rpcsvc|/usr/include/scsi|/usr/include/sound|/usr/include/video|/usr/include/X11|/usr/include/x86_64-linux-gnu|/usr/include/xen|/usr/include/xorg|/usr/lib|/usr/lib/accountsservice|/usr/lib/apg|/usr/lib/apt|/usr/lib/aspell|/usr/lib/at-spi2-core|/usr/lib/avahi|/usr/lib/bfd-plugins|/usr/lib/binfmt.d|/usr/lib/bluetooth|/usr/lib/colord|/usr/lib/compat-ld|/usr/lib/cups|/usr/lib/dbus-1.0|/usr/lib/dconf|/usr/lib/debug|/usr/lib/deja-dup|/usr/lib/dpkg|/usr/lib/eject|/usr/lib/emacsen-common|/usr/lib/environment.d|/usr/lib/evince|/usr/lib/evolution|/usr/lib/evolution-data-server|/usr/libexec|/usr/lib/file|/usr/lib/firefox|/usr/lib/firefox-addons|/usr/lib/fwupd|/usr/lib/gcc|/usr/lib/gcr|/usr/lib/gdm3|/usr/lib/geoclue-2.0|/usr/lib/gettext|/usr/lib/ghostscript|/usr/lib/girepository-1.0|/usr/lib/gjs|/usr/lib/glib-networking|/usr/lib/gnome-control-center|/usr/lib/gnome-disk-utility|/usr/lib/gnome-initial-setup|/usr/lib/gnome-online-accounts|/usr/lib/gnome-session|/usr/lib/gnome-settings-daemon|/usr/lib/gnome-settings-daemon-3.0|/usr/lib/gnome-shell|/usr/lib/gnome-terminal|/usr/lib/gnupg|/usr/lib/gnupg2|/usr/lib/gold-ld|/usr/lib/groff|/usr/lib/grub|/usr/lib/grub-legacy|/usr/lib/gvfs|/usr/lib/ibus|/usr/lib/initramfs-tools|/usr/lib/ispell|/usr/lib/kernel|/usr/lib/klibc|/usr/lib/language-selector|/usr/lib/libmbim|/usr/lib/libqmi|/usr/lib/libreoffice|/usr/lib/linux|/usr/lib/linux-boot-probes|/usr/lib/locale|/usr/lib/lp_solve|/usr/lib/man-db|/usr/lib/memtest86+|/usr/lib/mime|/usr/lib/modules-load.d|/usr/lib/mozilla|/usr/lib/mutter|/usr/lib/networkd-dispatcher|/usr/lib/NetworkManager|/usr/lib/node_modules|/usr/lib/notification-daemon|/usr/lib/nvidia|/usr/lib/openssh|/usr/lib/os-prober|/usr/lib/os-probes|/usr/lib/packagekit|/usr/lib/pcmciautils|/usr/lib/pkgconfig|/usr/lib/pm-utils|/usr/lib/policykit-1|/usr/lib/pppd|/usr/lib/pulse-11.1|/usr/lib/python2.7|/usr/lib/python3|/usr/lib/python3.6|/usr/lib/python3.7|/usr/lib/python3.8|/usr/lib/rhythmbox|/usr/lib/rsyslog|/usr/lib/rtkit|/usr/lib/sasl2|/usr/lib/selinux|/usr/lib/shotwell|/usr/lib/snapd|/usr/lib/software-properties|/usr/lib/speech-dispatcher-modules|/usr/lib/ssl|/usr/lib/sudo|/usr/lib/sysctl.d|/usr/lib/syslinux|/usr/lib/SYSLINUX|/usr/lib/syslinux-legacy|/usr/lib/systemd|/usr/lib/system-service|/usr/lib/sysusers.d|/usr/lib/tar|/usr/lib/tasksel|/usr/lib/tc|/usr/lib/thunderbird|/usr/lib/thunderbird-addons|/usr/lib/tmpfiles.d|/usr/lib/ubiquity|/usr/lib/ubuntu-advantage|/usr/lib/ubuntu-release-upgrader|/usr/lib/udisks2|/usr/lib/unity-settings-daemon-1.0|/usr/lib/update-notifier|/usr/lib/upower|/usr/lib/valgrind|/usr/lib/vino|/usr/lib/X11|/usr/lib/x86_64-linux-gnu|/usr/lib/xorg|/usr/lib/xserver-xorg-video-intel|/usr/lib/zeitgeist|/usr/local|/usr/local/bin|/usr/local/etc|/usr/local/games|/usr/local/include|/usr/local/lib|/usr/local/sbin|/usr/local/share|/usr/local/src|/usr/sbin|/usr/share|/usr/share/aclocal|/usr/share/acpi-support|/usr/share/adduser|/usr/share/adium|/usr/share/aisleriot|/usr/share/alsa|/usr/share/alsa-base|/usr/share/appdata|/usr/share/app-info|/usr/share/app-install|/usr/share/application-registry|/usr/share/applications|/usr/share/apport|/usr/share/apps|/usr/share/apturl|/usr/share/aspell|/usr/share/avahi|/usr/share/awk|/usr/share/backgrounds|/usr/share/base-files|/usr/share/base-passwd|/usr/share/bash-completion|/usr/share/binfmts|/usr/share/branding|/usr/share/brltty|/usr/share/bug|/usr/share/build-essential|/usr/share/ca-certificates|/usr/share/calendar|/usr/share/cmake|/usr/share/cogl|/usr/share/color|/usr/share/colord|/usr/share/command-not-found|/usr/share/common-licenses|/usr/share/consolefonts|/usr/share/console-setup|/usr/share/consoletrans|/usr/share/cups|/usr/share/dbus-1|/usr/share/dconf|/usr/share/debconf|/usr/share/debhelper|/usr/share/debianutils|/usr/share/defaults|/usr/share/desktop-directories|/usr/share/dict|/usr/share/dictionaries-common|/usr/share/distro-info|/usr/share/djvu|/usr/share/dns|/usr/share/dnsmasq-base|/usr/share/doc|/usr/share/doc-base|/usr/share/dpkg|/usr/share/drirc.d|/usr/share/emacs|/usr/share/enchant|/usr/share/eog|/usr/share/evince|/usr/share/evolution-data-server|/usr/share/example-content|/usr/share/file|/usr/share/file-roller|/usr/share/fish|/usr/share/fontconfig|/usr/share/fonts|/usr/share/fonts-droid-fallback|/usr/share/fonts-sil-padauk|/usr/share/foo2qpdl|/usr/share/foo2zjs|/usr/share/fwupd|/usr/share/gcc-8|/usr/share/GConf|/usr/share/gdb|/usr/share/gdm|/usr/share/gedit|/usr/share/GeoIP|/usr/share/gettext|/usr/share/gettext-0.19.8|/usr/share/ghostscript|/usr/share/glib-2.0|/usr/share/glvnd|/usr/share/gnome|/usr/share/gnome-background-properties|/usr/share/gnome-bluetooth|/usr/share/gnome-control-center|/usr/share/gnome-mahjongg|/usr/share/gnome-mines|/usr/share/gnome-session|/usr/share/gnome-settings-daemon|/usr/share/gnome-shell|/usr/share/gnome-software|/usr/share/gnome-sudoku|/usr/share/gnome-todo|/usr/share/gnome-video-effects|/usr/share/gnupg|/usr/share/goa-1.0|/usr/share/grilo-plugins|/usr/share/groff|/usr/share/grub|/usr/share/grub-gfxpayload-lists|/usr/share/gst-plugins-base|/usr/share/gstreamer-1.0|/usr/share/gtk-doc|/usr/share/gtk-engines|/usr/share/gtksourceview-3.0|/usr/share/guile|/usr/share/gutenprint|/usr/share/gvfs|/usr/share/hal|/usr/share/help|/usr/share/help-langpack|/usr/share/hplip|/usr/share/hunspell|/usr/share/hyphen|/usr/share/i18n|/usr/share/ibus|/usr/share/ibus-table|/usr/share/icons|/usr/share/ImageMagick-6|/usr/share/im-config|/usr/share/indicators|/usr/share/info|/usr/share/initramfs-tools|/usr/share/installation-report|/usr/share/intltool-debian|/usr/share/iptables|/usr/share/iso-codes|/usr/share/java|/usr/share/kde4|/usr/share/keyrings|/usr/share/language-selector|/usr/share/language-support|/usr/share/language-tools|/usr/share/libaudio2|/usr/share/libc-bin|/usr/share/libdrm|/usr/share/libexttextcat|/usr/share/libgnomekbd|/usr/share/libgphoto2|/usr/share/libgweather|/usr/share/liblangtag|/usr/share/liblouis|/usr/share/liblouisutdml|/usr/share/libparse-debianchangelog-perl|/usr/share/libreoffice|/usr/share/librevenge|/usr/share/libsensors4|/usr/share/libthai|/usr/share/libwacom|/usr/share/lightdm|/usr/share/lintian|/usr/share/linux-sound-base|/usr/share/locale|/usr/share/locale-langpack|/usr/share/locales|/usr/share/m2300w|/usr/share/man|/usr/share/man-db|/usr/share/maven-repo|/usr/share/media-player-info|/usr/share/menu|/usr/share/metainfo|/usr/share/mime|/usr/share/mime-info|/usr/share/mimelnk|/usr/share/misc|/usr/share/mobile-broadband-provider-info|/usr/share/mousetweaks|/usr/share/mozilla|/usr/share/mythes|/usr/share/nano|/usr/share/nautilus-share|/usr/share/netpbm|/usr/share/netplan|/usr/share/numpy3|/usr/share/openssh|/usr/share/orca|/usr/share/os-prober|/usr/share/p11-kit|/usr/share/package-data-downloads|/usr/share/PackageKit|/usr/share/pam|/usr/share/pam-configs|/usr/share/perl|/usr/share/perl5|/usr/share/perl-openssl-defaults|/usr/share/pixmaps|/usr/share/pkgconfig|/usr/share/plymouth|/usr/share/pnm2ppa|/usr/share/polkit-1|/usr/share/poppler|/usr/share/popularity-contest|/usr/share/ppd|/usr/share/ppp|/usr/share/publicsuffix|/usr/share/pulseaudio|/usr/share/pyshared|/usr/share/python|/usr/share/python3|/usr/share/python-apt|/usr/share/readline|/usr/share/remmina|/usr/share/rhythmbox|/usr/share/rsyslog|/usr/share/seahorse|/usr/share/secureboot|/usr/share/selinux|/usr/share/selinux-basics|/usr/share/sensible-utils|/usr/share/session-migration|/usr/share/simple-scan|/usr/share/snmp|/usr/share/software-properties|/usr/share/sounds|/usr/share/speech-dispatcher|/usr/share/ssl-cert|/usr/share/system-config-printer|/usr/share/systemd|/usr/share/systemtap|/usr/share/tabset|/usr/share/tasksel|/usr/share/terminfo|/usr/share/themes|/usr/share/thumbnailers|/usr/share/totem|/usr/share/transmission|/usr/share/ubuntu|/usr/share/ubuntu-drivers-common|/usr/share/ubuntu-release-upgrader|/usr/share/ubuntu-wayland|/usr/share/ufw|/usr/share/unattended-upgrades|/usr/share/unity|/usr/share/update-manager|/usr/share/update-notifier|/usr/share/upstart|/usr/share/usb-creator|/usr/share/usb_modeswitch|/usr/share/vim|/usr/share/wayland-sessions|/usr/share/X11|/usr/share/xdg-desktop-portal|/usr/share/xml|/usr/share/xsessions|/usr/share/yelp|/usr/share/yelp-xsl|/usr/share/zeitgeist|/usr/share/zenity|/usr/share/zoneinfo|/usr/share/zsh|/usr/src|/usr/src/linux-headers-4.15.0-213|/usr/src/linux-headers-4.15.0-213-generic|/var|/var/backups|/var/cache|/var/cache/apparmor|/var/cache/app-info|/var/cache/apt|/var/cache/cracklib|/var/cache/cups|/var/cache/debconf|/var/cache/dictionaries-common|/var/cache/fontconfig|/var/cache/gdm|/var/cache/ldconfig|/var/cache/PackageKit|/var/cache/snapd|/var/crash|/var/lib|/var/lib/AccountsService|/var/lib/acpi-support|/var/lib/alsa|/var/lib/app-info|/var/lib/apport|/var/lib/apt|/var/lib/aspell|/var/lib/bluetooth|/var/lib/boltd|/var/lib/command-not-found|/var/lib/dbus|/var/lib/dhcp|/var/lib/dictionaries-common|/var/lib/dpkg|/var/lib/emacsen-common|/var/lib/fwupd|/var/lib/ghostscript|/var/lib/grub|/var/lib/hp|/var/lib/initramfs-tools|/var/lib/ispell|/var/lib/libreoffice|/var/lib/libxml-sax-perl|/var/lib/locales|/var/lib/logrotate|/var/lib/man-db|/var/lib/misc|/var/lib/mlocate|/var/lib/NetworkManager|/var/lib/os-prober|/var/lib/PackageKit|/var/lib/pam|/var/lib/plymouth|/var/lib/polkit-1|/var/lib/private|/var/lib/python|/var/lib/selinux|/var/lib/sepolgen|/var/lib/snapd|/var/lib/snmp|/var/lib/sudo|/var/lib/systemd|/var/lib/ubuntu-advantage|/var/lib/ubuntu-drivers-common|/var/lib/ubuntu-release-upgrader|/var/lib/ucf|/var/lib/udisks2|/var/lib/unattended-upgrades|/var/lib/update-manager|/var/lib/update-notifier|/var/lib/upower|/var/lib/ureadahead|/var/lib/usb_modeswitch|/var/lib/usbutils|/var/lib/vim|/var/lib/whoopsie|/var/lib/xfonts|/var/lib/xkb|/var/local|/var/log|/var/log/apt|/var/log/audit|/var/log/cups|/var/log/dist-upgrade|/var/log/gdm3|/var/log/hp|/var/log/installer|/var/log/journal|/var/log/unattended-upgrades|/var/mail|/var/metrics|/var/opt|/var/snap|/var/spool|/var/spool/anacron|/var/spool/cron|/var/spool/cups|/var/spool/libreoffice|/var/tmp|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-bolt.service-FvoqZw|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-colord.service-1NtnQI|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-ModemManager.service-3JYR1A|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-resolved.service-tUVFEK|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-timedated.service-Z37Ywf|[a-zA-Z]+[a-zA-Z0-9]* +\\*|\\./|\\.:|:\\.,[1;31;103m&[0m,g"3⤵
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
PID:1573
-
-
/usr/bin/trtr "\\n" " "3⤵PID:1579
-
-
/bin/grepgrep -Ev "^/root|^/home|^/Users|^/var/www"3⤵PID:1578
-
-
/usr/bin/cutcut -d : -f 63⤵PID:1577
-
-
/bin/grepgrep "sh\$"3⤵PID:1576
-
-
/bin/catcat /etc/passwd3⤵PID:1575
-
-
/bin/grepgrep -q /home/root3⤵PID:1581
-
-
/bin/grepgrep -qE "^/root|^/home|^/Users|^/var/www"3⤵PID:1583
-
-
/usr/bin/trtr " " "|"3⤵PID:1587
-
-
/bin/sedsed "s/ *\$//g"3⤵PID:1586
-
-
/bin/grepgrep -q procs_crons_timers_srvcs_sockets3⤵PID:1589
-
-
/usr/bin/sortsort3⤵PID:1593
-
-
/usr/bin/findfind /applications -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1592
-
-
/usr/bin/sortsort3⤵PID:1597
-
-
/usr/bin/findfind /bin -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1596
-
-
/usr/bin/sortsort3⤵PID:1601
-
-
/usr/bin/findfind /.cache -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1600
-
-
/usr/bin/sortsort3⤵PID:1605
-
-
/usr/bin/findfind /cdrom -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1604
-
-
/usr/bin/sortsort3⤵PID:1609
-
-
/usr/bin/findfind /etc -type d -name system-local.d -o -name gcloud -o -name legacy_credentials -o -name doctl -o -name varnish -o -name dirsrv -o -name system.d -o -name .vnc -o -name k0s -o -name origin -o -name logstash -o -name couchdb -o -name keyrings -o -name postfix -o -name apt.conf.d -o -name .cloudflared -o -name .gemini -o -name etcd -o -name kubelet -o -name k3s -o -name .password-store -o -name roundcube -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name bind -o -name .irssi -o -name .docker -o -name containerd -o -name .codex -o -name crio -o -name .claude -o -name kubernetes -o -name .svn -o -name filezilla -o -name sites-enabled -o -name ldap -o -name concourse-auth -o -name ipa -o -name wpa_supplicant -o -name system-connections -o -name neo4j -o -name "*jenkins" -o -name session.d -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name pam.d -o -name rke2 -o -name zabbix -o -name kube-proxy -o -name cacti -o -name gh -o -name "Google Cloud Directory Sync" -o -name environments -o -name net.d -o -name nginx -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1608
-
-
/usr/bin/sortsort3⤵PID:1613
-
-
/usr/bin/findfind /home/ /Users/ /root/ /var/www -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1612
-
-
/usr/bin/sortsort3⤵PID:1617
-
-
/usr/bin/findfind /media -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1616
-
-
/usr/bin/sortsort3⤵PID:1621
-
-
/usr/bin/findfind /mnt -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1620
-
-
/usr/bin/sortsort3⤵PID:1625
-
-
/usr/bin/findfind /opt -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1624
-
-
/usr/bin/sortsort3⤵PID:1629
-
-
/usr/bin/findfind /private -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1628
-
-
/usr/bin/sortsort3⤵PID:1633
-
-
/usr/bin/findfind /run -type d -name kubernetes.io3⤵PID:1632
-
-
/usr/bin/sortsort3⤵PID:1637
-
-
/usr/bin/findfind /sbin -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1636
-
-
/usr/bin/sortsort3⤵PID:1641
-
-
/usr/bin/findfind /snap -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1640
-
-
/usr/bin/sortsort3⤵PID:1645
-
-
/usr/bin/findfind /srv -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1644
-
-
/usr/bin/sortsort3⤵PID:1649
-
-
/usr/bin/findfind /tmp -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name .irssi -o -name .docker -o -name .codex -o -name .svn -o -name .claude -o -name filezilla -o -name sites-enabled -o -name ldap -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1648
-
-
/usr/bin/sortsort3⤵PID:1653
-
-
/usr/bin/findfind /usr -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name couchdb -o -name postfix -o -name logstash -o -name apt.conf.d -o -name keyrings -o -name .cloudflared -o -name .gemini -o -name roundcube -o -name .password-store -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name bind -o -name .irssi -o -name .docker -o -name services -o -name .codex -o -name .claude -o -name .svn -o -name filezilla -o -name sites-enabled -o -name ldap -o -name system-services -o -name nginx -o -name ipa -o -name concourse-auth -o -name neo4j -o -name "*jenkins" -o -name session.d -o -name concourse-keys -o -name "seeddms*" -o -name ErrorRecords -o -name zabbix -o -name cacti -o -name gh -o -name environments -o -name "Google Cloud Directory Sync" -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1652
-
-
/usr/bin/sortsort3⤵PID:1657
-
-
/usr/bin/findfind /var -type d -name legacy_credentials -o -name gcloud -o -name doctl -o -name varnish -o -name dirsrv -o -name .vnc -o -name k0s -o -name origin -o -name logstash -o -name couchdb -o -name keyrings -o -name postfix -o -name apt.conf.d -o -name .cloudflared -o -name .gemini -o -name etcd -o -name kubelet -o -name k3s -o -name .password-store -o -name roundcube -o -name .cursor -o -name ".kube*" -o -name sentry -o -name mysql -o -name bind -o -name .irssi -o -name .docker -o -name containerd -o -name .codex -o -name crio -o -name .claude -o -name kubernetes -o -name kubernetes.io -o -name .svn -o -name filezilla -o -name sites-enabled -o -name ldap -o -name concourse-auth -o -name ipa -o -name neo4j -o -name "*jenkins" -o -name concourse-keys -o -name microk8s -o -name "seeddms*" -o -name ErrorRecords -o -name rke2 -o -name zabbix -o -name kube-proxy -o -name cacti -o -name gh -o -name "Google Cloud Directory Sync" -o -name environments -o -name net.d -o -name nginx -o -name .bluemix -o -name "Google Password Sync"3⤵PID:1656
-
-
/usr/bin/sortsort3⤵PID:1661
-
-
/usr/bin/findfind /concourse-auth -type d -name concourse-auth3⤵PID:1660
-
-
/usr/bin/sortsort3⤵PID:1665
-
-
/usr/bin/findfind /concourse-keys -type d -name concourse-keys3⤵PID:1664
-
-
/usr/bin/sortsort3⤵PID:1669
-
-
/usr/bin/findfind /applications -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1668
-
-
/usr/bin/sortsort3⤵PID:1673
-
-
/usr/bin/findfind /bin -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1672
-
-
/usr/bin/sortsort3⤵PID:1677
-
-
/usr/bin/findfind /.cache -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
PID:1676
-
-
/usr/bin/sortsort3⤵PID:1681
-
-
/usr/bin/findfind /cdrom -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1680
-
-
/usr/bin/sortsort3⤵PID:1685
-
-
/usr/bin/findfind /etc -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name exports -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*knockd*" -o -name "*.kdbx" -o -name "*kubeconfig*" -o -name index.dat -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1684
-
-
/usr/bin/sortsort3⤵PID:1689
-
-
/usr/bin/findfind /home/ /Users/ /root/ /var/www -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name "ssh*config" -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1688
-
-
/usr/bin/sortsort3⤵PID:1693
-
-
/usr/bin/findfind /lib -name "log4j-core*.jar" -o -name rocketchat.service -o -name "*.socket" -o -name "*.service" -o -name "*.timer"3⤵PID:1692
-
-
/usr/bin/sortsort3⤵PID:1697
-
-
/usr/bin/findfind /lib32 -name "*.service" -o -name "log4j-core*.jar" -o -name "*.socket" -o -name "*.timer"3⤵PID:1696
-
-
/usr/bin/sortsort3⤵PID:1701
-
-
/usr/bin/findfind /lib64 -name "*.service" -o -name "log4j-core*.jar" -o -name "*.socket" -o -name "*.timer"3⤵PID:1700
-
-
/usr/bin/sortsort3⤵PID:1705
-
-
/usr/bin/findfind /media -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1704
-
-
/usr/bin/sortsort3⤵PID:1709
-
-
/usr/bin/findfind /mnt -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "sess_*" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1708
-
-
/usr/bin/sortsort3⤵PID:1713
-
-
/usr/bin/findfind /opt -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1712
-
-
/usr/bin/sortsort3⤵PID:1717
-
-
/usr/bin/findfind /private -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "sess_*" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1716
-
-
/usr/bin/sortsort3⤵PID:1721
-
-
/usr/bin/findfind /run -name "agent.*" -o -name "*.socket" -o -name "*.service" -o -name "*.timer" -o -name ssh-agent.sock3⤵PID:1720
-
-
/usr/bin/sortsort3⤵PID:1725
-
-
/usr/bin/findfind /sbin -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1724
-
-
/usr/bin/sortsort3⤵PID:1729
-
-
/usr/bin/findfind /snap -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵
- Abuse Elevation Control Mechanism: Sudo and Sudo Caching
PID:1728
-
-
/usr/bin/sortsort3⤵PID:1733
-
-
/usr/bin/findfind /srv -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1732
-
-
/usr/bin/sortsort3⤵PID:1737
-
-
/usr/bin/findfind /sys -name "*.service" -o -name "*.socket" -o -name "*.timer"3⤵
- Reads AppArmor ptrace settings
- Reads hardware information
- Reads network interface configuration
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1736
-
-
/usr/bin/sortsort3⤵PID:1741
-
-
/usr/bin/findfind /system -name "*.service" -o -name "*.socket" -o -name "*.timer"3⤵PID:1740
-
-
/usr/bin/sortsort3⤵PID:1745
-
-
/usr/bin/findfind /systemd -name "*.service" -o -name rocketchat.service -o -name "*.socket" -o -name "*.timer"3⤵PID:1744
-
-
/usr/bin/sortsort3⤵PID:1749
-
-
/usr/bin/findfind /tmp -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name "agent.*" -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "sess_*" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name ssh-agent.sock -o -name secrets.ldb3⤵PID:1748
-
-
/usr/bin/sortsort3⤵PID:1753
-
-
/usr/bin/findfind /usr -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name "ssh*config" -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1752
-
-
/usr/bin/sortsort3⤵PID:1757
-
-
/usr/bin/findfind /var -name gvm-tools.conf -o -name "KeePass.enforced*" -o -name glusterfs.ca -o -name hudson.util.Secret -o -name "*.keyring" -o -name firebase-tools.json -o -name .gitconfig -o -name .git-credentials -o -name atlantis.db -o -name vsftpd.conf -o -name wcx_ftp.ini -o -name mysqld.cnf -o -name software.sav -o -name setupinfo.bak -o -name "*.key" -o -name crontab-ui.service -o -name bitcoin.conf -o -name ConsoleHost_history.txt -o -name smb.conf -o -name unattend.txt -o -name .pgpass -o -name msal_http_cache.bin -o -name airflow.cfg -o -name .vault-token -o -name "*vnc*.xml" -o -name .Xauthority -o -name service_principal_entries.bin -o -name .flyrc -o -name "*.ovpn" -o -name pubring.kbx -o -name .google_authenticator -o -name server.xml -o -name "web*.config" -o -name .rhosts -o -name .bashrc -o -name unattended.xml -o -name default.sav -o -name protecteduserkey.bin -o -name kcpassword -o -name accessTokens.json -o -name secret.asc -o -name storage.json -o -name https-xampp.conf -o -name .boto -o -name "elasticsearch.y*ml" -o -name mariadb.cnf -o -name ipsec.secrets -o -name .wgetrc -o -name my.cnf -o -name "*.cer" -o -name secrets.yml -o -name credentials.xml -o -name drives.xml -o -name .mylogin.cnf -o -name autologin -o -name vault-ssh-helper.hcl -o -name credentials.tfrc.json -o -name secring.gpg -o -name plum.sqlite -o -name setupinfo -o -name containerd.sock -o -name gitlab.rm -o -name Dockerfile -o -name "*.pem" -o -name mosquitto.conf -o -name "*.gnupg" -o -name .git -o -name "private-keys-v1.d/*.key" -o -name passwd.ibd -o -name .lesshst -o -name frakti.sock -o -name "*.pgp" -o -name .secrets.mkey -o -name "*.maintenance*" -o -name "id_dsa*" -o -name Ntds.dit -o -name .profile -o -name bootstrap-kubelet.conf -o -name FreeSSHDservice.ini -o -name docker.socket -o -name hostapd.conf -o -name snmpd.conf -o -name zabbix_server.conf -o -name software -o -name NetSetup.log -o -name krb5.conf -o -name bash.exe -o -name sslkeylog.log -o -name apt.conf -o -name pg_hba.conf -o -name sip.conf -o -name sentry.conf.py -o -name passbolt.php -o -name tomcat-users.xml -o -name RDCMan.settings -o -name supervisord.conf -o -name pgsql.conf -o -name hosts.equiv -o -name unattend.inf -o -name influxdb.conf -o -name AppEvent.Evt -o -name "mongod*.conf" -o -name autounattend.xml -o -name "*.asc" -o -name fastcgi_params -o -name .erlang.cookie -o -name "*password*" -o -name "*.der" -o -name "*.csr" -o -name kadm5.acl -o -name fat.config -o -name "*.timer" -o -name "*.gpg" -o -name zabbix_agentd.conf -o -name rsyncd.conf -o -name backups -o -name config.php -o -name "*credential*" -o -name "*.p12" -o -name service_principal_entries.json -o -name wp-config.php -o -name ftp.ini -o -name admin.conf -o -name authorized_hosts -o -name groups.xml -o -name ntuser.dat -o -name scclient.exe -o -name api_key -o -name known_hosts -o -name https.conf -o -name pagefile.sys -o -name kubelet.conf -o -name filezilla.xml -o -name AzureRMContext.json -o -name legacy_credentials.db -o -name pgadmin4.db -o -name rpcd -o -name credentials.db -o -name "*.keytab" -o -name msal_token_cache.bin -o -name postgresql.conf -o -name "*.tfstate" -o -name "*config*.php" -o -name FreePBX.conf -o -name dockershim.sock -o -name jetty-realm.properties -o -name clouds.config -o -name iis6.log -o -name printers.xml -o -name "krb5cc_*" -o -name "*.vmdk" -o -name environment -o -name passwd -o -name "log4j-core*.jar" -o -name crontab.db -o -name snyk.config.json -o -name autologin.conf -o -name .recently-used.xbel -o -name pwd.ibd -o -name db.php -o -name .msmtprc -o -name debian.cnf -o -name aliases -o -name backup -o -name Elastix.conf -o -name .credentials.json -o -name settings.php -o -name "*.sqlite3" -o -name "sess_*" -o -name "*.service" -o -name glusterfs.key -o -name sitemanager.xml -o -name security.sav -o -name "*.pcapng" -o -name crio.sock -o -name 000-default.conf -o -name psk.txt -o -name master.key -o -name .claude.json -o -name system.sav -o -name "creds*" -o -name snyk.json -o -name gitlab.yml -o -name "*vnc*.c*nf*" -o -name "*.pub" -o -name "*.vhdx" -o -name .plan -o -name storage.php -o -name scheduledtasks.xml -o -name "id_rsa*" -o -name nginx.conf -o -name .mcp.json -o -name redis.conf -o -name "*.vhd" -o -name php.ini -o -name state.vscdb -o -name "KeePass.config*" -o -name "*.viminfo" -o -name sites.ini -o -name racoon.conf -o -name trustdb.gpg -o -name anaconda-ks.cfg -o -name httpd.conf -o -name "*.pfx" -o -name "*.kdbx" -o -name index.dat -o -name "*kubeconfig*" -o -name "*.socket" -o -name cesi.conf -o -name ipsec.conf -o -name wsl.exe -o -name "*.tf" -o -name grafana.ini -o -name "*.swp" -o -name database.php -o -name rktlet.sock -o -name "*.crt" -o -name adc.json -o -name .k5login -o -name sssd.conf -o -name "*vnc*.ini" -o -name rocketchat.service -o -name glusterfs.pem -o -name appcmd.exe -o -name sysprep.xml -o -name "*.rdg" -o -name datasources.xml -o -name "*.sqlite" -o -name state.vscdb.backup -o -name .sudo_as_admin_successful -o -name .github -o -name "*.ftpconfig" -o -name "*vnc*.txt" -o -name "pgadmin*.db" -o -name ftp.config -o -name winscp.ini -o -name TokenCache.dat -o -name "kibana.y*ml" -o -name recentservers.xml -o -name ws_ftp.ini -o -name ddclient.conf -o -name webserver_config.py -o -name "*.db" -o -name config.xml -o -name gpg-agent.conf -o -name ffftp.ini -o -name .pypirc -o -name azureProfile.json -o -name "*.jks" -o -name .roadtools_auth -o -name "*.pcap" -o -name docker-compose.yml -o -name "*_history*" -o -name SAM -o -name sysprep.inf -o -name "*.keystore" -o -name access_tokens.db -o -name amportal.conf -o -name error.log -o -name cloud.cfg -o -name ".env*" -o -name rsyncd.secrets -o -name authorized_keys -o -name unattend.xml -o -name my.ini -o -name .htpasswd -o -name SecEvent.Evt -o -name docker.sock -o -name "password*.ibd" -o -name keys.log -o -name access.log -o -name .ldaprc -o -name access_tokens.json -o -name KeePass.ini -o -name msal_token_cache.json -o -name SYSTEM -o -name "*.psk" -o -name secrets.ldb3⤵PID:1756
-
-
/usr/bin/sortsort3⤵PID:1761
-
-
/usr/bin/findfind /concourse-auth -name "*.service" -o -name "*.socket" -o -name "*.timer"3⤵PID:1760
-
-
/usr/bin/sortsort3⤵PID:1765
-
-
/usr/bin/findfind /concourse-keys -name "*.service" -o -name "*.socket" -o -name "*.timer"3⤵PID:1764
-
-
/bin/grepgrep -q procs_crons_timers_srvcs_sockets3⤵PID:1767
-
-
/usr/bin/headhead -n 703⤵PID:1774
-
-
/usr/bin/sortsort3⤵PID:1772
-
-
/usr/bin/uniquniq3⤵PID:1773
-
-
/bin/grepgrep -E ".*\\.service\$"3⤵PID:1771
-
-
/bin/grepgrep -E "^/sys|^/private|^/bin|^/concourse-auth|^/opt|^/lib64|^/cdrom|^/.cache|^/var|^/mnt|^/system|^/systemd|^/tmp|^/home/|/Users/|/root/|/var/www|^/etc|^/sbin|^/lib|^/srv|^/concourse-keys|^/lib32|^/snap|^/media|^/usr|^/run|^/applications"3⤵PID:1770
-
-
/usr/bin/headhead -n 703⤵PID:1781
-
-
/usr/bin/uniquniq3⤵PID:1780
-
-
/usr/bin/sortsort3⤵PID:1779
-
-
/bin/grepgrep -E ".*\\.timer\$"3⤵PID:1778
-
-
/bin/grepgrep -E "^/sys|^/private|^/bin|^/concourse-auth|^/opt|^/lib64|^/cdrom|^/.cache|^/var|^/mnt|^/system|^/systemd|^/tmp|^/home/|/Users/|/root/|/var/www|^/etc|^/sbin|^/lib|^/srv|^/concourse-keys|^/lib32|^/snap|^/media|^/usr|^/run|^/applications"3⤵PID:1777
-
-
/usr/bin/headhead -n 703⤵PID:1788
-
-
/usr/bin/uniquniq3⤵PID:1787
-
-
/usr/bin/sortsort3⤵PID:1786
-
-
/bin/grepgrep -E ".*\\.socket\$"3⤵PID:1785
-
-
/bin/grepgrep -E "^/sys|^/private|^/bin|^/concourse-auth|^/opt|^/lib64|^/cdrom|^/.cache|^/var|^/mnt|^/system|^/systemd|^/tmp|^/home/|/Users/|/root/|/var/www|^/etc|^/sbin|^/lib|^/srv|^/concourse-keys|^/lib32|^/snap|^/media|^/usr|^/run|^/applications"3⤵PID:1784
-
-
/usr/bin/headhead -n 703⤵PID:1795
-
-
/usr/bin/uniquniq3⤵PID:1794
-
-
/usr/bin/sortsort3⤵PID:1793
-
-
/bin/grepgrep -E "system\\.d\$|system-local\\.d\$|session\\.d\$|system-services\$|services\$"3⤵PID:1792
-
-
/bin/grepgrep -E "^/etc|^/usr"3⤵PID:1791
-
-
/usr/bin/sortsort3⤵PID:1802
-
-
/bin/grepgrep -E "mysql\$|passwd\\.ibd\$|password.*\\.ibd\$|pwd\\.ibd\$|mysqld\\.cnf\$|\\.mylogin\\.cnf\$"3⤵PID:1801
-
-
/usr/bin/uniquniq3⤵PID:1803
-
-
/usr/bin/headhead -n 703⤵PID:1804
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1800
-
-
/bin/grepgrep -E "^/etc/.*mysql|/usr/var/lib/.*mysql|/var/lib/.*mysql"3⤵PID:1799
-
-
/bin/grepgrep -v -E mysql/mysql3⤵PID:1798
-
-
/usr/bin/headhead -n 703⤵PID:1811
-
-
/usr/bin/uniquniq3⤵PID:1810
-
-
/usr/bin/sortsort3⤵PID:1809
-
-
/bin/grepgrep -E "mariadb\\.cnf\$|debian\\.cnf\$"3⤵PID:1808
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1807
-
-
/usr/bin/headhead -n 703⤵PID:1818
-
-
/usr/bin/uniquniq3⤵PID:1817
-
-
/usr/bin/sortsort3⤵PID:1816
-
-
/bin/grepgrep -E "pgadmin.*\\.db\$|pg_hba\\.conf\$|postgresql\\.conf\$|pgsql\\.conf\$|\\.pgpass\$|pgadmin4\\.db\$"3⤵PID:1815
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1814
-
-
/usr/bin/headhead -n 703⤵PID:1825
-
-
/usr/bin/uniquniq3⤵PID:1824
-
-
/usr/bin/sortsort3⤵PID:1823
-
-
/bin/grepgrep -E "sites-enabled\$|000-default\\.conf\$|php\\.ini\$|nginx\\.conf\$|nginx\$"3⤵PID:1822
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1821
-
-
/usr/bin/headhead -n 703⤵PID:1832
-
-
/usr/bin/uniquniq3⤵PID:1831
-
-
/usr/bin/sortsort3⤵PID:1830
-
-
/bin/grepgrep -E "varnish\$"3⤵PID:1829
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1828
-
-
/usr/bin/headhead -n 703⤵PID:1840
-
-
/usr/bin/uniquniq3⤵PID:1839
-
-
/usr/bin/sortsort3⤵PID:1838
-
-
/bin/grepgrep -E "sess_.*\$"3⤵PID:1837
-
-
/bin/grepgrep -E "^/mnt|^/private|^/var|^/tmp"3⤵PID:1836
-
-
/bin/grepgrep -E "/tmp/.*sess_.*|/var/tmp/.*sess_.*"3⤵PID:1835
-
-
/usr/bin/headhead -n 703⤵PID:1847
-
-
/usr/bin/uniquniq3⤵PID:1846
-
-
/usr/bin/sortsort3⤵PID:1845
-
-
/bin/grepgrep -E ".*config.*\\.php\$|database\\.php\$|db\\.php\$|storage\\.php\$|settings\\.php\$"3⤵PID:1844
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1843
-
-
/usr/bin/headhead -n 703⤵PID:1854
-
-
/usr/bin/uniquniq3⤵PID:1853
-
-
/usr/bin/sortsort3⤵PID:1852
-
-
/bin/grepgrep -E "airflow\\.cfg\$|webserver_config\\.py\$"3⤵PID:1851
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1850
-
-
/usr/bin/headhead -n 703⤵PID:1861
-
-
/usr/bin/uniquniq3⤵PID:1860
-
-
/usr/bin/sortsort3⤵PID:1859
-
-
/bin/grepgrep -E "\\.Xauthority\$"3⤵PID:1858
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1857
-
-
/usr/bin/headhead -n 703⤵PID:1868
-
-
/usr/bin/uniquniq3⤵PID:1867
-
-
/usr/bin/sortsort3⤵PID:1866
-
-
/bin/grepgrep -E "wp-config\\.php\$"3⤵PID:1865
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1864
-
-
/usr/bin/headhead -n 703⤵PID:1876
-
-
/usr/bin/uniquniq3⤵PID:1875
-
-
/usr/bin/sortsort3⤵PID:1874
-
-
/bin/grepgrep -E "settings\\.php\$"3⤵PID:1873
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1872
-
-
/bin/grepgrep -E /default/settings.php3⤵PID:1871
-
-
/usr/bin/headhead -n 703⤵PID:1884
-
-
/usr/bin/uniquniq3⤵PID:1883
-
-
/usr/bin/sortsort3⤵PID:1882
-
-
/bin/grepgrep -E "config\\.php\$"3⤵PID:1881
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1880
-
-
/bin/grepgrep -E moodle/config.php3⤵PID:1879
-
-
/usr/bin/headhead -n 703⤵PID:1891
-
-
/usr/bin/uniquniq3⤵PID:1890
-
-
/usr/bin/sortsort3⤵PID:1889
-
-
/bin/grepgrep -E "tomcat-users\\.xml\$"3⤵PID:1888
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1887
-
-
/usr/bin/headhead -n 703⤵PID:1898
-
-
/usr/bin/uniquniq3⤵PID:1897
-
-
/usr/bin/sortsort3⤵PID:1896
-
-
/bin/grepgrep -E "mongod.*\\.conf\$"3⤵PID:1895
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1894
-
-
/usr/bin/headhead -n 703⤵PID:1905
-
-
/usr/bin/uniquniq3⤵PID:1904
-
-
/usr/bin/sortsort3⤵PID:1903
-
-
/bin/grepgrep -E "rocketchat\\.service\$"3⤵PID:1902
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/lib|^/srv|^/var|^/private|^/bin|^/opt|^/snap|^/mnt|^/systemd|^/cdrom|^/media|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1901
-
-
/usr/bin/headhead -n 703⤵PID:1912
-
-
/usr/bin/uniquniq3⤵PID:1911
-
-
/usr/bin/sortsort3⤵PID:1910
-
-
/bin/grepgrep -E "supervisord\\.conf\$"3⤵PID:1909
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1908
-
-
/usr/bin/headhead -n 703⤵PID:1919
-
-
/usr/bin/uniquniq3⤵PID:1918
-
-
/usr/bin/sortsort3⤵PID:1917
-
-
/bin/grepgrep -E "cesi\\.conf\$"3⤵PID:1916
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1915
-
-
/usr/bin/headhead -n 703⤵PID:1926
-
-
/usr/bin/uniquniq3⤵PID:1925
-
-
/usr/bin/sortsort3⤵PID:1924
-
-
/bin/grepgrep -E "rsyncd\\.conf\$|rsyncd\\.secrets\$"3⤵PID:1923
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1922
-
-
/usr/bin/headhead -n 703⤵PID:1934
-
-
/usr/bin/uniquniq3⤵PID:1933
-
-
/usr/bin/sortsort3⤵PID:1932
-
-
/bin/grepgrep -E "rpcd\$"3⤵PID:1931
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1930
-
-
/bin/grepgrep -v -E "/init.d/|/sbin/|/usr/share/"3⤵PID:1929
-
-
/usr/bin/headhead -n 703⤵PID:1941
-
-
/usr/bin/uniquniq3⤵PID:1940
-
-
/usr/bin/sortsort3⤵PID:1939
-
-
/bin/grepgrep -E "bitcoin\\.conf\$"3⤵PID:1938
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1937
-
-
/usr/bin/headhead -n 703⤵PID:1948
-
-
/usr/bin/uniquniq3⤵PID:1947
-
-
/usr/bin/sortsort3⤵PID:1946
-
-
/bin/grepgrep -E "hostapd\\.conf\$"3⤵PID:1945
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1944
-
-
/usr/bin/headhead -n 703⤵PID:1955
-
-
/usr/bin/uniquniq3⤵PID:1954
-
-
/usr/bin/sortsort3⤵PID:1953
-
-
/bin/grepgrep -E "system-connections\$|wpa_supplicant\$"3⤵PID:1952
-
-
/bin/grepgrep -E "^/etc"3⤵PID:1951
-
-
/usr/bin/headhead -n 703⤵PID:1962
-
-
/usr/bin/uniquniq3⤵PID:1961
-
-
/usr/bin/sortsort3⤵PID:1960
-
-
/bin/grepgrep -E "pam\\.d\$"3⤵PID:1959
-
-
/bin/grepgrep -E "^/etc"3⤵PID:1958
-
-
/usr/bin/headhead -n 703⤵PID:1969
-
-
/usr/bin/uniquniq3⤵PID:1968
-
-
/usr/bin/sortsort3⤵PID:1967
-
-
/bin/grepgrep -E "exports\$"3⤵PID:1966
-
-
/bin/grepgrep -E "^/etc"3⤵PID:1965
-
-
/usr/bin/headhead -n 703⤵PID:1976
-
-
/usr/bin/uniquniq3⤵PID:1975
-
-
/usr/bin/sortsort3⤵PID:1974
-
-
/bin/grepgrep -E "glusterfs\\.pem\$|glusterfs\\.ca\$|glusterfs\\.key\$"3⤵PID:1973
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1972
-
-
/usr/bin/headhead -n 703⤵PID:1983
-
-
/usr/bin/uniquniq3⤵PID:1982
-
-
/usr/bin/sortsort3⤵PID:1981
-
-
/bin/grepgrep -E "anaconda-ks\\.cfg\$"3⤵PID:1980
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1979
-
-
/usr/bin/headhead -n 703⤵PID:1990
-
-
/usr/bin/uniquniq3⤵PID:1989
-
-
/usr/bin/sortsort3⤵PID:1988
-
-
/bin/grepgrep -E ".*\\.tfstate\$|.*\\.tf\$|credentials\\.tfrc\\.json\$"3⤵PID:1987
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1986
-
-
/usr/bin/headhead -n 703⤵PID:1997
-
-
/usr/bin/uniquniq3⤵PID:1996
-
-
/usr/bin/sortsort3⤵PID:1995
-
-
/bin/grepgrep -E "racoon\\.conf\$|psk\\.txt\$"3⤵PID:1994
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:1993
-
-
/usr/bin/headhead -n 703⤵PID:2004
-
-
/usr/bin/uniquniq3⤵PID:2003
-
-
/usr/bin/sortsort3⤵PID:2002
-
-
/bin/grepgrep -E ".*kubeconfig.*\$|admin\\.conf\$|bootstrap-kubelet\\.conf\$|kubelet\\.conf\$|\\.kube.*\$|kubernetes\$|kubelet\$|kube-proxy\$|kubernetes\\.io\$|net\\.d\$|containerd\$|crio\$|etcd\$|origin\$|k0s\$|k3s\$|rke2\$|microk8s\$"3⤵PID:2001
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/run|^/applications"3⤵PID:2000
-
-
/usr/bin/headhead -n 703⤵PID:2012
-
-
/usr/bin/uniquniq3⤵PID:2011
-
-
/usr/bin/sortsort3⤵PID:2010
-
-
/bin/grepgrep -E "\\.vnc\$|.*vnc.*\\.c.*nf.*\$|.*vnc.*\\.ini\$|.*vnc.*\\.txt\$|.*vnc.*\\.xml\$"3⤵PID:2009
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2008
-
-
/bin/grepgrep -v -E /mime/3⤵PID:2007
-
-
/usr/bin/headhead -n 703⤵PID:2019
-
-
/usr/bin/uniquniq3⤵PID:2018
-
-
/usr/bin/sortsort3⤵PID:2017
-
-
/bin/grepgrep -E "ldap\$"3⤵PID:2016
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2015
-
-
/usr/bin/headhead -n 703⤵PID:2026
-
-
/usr/bin/uniquniq3⤵PID:2025
-
-
/usr/bin/sortsort3⤵PID:2024
-
-
/bin/grepgrep -E "log4j-core.*\\.jar\$"3⤵PID:2023
-
-
/bin/grepgrep -E "^/private|^/bin|^/opt|^/lib64|^/cdrom|^/.cache|^/var|^/mnt|^/tmp|^/home/|/Users/|/root/|/var/www|^/etc|^/sbin|^/lib|^/srv|^/lib32|^/snap|^/media|^/usr|^/applications"3⤵PID:2022
-
-
/usr/bin/headhead -n 703⤵PID:2033
-
-
/usr/bin/uniquniq3⤵PID:2032
-
-
/usr/bin/sortsort3⤵PID:2031
-
-
/bin/grepgrep -E ".*\\.ovpn\$"3⤵PID:2030
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2029
-
-
/usr/bin/headhead -n 703⤵PID:2040
-
-
/usr/bin/uniquniq3⤵PID:2039
-
-
/usr/bin/sortsort3⤵PID:2038
-
-
/bin/grepgrep -E "id_dsa.*\$|id_rsa.*\$|known_hosts\$|authorized_hosts\$|authorized_keys\$|.*\\.pub\$"3⤵PID:2037
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2036
-
-
/usr/bin/headhead -n 703⤵PID:2048
-
-
/usr/bin/uniquniq3⤵PID:2047
-
-
/usr/bin/sortsort3⤵PID:2046
-
-
/bin/grepgrep -E ".*\\.pem\$|.*\\.cer\$|.*\\.crt\$"3⤵PID:2045
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2044
-
-
/bin/grepgrep -v -E "/usr/share/|/usr/local/lib/|/usr/lib.*"3⤵PID:2043
-
-
/usr/bin/headhead -n 703⤵PID:2056
-
-
/usr/bin/uniquniq3⤵PID:2055
-
-
/usr/bin/sortsort3⤵PID:2054
-
-
/bin/grepgrep -E ".*\\.csr\$|.*\\.der\$"3⤵PID:2053
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2052
-
-
/bin/grepgrep -v -E "^/usr/share/|/usr/local/lib/|/usr/lib/.*|/usr/share/|/usr/local/lib/|/usr/lib/.*"3⤵PID:2051
-
-
/usr/bin/headhead -n 703⤵PID:2064
-
-
/usr/bin/uniquniq3⤵PID:2063
-
-
/usr/bin/sortsort3⤵PID:2062
-
-
/bin/grepgrep -E ".*\\.pfx\$|.*\\.p12\$"3⤵PID:2061
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2060
-
-
/bin/grepgrep -v -E "/usr/share/|/usr/local/lib/|/usr/lib/.*"3⤵PID:2059
-
-
/usr/bin/headhead -n 703⤵PID:2072
-
-
/usr/bin/uniquniq3⤵PID:2071
-
-
/usr/bin/sortsort3⤵PID:2070
-
-
/bin/grepgrep -E "agent\\..*\$|ssh-agent\\.sock\$"3⤵PID:2069
-
-
/bin/grepgrep -E "^/run|^/tmp"3⤵PID:2068
-
-
/bin/grepgrep -v -E .dll3⤵PID:2067
-
-
/usr/bin/headhead -n 703⤵PID:2079
-
-
/usr/bin/uniquniq3⤵PID:2078
-
-
/usr/bin/sortsort3⤵PID:2077
-
-
/bin/grepgrep -E "ssh.*config\$"3⤵PID:2076
-
-
/bin/grepgrep -E "^/home/|/Users/|/root/|/var/www|^/usr"3⤵PID:2075
-
-
/usr/bin/headhead -n 703⤵PID:2086
-
-
/usr/bin/uniquniq3⤵PID:2085
-
-
/usr/bin/sortsort3⤵PID:2084
-
-
/bin/grepgrep -E "snyk\\.json\$|snyk\\.config\\.json\$"3⤵PID:2083
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2082
-
-
/usr/bin/headhead -n 703⤵PID:2093
-
-
/usr/bin/uniquniq3⤵PID:2092
-
-
/usr/bin/sortsort3⤵PID:2091
-
-
/bin/grepgrep -E "credentials\\.db\$|legacy_credentials\\.db\$|adc\\.json\$|\\.boto\$|\\.credentials\\.json\$|firebase-tools\\.json\$|access_tokens\\.db\$|access_tokens\\.json\$|accessTokens\\.json\$|gcloud\$|legacy_credentials\$|azureProfile\\.json\$|TokenCache\\.dat\$|AzureRMContext\\.json\$|clouds\\.config\$|service_principal_entries\\.json\$|msal_token_cache\\.json\$|msal_http_cache\\.bin\$|service_principal_entries\\.bin\$|msal_token_cache\\.bin\$|ErrorRecords\$|TokenCache\\.dat\$|\\.bluemix\$|doctl\$|Google Cloud Directory Sync\$|Google Password Sync\$"3⤵PID:2090
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2089
-
-
/usr/bin/headhead -n 703⤵PID:2101
-
-
/usr/bin/uniquniq3⤵PID:2100
-
-
/usr/bin/sortsort3⤵PID:2099
-
-
/bin/grepgrep -E "\\.codex\$|\\.claude\$|\\.claude\\.json\$|\\.gemini\$|\\.cursor\$|\\.mcp\\.json\$|gh\$|state\\.vscdb\$|state\\.vscdb\\.backup\$|storage\\.json\$"3⤵PID:2098
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2097
-
-
/bin/grepgrep -E ".*/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?\$|.*/Library/Application Support/(Cursor|Code|Code - Insiders)/User/(globalStorage|workspaceStorage)(/.*)?\$|.*/\\.config/gh\$|.*/AppData/.*gh\$|.*/Library/Application Support/gh\$"3⤵PID:2096
-
-
/usr/bin/headhead -n 703⤵PID:2108
-
-
/usr/bin/uniquniq3⤵PID:2107
-
-
/usr/bin/sortsort3⤵PID:2106
-
-
/bin/grepgrep -E "\\.roadtools_auth\$"3⤵PID:2105
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2104
-
-
/usr/bin/headhead -n 703⤵PID:2115
-
-
/usr/bin/uniquniq3⤵PID:2114
-
-
/usr/bin/sortsort3⤵PID:2113
-
-
/bin/grepgrep -E "ipa\$|dirsrv\$"3⤵
- System Network Configuration Discovery
PID:2112
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2111
-
-
/usr/bin/headhead -n 703⤵PID:2122
-
-
/usr/bin/uniquniq3⤵PID:2121
-
-
/usr/bin/sortsort3⤵PID:2120
-
-
/bin/grepgrep -E "krb5\\.conf\$|.*\\.keytab\$|\\.k5login\$|krb5cc_.*\$|kadm5\\.acl\$|secrets\\.ldb\$|\\.secrets\\.mkey\$|sssd\\.conf\$"3⤵PID:2119
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2118
-
-
/usr/bin/headhead -n 703⤵PID:2129
-
-
/usr/bin/uniquniq3⤵PID:2128
-
-
/usr/bin/sortsort3⤵PID:2127
-
-
/bin/grepgrep -E "kibana\\.y.*ml\$"3⤵PID:2126
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2125
-
-
/usr/bin/headhead -n 703⤵PID:2136
-
-
/usr/bin/uniquniq3⤵PID:2135
-
-
/usr/bin/sortsort3⤵PID:2134
-
-
/bin/grepgrep -E "grafana\\.ini\$"3⤵PID:2133
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2132
-
-
/usr/bin/headhead -n 703⤵PID:2144
-
-
/usr/bin/uniquniq3⤵PID:2143
-
-
/usr/bin/sortsort3⤵PID:2142
-
-
/bin/grepgrep -E ".*knockd.*\$"3⤵PID:2141
-
-
/bin/grepgrep -E "^/etc"3⤵PID:2140
-
-
/bin/grepgrep -E /etc/init.d/3⤵PID:2139
-
-
/usr/bin/headhead -n 703⤵PID:2151
-
-
/usr/bin/uniquniq3⤵PID:2150
-
-
/usr/bin/sortsort3⤵PID:2149
-
-
/bin/grepgrep -E "logstash\$"3⤵PID:2148
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2147
-
-
/usr/bin/headhead -n 703⤵PID:2158
-
-
/usr/bin/uniquniq3⤵PID:2157
-
-
/usr/bin/sortsort3⤵PID:2156
-
-
/bin/grepgrep -E "elasticsearch\\.y.*ml\$"3⤵PID:2155
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2154
-
-
/usr/bin/headhead -n 703⤵PID:2165
-
-
/usr/bin/uniquniq3⤵PID:2164
-
-
/usr/bin/sortsort3⤵PID:2163
-
-
/bin/grepgrep -E "vault-ssh-helper\\.hcl\$"3⤵PID:2162
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2161
-
-
/usr/bin/headhead -n 703⤵PID:2172
-
-
/usr/bin/uniquniq3⤵PID:2171
-
-
/usr/bin/sortsort3⤵PID:2170
-
-
/bin/grepgrep -E "\\.vault-token\$"3⤵PID:2169
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2168
-
-
/usr/bin/headhead -n 703⤵PID:2179
-
-
/usr/bin/uniquniq3⤵PID:2178
-
-
/usr/bin/sortsort3⤵PID:2177
-
-
/bin/grepgrep -E "couchdb\$"3⤵PID:2176
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2175
-
-
/usr/bin/headhead -n 703⤵PID:2186
-
-
/usr/bin/uniquniq3⤵PID:2185
-
-
/usr/bin/sortsort3⤵PID:2184
-
-
/bin/grepgrep -E "redis\\.conf\$"3⤵PID:2183
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2182
-
-
/usr/bin/headhead -n 703⤵PID:2193
-
-
/usr/bin/uniquniq3⤵PID:2192
-
-
/usr/bin/sortsort3⤵PID:2191
-
-
/bin/grepgrep -E "mosquitto\\.conf\$"3⤵PID:2190
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2189
-
-
/usr/bin/headhead -n 703⤵PID:2200
-
-
/usr/bin/uniquniq3⤵PID:2199
-
-
/usr/bin/sortsort3⤵PID:2198
-
-
/bin/grepgrep -E "neo4j\$"3⤵PID:2197
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2196
-
-
/usr/bin/headhead -n 703⤵PID:2207
-
-
/usr/bin/uniquniq3⤵PID:2206
-
-
/usr/bin/sortsort3⤵PID:2205
-
-
/bin/grepgrep -E "cloud\\.cfg\$"3⤵PID:2204
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2203
-
-
/usr/bin/headhead -n 703⤵PID:2214
-
-
/usr/bin/uniquniq3⤵PID:2213
-
-
/usr/bin/sortsort3⤵PID:2212
-
-
/bin/grepgrep -E "\\.erlang\\.cookie\$"3⤵PID:2211
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2210
-
-
/usr/bin/headhead -n 703⤵PID:2221
-
-
/usr/bin/uniquniq3⤵PID:2220
-
-
/usr/bin/sortsort3⤵PID:2219
-
-
/bin/grepgrep -E "sip\\.conf\$|amportal\\.conf\$|FreePBX\\.conf\$|Elastix\\.conf\$"3⤵
- System Network Configuration Discovery
PID:2218
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2217
-
-
/usr/bin/headhead -n 703⤵PID:2228
-
-
/usr/bin/uniquniq3⤵PID:2227
-
-
/usr/bin/sortsort3⤵PID:2226
-
-
/bin/grepgrep -E "gvm-tools\\.conf\$"3⤵PID:2225
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2224
-
-
/usr/bin/headhead -n 703⤵PID:2235
-
-
/usr/bin/uniquniq3⤵PID:2234
-
-
/usr/bin/sortsort3⤵PID:2233
-
-
/bin/grepgrep -E "ipsec\\.secrets\$|ipsec\\.conf\$"3⤵PID:2232
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2231
-
-
/usr/bin/headhead -n 703⤵PID:2242
-
-
/usr/bin/uniquniq3⤵PID:2241
-
-
/usr/bin/sortsort3⤵PID:2240
-
-
/bin/grepgrep -E "\\.irssi\$"3⤵PID:2239
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2238
-
-
/usr/bin/headhead -n 703⤵PID:2249
-
-
/usr/bin/uniquniq3⤵PID:2248
-
-
/usr/bin/sortsort3⤵PID:2247
-
-
/bin/grepgrep -E "keyrings\$|.*\\.keyring\$|.*\\.keystore\$|.*\\.jks\$"3⤵PID:2246
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2245
-
-
/usr/bin/headhead -n 703⤵PID:2256
-
-
/usr/bin/uniquniq3⤵PID:2255
-
-
/usr/bin/sortsort3⤵PID:2254
-
-
/bin/grepgrep -E ".*\\.vhd\$|.*\\.vhdx\$|.*\\.vmdk\$"3⤵PID:2253
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2252
-
-
/usr/bin/headhead -n 703⤵PID:2263
-
-
/usr/bin/uniquniq3⤵PID:2262
-
-
/usr/bin/sortsort3⤵PID:2261
-
-
/bin/grepgrep -E "filezilla\$|filezilla\\.xml\$|recentservers\\.xml\$"3⤵PID:2260
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2259
-
-
/usr/bin/headhead -n 703⤵PID:2270
-
-
/usr/bin/uniquniq3⤵PID:2269
-
-
/usr/bin/sortsort3⤵PID:2268
-
-
/bin/grepgrep -E "storage\\.php\$|database\\.php\$"3⤵PID:2267
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2266
-
-
/usr/bin/headhead -n 703⤵PID:2277
-
-
/usr/bin/uniquniq3⤵PID:2276
-
-
/usr/bin/sortsort3⤵PID:2275
-
-
/bin/grepgrep -E "passwd\$"3⤵PID:2274
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2273
-
-
/usr/bin/uniquniq3⤵PID:2283
-
-
/usr/bin/headhead -n 703⤵PID:2284
-
-
/usr/bin/sortsort3⤵PID:2282
-
-
/bin/grepgrep -E "\\.git-credentials\$"3⤵PID:2281
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2280
-
-
/usr/bin/headhead -n 703⤵PID:2291
-
-
/usr/bin/uniquniq3⤵PID:2290
-
-
/usr/bin/sortsort3⤵PID:2289
-
-
/bin/grepgrep -E "atlantis\\.db\$"3⤵PID:2288
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2287
-
-
/usr/bin/headhead -n 703⤵PID:2299
-
-
/usr/bin/uniquniq3⤵PID:2298
-
-
/usr/bin/sortsort3⤵PID:2297
-
-
/bin/grepgrep -E "secrets\\.yml\$|gitlab\\.yml\$|gitlab\\.rm\$"3⤵PID:2296
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2295
-
-
/bin/grepgrep -v -E /lib3⤵PID:2294
-
-
/usr/bin/headhead -n 703⤵PID:2307
-
-
/usr/bin/uniquniq3⤵PID:2306
-
-
/usr/bin/sortsort3⤵PID:2305
-
-
/bin/grepgrep -E ".*\\.pgp\$|.*\\.gpg\$|.*\\.asc\$|secring\\.gpg\$|pubring\\.kbx\$|trustdb\\.gpg\$|gpg-agent\\.conf\$|secret\\.asc\$|private-keys-v1\\.d/.*\\.key\$|.*\\.gnupg\$"3⤵PID:2304
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2303
-
-
/bin/grepgrep -v -E "/usr/share/|/usr/lib/|/lib/|/man/|README.gnupg"3⤵PID:2302
-
-
/usr/bin/headhead -n 703⤵PID:2314
-
-
/usr/bin/uniquniq3⤵PID:2313
-
-
/usr/bin/sortsort3⤵PID:2312
-
-
/bin/grepgrep -E ".*\\.swp\$|.*\\.viminfo\$"3⤵PID:2311
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2310
-
-
/usr/bin/headhead -n 703⤵PID:2321
-
-
/usr/bin/uniquniq3⤵PID:2320
-
-
/usr/bin/sortsort3⤵PID:2319
-
-
/bin/grepgrep -E "docker\\.socket\$|docker\\.sock\$|Dockerfile\$|docker-compose\\.yml\$|dockershim\\.sock\$|containerd\\.sock\$|crio\\.sock\$|frakti\\.sock\$|rktlet\\.sock\$|\\.docker\$"3⤵PID:2318
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2317
-
-
/usr/bin/headhead -n 703⤵PID:2328
-
-
/usr/bin/uniquniq3⤵PID:2327
-
-
/usr/bin/sortsort3⤵PID:2326
-
-
/bin/grepgrep -E "\\.mozilla\$|Firefox\$"3⤵PID:2325
-
-
/bin/grepgrep -E "^"3⤵PID:2324
-
-
/usr/bin/headhead -n 703⤵PID:2335
-
-
/usr/bin/uniquniq3⤵PID:2334
-
-
/usr/bin/sortsort3⤵PID:2333
-
-
/bin/grepgrep -E "google-chrome\$|Chrome\$"3⤵PID:2332
-
-
/bin/grepgrep -E "^"3⤵PID:2331
-
-
/usr/bin/headhead -n 703⤵PID:2342
-
-
/usr/bin/uniquniq3⤵PID:2341
-
-
/usr/bin/sortsort3⤵PID:2340
-
-
/bin/grepgrep -E "com\\.operasoftware\\.Opera\$"3⤵PID:2339
-
-
/bin/grepgrep -E "^"3⤵PID:2338
-
-
/usr/bin/headhead -n 703⤵PID:2349
-
-
/usr/bin/uniquniq3⤵PID:2348
-
-
/usr/bin/sortsort3⤵PID:2347
-
-
/bin/grepgrep -E "Safari\$"3⤵PID:2346
-
-
/bin/grepgrep -E "^"3⤵PID:2345
-
-
/usr/bin/headhead -n 703⤵PID:2356
-
-
/usr/bin/uniquniq3⤵PID:2355
-
-
/usr/bin/sortsort3⤵PID:2354
-
-
/bin/grepgrep -E "autologin\$|autologin\\.conf\$"3⤵PID:2353
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2352
-
-
/usr/bin/headhead -n 703⤵PID:2363
-
-
/usr/bin/uniquniq3⤵PID:2362
-
-
/usr/bin/sortsort3⤵PID:2361
-
-
/bin/grepgrep -E "fastcgi_params\$"3⤵PID:2360
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2359
-
-
/usr/bin/headhead -n 703⤵PID:2370
-
-
/usr/bin/uniquniq3⤵PID:2369
-
-
/usr/bin/sortsort3⤵PID:2368
-
-
/bin/grepgrep -E "fat\\.config\$"3⤵PID:2367
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2366
-
-
/usr/bin/headhead -n 703⤵PID:2377
-
-
/usr/bin/uniquniq3⤵PID:2376
-
-
/usr/bin/sortsort3⤵PID:2375
-
-
/bin/grepgrep -E "api_key\$"3⤵PID:2374
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2373
-
-
/usr/bin/headhead -n 703⤵PID:2384
-
-
/usr/bin/uniquniq3⤵PID:2383
-
-
/usr/bin/sortsort3⤵PID:2382
-
-
/bin/grepgrep -E "\\.flyrc\$|concourse-auth\$|concourse-keys\$"3⤵PID:2381
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/concourse-keys|^/private|^/bin|^/opt|^/snap|^/mnt|^/concourse-auth|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2380
-
-
/usr/bin/headhead -n 703⤵PID:2391
-
-
/usr/bin/uniquniq3⤵PID:2390
-
-
/usr/bin/sortsort3⤵PID:2389
-
-
/bin/grepgrep -E "\\.boto\$"3⤵PID:2388
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2387
-
-
/usr/bin/headhead -n 703⤵PID:2398
-
-
/usr/bin/uniquniq3⤵PID:2397
-
-
/usr/bin/sortsort3⤵PID:2396
-
-
/bin/grepgrep -E "snmpd\\.conf\$"3⤵PID:2395
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2394
-
-
/usr/bin/headhead -n 703⤵PID:2405
-
-
/usr/bin/uniquniq3⤵PID:2404
-
-
/usr/bin/sortsort3⤵PID:2403
-
-
/bin/grepgrep -E "\\.pypirc\$"3⤵PID:2402
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2401
-
-
/usr/bin/headhead -n 703⤵PID:2412
-
-
/usr/bin/uniquniq3⤵PID:2411
-
-
/usr/bin/sortsort3⤵PID:2410
-
-
/bin/grepgrep -E "aliases\$|postfix\$"3⤵PID:2409
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2408
-
-
/usr/bin/headhead -n 703⤵PID:2419
-
-
/usr/bin/uniquniq3⤵PID:2418
-
-
/usr/bin/sortsort3⤵PID:2417
-
-
/bin/grepgrep -E "\\.cloudflared\$"3⤵PID:2416
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2415
-
-
/usr/bin/headhead -n 703⤵PID:2426
-
-
/usr/bin/uniquniq3⤵PID:2425
-
-
/usr/bin/sortsort3⤵PID:2424
-
-
/bin/grepgrep -E ".*_history.*\$"3⤵PID:2423
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2422
-
-
/usr/bin/headhead -n 703⤵PID:2433
-
-
/usr/bin/uniquniq3⤵PID:2432
-
-
/usr/bin/sortsort3⤵PID:2431
-
-
/bin/grepgrep -E "httpd\\.conf\$"3⤵PID:2430
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2429
-
-
/usr/bin/headhead -n 703⤵PID:2440
-
-
/usr/bin/uniquniq3⤵PID:2439
-
-
/usr/bin/sortsort3⤵PID:2438
-
-
/bin/grepgrep -E "\\.htpasswd\$"3⤵PID:2437
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2436
-
-
/usr/bin/headhead -n 703⤵PID:2447
-
-
/usr/bin/uniquniq3⤵PID:2446
-
-
/usr/bin/sortsort3⤵PID:2445
-
-
/bin/grepgrep -E "\\.ldaprc\$"3⤵PID:2444
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2443
-
-
/usr/bin/headhead -n 703⤵PID:2455
-
-
/usr/bin/uniquniq3⤵PID:2454
-
-
/usr/bin/sortsort3⤵PID:2453
-
-
/bin/grepgrep -E "\\.env.*\$"3⤵PID:2452
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2451
-
-
/bin/grepgrep -v -E example3⤵PID:2450
-
-
/usr/bin/headhead -n 703⤵PID:2463
-
-
/usr/bin/uniquniq3⤵PID:2462
-
-
/usr/bin/sortsort3⤵PID:2461
-
-
/bin/grepgrep -E "environment\$|apt\\.conf\$|apt\\.conf\\.d\$"3⤵PID:2460
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2459
-
-
/bin/grepgrep -E "^/etc/environment\$"3⤵PID:2458
-
-
/usr/bin/headhead -n 703⤵PID:2470
-
-
/usr/bin/uniquniq3⤵PID:2469
-
-
/usr/bin/sortsort3⤵PID:2468
-
-
/bin/grepgrep -E ".*\\.pcap\$|.*\\.pcapng\$|keys\\.log\$|sslkeylog\\.log\$"3⤵PID:2467
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2466
-
-
/usr/bin/headhead -n 703⤵PID:2477
-
-
/usr/bin/uniquniq3⤵PID:2476
-
-
/usr/bin/sortsort3⤵PID:2475
-
-
/bin/grepgrep -E "\\.msmtprc\$"3⤵PID:2474
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2473
-
-
/usr/bin/headhead -n 703⤵PID:2484
-
-
/usr/bin/uniquniq3⤵PID:2483
-
-
/usr/bin/sortsort3⤵PID:2482
-
-
/bin/grepgrep -E "influxdb\\.conf\$"3⤵PID:2481
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2480
-
-
/usr/bin/headhead -n 703⤵PID:2491
-
-
/usr/bin/uniquniq3⤵PID:2490
-
-
/usr/bin/sortsort3⤵PID:2489
-
-
/bin/grepgrep -E "zabbix_server\\.conf\$|zabbix_agentd\\.conf\$|zabbix\$"3⤵PID:2488
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2487
-
-
/usr/bin/headhead -n 703⤵PID:2498
-
-
/usr/bin/uniquniq3⤵PID:2497
-
-
/usr/bin/sortsort3⤵PID:2496
-
-
/bin/grepgrep -E "\\.github\$|\\.gitconfig\$|\\.git-credentials\$|\\.git\$"3⤵PID:2495
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2494
-
-
/usr/bin/headhead -n 703⤵PID:2505
-
-
/usr/bin/uniquniq3⤵PID:2504
-
-
/usr/bin/sortsort3⤵PID:2503
-
-
/bin/grepgrep -E "\\.svn\$"3⤵PID:2502
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2501
-
-
/usr/bin/headhead -n 703⤵PID:2512
-
-
/usr/bin/uniquniq3⤵PID:2511
-
-
/usr/bin/sortsort3⤵PID:2510
-
-
/bin/grepgrep -E ".*\\.kdbx\$|KeePass\\.config.*\$|KeePass\\.ini\$|KeePass\\.enforced.*\$"3⤵PID:2509
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2508
-
-
/usr/bin/headhead -n 703⤵PID:2519
-
-
/usr/bin/uniquniq3⤵PID:2518
-
-
/usr/bin/sortsort3⤵PID:2517
-
-
/bin/grepgrep -E ".*\\.psk\$"3⤵PID:2516
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2515
-
-
/usr/bin/headhead -n 703⤵PID:2526
-
-
/usr/bin/uniquniq3⤵PID:2525
-
-
/usr/bin/sortsort3⤵PID:2524
-
-
/bin/grepgrep -E "\\.password-store\$"3⤵PID:2523
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2522
-
-
/usr/bin/headhead -n 703⤵PID:2533
-
-
/usr/bin/uniquniq3⤵PID:2532
-
-
/usr/bin/sortsort3⤵PID:2531
-
-
/bin/grepgrep -E "vsftpd\\.conf\$|.*\\.ftpconfig\$|ffftp\\.ini\$|ftp\\.ini\$|ftp\\.config\$|sites\\.ini\$|wcx_ftp\\.ini\$|winscp\\.ini\$|ws_ftp\\.ini\$"3⤵PID:2530
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2529
-
-
/usr/bin/headhead -n 703⤵PID:2540
-
-
/usr/bin/uniquniq3⤵PID:2539
-
-
/usr/bin/sortsort3⤵PID:2538
-
-
/bin/grepgrep -E "smb\\.conf\$"3⤵PID:2537
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2536
-
-
/usr/bin/uniquniq3⤵PID:2546
-
-
/usr/bin/headhead -n 703⤵PID:2547
-
-
/usr/bin/sortsort3⤵PID:2545
-
-
/bin/grepgrep -E "bind\$"3⤵PID:2544
-
-
/bin/grepgrep -E "^/etc|^/var|^/usr"3⤵PID:2543
-
-
/usr/bin/headhead -n 703⤵PID:2554
-
-
/usr/bin/uniquniq3⤵PID:2553
-
-
/usr/bin/sortsort3⤵PID:2552
-
-
/bin/grepgrep -E "seeddms.*\$"3⤵PID:2551
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2550
-
-
/usr/bin/headhead -n 703⤵PID:2561
-
-
/usr/bin/uniquniq3⤵PID:2560
-
-
/usr/bin/sortsort3⤵PID:2559
-
-
/bin/grepgrep -E "ddclient\\.conf\$"3⤵PID:2558
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2557
-
-
/usr/bin/headhead -n 703⤵PID:2568
-
-
/usr/bin/uniquniq3⤵PID:2567
-
-
/usr/bin/sortsort3⤵PID:2566
-
-
/bin/grepgrep -E "kcpassword\$"3⤵PID:2565
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2564
-
-
/usr/bin/headhead -n 703⤵PID:2575
-
-
/usr/bin/uniquniq3⤵PID:2574
-
-
/usr/bin/sortsort3⤵PID:2573
-
-
/bin/grepgrep -E "sentry\$|sentry\\.conf\\.py\$"3⤵PID:2572
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2571
-
-
/usr/bin/headhead -n 703⤵PID:2582
-
-
/usr/bin/uniquniq3⤵PID:2581
-
-
/usr/bin/sortsort3⤵PID:2580
-
-
/bin/grepgrep -E "environments\$"3⤵PID:2579
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2578
-
-
/usr/bin/headhead -n 703⤵PID:2589
-
-
/usr/bin/uniquniq3⤵PID:2588
-
-
/usr/bin/sortsort3⤵PID:2587
-
-
/bin/grepgrep -E "cacti\$"3⤵PID:2586
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2585
-
-
/usr/bin/headhead -n 703⤵PID:2596
-
-
/usr/bin/uniquniq3⤵PID:2595
-
-
/usr/bin/sortsort3⤵PID:2594
-
-
/bin/grepgrep -E "roundcube\$"3⤵PID:2593
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2592
-
-
/usr/bin/headhead -n 703⤵PID:2603
-
-
/usr/bin/uniquniq3⤵PID:2602
-
-
/usr/bin/sortsort3⤵PID:2601
-
-
/bin/grepgrep -E "passbolt\\.php\$"3⤵PID:2600
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2599
-
-
/usr/bin/headhead -n 703⤵PID:2610
-
-
/usr/bin/uniquniq3⤵PID:2609
-
-
/usr/bin/sortsort3⤵PID:2608
-
-
/bin/grepgrep -E "jetty-realm\\.properties\$"3⤵PID:2607
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2606
-
-
/usr/bin/headhead -n 703⤵PID:2617
-
-
/usr/bin/uniquniq3⤵PID:2616
-
-
/usr/bin/sortsort3⤵PID:2615
-
-
/bin/grepgrep -E "master\\.key\$|hudson\\.util\\.Secret\$|credentials\\.xml\$|config\\.xml\$|.*jenkins\$"3⤵PID:2614
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2613
-
-
/usr/bin/headhead -n 703⤵PID:2624
-
-
/usr/bin/uniquniq3⤵PID:2623
-
-
/usr/bin/sortsort3⤵PID:2622
-
-
/bin/grepgrep -E "\\.wgetrc\$"3⤵PID:2621
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2620
-
-
/usr/bin/headhead -n 703⤵PID:2631
-
-
/usr/bin/uniquniq3⤵PID:2630
-
-
/usr/bin/sortsort3⤵PID:2629
-
-
/bin/grepgrep -E "access\\.log\$|error\\.log\$"3⤵PID:2628
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2627
-
-
/usr/bin/headhead -n 703⤵PID:2638
-
-
/usr/bin/uniquniq3⤵PID:2637
-
-
/usr/bin/sortsort3⤵PID:2636
-
-
/bin/grepgrep -E "\\.bashrc\$|\\.google_authenticator\$|hosts\\.equiv\$|\\.lesshst\$|\\.plan\$|\\.profile\$|\\.recently-used\\.xbel\$|\\.rhosts\$|\\.sudo_as_admin_successful\$"3⤵PID:2635
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2634
-
-
/usr/bin/headhead -n 703⤵PID:2645
-
-
/usr/bin/uniquniq3⤵PID:2644
-
-
/usr/bin/sortsort3⤵PID:2643
-
-
/bin/grepgrep -E ".*\\.rdg\$|AppEvent\\.Evt\$|autounattend\\.xml\$|ConsoleHost_history\\.txt\$|FreeSSHDservice\\.ini\$|NetSetup\\.log\$|Ntds\\.dit\$|protecteduserkey\\.bin\$|RDCMan\\.settings\$|SAM\$|SYSTEM\$|SecEvent\\.Evt\$|appcmd\\.exe\$|bash\\.exe\$|datasources\\.xml\$|default\\.sav\$|drives\\.xml\$|groups\\.xml\$|https-xampp\\.conf\$|https\\.conf\$|iis6\\.log\$|index\\.dat\$|my\\.cnf\$|my\\.ini\$|ntuser\\.dat\$|pagefile\\.sys\$|printers\\.xml\$|recentservers\\.xml\$|scclient\\.exe\$|scheduledtasks\\.xml\$|security\\.sav\$|server\\.xml\$|setupinfo\$|setupinfo\\.bak\$|sitemanager\\.xml\$|sites\\.ini\$|software\$|software\\.sav\$|sysprep\\.inf\$|sysprep\\.xml\$|system\\.sav\$|unattend\\.inf\$|unattend\\.txt\$|unattend\\.xml\$|unattended\\.xml\$|wcx_ftp\\.ini\$|ws_ftp\\.ini\$|web.*\\.config\$|winscp\\.ini\$|wsl\\.exe\$|plum\\.sqlite\$"3⤵PID:2642
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2641
-
-
/usr/bin/headhead -n 703⤵PID:2653
-
-
/usr/bin/uniquniq3⤵PID:2652
-
-
/usr/bin/sortsort3⤵PID:2651
-
-
/bin/grepgrep -E ".*\\.db\$|.*\\.sqlite\$|.*\\.sqlite3\$"3⤵PID:2650
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2649
-
-
/bin/grepgrep -v -E "/man/|/usr/|/var/cache/|thumbcache|iconcache|IconCache|/man/|/usr/|/var/cache/"3⤵PID:2648
-
-
/usr/bin/headhead -n 703⤵PID:2660
-
-
/usr/bin/uniquniq3⤵PID:2659
-
-
/usr/bin/sortsort3⤵PID:2658
-
-
/bin/grepgrep -E "backup\$|backups\$"3⤵PID:2657
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2656
-
-
/usr/bin/headhead -n 703⤵PID:2667
-
-
/usr/bin/uniquniq3⤵PID:2666
-
-
/usr/bin/sortsort3⤵PID:2665
-
-
/bin/grepgrep -E ".*password.*\$|.*credential.*\$|creds.*\$|.*\\.maintenance.*\$|.*\\.key\$"3⤵PID:2664
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2663
-
-
/usr/bin/headhead -n 703⤵PID:2674
-
-
/usr/bin/uniquniq3⤵PID:2673
-
-
/usr/bin/sortsort3⤵PID:2672
-
-
/bin/grepgrep -E "crontab\\.db\$|crontab-ui\\.service\$"3⤵PID:2671
-
-
/bin/grepgrep -E "^/etc|^/sbin|^/var|^/srv|^/private|^/bin|^/opt|^/snap|^/mnt|^/media|^/cdrom|^/tmp|^/home/|/Users/|/root/|/var/www|^/.cache|^/usr|^/applications"3⤵PID:2670
-
-
/usr/bin/trtr "\\n" " "3⤵PID:2677
-
-
/usr/bin/trtr "\\n" "|"3⤵PID:2682
-
-
/bin/grepgrep "^/"3⤵PID:2681
-
-
/usr/bin/cutcut -d " " -f53⤵PID:2680
-
-
/bin/catcat /proc/self/mountinfo3⤵PID:2683
-
-
/bin/grepgrep -E "\\W/\\W"3⤵PID:2687
-
-
/bin/grepgrep -v "#"3⤵PID:2686
-
-
/usr/bin/awkawk "{print \$1}"3⤵PID:2688
-
-
/bin/catcat /etc/fstab3⤵PID:2685
-
-
/usr/bin/trtr "\\n" "|"3⤵PID:2695
-
-
/bin/grepgrep -Ev "/sys|/proc|/dev|/dev/pts|/run|/|/sys/kernel/security|/dev/shm|/run/lock|/sys/fs/cgroup|/sys/fs/cgroup/unified|/sys/fs/cgroup/systemd|/sys/fs/pstore|/sys/fs/cgroup/cpuset|/sys/fs/cgroup/perf_event|/sys/fs/cgroup/blkio|/sys/fs/cgroup/hugetlb|/sys/fs/cgroup/cpu,cpuacct|/sys/fs/cgroup/memory|/sys/fs/cgroup/net_cls,net_prio|/sys/fs/cgroup/pids|/sys/fs/cgroup/rdma|/sys/fs/cgroup/devices|/sys/fs/cgroup/freezer|/proc/sys/fs/binfmt_misc|/dev/hugepages|/sys/kernel/debug|/dev/mqueue|/sys/fs/fuse/connections|/sys/kernel/config|/proc/sys/fs/binfmt_misc|/run/user/0|/run/user/0/gvfs|/sys/kernel/debug/tracing|UUID=040d9bdb-513b-4ecf-adde-309e7b54b137"3⤵PID:2694
-
-
/usr/bin/awkawk "{print \$1}"3⤵PID:2693
-
-
/bin/grepgrep -Ev "swap|/cdrom|/floppy|/dev/shm"3⤵PID:2692
-
-
/bin/grepgrep "^/"3⤵PID:2691
-
-
/bin/catcat /etc/fstab3⤵PID:2690
-
-
/usr/bin/trtr " " "|"3⤵PID:2698
-
-
/usr/bin/groupsgroups3⤵PID:2697
-
-
/usr/bin/trtr " " "|"3⤵PID:2702
-
-
/usr/bin/cutcut -d : -f 23⤵PID:2701
-
-
/usr/bin/groupsgroups root3⤵PID:2700
-
-
/usr/bin/whoamiwhoami3⤵PID:2704
-
-
/usr/bin/idid -u root3⤵PID:2703
-
-
/usr/bin/whoamiwhoami3⤵PID:2705
-
-
/bin/sedsed "s/:/\$|^/g"3⤵PID:2715
-
-
/bin/sedsed "s/^\\.://g"3⤵PID:2714
-
-
/bin/sedsed "s/:\\.\$//g"3⤵PID:2713
-
-
/bin/sedsed "s/:\\.:/:/g"3⤵PID:2712
-
-
/bin/sedsed "s/|sys|/|sys[[:space:]:]|^sys\$|/"3⤵PID:2723
-
-
/bin/sedsed "s/|daemon|/|daemon[[:space:]:]|^daemon\$|/"3⤵PID:2724
-
-
/bin/sedsed "s/|bin|/|bin[[:space:]:]|^bin\$|/"3⤵PID:2722
-
-
/usr/bin/trtr "\\n" "|"3⤵PID:2721
-
-
/usr/bin/cutcut -d : -f 13⤵PID:2720
-
-
/bin/grepgrep -i "sh\$"3⤵PID:2719
-
-
/bin/grepgrep -v "^root:"3⤵PID:2718
-
-
/bin/catcat /etc/passwd3⤵PID:2717
-
-
/bin/sedsed "s/|bin|/|bin[[:space:]:]|^bin\$|/"3⤵PID:2731
-
-
/usr/bin/trtr "\\n" "|"3⤵PID:2730
-
-
/usr/bin/cutcut -d : -f 13⤵PID:2729
-
-
/usr/bin/sortsort3⤵PID:2728
-
-
/bin/grepgrep -i -v "sh\$"3⤵PID:2727
-
-
/bin/catcat /etc/passwd3⤵PID:2726
-
-
/bin/catcat3⤵PID:2732
-
-
/bin/catcat3⤵PID:2733
-
-
/bin/catcat3⤵PID:2734
-
-
/bin/catcat3⤵PID:2736
-
-
/bin/catcat3⤵PID:2738
-
-
/bin/catcat3⤵PID:2739
-
-
/bin/catcat3⤵PID:2740
-
-
/bin/catcat3⤵PID:2741
-
-
/bin/catcat3⤵PID:2742
-
-
/bin/catcat3⤵PID:2743
-
-
/bin/catcat3⤵PID:2744
-
-
/bin/catcat3⤵PID:2745
-
-
/bin/catcat3⤵PID:2746
-
-
/bin/catcat3⤵PID:2747
-
-
/bin/catcat3⤵PID:2748
-
-
/bin/catcat3⤵PID:2749
-
-
/bin/catcat3⤵PID:2750
-
-
/bin/catcat3⤵PID:2751
-
-
/bin/catcat3⤵PID:2752
-
-
/bin/catcat3⤵PID:2753
-
-
/bin/catcat3⤵PID:2754
-
-
/bin/catcat3⤵PID:2756
-
-
/bin/catcat3⤵PID:2758
-
-
/bin/catcat3⤵PID:2759
-
-
/bin/catcat3⤵PID:2761
-
-
/bin/catcat3⤵PID:2763
-
-
/usr/bin/wcwc -l3⤵PID:2766
-
-
/bin/psps auxwww3⤵PID:2765
-
-
/bin/grepgrep -q system_information3⤵PID:2769
-
-
/usr/bin/wcwc -c3⤵PID:2772
-
-
/usr/bin/seqseq 1 303⤵PID:2773
-
-
/usr/bin/seqseq 1 193⤵PID:2774
-
-
/usr/bin/seqseq 1 303⤵PID:2775
-
-
/usr/bin/seqseq 1 303⤵PID:2776
-
-
/usr/bin/seqseq 1 303⤵PID:2777
-
-
/usr/bin/seqseq 1 193⤵PID:2778
-
-
/bin/hostnamehostname3⤵PID:2780
-
-
/bin/sedsed "s/\\\\/\\\\\\\\/g; s/\"/\\\\\"/g; s/ / /g"3⤵PID:2783
-
-
/bin/sedsed "s/\\\\/\\\\\\\\/g; s/\"/\\\\\"/g; s/ / /g"3⤵PID:2786
-
-
/bin/sedsed -E "s, 4.0.[0-9]+| 4.1.[0-9]+| 4.2.[0-9]+| 4.3.[0-9]+| 4.4.[0-9]+| 4.5.[0-9]+| 4.6.[0-9]+| 4.7.[0-9]+| 4.8.[0-9]+| 4.9.[0-9]+| 4.10.[0-9]+| 4.11.[0-9]+| 4.12.[0-9]+| 4.13.[0-9]+| 3.9.6| 3.9.0| 3.9| 3.8.9| 3.8.8| 3.8.7| 3.8.6| 3.8.5| 3.8.4| 3.8.3| 3.8.2| 3.8.1| 3.8.0| 3.8| 3.7.6| 3.7.0| 3.7| 3.6.0| 3.6| 3.5.0| 3.5| 3.4.9| 3.4.8| 3.4.6| 3.4.5| 3.4.4| 3.4.3| 3.4.2| 3.4.1| 3.4.0| 3.4| 3.3| 3.2| 3.19.0| 3.16.0| 3.15| 3.14| 3.13.1| 3.13.0| 3.13| 3.12.0| 3.12| 3.11.0| 3.11| 3.10.6| 3.10.0| 3.10| 3.1.0| 3.0.6| 3.0.5| 3.0.4| 3.0.3| 3.0.2| 3.0.1| 3.0.0| 2.6.9| 2.6.8| 2.6.7| 2.6.6| 2.6.5| 2.6.4| 2.6.39| 2.6.38| 2.6.37| 2.6.36| 2.6.35| 2.6.34| 2.6.33| 2.6.32| 2.6.31| 2.6.30| 2.6.3| 2.6.29| 2.6.28| 2.6.27| 2.6.26| 2.6.25| 2.6.24.1| 2.6.24| 2.6.23| 2.6.22| 2.6.21| 2.6.20| 2.6.2| 2.6.19| 2.6.18| 2.6.17| 2.6.16| 2.6.15| 2.6.14| 2.6.13| 2.6.12| 2.6.11| 2.6.10| 2.6.1| 2.6.0| 2.4.9| 2.4.8| 2.4.7| 2.4.6| 2.4.5| 2.4.4| 2.4.37| 2.4.36| 2.4.35| 2.4.34| 2.4.33| 2.4.32| 2.4.31| 2.4.30| 2.4.29| 2.4.28| 2.4.27| 2.4.26| 2.4.25| 2.4.24| 2.4.23| 2.4.22| 2.4.21| 2.4.20| 2.4.19| 2.4.18| 2.4.17| 2.4.16| 2.4.15| 2.4.14| 2.4.13| 2.4.12| 2.4.11| 2.4.10| 2.2.24,[1;31m&[0m,"3⤵PID:2808
-
-
/bin/sedsed -E "s,2.6.18-274.17.1.el5|2.6.18-274.18.1.el5|2.6.18-308.el5|2.6.18-308.1.1.el5|2.6.18-308.4.1.el5|2.6.18-308.8.1.el5|2.6.18-308.8.2.el5|2.6.18-308.11.1.el5|2.6.18-308.13.1.el5|2.6.18-308.16.1.el5|2.6.18-308.20.1.el5|2.6.18-308.24.1.el5|2.6.18-348.el5|2.6.18-348.1.1.el5|2.6.18-348.2.1.el5|2.6.18-348.3.1.el5|2.6.18-348.4.1.el5|2.6.18-348.6.1.el5|2.6.18-348.12.1.el5|2.6.18-348.16.1.el5|2.6.18-348.18.1.el5|2.6.18-348.19.1.el5|2.6.18-348.21.1.el5|2.6.18-348.22.1.el5|2.6.18-348.23.1.el5|2.6.18-348.25.1.el5|2.6.18-348.27.1.el5|2.6.18-348.28.1.el5|2.6.18-348.29.1.el5|2.6.18-348.30.1.el5|2.6.18-348.31.2.el5|2.6.18-371.el5|2.6.18-371.1.2.el5|2.6.18-371.3.1.el5|2.6.18-371.4.1.el5|2.6.18-371.6.1.el5|2.6.18-371.8.1.el5|2.6.18-371.9.1.el5|2.6.18-371.11.1.el5|2.6.18-371.12.1.el5|2.6.18-398.el5|2.6.18-400.el5|2.6.18-400.1.1.el5|2.6.18-402.el5|2.6.18-404.el5|2.6.18-406.el5|2.6.18-407.el5|2.6.18-408.el5|2.6.18-409.el5|2.6.18-410.el5|2.6.18-411.el5|2.6.18-412.el5,[1;31;103m&[0m,"3⤵PID:2802
-
-
/bin/sedsed -E "s,4.4.0-1009-raspi2|4.4.0-1012-snapdragon|4.4.0-21-generic|4.4.0-21-generic-lpae|4.4.0-21-lowlatency|4.4.0-21-powerpc-e500mc|4.4.0-21-powerpc-smp|4.4.0-21-powerpc64-emb|4.4.0-21-powerpc64-smp|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"3⤵PID:2799
-
-
/bin/sedsed -E "s,2.6.33.9-rt31.66.el6rt|2.6.33.9-rt31.74.el6rt|2.6.33.9-rt31.75.el6rt|2.6.33.9-rt31.79.el6rt|3.0.9-rt26.45.el6rt|3.0.9-rt26.46.el6rt|3.0.18-rt34.53.el6rt|3.0.25-rt44.57.el6rt|3.0.30-rt50.62.el6rt|3.0.36-rt57.66.el6rt|3.2.23-rt37.56.el6rt|3.2.33-rt50.66.el6rt|3.6.11-rt28.20.el6rt|3.6.11-rt30.25.el6rt|3.6.11.2-rt33.39.el6rt|3.6.11.5-rt37.55.el6rt|3.8.13-rt14.20.el6rt|3.8.13-rt14.25.el6rt|3.8.13-rt27.33.el6rt|3.8.13-rt27.34.el6rt|3.8.13-rt27.40.el6rt|3.10.0-229.rt56.144.el6rt|3.10.0-229.rt56.147.el6rt|3.10.0-229.rt56.149.el6rt|3.10.0-229.rt56.151.el6rt|3.10.0-229.rt56.153.el6rt|3.10.0-229.rt56.158.el6rt|3.10.0-229.rt56.161.el6rt|3.10.0-229.rt56.162.el6rt|3.10.0-327.rt56.170.el6rt|3.10.0-327.rt56.171.el6rt|3.10.0-327.rt56.176.el6rt|3.10.0-327.rt56.183.el6rt|3.10.0-327.rt56.190.el6rt|3.10.0-327.rt56.194.el6rt|3.10.0-327.rt56.195.el6rt|3.10.0-327.rt56.197.el6rt|3.10.33-rt32.33.el6rt|3.10.33-rt32.34.el6rt|3.10.33-rt32.43.el6rt|3.10.33-rt32.45.el6rt|3.10.33-rt32.51.el6rt|3.10.33-rt32.52.el6rt|3.10.58-rt62.58.el6rt|3.10.58-rt62.60.el6rt|2.6.32-71.7.1.el6|2.6.32-71.14.1.el6|2.6.32-71.18.1.el6|2.6.32-71.18.2.el6|2.6.32-71.24.1.el6|2.6.32-71.29.1.el6|2.6.32-71.31.1.el6|2.6.32-71.34.1.el6|2.6.32-71.35.1.el6|2.6.32-71.36.1.el6|2.6.32-71.37.1.el6|2.6.32-71.38.1.el6|2.6.32-71.39.1.el6|2.6.32-71.40.1.el6|2.6.32-131.0.15.el6|2.6.32-131.2.1.el6|2.6.32-131.4.1.el6|2.6.32-131.6.1.el6|2.6.32-131.12.1.el6,[1;31;103m&[0m,"3⤵PID:2803
-
-
/bin/sedsed -E "s,3.2.0-53-generic-pae|3.2.0-53-lowlatency|3.2.0-53-lowlatency-pae|3.2.0-53-virtual|3.2.0-54-generic|3.2.0-54-generic-pae|3.2.0-54-lowlatency|3.2.0-54-lowlatency-pae|3.2.0-54-virtual|3.2.0-55-generic|3.2.0-55-generic-pae|3.2.0-55-lowlatency|3.2.0-55-lowlatency-pae|3.2.0-55-virtual|3.2.0-56-generic|3.2.0-56-generic-pae|3.2.0-56-lowlatency|3.2.0-56-lowlatency-pae|3.2.0-56-virtual|3.2.0-57-generic|3.2.0-57-generic-pae|3.2.0-57-lowlatency|3.2.0-57-lowlatency-pae|3.2.0-57-virtual|3.2.0-58-generic|3.2.0-58-generic-pae|3.2.0-58-lowlatency|3.2.0-58-lowlatency-pae|3.2.0-58-virtual|3.2.0-59-generic|3.2.0-59-generic-pae|3.2.0-59-lowlatency|3.2.0-59-lowlatency-pae|3.2.0-59-virtual|3.2.0-60-generic|3.2.0-60-generic-pae|3.2.0-60-lowlatency|3.2.0-60-lowlatency-pae|3.2.0-60-virtual|3.2.0-61-generic|3.2.0-61-generic-pae|3.2.0-61-virtual|3.2.0-63-generic|3.2.0-63-generic-pae|3.2.0-63-lowlatency|3.2.0-63-lowlatency-pae|3.2.0-63-virtual|3.2.0-64-generic|3.2.0-64-generic-pae|3.2.0-64-lowlatency|3.2.0-64-lowlatency-pae|3.2.0-64-virtual|3.2.0-65-generic|3.2.0-65-generic-pae|3.2.0-65-lowlatency|3.2.0-65-lowlatency-pae|3.2.0-65-virtual|3.2.0-67-generic|3.2.0-67-generic-pae|3.2.0-67-lowlatency|3.2.0-67-lowlatency-pae|3.2.0-67-virtual|3.2.0-68-generic,[1;31;103m&[0m,"3⤵PID:2792
-
-
/bin/sedsed -E "s,3.19.0-42-lowlatency|3.19.0-43-generic|3.19.0-43-lowlatency|3.19.0-47-generic|3.19.0-47-lowlatency|3.19.0-49-generic|3.19.0-49-lowlatency|3.19.0-51-generic|3.19.0-51-lowlatency|3.19.0-56-generic|3.19.0-56-lowlatency|3.19.0-58-generic|3.19.0-58-lowlatency|3.19.0-59-generic|3.19.0-59-lowlatency|3.19.0-61-generic|3.19.0-61-lowlatency|3.19.0-64-generic|3.19.0-64-lowlatency|3.19.0-65-generic|3.19.0-65-lowlatency|3.19.0-66-generic|3.19.0-66-lowlatency|3.19.0-68-generic|3.19.0-68-lowlatency|3.19.0-69-generic|3.19.0-69-lowlatency|3.19.0-71-generic|3.19.0-71-lowlatency|3.4.0-5-chromebook|4.2.0-18-generic|4.2.0-18-lowlatency|4.2.0-19-generic|4.2.0-19-lowlatency|4.2.0-21-generic|4.2.0-21-lowlatency|4.2.0-22-generic|4.2.0-22-lowlatency|4.2.0-23-generic|4.2.0-23-lowlatency|4.2.0-25-generic|4.2.0-25-lowlatency|4.2.0-27-generic|4.2.0-27-lowlatency|4.2.0-30-generic|4.2.0-30-lowlatency|4.2.0-34-generic|4.2.0-34-lowlatency|4.2.0-35-generic|4.2.0-35-lowlatency|4.2.0-36-generic|4.2.0-36-lowlatency|4.2.0-38-generic|4.2.0-38-lowlatency|4.2.0-41-generic|4.2.0-41-lowlatency|4.4.0-21-generic|4.4.0-21-lowlatency|4.4.0-22-generic|4.4.0-22-lowlatency|4.4.0-24-generic|4.4.0-24-lowlatency|4.4.0-28-generic|4.4.0-28-lowlatency|4.4.0-31-generic|4.4.0-31-lowlatency|4.4.0-34-generic|4.4.0-34-lowlatency|4.4.0-36-generic|4.4.0-36-lowlatency|4.4.0-38-generic|4.4.0-38-lowlatency|4.4.0-42-generic|4.4.0-42-lowlatency,[1;31;103m&[0m,"3⤵PID:2798
-
-
/bin/sedsed -E "s,3.2.0-68-generic-pae|3.2.0-68-lowlatency|3.2.0-68-lowlatency-pae|3.2.0-68-virtual|3.2.0-69-generic|3.2.0-69-generic-pae|3.2.0-69-lowlatency|3.2.0-69-lowlatency-pae|3.2.0-69-virtual|3.2.0-70-generic|3.2.0-70-generic-pae|3.2.0-70-lowlatency|3.2.0-70-lowlatency-pae|3.2.0-70-virtual|3.2.0-72-generic|3.2.0-72-generic-pae|3.2.0-72-lowlatency|3.2.0-72-lowlatency-pae|3.2.0-72-virtual|3.2.0-73-generic|3.2.0-73-generic-pae|3.2.0-73-lowlatency|3.2.0-73-lowlatency-pae|3.2.0-73-virtual|3.2.0-74-generic|3.2.0-74-generic-pae|3.2.0-74-lowlatency|3.2.0-74-lowlatency-pae|3.2.0-74-virtual|3.2.0-75-generic|3.2.0-75-generic-pae|3.2.0-75-lowlatency|3.2.0-75-lowlatency-pae|3.2.0-75-virtual|3.2.0-76-generic|3.2.0-76-generic-pae|3.2.0-76-lowlatency|3.2.0-76-lowlatency-pae|3.2.0-76-virtual|3.2.0-77-generic|3.2.0-77-generic-pae|3.2.0-77-lowlatency|3.2.0-77-lowlatency-pae|3.2.0-77-virtual|3.2.0-79-generic|3.2.0-79-generic-pae|3.2.0-79-lowlatency|3.2.0-79-lowlatency-pae|3.2.0-79-virtual|3.2.0-80-generic|3.2.0-80-generic-pae|3.2.0-80-lowlatency|3.2.0-80-lowlatency-pae|3.2.0-80-virtual|3.2.0-82-generic|3.2.0-82-generic-pae|3.2.0-82-lowlatency|3.2.0-82-lowlatency-pae|3.2.0-82-virtual|3.2.0-83-generic|3.2.0-83-generic-pae|3.2.0-83-virtual|3.2.0-84-generic,[1;31;103m&[0m,"3⤵PID:2793
-
-
/bin/sedsed -E "s,2.6.32-131.17.1.el6|2.6.32-131.21.1.el6|2.6.32-131.22.1.el6|2.6.32-131.25.1.el6|2.6.32-131.26.1.el6|2.6.32-131.28.1.el6|2.6.32-131.29.1.el6|2.6.32-131.30.1.el6|2.6.32-131.30.2.el6|2.6.32-131.33.1.el6|2.6.32-131.35.1.el6|2.6.32-131.36.1.el6|2.6.32-131.37.1.el6|2.6.32-131.38.1.el6|2.6.32-131.39.1.el6|2.6.32-220.el6|2.6.32-220.2.1.el6|2.6.32-220.4.1.el6|2.6.32-220.4.2.el6|2.6.32-220.4.7.bgq.el6|2.6.32-220.7.1.el6|2.6.32-220.7.3.p7ih.el6|2.6.32-220.7.4.p7ih.el6|2.6.32-220.7.6.p7ih.el6|2.6.32-220.7.7.p7ih.el6|2.6.32-220.13.1.el6|2.6.32-220.17.1.el6|2.6.32-220.23.1.el6|2.6.32-220.24.1.el6|2.6.32-220.25.1.el6|2.6.32-220.26.1.el6|2.6.32-220.28.1.el6|2.6.32-220.30.1.el6|2.6.32-220.31.1.el6|2.6.32-220.32.1.el6|2.6.32-220.34.1.el6|2.6.32-220.34.2.el6|2.6.32-220.38.1.el6|2.6.32-220.39.1.el6|2.6.32-220.41.1.el6|2.6.32-220.42.1.el6|2.6.32-220.45.1.el6|2.6.32-220.46.1.el6|2.6.32-220.48.1.el6|2.6.32-220.51.1.el6|2.6.32-220.52.1.el6|2.6.32-220.53.1.el6|2.6.32-220.54.1.el6|2.6.32-220.55.1.el6|2.6.32-220.56.1.el6|2.6.32-220.57.1.el6|2.6.32-220.58.1.el6|2.6.32-220.60.2.el6|2.6.32-220.62.1.el6|2.6.32-220.63.2.el6|2.6.32-220.64.1.el6|2.6.32-220.65.1.el6|2.6.32-220.66.1.el6|2.6.32-220.67.1.el6|2.6.32-279.el6|2.6.32-279.1.1.el6|2.6.32-279.2.1.el6|2.6.32-279.5.1.el6|2.6.32-279.5.2.el6|2.6.32-279.9.1.el6|2.6.32-279.11.1.el6|2.6.32-279.14.1.bgq.el6|2.6.32-279.14.1.el6|2.6.32-279.19.1.el6|2.6.32-279.22.1.el6|2.6.32-279.23.1.el6|2.6.32-279.25.1.el6|2.6.32-279.25.2.el6|2.6.32-279.31.1.el6|2.6.32-279.33.1.el6|2.6.32-279.34.1.el6|2.6.32-279.37.2.el6|2.6.32-279.39.1.el6,[1;31;103m&[0m,"3⤵PID:2804
-
-
/bin/sedsed -E "s,3.13.0-24-generic|3.13.0-24-generic-lpae|3.13.0-24-lowlatency|3.13.0-24-powerpc-e500|3.13.0-24-powerpc-e500mc|3.13.0-24-powerpc-smp|3.13.0-24-powerpc64-emb|3.13.0-24-powerpc64-smp|3.13.0-27-generic|3.13.0-27-lowlatency|3.13.0-29-generic|3.13.0-29-lowlatency|3.13.0-3-exynos5|3.13.0-30-generic|3.13.0-30-lowlatency|3.13.0-32-generic|3.13.0-32-lowlatency|3.13.0-33-generic|3.13.0-33-lowlatency|3.13.0-34-generic|3.13.0-34-lowlatency|3.13.0-35-generic|3.13.0-35-lowlatency|3.13.0-36-generic|3.13.0-36-lowlatency|3.13.0-37-generic|3.13.0-37-lowlatency|3.13.0-39-generic|3.13.0-39-lowlatency|3.13.0-40-generic|3.13.0-40-lowlatency|3.13.0-41-generic|3.13.0-41-lowlatency|3.13.0-43-generic|3.13.0-43-lowlatency|3.13.0-44-generic|3.13.0-44-lowlatency|3.13.0-46-generic|3.13.0-46-lowlatency|3.13.0-48-generic|3.13.0-48-lowlatency|3.13.0-49-generic|3.13.0-49-lowlatency|3.13.0-51-generic|3.13.0-51-lowlatency|3.13.0-52-generic|3.13.0-52-lowlatency|3.13.0-53-generic|3.13.0-53-lowlatency|3.13.0-54-generic|3.13.0-54-lowlatency|3.13.0-55-generic|3.13.0-55-lowlatency|3.13.0-57-generic|3.13.0-57-lowlatency|3.13.0-58-generic|3.13.0-58-lowlatency|3.13.0-59-generic|3.13.0-59-lowlatency|3.13.0-61-generic|3.13.0-61-lowlatency|3.13.0-62-generic|3.13.0-62-lowlatency|3.13.0-63-generic|3.13.0-63-lowlatency|3.13.0-65-generic|3.13.0-65-lowlatency|3.13.0-66-generic|3.13.0-66-lowlatency,[1;31;103m&[0m,"3⤵PID:2795
-
-
/bin/sedsed -E "s,3.2.0-84-generic-pae|3.2.0-84-virtual|3.2.0-85-generic|3.2.0-85-generic-pae|3.2.0-85-virtual|3.2.0-86-generic|3.2.0-86-generic-pae|3.2.0-86-virtual|3.2.0-87-generic|3.2.0-87-generic-pae|3.2.0-87-virtual|3.2.0-88-generic|3.2.0-88-generic-pae|3.2.0-88-virtual|3.2.0-89-generic|3.2.0-89-generic-pae|3.2.0-89-virtual|3.2.0-90-generic|3.2.0-90-generic-pae|3.2.0-90-virtual|3.2.0-91-generic|3.2.0-91-generic-pae|3.2.0-91-virtual|3.2.0-92-generic|3.2.0-92-generic-pae|3.2.0-92-virtual|3.2.0-93-generic|3.2.0-93-generic-pae|3.2.0-93-virtual|3.2.0-94-generic|3.2.0-94-generic-pae|3.2.0-94-virtual|3.2.0-95-generic|3.2.0-95-generic-pae|3.2.0-95-virtual|3.2.0-96-generic|3.2.0-96-generic-pae|3.2.0-96-virtual|3.2.0-97-generic|3.2.0-97-generic-pae|3.2.0-97-virtual|3.2.0-98-generic|3.2.0-98-generic-pae|3.2.0-98-virtual|3.2.0-99-generic|3.2.0-99-generic-pae|3.2.0-99-virtual|3.5.0-40-generic|3.5.0-41-generic|3.5.0-42-generic|3.5.0-43-generic|3.5.0-44-generic|3.5.0-45-generic|3.5.0-46-generic|3.5.0-49-generic|3.5.0-51-generic|3.5.0-52-generic|3.5.0-54-generic|3.8.0-19-generic|3.8.0-21-generic|3.8.0-22-generic|3.8.0-23-generic|3.8.0-27-generic|3.8.0-29-generic|3.8.0-30-generic|3.8.0-31-generic|3.8.0-32-generic|3.8.0-33-generic|3.8.0-34-generic|3.8.0-35-generic|3.8.0-36-generic|3.8.0-37-generic|3.8.0-38-generic|3.8.0-39-generic|3.8.0-41-generic|3.8.0-42-generic,[1;31;103m&[0m,"3⤵PID:2794
-
-
/bin/sedsed -E "s,2.6.32-431.71.1.el6|2.6.32-431.72.1.el6|2.6.32-431.73.2.el6|2.6.32-431.74.1.el6|2.6.32-504.el6|2.6.32-504.1.3.el6|2.6.32-504.3.3.el6|2.6.32-504.8.1.el6|2.6.32-504.8.2.bgq.el6|2.6.32-504.12.2.el6|2.6.32-504.16.2.el6|2.6.32-504.23.4.el6|2.6.32-504.30.3.el6|2.6.32-504.30.5.p7ih.el6|2.6.32-504.33.2.el6|2.6.32-504.36.1.el6|2.6.32-504.38.1.el6|2.6.32-504.40.1.el6|2.6.32-504.43.1.el6|2.6.32-504.46.1.el6|2.6.32-504.49.1.el6|2.6.32-504.50.1.el6|2.6.32-504.51.1.el6|2.6.32-504.52.1.el6|2.6.32-573.el6|2.6.32-573.1.1.el6|2.6.32-573.3.1.el6|2.6.32-573.4.2.bgq.el6|2.6.32-573.7.1.el6|2.6.32-573.8.1.el6|2.6.32-573.12.1.el6|2.6.32-573.18.1.el6|2.6.32-573.22.1.el6|2.6.32-573.26.1.el6|2.6.32-573.30.1.el6|2.6.32-573.32.1.el6|2.6.32-573.34.1.el6|2.6.32-642.el6|2.6.32-642.1.1.el6|2.6.32-642.3.1.el6|2.6.32-642.4.2.el6|2.6.32-642.6.1.el6,[1;31;103m&[0m,"3⤵PID:2806
-
-
/bin/sedsed -E "s,3.10.0-229.rt56.141.el7|3.10.0-229.1.2.rt56.141.2.el7_1|3.10.0-229.4.2.rt56.141.6.el7_1|3.10.0-229.7.2.rt56.141.6.el7_1|3.10.0-229.11.1.rt56.141.11.el7_1|3.10.0-229.14.1.rt56.141.13.el7_1|3.10.0-229.20.1.rt56.141.14.el7_1|3.10.0-229.rt56.141.el7|3.10.0-327.rt56.204.el7|3.10.0-327.4.5.rt56.206.el7_2|3.10.0-327.10.1.rt56.211.el7_2|3.10.0-327.13.1.rt56.216.el7_2|3.10.0-327.18.2.rt56.223.el7_2|3.10.0-327.22.2.rt56.230.el7_2|3.10.0-327.28.2.rt56.234.el7_2|3.10.0-327.28.3.rt56.235.el7|3.10.0-327.36.1.rt56.237.el7|3.10.0-123.el7|3.10.0-123.1.2.el7|3.10.0-123.4.2.el7|3.10.0-123.4.4.el7|3.10.0-123.6.3.el7|3.10.0-123.8.1.el7|3.10.0-123.9.2.el7|3.10.0-123.9.3.el7|3.10.0-123.13.1.el7|3.10.0-123.13.2.el7|3.10.0-123.20.1.el7|3.10.0-229.el7|3.10.0-229.1.2.el7|3.10.0-229.4.2.el7|3.10.0-229.7.2.el7|3.10.0-229.11.1.el7|3.10.0-229.14.1.el7|3.10.0-229.20.1.el7|3.10.0-229.24.2.el7|3.10.0-229.26.2.el7|3.10.0-229.28.1.el7|3.10.0-229.30.1.el7|3.10.0-229.34.1.el7|3.10.0-229.38.1.el7|3.10.0-229.40.1.el7|3.10.0-229.42.1.el7|3.10.0-327.el7|3.10.0-327.3.1.el7|3.10.0-327.4.4.el7|3.10.0-327.4.5.el7|3.10.0-327.10.1.el7|3.10.0-327.13.1.el7|3.10.0-327.18.2.el7|3.10.0-327.22.2.el7|3.10.0-327.28.2.el7|3.10.0-327.28.3.el7|3.10.0-327.36.1.el7|3.10.0-327.36.2.el7|3.10.0-229.1.2.ael7b|3.10.0-229.4.2.ael7b|3.10.0-229.7.2.ael7b|3.10.0-229.11.1.ael7b|3.10.0-229.14.1.ael7b|3.10.0-229.20.1.ael7b|3.10.0-229.24.2.ael7b|3.10.0-229.26.2.ael7b|3.10.0-229.28.1.ael7b|3.10.0-229.30.1.ael7b|3.10.0-229.34.1.ael7b|3.10.0-229.38.1.ael7b|3.10.0-229.40.1.ael7b|3.10.0-229.42.1.ael7b|4.2.0-0.21.el7,[1;31;103m&[0m,"3⤵PID:2807
-
-
/bin/sedsed -E "s,2.6.32-279.41.1.el6|2.6.32-279.42.1.el6|2.6.32-279.43.1.el6|2.6.32-279.43.2.el6|2.6.32-279.46.1.el6|2.6.32-358.el6|2.6.32-358.0.1.el6|2.6.32-358.2.1.el6|2.6.32-358.6.1.el6|2.6.32-358.6.2.el6|2.6.32-358.6.3.p7ih.el6|2.6.32-358.11.1.bgq.el6|2.6.32-358.11.1.el6|2.6.32-358.14.1.el6|2.6.32-358.18.1.el6|2.6.32-358.23.2.el6|2.6.32-358.28.1.el6|2.6.32-358.32.3.el6|2.6.32-358.37.1.el6|2.6.32-358.41.1.el6|2.6.32-358.44.1.el6|2.6.32-358.46.1.el6|2.6.32-358.46.2.el6|2.6.32-358.48.1.el6|2.6.32-358.49.1.el6|2.6.32-358.51.1.el6|2.6.32-358.51.2.el6|2.6.32-358.55.1.el6|2.6.32-358.56.1.el6|2.6.32-358.59.1.el6|2.6.32-358.61.1.el6|2.6.32-358.62.1.el6|2.6.32-358.65.1.el6|2.6.32-358.67.1.el6|2.6.32-358.68.1.el6|2.6.32-358.69.1.el6|2.6.32-358.70.1.el6|2.6.32-358.71.1.el6|2.6.32-358.72.1.el6|2.6.32-358.73.1.el6|2.6.32-358.111.1.openstack.el6|2.6.32-358.114.1.openstack.el6|2.6.32-358.118.1.openstack.el6|2.6.32-358.123.4.openstack.el6|2.6.32-431.el6|2.6.32-431.1.1.bgq.el6|2.6.32-431.1.2.el6|2.6.32-431.3.1.el6|2.6.32-431.5.1.el6|2.6.32-431.11.2.el6|2.6.32-431.17.1.el6|2.6.32-431.20.3.el6|2.6.32-431.20.5.el6|2.6.32-431.23.3.el6|2.6.32-431.29.2.el6|2.6.32-431.37.1.el6|2.6.32-431.40.1.el6|2.6.32-431.40.2.el6|2.6.32-431.46.2.el6|2.6.32-431.50.1.el6|2.6.32-431.53.2.el6|2.6.32-431.56.1.el6|2.6.32-431.59.1.el6|2.6.32-431.61.2.el6|2.6.32-431.64.1.el6|2.6.32-431.66.1.el6|2.6.32-431.68.1.el6|2.6.32-431.69.1.el6|2.6.32-431.70.1.el6,[1;31;103m&[0m,"3⤵PID:2805
-
-
/bin/sedsed -E "s,2.6.18-128.29.1.el5|2.6.18-128.30.1.el5|2.6.18-128.31.1.el5|2.6.18-128.32.1.el5|2.6.18-128.35.1.el5|2.6.18-128.36.1.el5|2.6.18-128.37.1.el5|2.6.18-128.38.1.el5|2.6.18-128.39.1.el5|2.6.18-128.40.1.el5|2.6.18-128.41.1.el5|2.6.18-164.el5|2.6.18-164.2.1.el5|2.6.18-164.6.1.el5|2.6.18-164.9.1.el5|2.6.18-164.10.1.el5|2.6.18-164.11.1.el5|2.6.18-164.15.1.el5|2.6.18-164.17.1.el5|2.6.18-164.19.1.el5|2.6.18-164.21.1.el5|2.6.18-164.25.1.el5|2.6.18-164.25.2.el5|2.6.18-164.28.1.el5|2.6.18-164.30.1.el5|2.6.18-164.32.1.el5|2.6.18-164.34.1.el5|2.6.18-164.36.1.el5|2.6.18-164.37.1.el5|2.6.18-164.38.1.el5|2.6.18-194.el5|2.6.18-194.3.1.el5|2.6.18-194.8.1.el5|2.6.18-194.11.1.el5|2.6.18-194.11.3.el5|2.6.18-194.11.4.el5|2.6.18-194.17.1.el5|2.6.18-194.17.4.el5|2.6.18-194.26.1.el5|2.6.18-194.32.1.el5|2.6.18-238.el5|2.6.18-238.1.1.el5|2.6.18-238.5.1.el5|2.6.18-238.9.1.el5|2.6.18-238.12.1.el5|2.6.18-238.19.1.el5|2.6.18-238.21.1.el5|2.6.18-238.27.1.el5|2.6.18-238.28.1.el5|2.6.18-238.31.1.el5|2.6.18-238.33.1.el5|2.6.18-238.35.1.el5|2.6.18-238.37.1.el5|2.6.18-238.39.1.el5|2.6.18-238.40.1.el5|2.6.18-238.44.1.el5|2.6.18-238.45.1.el5|2.6.18-238.47.1.el5|2.6.18-238.48.1.el5|2.6.18-238.49.1.el5|2.6.18-238.50.1.el5|2.6.18-238.51.1.el5|2.6.18-238.52.1.el5|2.6.18-238.53.1.el5|2.6.18-238.54.1.el5|2.6.18-238.55.1.el5|2.6.18-238.56.1.el5|2.6.18-274.el5|2.6.18-274.3.1.el5|2.6.18-274.7.1.el5|2.6.18-274.12.1.el5,[1;31;103m&[0m,"3⤵PID:2801
-
-
/bin/sedsed -E "s,3.13.0-67-generic|3.13.0-67-lowlatency|3.13.0-68-generic|3.13.0-68-lowlatency|3.13.0-70-generic|3.13.0-70-lowlatency|3.13.0-71-generic|3.13.0-71-lowlatency|3.13.0-73-generic|3.13.0-73-lowlatency|3.13.0-74-generic|3.13.0-74-lowlatency|3.13.0-76-generic|3.13.0-76-lowlatency|3.13.0-77-generic|3.13.0-77-lowlatency|3.13.0-79-generic|3.13.0-79-lowlatency|3.13.0-83-generic|3.13.0-83-lowlatency|3.13.0-85-generic|3.13.0-85-lowlatency|3.13.0-86-generic|3.13.0-86-lowlatency|3.13.0-87-generic|3.13.0-87-lowlatency|3.13.0-88-generic|3.13.0-88-lowlatency|3.13.0-91-generic|3.13.0-91-lowlatency|3.13.0-92-generic|3.13.0-92-lowlatency|3.13.0-93-generic|3.13.0-93-lowlatency|3.13.0-95-generic|3.13.0-95-lowlatency|3.13.0-96-generic|3.13.0-96-lowlatency|3.13.0-98-generic|3.13.0-98-lowlatency|3.16.0-25-generic|3.16.0-25-lowlatency|3.16.0-26-generic|3.16.0-26-lowlatency|3.16.0-28-generic|3.16.0-28-lowlatency|3.16.0-29-generic|3.16.0-29-lowlatency|3.16.0-31-generic|3.16.0-31-lowlatency|3.16.0-33-generic|3.16.0-33-lowlatency|3.16.0-34-generic|3.16.0-34-lowlatency|3.16.0-36-generic|3.16.0-36-lowlatency|3.16.0-37-generic|3.16.0-37-lowlatency|3.16.0-38-generic|3.16.0-38-lowlatency|3.16.0-39-generic|3.16.0-39-lowlatency|3.16.0-41-generic|3.16.0-41-lowlatency|3.16.0-43-generic|3.16.0-43-lowlatency|3.16.0-44-generic|3.16.0-44-lowlatency|3.16.0-45-generic,[1;31;103m&[0m,"3⤵PID:2796
-
-
/bin/sedsed -E "s,3.16.0-45-lowlatency|3.16.0-46-generic|3.16.0-46-lowlatency|3.16.0-48-generic|3.16.0-48-lowlatency|3.16.0-49-generic|3.16.0-49-lowlatency|3.16.0-50-generic|3.16.0-50-lowlatency|3.16.0-51-generic|3.16.0-51-lowlatency|3.16.0-52-generic|3.16.0-52-lowlatency|3.16.0-53-generic|3.16.0-53-lowlatency|3.16.0-55-generic|3.16.0-55-lowlatency|3.16.0-56-generic|3.16.0-56-lowlatency|3.16.0-57-generic|3.16.0-57-lowlatency|3.16.0-59-generic|3.16.0-59-lowlatency|3.16.0-60-generic|3.16.0-60-lowlatency|3.16.0-62-generic|3.16.0-62-lowlatency|3.16.0-67-generic|3.16.0-67-lowlatency|3.16.0-69-generic|3.16.0-69-lowlatency|3.16.0-70-generic|3.16.0-70-lowlatency|3.16.0-71-generic|3.16.0-71-lowlatency|3.16.0-73-generic|3.16.0-73-lowlatency|3.16.0-76-generic|3.16.0-76-lowlatency|3.16.0-77-generic|3.16.0-77-lowlatency|3.19.0-20-generic|3.19.0-20-lowlatency|3.19.0-21-generic|3.19.0-21-lowlatency|3.19.0-22-generic|3.19.0-22-lowlatency|3.19.0-23-generic|3.19.0-23-lowlatency|3.19.0-25-generic|3.19.0-25-lowlatency|3.19.0-26-generic|3.19.0-26-lowlatency|3.19.0-28-generic|3.19.0-28-lowlatency|3.19.0-30-generic|3.19.0-30-lowlatency|3.19.0-31-generic|3.19.0-31-lowlatency|3.19.0-32-generic|3.19.0-32-lowlatency|3.19.0-33-generic|3.19.0-33-lowlatency|3.19.0-37-generic|3.19.0-37-lowlatency|3.19.0-39-generic|3.19.0-39-lowlatency|3.19.0-41-generic|3.19.0-41-lowlatency|3.19.0-42-generic,[1;31;103m&[0m,"3⤵PID:2797
-
-
/bin/sedsed -E "s,2.6.24.7-74.el5rt|2.6.24.7-81.el5rt|2.6.24.7-93.el5rt|2.6.24.7-101.el5rt|2.6.24.7-108.el5rt|2.6.24.7-111.el5rt|2.6.24.7-117.el5rt|2.6.24.7-126.el5rt|2.6.24.7-132.el5rt|2.6.24.7-137.el5rt|2.6.24.7-139.el5rt|2.6.24.7-146.el5rt|2.6.24.7-149.el5rt|2.6.24.7-161.el5rt|2.6.24.7-169.el5rt|2.6.33.7-rt29.45.el5rt|2.6.33.7-rt29.47.el5rt|2.6.33.7-rt29.55.el5rt|2.6.33.9-rt31.64.el5rt|2.6.33.9-rt31.67.el5rt|2.6.33.9-rt31.86.el5rt|2.6.18-8.1.1.el5|2.6.18-8.1.3.el5|2.6.18-8.1.4.el5|2.6.18-8.1.6.el5|2.6.18-8.1.8.el5|2.6.18-8.1.10.el5|2.6.18-8.1.14.el5|2.6.18-8.1.15.el5|2.6.18-53.el5|2.6.18-53.1.4.el5|2.6.18-53.1.6.el5|2.6.18-53.1.13.el5|2.6.18-53.1.14.el5|2.6.18-53.1.19.el5|2.6.18-53.1.21.el5|2.6.18-92.el5|2.6.18-92.1.1.el5|2.6.18-92.1.6.el5|2.6.18-92.1.10.el5|2.6.18-92.1.13.el5|2.6.18-92.1.18.el5|2.6.18-92.1.22.el5|2.6.18-92.1.24.el5|2.6.18-92.1.26.el5|2.6.18-92.1.27.el5|2.6.18-92.1.28.el5|2.6.18-92.1.29.el5|2.6.18-92.1.32.el5|2.6.18-92.1.35.el5|2.6.18-92.1.38.el5|2.6.18-128.el5|2.6.18-128.1.1.el5|2.6.18-128.1.6.el5|2.6.18-128.1.10.el5|2.6.18-128.1.14.el5|2.6.18-128.1.16.el5|2.6.18-128.2.1.el5|2.6.18-128.4.1.el5|2.6.18-128.4.1.el5|2.6.18-128.7.1.el5|2.6.18-128.8.1.el5|2.6.18-128.11.1.el5|2.6.18-128.12.1.el5|2.6.18-128.14.1.el5|2.6.18-128.16.1.el5|2.6.18-128.17.1.el5|2.6.18-128.18.1.el5|2.6.18-128.23.1.el5|2.6.18-128.23.2.el5|2.6.18-128.25.1.el5|2.6.18-128.26.1.el5|2.6.18-128.27.1.el5,[1;31;103m&[0m,"3⤵PID:2800
-
-
/bin/sedsed -E "s,3.2.0-36-generic|3.2.0-36-generic-pae|3.2.0-36-lowlatency|3.2.0-36-lowlatency-pae|3.2.0-36-virtual|3.2.0-37-generic|3.2.0-37-generic-pae|3.2.0-37-lowlatency|3.2.0-37-lowlatency-pae|3.2.0-37-virtual|3.2.0-38-generic|3.2.0-38-generic-pae|3.2.0-38-lowlatency|3.2.0-38-lowlatency-pae|3.2.0-38-virtual|3.2.0-39-generic|3.2.0-39-generic-pae|3.2.0-39-lowlatency|3.2.0-39-lowlatency-pae|3.2.0-39-virtual|3.2.0-40-generic|3.2.0-40-generic-pae|3.2.0-40-lowlatency|3.2.0-40-lowlatency-pae|3.2.0-40-virtual|3.2.0-41-generic|3.2.0-41-generic-pae|3.2.0-41-lowlatency|3.2.0-41-lowlatency-pae|3.2.0-41-virtual|3.2.0-43-generic|3.2.0-43-generic-pae|3.2.0-43-virtual|3.2.0-44-generic|3.2.0-44-generic-pae|3.2.0-44-lowlatency|3.2.0-44-lowlatency-pae|3.2.0-44-virtual|3.2.0-45-generic|3.2.0-45-generic-pae|3.2.0-45-virtual|3.2.0-48-generic|3.2.0-48-generic-pae|3.2.0-48-lowlatency|3.2.0-48-lowlatency-pae|3.2.0-48-virtual|3.2.0-51-generic|3.2.0-51-generic-pae|3.2.0-51-lowlatency|3.2.0-51-lowlatency-pae|3.2.0-51-virtual|3.2.0-52-generic|3.2.0-52-generic-pae|3.2.0-52-lowlatency|3.2.0-52-lowlatency-pae|3.2.0-52-virtual|3.2.0-53-generic,[1;31;103m&[0m,"3⤵PID:2791
-
-
/bin/sedsed -E "s,3.2.0-104-generic|3.2.0-104-generic-pae|3.2.0-104-virtual|3.2.0-105-generic|3.2.0-105-generic-pae|3.2.0-105-virtual|3.2.0-106-generic|3.2.0-106-generic-pae|3.2.0-106-virtual|3.2.0-107-generic|3.2.0-107-generic-pae|3.2.0-107-virtual|3.2.0-109-generic|3.2.0-109-generic-pae|3.2.0-109-virtual|3.2.0-110-generic|3.2.0-110-generic-pae|3.2.0-110-virtual|3.2.0-111-generic|3.2.0-111-generic-pae|3.2.0-111-virtual|3.2.0-1412-omap4|3.2.0-1602-armadaxp|3.2.0-23-generic|3.2.0-23-generic-pae|3.2.0-23-lowlatency|3.2.0-23-lowlatency-pae|3.2.0-23-omap|3.2.0-23-powerpc-smp|3.2.0-23-powerpc64-smp|3.2.0-23-virtual|3.2.0-24-generic|3.2.0-24-generic-pae|3.2.0-24-virtual|3.2.0-25-generic|3.2.0-25-generic-pae|3.2.0-25-virtual|3.2.0-26-generic|3.2.0-26-generic-pae|3.2.0-26-virtual|3.2.0-27-generic|3.2.0-27-generic-pae|3.2.0-27-virtual|3.2.0-29-generic|3.2.0-29-generic-pae|3.2.0-29-virtual|3.2.0-31-generic|3.2.0-31-generic-pae|3.2.0-31-virtual|3.2.0-32-generic|3.2.0-32-generic-pae|3.2.0-32-virtual|3.2.0-33-generic|3.2.0-33-generic-pae|3.2.0-33-lowlatency|3.2.0-33-lowlatency-pae|3.2.0-33-virtual|3.2.0-34-generic|3.2.0-34-generic-pae|3.2.0-34-virtual|3.2.0-35-generic|3.2.0-35-generic-pae|3.2.0-35-lowlatency|3.2.0-35-lowlatency-pae|3.2.0-35-virtual,[1;31;103m&[0m,"3⤵PID:2790
-
-
/bin/sedsed -E "s,3.1.1-1400-linaro-lt-mx5|3.11.0-13-generic|3.11.0-14-generic|3.11.0-15-generic|3.11.0-17-generic|3.11.0-18-generic|3.11.0-20-generic|3.11.0-22-generic|3.11.0-23-generic|3.11.0-24-generic|3.11.0-26-generic|3.13.0-100-generic|3.13.0-24-generic|3.13.0-27-generic|3.13.0-29-generic|3.13.0-30-generic|3.13.0-32-generic|3.13.0-33-generic|3.13.0-34-generic|3.13.0-35-generic|3.13.0-36-generic|3.13.0-37-generic|3.13.0-39-generic|3.13.0-40-generic|3.13.0-41-generic|3.13.0-43-generic|3.13.0-44-generic|3.13.0-46-generic|3.13.0-48-generic|3.13.0-49-generic|3.13.0-51-generic|3.13.0-52-generic|3.13.0-53-generic|3.13.0-54-generic|3.13.0-55-generic|3.13.0-57-generic|3.13.0-58-generic|3.13.0-59-generic|3.13.0-61-generic|3.13.0-62-generic|3.13.0-63-generic|3.13.0-65-generic|3.13.0-66-generic|3.13.0-67-generic|3.13.0-68-generic|3.13.0-71-generic|3.13.0-73-generic|3.13.0-74-generic|3.13.0-76-generic|3.13.0-77-generic|3.13.0-79-generic|3.13.0-83-generic|3.13.0-85-generic|3.13.0-86-generic|3.13.0-88-generic|3.13.0-91-generic|3.13.0-92-generic|3.13.0-93-generic|3.13.0-95-generic|3.13.0-96-generic|3.13.0-98-generic|3.2.0-101-generic|3.2.0-101-generic-pae|3.2.0-101-virtual|3.2.0-102-generic|3.2.0-102-generic-pae|3.2.0-102-virtual,[1;31;103m&[0m,"3⤵PID:2789
-
-
/bin/catcat /proc/version3⤵PID:2809
-
-
/usr/bin/curlcurl -s https://tools.hacktricks.wiki/api/host-checker -H "User-Agent: linpeas" --data-binary "{\"hostname\":\"ubuntu1804-amd64-20260513-en-4\",\"source\":\"linpeas\",\"version\":\"ng\"}" -H "Content-Type: application/json" --max-time 153⤵PID:2787
-
-
/usr/bin/lsb_releaselsb_release -a3⤵PID:2810
-
/usr/local/sbin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security4⤵PID:2812
-
-
/usr/local/bin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security4⤵PID:2812
-
-
/usr/sbin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security4⤵PID:2812
-
-
/usr/bin/dpkg-querydpkg-query -f "\${Version} \${Provides} " -W lsb-core lsb-cxx lsb-graphics lsb-desktop lsb-languages lsb-multimedia lsb-printing lsb-security4⤵PID:2812
-
-
-
/bin/sedsed -E "s,[01].[012345678].[0-9]+|1.9.[01234][^0-9]|1.9.[01234]\$|1.9.5p1|1\\.9\\.[6-9]|1\\.9\\.1[0-6]|1\\.9\\.17(\$|[^0-9p]|p[12]([^0-9]|\$)),[1;31m&[0m,"3⤵PID:2816
-
-
/bin/grepgrep "Sudo ver"3⤵PID:2815
-
-
/usr/bin/sudosudo -V3⤵PID:2814
-
-
/bin/grepgrep -q com.ubuntu.USBCreator3⤵PID:2819
-
-
/usr/bin/busctlbusctl list3⤵PID:2818
-
-
/bin/grepgrep -oP "[0-9][0-9a-zA-Z\\.]+"3⤵PID:2823
-
-
/bin/grepgrep policykit-desktop-privileges3⤵PID:2822
-
-
/usr/bin/dpkgdpkg -l3⤵
- Software Deployment Tools
PID:2821
-
-
/usr/local/sbin/dpkg-querydpkg-query --list --3⤵PID:2821
-
-
/usr/local/bin/dpkg-querydpkg-query --list --3⤵PID:2821
-
-
/usr/sbin/dpkg-querydpkg-query --list --3⤵PID:2821
-
-
/usr/bin/dpkg-querydpkg-query --list --3⤵
- Software Deployment Tools
PID:2821
-
-
/usr/bin/cutcut -d. -f13⤵PID:2826
-
-
/usr/bin/cutcut -d. -f23⤵PID:2829
-
-
/bin/datedate3⤵PID:2830
-
-
/usr/bin/uptimeuptime3⤵
- Virtualization/Sandbox Evasion: Time Based Evasion
PID:2831
-
-
/bin/unameuname -s3⤵PID:2832
-
-
/usr/bin/headhead -n 103⤵PID:2835
-
-
/usr/bin/awkawk " /^[[:space:]]*#/ || NF < 4 { next } { ud7867_count = split(\$4, ud7867_options, \",\") for (ud7867_i = 1; ud7867_i <= ud7867_count; ud7867_i++) { if (ud7867_options[ud7867_i] == \"user\" || ud7867_options[ud7867_i] == \"users\" || ud7867_options[ud7867_i] == \"x-udisks-auth\") { print next } } } " /etc/fstab3⤵PID:2834
-
-
/usr/bin/headhead -n13⤵PID:2838
-
-
/usr/bin/dpkg-querydpkg-query "--admindir=/var/lib/dpkg" -W "-f=\${Status}|\${Version}\\n" udisks23⤵PID:2837
-
-
/usr/bin/headhead -n13⤵PID:2841
-
-
/bin/sedsed -nE "s/^ID=\"?([^\" ]+)\"?\$/\\1/p" /etc/os-release3⤵PID:2840
-
-
/usr/bin/headhead -n13⤵PID:2844
-
-
/bin/sedsed -nE "s/^VERSION_CODENAME=\"?([^\" ]+)\"?\$/\\1/p" /etc/os-release3⤵PID:2843
-
-
/usr/bin/headhead -n13⤵PID:2847
-
-
/bin/sedsed -nE "s/^UBUNTU_CODENAME=\"?([^\" ]+)\"?\$/\\1/p" /etc/os-release3⤵PID:2846
-
-
/bin/sedsed -E "s/^[0-9]+://; s/^[^0-9]*//; s/[^0-9.].*\$//"3⤵PID:2850
-
-
/usr/bin/awkawk -v "lp_a=2.7.6" -v "lp_b=2.10.0" "BEGIN { lp_na = split(lp_a, lp_av, \".\") lp_nb = split(lp_b, lp_bv, \".\") lp_n = lp_na > lp_nb ? lp_na : lp_nb for (lp_i = 1; lp_i <= lp_n; lp_i++) { lp_ai = lp_av[lp_i] + 0 lp_bi = lp_bv[lp_i] + 0 if (lp_ai < lp_bi) exit 0 if (lp_ai > lp_bi) exit 1 } exit 1 }"3⤵PID:2852
-
-
/bin/unameuname -s3⤵PID:2853
-
-
/bin/unameuname -r3⤵PID:2854
-
-
/usr/bin/headhead -n 203⤵PID:2857
-
-
/usr/bin/awkawk "\$3 == \"xfs\" { print \$2 }" /proc/self/mounts3⤵PID:2856
-
-
/bin/sedsed -E "s,nosuid|nouser|noexec,[1;32m&[0m,g"3⤵PID:2865
-
-
/bin/sedsed -E "s,\\Wsuid|\\Wuser|\\Wexec,[1;31m&[0m,g"3⤵PID:2864
-
-
/bin/sedsed -E "s%/sys|/proc|/dev|/dev/pts|/run|/|/sys/kernel/security|/dev/shm|/run/lock|/sys/fs/cgroup|/sys/fs/cgroup/unified|/sys/fs/cgroup/systemd|/sys/fs/pstore|/sys/fs/cgroup/cpuset|/sys/fs/cgroup/perf_event|/sys/fs/cgroup/blkio|/sys/fs/cgroup/hugetlb|/sys/fs/cgroup/cpu,cpuacct|/sys/fs/cgroup/memory|/sys/fs/cgroup/net_cls,net_prio|/sys/fs/cgroup/pids|/sys/fs/cgroup/rdma|/sys/fs/cgroup/devices|/sys/fs/cgroup/freezer|/proc/sys/fs/binfmt_misc|/dev/hugepages|/sys/kernel/debug|/dev/mqueue|/sys/fs/fuse/connections|/sys/kernel/config|/proc/sys/fs/binfmt_misc|/run/user/0|/run/user/0/gvfs|/sys/kernel/debug/tracing|UUID=040d9bdb-513b-4ecf-adde-309e7b54b137%[1;34m&[0m%g"3⤵PID:2862
-
-
/bin/sedsed -E "s,/|/bin|/boot|/boot/grub|/boot/grub/fonts|/boot/grub/i386-pc|/boot/grub/locale|/.cache|/dev|/dev/block|/dev/bsg|/dev/bus|/dev/bus/usb|/dev/char|/dev/disk|/dev/disk/by-id|/dev/disk/by-partuuid|/dev/disk/by-path|/dev/disk/by-uuid|/dev/dri|/dev/dri/by-path|/dev/hugepages|/dev/input|/dev/input/by-id|/dev/input/by-path|/dev/mapper|/dev/mqueue|/dev/net|/dev/pts|/dev/shm|/dev/snd|/dev/vfio|/etc|/etc/acpi|/etc/acpi/events|/etc/alternatives|/etc/apm|/etc/apm/event.d|/etc/apm/resume.d|/etc/apm/scripts.d|/etc/apm/suspend.d|/etc/apparmor|/etc/apparmor.d|/etc/apparmor.d/abstractions|/etc/apparmor.d/cache|/etc/apparmor.d/disable|/etc/apparmor.d/force-complain|/etc/apparmor.d/local|/etc/apparmor.d/tunables|/etc/apparmor/init|/etc/apport|/etc/apport/blacklist.d|/etc/apport/native-origins.d|/etc/apt|/etc/apt/apt.conf.d|/etc/apt/auth.conf.d|/etc/apt/keyrings|/etc/apt/preferences.d|/etc/apt/sources.list.d|/etc/apt/trusted.gpg.d|/etc/audisp|/etc/audisp/plugins.d|/etc/audit|/etc/audit/rules.d|/etc/avahi|/etc/avahi/services|/etc/bash_completion.d|/etc/binfmt.d|/etc/bluetooth|/etc/brltty|/etc/brltty/Attributes|/etc/brltty/Contraction|/etc/brltty/Input|/etc/brltty/Keyboard|/etc/brltty/Text|/etc/ca-certificates|/etc/ca-certificates/update.d|/etc/calendar|/etc/chatscripts|/etc/console-setup|/etc/cracklib|/etc/cron.d|/etc/cron.daily|/etc/cron.hourly|/etc/cron.monthly|/etc/cron.weekly|/etc/cups|/etc/cupshelpers|/etc/cups/interfaces|/etc/cups/ppd|/etc/cups/ssl|/etc/dbus-1|/etc/dbus-1/session.d|/etc/dbus-1/system.d|/etc/dconf|/etc/dconf/db|/etc/dconf/profile|/etc/default|/etc/depmod.d|/etc/dhcp|/etc/dhcp/dhclient-enter-hooks.d|/etc/dhcp/dhclient-exit-hooks.d|/etc/dictionaries-common|/etc/dpkg|/etc/dpkg/dpkg.cfg.d|/etc/dpkg/origins|/etc/emacs|/etc/emacs/site-start.d|/etc/firefox|/etc/firefox/policies|/etc/firefox/pref|/etc/fonts|/etc/fonts/conf.avail|/etc/fonts/conf.d|/etc/fwupd|/etc/fwupd/remotes.d|/etc/gdb|/etc/gdm3|/etc/gdm3/Init|/etc/gdm3/PostLogin|/etc/gdm3/PostSession|/etc/gdm3/PreSession|/etc/gdm3/Prime|/etc/gdm3/PrimeOff|/etc/geoclue|/etc/ghostscript|/etc/ghostscript/cidfmap.d|/etc/ghostscript/fontmap.d|/etc/glvnd|/etc/glvnd/egl_vendor.d|/etc/gnome|/etc/groff|/etc/grub.d|/etc/gss|/etc/gss/mech.d|/etc/gtk-2.0|/etc/gtk-3.0|/etc/hp|/etc/ifplugd|/etc/ifplugd/action.d|/etc/ImageMagick-6|/etc/init|/etc/init.d|/etc/initramfs-tools|/etc/initramfs-tools/conf.d|/etc/initramfs-tools/hooks|/etc/initramfs-tools/scripts|/etc/insserv.conf.d|/etc/iproute2|/etc/iproute2/rt_protos.d|/etc/iproute2/rt_tables.d|/etc/kernel|/etc/kernel/install.d|/etc/kernel/postinst.d|/etc/kernel/postrm.d|/etc/kernel/preinst.d|/etc/ldap|/etc/ld.so.conf.d|/etc/libblockdev|/etc/libblockdev/conf.d|/etc/libnl-3|/etc/libpaper.d|/etc/libreoffice|/etc/logcheck|/etc/logcheck/ignore.d.paranoid|/etc/logcheck/ignore.d.server|/etc/logrotate.d|/etc/modprobe.d|/etc/modules-load.d|/etc/netplan|/etc/network|/etc/networkd-dispatcher|/etc/networkd-dispatcher/dormant.d|/etc/networkd-dispatcher/no-carrier.d|/etc/networkd-dispatcher/off.d|/etc/networkd-dispatcher/routable.d|/etc/network/if-down.d|/etc/network/if-post-down.d|/etc/network/if-pre-up.d|/etc/network/if-up.d|/etc/network/interfaces.d|/etc/NetworkManager|/etc/NetworkManager/conf.d|/etc/NetworkManager/dispatcher.d|/etc/NetworkManager/dnsmasq.d|/etc/NetworkManager/dnsmasq-shared.d|/etc/NetworkManager/system-connections|/etc/newt|/etc/opt|/etc/PackageKit|/etc/pam.d|/etc/pcmcia|/etc/perl|/etc/perl/CPAN|/etc/perl/Net|/etc/perl/XML|/etc/pki|/etc/pki/fwupd|/etc/pki/fwupd-metadata|/etc/pm|/etc/pm/sleep.d|/etc/polkit-1|/etc/polkit-1/localauthority|/etc/polkit-1/localauthority.conf.d|/etc/polkit-1/nullbackend.conf.d|/etc/ppp|/etc/ppp/ip-down.d|/etc/ppp/ip-up.d|/etc/ppp/ipv6-down.d|/etc/ppp/ipv6-up.d|/etc/ppp/peers|/etc/ppp/resolv|/etc/profile.d|/etc/pulse|/etc/python|/etc/python2.7|/etc/python3|/etc/python3.6|/etc/rc0.d|/etc/rc1.d|/etc/rc2.d|/etc/rc3.d|/etc/rc4.d|/etc/rc5.d|/etc/rc6.d|/etc/rcS.d|/etc/resolvconf|/etc/resolvconf/update-libc.d|/etc/rsyslog.d|/etc/sane.d|/etc/sane.d/dll.d|/etc/security|/etc/security/limits.d|/etc/security/namespace.d|/etc/selinux|/etc/selinux/default|/etc/sensors.d|/etc/skel|/etc/speech-dispatcher|/etc/speech-dispatcher/clients|/etc/speech-dispatcher/modules|/etc/ssh|/etc/ssl|/etc/ssl/certs|/etc/ssl/private|/etc/sudoers.d|/etc/sysctl.d|/etc/systemd|/etc/systemd/network|/etc/systemd/system|/etc/systemd/user|/etc/terminfo|/etc/thunderbird|/etc/tmpfiles.d|/etc/ubuntu-advantage|/etc/udev|/etc/udev/hwdb.d|/etc/udev/rules.d|/etc/udisks2|/etc/ufw|/etc/ufw/applications.d|/etc/update-manager|/etc/update-manager/release-upgrades.d|/etc/update-motd.d|/etc/update-notifier|/etc/UPower|/etc/usb_modeswitch.d|/etc/vim|/etc/wpa_supplicant|/etc/X11|/etc/X11/app-defaults|/etc/X11/cursors|/etc/X11/fonts|/etc/X11/xinit|/etc/X11/xkb|/etc/X11/Xreset.d|/etc/X11/Xresources|/etc/X11/Xsession.d|/etc/X11/xsm|/etc/xdg|/etc/xdg/autostart|/etc/xdg/menus|/etc/xdg/systemd|/home|/lib|/lib64|/lib/apparmor|/lib/brltty|/lib/console-setup|/lib/crda|/lib/crda/pubkeys|/lib/firmware|/lib/firmware/3com|/lib/firmware/acenic|/lib/firmware/adaptec|/lib/firmware/advansys|/lib/firmware/amdgpu|/lib/firmware/amd-ucode|/lib/firmware/ar3k|/lib/firmware/asihpi|/lib/firmware/ath10k|/lib/firmware/ath6k|/lib/firmware/ath9k_htc|/lib/firmware/atmel|/lib/firmware/atusb|/lib/firmware/av7110|/lib/firmware/bnx2|/lib/firmware/bnx2x|/lib/firmware/brcm|/lib/firmware/carl9170fw|/lib/firmware/cavium|/lib/firmware/cis|/lib/firmware/cpia2|/lib/firmware/cxgb3|/lib/firmware/cxgb4|/lib/firmware/dsp56k|/lib/firmware/e100|/lib/firmware/ea|/lib/firmware/edgeport|/lib/firmware/emi26|/lib/firmware/emi62|/lib/firmware/ene-ub6250|/lib/firmware/ess|/lib/firmware/go7007|/lib/firmware/hp|/lib/firmware/i915|/lib/firmware/imx|/lib/firmware/intel|/lib/firmware/intel-ucode|/lib/firmware/isci|/lib/firmware/kaweth|/lib/firmware/keyspan|/lib/firmware/keyspan_pda|/lib/firmware/korg|/lib/firmware/libertas|/lib/firmware/liquidio|/lib/firmware/matrox|/lib/firmware/mediatek|/lib/firmware/mellanox|/lib/firmware/moxa|/lib/firmware/mrvl|/lib/firmware/mwl8k|/lib/firmware/mwlwifi|/lib/firmware/netronome|/lib/firmware/nvidia|/lib/firmware/ositech|/lib/firmware/qca|/lib/firmware/qcom|/lib/firmware/qed|/lib/firmware/qlogic|/lib/firmware/r128|/lib/firmware/radeon|/lib/firmware/rockchip|/lib/firmware/rsi|/lib/firmware/RTL8192E|/lib/firmware/rtl_bt|/lib/firmware/rtl_nic|/lib/firmware/rtlwifi|/lib/firmware/rtw88|/lib/firmware/sb16|/lib/firmware/slicoss|/lib/firmware/sun|/lib/firmware/tehuti|/lib/firmware/ti-connectivity|/lib/firmware/tigon|/lib/firmware/ti-keystone|/lib/firmware/ttusb-budget|/lib/firmware/ueagle-atm|/lib/firmware/usbdux|/lib/firmware/vicam|/lib/firmware/vxge|/lib/firmware/yam|/lib/firmware/yamaha|/lib/firmware/zd1211|/lib/hdparm|/lib/ifupdown|/lib/init|/lib/linux-sound-base|/lib/lsb|/lib/lsb/init-functions.d|/lib/modprobe.d|/lib/modules|/lib/modules/4.15.0-213-generic|/lib/netplan|/lib/recovery-mode|/lib/recovery-mode/options|/lib/systemd|/lib/systemd/network|/lib/systemd/system|/lib/systemd/system-generators|/lib/systemd/system-preset|/lib/systemd/system-shutdown|/lib/systemd/system-sleep|/lib/terminfo|/lib/terminfo/a|/lib/terminfo/c|/lib/terminfo/d|/lib/terminfo/E|/lib/terminfo/h|/lib/terminfo/l|/lib/terminfo/m|/lib/terminfo/p|/lib/terminfo/r|/lib/terminfo/s|/lib/terminfo/v|/lib/terminfo/w|/lib/terminfo/x|/lib/udev|/lib/udev/hwdb.d|/lib/udev/rules.d|/lib/ufw|/lib/x86_64-linux-gnu|/lib/x86_64-linux-gnu/security|/lost+found|/media|/media/floppy0|/mnt|/opt|/proc|/root|/root/.cache|/root/.cache/dconf|/root/.cache/doc|/root/.cache/evolution|/root/.cache/gnome-software|/root/.cache/ibus|/root/.cache/ibus-table|/root/.cache/libgweather|/root/.cache/mozilla|/root/.cache/wallpaper|/root/.config|/root/.config/dconf|/root/.config/evolution|/root/.config/gnome-session|/root/.config/goa-1.0|/root/.config/gtk-3.0|/root/.config/ibus|/root/.config/mozilla|/root/.config/nautilus|/root/.config/systemd|/root/.dbus|/root/.dbus/session-bus|/root/Desktop|/root/Documents|/root/Downloads|/root/.gnupg|/root/.gnupg/private-keys-v1.d|/root/.gvfs|/root/.local|/root/.local/share|/root/Music|/root/Pictures|/root/Public|/root/Templates|/root/Videos|/run|/run/boltd|/run/boltd/power|/run/console-setup|/run/cups|/run/dbus|/run/gdm3|/run/initramfs|/run/lock|/run/lock/subsys|/run/log|/run/mount|/run/network|/run/NetworkManager|/run/NetworkManager/conf.d|/run/NetworkManager/devices|/run/NetworkManager/system-connections|/run/pppconfig|/run/sendsigs.omit.d|/run/spice-vdagentd|/run/sshd|/run/sudo|/run/sudo/ts|/run/systemd|/run/systemd/ask-password|/run/systemd/generator|/run/systemd/generator.late|/run/systemd/inaccessible|/run/systemd/inhibit|/run/systemd/initctl|/run/systemd/journal|/run/systemd/machines|/run/systemd/seats|/run/systemd/sessions|/run/systemd/shutdown|/run/systemd/system|/run/systemd/transient|/run/systemd/unit-root|/run/systemd/units|/run/systemd/users|/run/tmpfiles.d|/run/udev|/run/udev/data|/run/udev/links|/run/udev/static_node-tags|/run/udev/tags|/run/udev/watch|/run/udisks2|/run/user|/run/user/0|/run/uuidd|/sbin|/snap|/srv|/sys|/sys/block|/sys/bus|/sys/bus/acpi|/sys/bus/clockevents|/sys/bus/clocksource|/sys/bus/container|/sys/bus/cpu|/sys/bus/edac|/sys/bus/event_source|/sys/bus/gpio|/sys/bus/hid|/sys/bus/i2c|/sys/bus/isa|/sys/bus/machinecheck|/sys/bus/mdio_bus|/sys/bus/memory|/sys/bus/mipi-dsi|/sys/bus/mmc|/sys/bus/nd|/sys/bus/node|/sys/bus/nvmem|/sys/bus/parport|/sys/bus/pci|/sys/bus/pci-epf|/sys/bus/pci_express|/sys/bus/platform|/sys/bus/pnp|/sys/bus/rapidio|/sys/bus/scsi|/sys/bus/sdio|/sys/bus/serial|/sys/bus/serio|/sys/bus/spi|/sys/bus/usb|/sys/bus/virtio|/sys/bus/vme|/sys/bus/workqueue|/sys/bus/xen|/sys/bus/xen-backend|/sys/class|/sys/class/ata_device|/sys/class/ata_link|/sys/class/ata_port|/sys/class/backlight|/sys/class/bdi|/sys/class/block|/sys/class/bsg|/sys/class/devcoredump|/sys/class/devfreq|/sys/class/devfreq-event|/sys/class/dma|/sys/class/dmi|/sys/class/drm|/sys/class/drm_dp_aux_dev|/sys/class/extcon|/sys/class/firmware|/sys/class/gpio|/sys/class/graphics|/sys/class/hidraw|/sys/class/hmm_device|/sys/class/hwmon|/sys/class/i2c-adapter|/sys/class/i2c-dev|/sys/class/input|/sys/class/iommu|/sys/class/leds|/sys/class/mdio_bus|/sys/class/mem|/sys/class/misc|/sys/class/mmc_host|/sys/class/nd|/sys/class/net|/sys/class/pci_bus|/sys/class/pci_epc|/sys/class/phy|/sys/class/powercap|/sys/class/power_supply|/sys/class/ppdev|/sys/class/ppp|/sys/class/printer|/sys/class/pwm|/sys/class/rapidio_port|/sys/class/regulator|/sys/class/rfkill|/sys/class/rtc|/sys/class/scsi_device|/sys/class/scsi_disk|/sys/class/scsi_generic|/sys/class/scsi_host|/sys/class/spi_master|/sys/class/spi_slave|/sys/class/thermal|/sys/class/tpm|/sys/class/tpmrm|/sys/class/tty|/sys/class/vc|/sys/class/virtio-ports|/sys/class/vtconsole|/sys/class/watchdog|/sys/dev|/sys/dev/block|/sys/dev/char|/sys/devices|/sys/devices/breakpoint|/sys/devices/cpu|/sys/devices/isa|/sys/devices/LNXSYSTM:00|/sys/devices/msr|/sys/devices/parport0|/sys/devices/pci0000:00|/sys/devices/platform|/sys/devices/pnp0|/sys/devices/software|/sys/devices/system|/sys/devices/tracepoint|/sys/devices/virtual|/sys/firmware|/sys/firmware/acpi|/sys/firmware/dmi|/sys/firmware/memmap|/sys/fs|/sys/fs/bpf|/sys/fs/cgroup|/sys/fs/ecryptfs|/sys/fs/ext4|/sys/fs/fuse|/sys/fs/pstore|/sys/hypervisor|/sys/kernel|/sys/kernel/boot_params|/sys/kernel/cgroup|/sys/kernel/config|/sys/kernel/debug|/sys/kernel/iommu_groups|/sys/kernel/irq|/sys/kernel/livepatch|/sys/kernel/mm|/sys/kernel/security|/sys/kernel/slab|/sys/kernel/tracing|/sys/module|/sys/module/8139cp|/sys/module/8139too|/sys/module/8250|/sys/module/acpi|/sys/module/acpi_cpufreq|/sys/module/acpiphp|/sys/module/aesni_intel|/sys/module/aes_x86_64|/sys/module/ahci|/sys/module/apparmor|/sys/module/ata_generic|/sys/module/ata_piix|/sys/module/autofs4|/sys/module/battery|/sys/module/binfmt_misc|/sys/module/block|/sys/module/button|/sys/module/configfs|/sys/module/cpufreq|/sys/module/cpuidle|/sys/module/crc32_pclmul|/sys/module/crct10dif_pclmul|/sys/module/cryptd|/sys/module/cryptomgr|/sys/module/crypto_simd|/sys/module/debug_core|/sys/module/dm_mod|/sys/module/dns_resolver|/sys/module/drm|/sys/module/drm_kms_helper|/sys/module/dynamic_debug|/sys/module/edac_core|/sys/module/edd|/sys/module/efivars|/sys/module/ehci_hcd|/sys/module/elants_i2c|/sys/module/ext4|/sys/module/fb|/sys/module/fb_sys_fops|/sys/module/firmware_class|/sys/module/floppy|/sys/module/fscrypto|/sys/module/fuse|/sys/module/ghash_clmulni_intel|/sys/module/glue_helper|/sys/module/gpiolib_acpi|/sys/module/hid|/sys/module/hid_generic|/sys/module/i2c_piix4|/sys/module/i8042|/sys/module/ima|/sys/module/input_leds|/sys/module/intel_idle|/sys/module/ip_tables|/sys/module/ipv6|/sys/module/joydev|/sys/module/kdb|/sys/module/kernel|/sys/module/keyboard|/sys/module/kgdb_nmi|/sys/module/kgdboc|/sys/module/libahci|/sys/module/libata|/sys/module/loop|/sys/module/lp|/sys/module/mac_hid|/sys/module/md_mod|/sys/module/mii|/sys/module/module|/sys/module/mousedev|/sys/module/netpoll|/sys/module/nfnetlink|/sys/module/nf_tables|/sys/module/nf_tables_inet|/sys/module/nf_tables_ipv4|/sys/module/nf_tables_ipv6|/sys/module/parport|/sys/module/parport_pc|/sys/module/pata_acpi|/sys/module/pata_sis|/sys/module/pcbc|/sys/module/pcc_cpufreq|/sys/module/pcie_aspm|/sys/module/pciehp|/sys/module/pci_hotplug|/sys/module/ppdev|/sys/module/ppp_generic|/sys/module/printk|/sys/module/processor|/sys/module/psmouse|/sys/module/pstore|/sys/module/random|/sys/module/rcupdate|/sys/module/rcutree|/sys/module/rfkill|/sys/module/rng_core|/sys/module/sch_fq_codel|/sys/module/scsi_mod|/sys/module/serio_raw|/sys/module/sg|/sys/module/spurious|/sys/module/srcutree|/sys/module/sr_mod|/sys/module/stahp|/sys/module/suspend|/sys/module/syscopyarea|/sys/module/sysfillrect|/sys/module/sysimgblt|/sys/module/sysrq|/sys/module/tcp_cubic|/sys/module/thermal|/sys/module/tpm|/sys/module/tpm_crb|/sys/module/tpm_tis|/sys/module/tpm_tis_core|/sys/module/ttm|/sys/module/uhci_hcd|/sys/module/uinput|/sys/module/usbcore|/sys/module/usbhid|/sys/module/virtio_balloon|/sys/module/virtio_blk|/sys/module/virtio_gpu|/sys/module/virtio_mmio|/sys/module/virtio_pci|/sys/module/vt|/sys/module/watchdog|/sys/module/workqueue|/sys/module/xen|/sys/module/xen_acpi_processor|/sys/module/xen_blkfront|/sys/module/xen_netfront|/sys/module/xhci_hcd|/sys/module/x_tables|/sys/module/xz_dec|/sys/module/zswap|/sys/power|/tmp|/tmp/.font-unix|/tmp/.ICE-unix|/tmp/netplan_hhxorfho|/tmp/snap-private-tmp|/tmp/ssh-e1FSCn0S0Q3J|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-bolt.service-2heAjY|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-bolt.service-2heAjY/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-colord.service-R9zTU7|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-colord.service-R9zTU7/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-ModemManager.service-SBCgQa|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-ModemManager.service-SBCgQa/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-resolved.service-hNg3wl|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-resolved.service-hNg3wl/tmp|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-timedated.service-Nz3rUA|/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-timedated.service-Nz3rUA/tmp|/tmp/.Test-unix|/tmp/.X11-unix|/tmp/.XIM-unix|/usr|/usr/bin|/usr/games|/usr/include|/usr/include/arpa|/usr/include/asm-generic|/usr/include/c++|/usr/include/drm|/usr/include/linux|/usr/include/misc|/usr/include/mtd|/usr/include/net|/usr/include/netash|/usr/include/netatalk|/usr/include/netax25|/usr/include/neteconet|/usr/include/netinet|/usr/include/netipx|/usr/include/netiucv|/usr/include/netpacket|/usr/include/netrom|/usr/include/netrose|/usr/include/nfs|/usr/include/node|/usr/include/openssl|/usr/include/protocols|/usr/include/python3.6m|/usr/include/rdma|/usr/include/reglib|/usr/include/rpc|/usr/include/rpcsvc|/usr/include/scsi|/usr/include/sound|/usr/include/video|/usr/include/X11|/usr/include/x86_64-linux-gnu|/usr/include/xen|/usr/include/xorg|/usr/lib|/usr/lib/accountsservice|/usr/lib/apg|/usr/lib/apt|/usr/lib/aspell|/usr/lib/at-spi2-core|/usr/lib/avahi|/usr/lib/bfd-plugins|/usr/lib/binfmt.d|/usr/lib/bluetooth|/usr/lib/colord|/usr/lib/compat-ld|/usr/lib/cups|/usr/lib/dbus-1.0|/usr/lib/dconf|/usr/lib/debug|/usr/lib/deja-dup|/usr/lib/dpkg|/usr/lib/eject|/usr/lib/emacsen-common|/usr/lib/environment.d|/usr/lib/evince|/usr/lib/evolution|/usr/lib/evolution-data-server|/usr/libexec|/usr/lib/file|/usr/lib/firefox|/usr/lib/firefox-addons|/usr/lib/fwupd|/usr/lib/gcc|/usr/lib/gcr|/usr/lib/gdm3|/usr/lib/geoclue-2.0|/usr/lib/gettext|/usr/lib/ghostscript|/usr/lib/girepository-1.0|/usr/lib/gjs|/usr/lib/glib-networking|/usr/lib/gnome-control-center|/usr/lib/gnome-disk-utility|/usr/lib/gnome-initial-setup|/usr/lib/gnome-online-accounts|/usr/lib/gnome-session|/usr/lib/gnome-settings-daemon|/usr/lib/gnome-settings-daemon-3.0|/usr/lib/gnome-shell|/usr/lib/gnome-terminal|/usr/lib/gnupg|/usr/lib/gnupg2|/usr/lib/gold-ld|/usr/lib/groff|/usr/lib/grub|/usr/lib/grub-legacy|/usr/lib/gvfs|/usr/lib/ibus|/usr/lib/initramfs-tools|/usr/lib/ispell|/usr/lib/kernel|/usr/lib/klibc|/usr/lib/language-selector|/usr/lib/libmbim|/usr/lib/libqmi|/usr/lib/libreoffice|/usr/lib/linux|/usr/lib/linux-boot-probes|/usr/lib/locale|/usr/lib/lp_solve|/usr/lib/man-db|/usr/lib/memtest86+|/usr/lib/mime|/usr/lib/modules-load.d|/usr/lib/mozilla|/usr/lib/mutter|/usr/lib/networkd-dispatcher|/usr/lib/NetworkManager|/usr/lib/node_modules|/usr/lib/notification-daemon|/usr/lib/nvidia|/usr/lib/openssh|/usr/lib/os-prober|/usr/lib/os-probes|/usr/lib/packagekit|/usr/lib/pcmciautils|/usr/lib/pkgconfig|/usr/lib/pm-utils|/usr/lib/policykit-1|/usr/lib/pppd|/usr/lib/pulse-11.1|/usr/lib/python2.7|/usr/lib/python3|/usr/lib/python3.6|/usr/lib/python3.7|/usr/lib/python3.8|/usr/lib/rhythmbox|/usr/lib/rsyslog|/usr/lib/rtkit|/usr/lib/sasl2|/usr/lib/selinux|/usr/lib/shotwell|/usr/lib/snapd|/usr/lib/software-properties|/usr/lib/speech-dispatcher-modules|/usr/lib/ssl|/usr/lib/sudo|/usr/lib/sysctl.d|/usr/lib/syslinux|/usr/lib/SYSLINUX|/usr/lib/syslinux-legacy|/usr/lib/systemd|/usr/lib/system-service|/usr/lib/sysusers.d|/usr/lib/tar|/usr/lib/tasksel|/usr/lib/tc|/usr/lib/thunderbird|/usr/lib/thunderbird-addons|/usr/lib/tmpfiles.d|/usr/lib/ubiquity|/usr/lib/ubuntu-advantage|/usr/lib/ubuntu-release-upgrader|/usr/lib/udisks2|/usr/lib/unity-settings-daemon-1.0|/usr/lib/update-notifier|/usr/lib/upower|/usr/lib/valgrind|/usr/lib/vino|/usr/lib/X11|/usr/lib/x86_64-linux-gnu|/usr/lib/xorg|/usr/lib/xserver-xorg-video-intel|/usr/lib/zeitgeist|/usr/local|/usr/local/bin|/usr/local/etc|/usr/local/games|/usr/local/include|/usr/local/lib|/usr/local/sbin|/usr/local/share|/usr/local/src|/usr/sbin|/usr/share|/usr/share/aclocal|/usr/share/acpi-support|/usr/share/adduser|/usr/share/adium|/usr/share/aisleriot|/usr/share/alsa|/usr/share/alsa-base|/usr/share/appdata|/usr/share/app-info|/usr/share/app-install|/usr/share/application-registry|/usr/share/applications|/usr/share/apport|/usr/share/apps|/usr/share/apturl|/usr/share/aspell|/usr/share/avahi|/usr/share/awk|/usr/share/backgrounds|/usr/share/base-files|/usr/share/base-passwd|/usr/share/bash-completion|/usr/share/binfmts|/usr/share/branding|/usr/share/brltty|/usr/share/bug|/usr/share/build-essential|/usr/share/ca-certificates|/usr/share/calendar|/usr/share/cmake|/usr/share/cogl|/usr/share/color|/usr/share/colord|/usr/share/command-not-found|/usr/share/common-licenses|/usr/share/consolefonts|/usr/share/console-setup|/usr/share/consoletrans|/usr/share/cups|/usr/share/dbus-1|/usr/share/dconf|/usr/share/debconf|/usr/share/debhelper|/usr/share/debianutils|/usr/share/defaults|/usr/share/desktop-directories|/usr/share/dict|/usr/share/dictionaries-common|/usr/share/distro-info|/usr/share/djvu|/usr/share/dns|/usr/share/dnsmasq-base|/usr/share/doc|/usr/share/doc-base|/usr/share/dpkg|/usr/share/drirc.d|/usr/share/emacs|/usr/share/enchant|/usr/share/eog|/usr/share/evince|/usr/share/evolution-data-server|/usr/share/example-content|/usr/share/file|/usr/share/file-roller|/usr/share/fish|/usr/share/fontconfig|/usr/share/fonts|/usr/share/fonts-droid-fallback|/usr/share/fonts-sil-padauk|/usr/share/foo2qpdl|/usr/share/foo2zjs|/usr/share/fwupd|/usr/share/gcc-8|/usr/share/GConf|/usr/share/gdb|/usr/share/gdm|/usr/share/gedit|/usr/share/GeoIP|/usr/share/gettext|/usr/share/gettext-0.19.8|/usr/share/ghostscript|/usr/share/glib-2.0|/usr/share/glvnd|/usr/share/gnome|/usr/share/gnome-background-properties|/usr/share/gnome-bluetooth|/usr/share/gnome-control-center|/usr/share/gnome-mahjongg|/usr/share/gnome-mines|/usr/share/gnome-session|/usr/share/gnome-settings-daemon|/usr/share/gnome-shell|/usr/share/gnome-software|/usr/share/gnome-sudoku|/usr/share/gnome-todo|/usr/share/gnome-video-effects|/usr/share/gnupg|/usr/share/goa-1.0|/usr/share/grilo-plugins|/usr/share/groff|/usr/share/grub|/usr/share/grub-gfxpayload-lists|/usr/share/gst-plugins-base|/usr/share/gstreamer-1.0|/usr/share/gtk-doc|/usr/share/gtk-engines|/usr/share/gtksourceview-3.0|/usr/share/guile|/usr/share/gutenprint|/usr/share/gvfs|/usr/share/hal|/usr/share/help|/usr/share/help-langpack|/usr/share/hplip|/usr/share/hunspell|/usr/share/hyphen|/usr/share/i18n|/usr/share/ibus|/usr/share/ibus-table|/usr/share/icons|/usr/share/ImageMagick-6|/usr/share/im-config|/usr/share/indicators|/usr/share/info|/usr/share/initramfs-tools|/usr/share/installation-report|/usr/share/intltool-debian|/usr/share/iptables|/usr/share/iso-codes|/usr/share/java|/usr/share/kde4|/usr/share/keyrings|/usr/share/language-selector|/usr/share/language-support|/usr/share/language-tools|/usr/share/libaudio2|/usr/share/libc-bin|/usr/share/libdrm|/usr/share/libexttextcat|/usr/share/libgnomekbd|/usr/share/libgphoto2|/usr/share/libgweather|/usr/share/liblangtag|/usr/share/liblouis|/usr/share/liblouisutdml|/usr/share/libparse-debianchangelog-perl|/usr/share/libreoffice|/usr/share/librevenge|/usr/share/libsensors4|/usr/share/libthai|/usr/share/libwacom|/usr/share/lightdm|/usr/share/lintian|/usr/share/linux-sound-base|/usr/share/locale|/usr/share/locale-langpack|/usr/share/locales|/usr/share/m2300w|/usr/share/man|/usr/share/man-db|/usr/share/maven-repo|/usr/share/media-player-info|/usr/share/menu|/usr/share/metainfo|/usr/share/mime|/usr/share/mime-info|/usr/share/mimelnk|/usr/share/misc|/usr/share/mobile-broadband-provider-info|/usr/share/mousetweaks|/usr/share/mozilla|/usr/share/mythes|/usr/share/nano|/usr/share/nautilus-share|/usr/share/netpbm|/usr/share/netplan|/usr/share/numpy3|/usr/share/openssh|/usr/share/orca|/usr/share/os-prober|/usr/share/p11-kit|/usr/share/package-data-downloads|/usr/share/PackageKit|/usr/share/pam|/usr/share/pam-configs|/usr/share/perl|/usr/share/perl5|/usr/share/perl-openssl-defaults|/usr/share/pixmaps|/usr/share/pkgconfig|/usr/share/plymouth|/usr/share/pnm2ppa|/usr/share/polkit-1|/usr/share/poppler|/usr/share/popularity-contest|/usr/share/ppd|/usr/share/ppp|/usr/share/publicsuffix|/usr/share/pulseaudio|/usr/share/pyshared|/usr/share/python|/usr/share/python3|/usr/share/python-apt|/usr/share/readline|/usr/share/remmina|/usr/share/rhythmbox|/usr/share/rsyslog|/usr/share/seahorse|/usr/share/secureboot|/usr/share/selinux|/usr/share/selinux-basics|/usr/share/sensible-utils|/usr/share/session-migration|/usr/share/simple-scan|/usr/share/snmp|/usr/share/software-properties|/usr/share/sounds|/usr/share/speech-dispatcher|/usr/share/ssl-cert|/usr/share/system-config-printer|/usr/share/systemd|/usr/share/systemtap|/usr/share/tabset|/usr/share/tasksel|/usr/share/terminfo|/usr/share/themes|/usr/share/thumbnailers|/usr/share/totem|/usr/share/transmission|/usr/share/ubuntu|/usr/share/ubuntu-drivers-common|/usr/share/ubuntu-release-upgrader|/usr/share/ubuntu-wayland|/usr/share/ufw|/usr/share/unattended-upgrades|/usr/share/unity|/usr/share/update-manager|/usr/share/update-notifier|/usr/share/upstart|/usr/share/usb-creator|/usr/share/usb_modeswitch|/usr/share/vim|/usr/share/wayland-sessions|/usr/share/X11|/usr/share/xdg-desktop-portal|/usr/share/xml|/usr/share/xsessions|/usr/share/yelp|/usr/share/yelp-xsl|/usr/share/zeitgeist|/usr/share/zenity|/usr/share/zoneinfo|/usr/share/zsh|/usr/src|/usr/src/linux-headers-4.15.0-213|/usr/src/linux-headers-4.15.0-213-generic|/var|/var/backups|/var/cache|/var/cache/apparmor|/var/cache/app-info|/var/cache/apt|/var/cache/cracklib|/var/cache/cups|/var/cache/debconf|/var/cache/dictionaries-common|/var/cache/fontconfig|/var/cache/gdm|/var/cache/ldconfig|/var/cache/PackageKit|/var/cache/snapd|/var/crash|/var/lib|/var/lib/AccountsService|/var/lib/acpi-support|/var/lib/alsa|/var/lib/app-info|/var/lib/apport|/var/lib/apt|/var/lib/aspell|/var/lib/bluetooth|/var/lib/boltd|/var/lib/command-not-found|/var/lib/dbus|/var/lib/dhcp|/var/lib/dictionaries-common|/var/lib/dpkg|/var/lib/emacsen-common|/var/lib/fwupd|/var/lib/ghostscript|/var/lib/grub|/var/lib/hp|/var/lib/initramfs-tools|/var/lib/ispell|/var/lib/libreoffice|/var/lib/libxml-sax-perl|/var/lib/locales|/var/lib/logrotate|/var/lib/man-db|/var/lib/misc|/var/lib/mlocate|/var/lib/NetworkManager|/var/lib/os-prober|/var/lib/PackageKit|/var/lib/pam|/var/lib/plymouth|/var/lib/polkit-1|/var/lib/private|/var/lib/python|/var/lib/selinux|/var/lib/sepolgen|/var/lib/snapd|/var/lib/snmp|/var/lib/sudo|/var/lib/systemd|/var/lib/ubuntu-advantage|/var/lib/ubuntu-drivers-common|/var/lib/ubuntu-release-upgrader|/var/lib/ucf|/var/lib/udisks2|/var/lib/unattended-upgrades|/var/lib/update-manager|/var/lib/update-notifier|/var/lib/upower|/var/lib/ureadahead|/var/lib/usb_modeswitch|/var/lib/usbutils|/var/lib/vim|/var/lib/whoopsie|/var/lib/xfonts|/var/lib/xkb|/var/local|/var/log|/var/log/apt|/var/log/audit|/var/log/cups|/var/log/dist-upgrade|/var/log/gdm3|/var/log/hp|/var/log/installer|/var/log/journal|/var/log/unattended-upgrades|/var/mail|/var/metrics|/var/opt|/var/snap|/var/spool|/var/spool/anacron|/var/spool/cron|/var/spool/cups|/var/spool/libreoffice|/var/tmp|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-bolt.service-FvoqZw|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-colord.service-1NtnQI|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-ModemManager.service-3JYR1A|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-resolved.service-tUVFEK|/var/tmp/systemd-private-2151e9e4edd441838de1aba1bda5311e-systemd-timedated.service-Z37Ywf|[a-zA-Z]+[a-zA-Z0-9]* +\\*,[1;31m&[0m,"3⤵PID:2863
-
-
/bin/sedsed -E "s,ImPoSSssSiBlEee,[1;31m&[0m,g"3⤵PID:2861
-
-
/bin/sedsed -E "s,swap|/cdrom|/floppy|/dev/shm,[1;32m&[0m,g"3⤵PID:2860
-
-
/bin/grepgrep -Ev "\\W+\\#|^#"3⤵PID:2859
-
-
/bin/grepgrep -v "^#" /etc/fstab3⤵PID:2858
-
-
/usr/bin/headhead -n 203⤵PID:2869
-
-
/bin/sedsed "s,crypt,[1;31m&[0m,"3⤵PID:2868
-
-
/bin/grepgrep -Ei "^sd|^disk"3⤵PID:2867
-
-
/bin/lsls /dev3⤵PID:2866
-
-
/bin/sedsed -E "s,[pP][aA][sS][sS][wW]|[aA][pP][iI][kK][eE][yY]|[aA][pP][iI][_][kK][eE][yY]|KRB5CCNAME|[aA][pP][iI][_][kK][eE][yY]|[aA][wW][sS]|[aA][zZ][uU][rR][eE]|[gG][cC][pP]|[aA][pP][iI]|[sS][eE][cC][rR][eE][tT]|[sS][qQ][lL]|[dD][aA][tT][aA][bB][aA][sS][eE]|[tT][oO][kK][eE][nN],[1;31m&[0m,g"3⤵PID:2875
-
-
/bin/grepgrep -Eiv "LESS_TERMCAP|JOURNAL_STREAM|XDG_SESSION|DBUS_SESSION|systemd\\/sessions|systemd_exec|MEMORY_PRESSURE_WATCH|RELEVANT*|FIND*|^VERSION=|dbuslistG|mygroups|ldsoconfdG|pwd_inside_history|kernelDCW_Ubuntu_Precise|kernelDCW_Ubuntu_Trusty|kernelDCW_Ubuntu_Xenial|kernelDCW_Rhel|^sudovB=|^rootcommon=|^mounted=|^mountG=|^notmounted=|^mountpermsB=|^mountpermsG=|^kernelB=|^C=|^RED=|^GREEN=|^Y=|^B=|^NC=|TIMEOUT=|groupsB=|groupsVB=|knw_grps=|sidG|sidB=|sidVB=|sidVB2=|sudoB=|sudoG=|sudoVB=|timersG=|capsB=|notExtensions=|Wfolders=|writeB=|writeVB=|_usrs=|compiler=|LS_COLORS=|pathshG=|notBackup=|processesDump|processesB|commonrootdirs|USEFUL_SOFTWARE|PSTORAGE_|^PATH=|^INVOCATION_ID=|^WATCHDOG_PID=|^LISTEN_PID="3⤵PID:2874
-
-
/usr/bin/envenv3⤵PID:2876
-
-
/bin/grepgrep signature3⤵PID:2880
-
-
/bin/dmesgdmesg3⤵PID:2879
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"3⤵PID:2883
-
-
/usr/sbin/aa-statusaa-status3⤵PID:2882
-
-
/bin/sedsed "s,kernel,[1;32m&[0m,"3⤵PID:2886
-
-
/bin/sedsed "s,unconfined,[1;31m&[0m,"3⤵PID:2885
-
-
/bin/catcat /proc/self/attr/current3⤵PID:2887
-
-
/bin/grepgrep s390x3⤵PID:2891
-
-
/bin/unameuname -a3⤵PID:2890
-
-
/bin/grepgrep "\\-grsec"3⤵PID:2895
-
-
/bin/unameuname -r3⤵PID:2894
-
-
/bin/grepgrep grsecurity /etc/sysctl.conf3⤵PID:2893
-
-
/bin/sedsed "s,=0,[1;31m&[0m,"3⤵PID:2898
-
-
/bin/grepgrep exec-shield /etc/sysctl.conf3⤵PID:2899
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"3⤵PID:2901
-
-
/usr/sbin/sestatussestatus3⤵PID:2902
-
-
/bin/sedsed "s,enabled,[1;32m&[0m,"3⤵PID:2905
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"3⤵PID:2904
-
-
/bin/grepgrep -v 03⤵PID:2908
-
-
/bin/grepgrep Seccomp /proc/self/status3⤵PID:2907
-
-
/bin/catcat /proc/self/uid_map3⤵PID:2909
-
-
/bin/sedsed "s,enabled,[1;32m&[0m,"3⤵PID:2911
-
-
/bin/catcat /proc/sys/kernel/unprivileged_userns_clone3⤵PID:2912
-
-
/bin/sedsed -E "s,.*,[1;31m&[0m,g"3⤵PID:2914
-
-
/bin/catcat /proc/sys/kernel/unprivileged_bpf_disabled3⤵PID:2915
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"3⤵PID:2917
-
-
/bin/sedsed "s,enabled,[1;32m&[0m,"3⤵PID:2920
-
-
/bin/sedsed "s,disabled,[1;31m&[0m,"3⤵PID:2919
-
-
/bin/grepgrep cgroup2 /proc/filesystems3⤵PID:2921
-
-
/bin/catcat /proc/sys/kernel/kptr_restrict3⤵PID:2922
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"3⤵PID:2924
-
-
/bin/catcat /proc/sys/kernel/dmesg_restrict3⤵PID:2925
-
-
/bin/sedsed -E "s,0,[1;31m&[0m,"3⤵PID:2927
-
-
/bin/catcat /proc/sys/kernel/yama/ptrace_scope3⤵PID:2928
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"3⤵PID:2930
-
-
/bin/catcat /proc/sys/fs/protected_symlinks3⤵PID:2931
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"3⤵PID:2933
-
-
/bin/catcat /proc/sys/fs/protected_hardlinks3⤵PID:2934
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"3⤵PID:2936
-
-
/bin/catcat /proc/sys/kernel/perf_event_paranoid3⤵PID:2937
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"3⤵PID:2939
-
-
/bin/catcat /proc/sys/vm/mmap_min_addr3⤵PID:2940
-
-
/bin/sedsed -E "s,.*,[1;32m&[0m,g"3⤵PID:2942
-
-
/bin/unameuname -r3⤵PID:2943
-
-
/bin/unameuname -r3⤵PID:2944
-
-
/bin/grepgrep -E "CONFIG_RANDOMIZE_BASE|CONFIG_STACKPROTECTOR|CONFIG_SLAB_FREELIST_|CONFIG_KASAN" /boot/config-4.15.0-213-generic3⤵PID:2945
-
-
/usr/bin/pgreppgrep -x fail2ban-server3⤵PID:2946
-
-
/usr/bin/pgreppgrep -x crowdsec3⤵PID:2947
-
-
/bin/catcat /proc/sys/kernel/randomize_va_space3⤵PID:2948
-
-
/usr/bin/lpstatlpstat -a3⤵PID:2950
-
-
/bin/grepgrep hypervisor3⤵PID:2953
-
-
/bin/grepgrep flags /proc/cpuinfo3⤵
- Checks CPU configuration
PID:2952
-
-
/usr/bin/systemd-detect-virtsystemd-detect-virt3⤵
- Checks hardware identifiers (DMI)
- Reads hardware information
- Checks CPU configuration
PID:2955
-
-
/bin/unameuname -s3⤵PID:2956
-
-
/bin/grepgrep -q "^cifs[[:space:]]" /proc/modules3⤵
- Reads list of loaded kernel modules
PID:2957
-
-
/bin/unameuname -s3⤵PID:2958
-
-
/bin/catcat /proc/sys/kernel/osrelease3⤵PID:2959
-
-
/usr/bin/cutcut -d. -f13⤵PID:2962
-
-
/usr/bin/cutcut -d. -f23⤵PID:2965
-
-
/usr/bin/cutcut -d. -f33⤵PID:2968
-
-
/bin/sedsed -n "s/.*-rc\\([0-9][0-9]*\\).*/\\1/p"3⤵PID:2971
-
-
/bin/grepgrep -q "^sctp[[:space:]]" /proc/modules3⤵
- Reads list of loaded kernel modules
PID:2972
-
-
/bin/grepgrep -q "^sctp_diag[[:space:]]" /proc/modules3⤵
- Reads list of loaded kernel modules
PID:2973
-
-
/bin/grepgrep -E "^(CONFIG_IP_SCTP|CONFIG_INET_SCTP_DIAG)=" /boot/config-4.15.0-213-generic3⤵PID:2974
-
-
/bin/grepgrep -q "^CONFIG_IP_SCTP=y\$"3⤵PID:2976
-
-
/bin/grepgrep -q "^CONFIG_INET_SCTP_DIAG=y\$"3⤵PID:2978
-
-
/bin/grepgrep -Eq "(^|/)sctp\\.ko(\\.(gz|xz|zst))?:" /lib/modules/4.15.0-213-generic/modules.dep3⤵PID:2979
-
-
/bin/grepgrep -Eq "(^|/)sctp_diag\\.ko(\\.(gz|xz|zst))?:" /lib/modules/4.15.0-213-generic/modules.dep3⤵PID:2980
-
-
/bin/catcat /proc/sys/kernel/modules_disabled3⤵PID:2981
-
-
/bin/grepgrep -Eq "^[[:space:]]*install[[:space:]]+sctp[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|\$)" /etc/modprobe.d/alsa-base.conf3⤵PID:2982
-
-
/bin/grepgrep -Eq "^[[:space:]]*install[[:space:]]+sctp[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|\$)" /etc/modprobe.d/amd64-microcode-blacklist.conf3⤵PID:2983
-
-
/bin/grepgrep -Eq "^[[:space:]]*install[[:space:]]+sctp[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|\$)" /etc/modprobe.d/blacklist-ath_pci.conf3⤵PID:2984
-
-
/bin/grepgrep -Eq "^[[:space:]]*install[[:space:]]+sctp[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|\$)" /etc/modprobe.d/blacklist-firewire.conf3⤵PID:2985
-
-
/bin/grepgrep -Eq "^[[:space:]]*install[[:space:]]+sctp[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|\$)" /etc/modprobe.d/blacklist-framebuffer.conf3⤵PID:2986
-
-
/bin/grepgrep -Eq "^[[:space:]]*install[[:space:]]+sctp[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|\$)" /etc/modprobe.d/blacklist-modem.conf3⤵PID:2987
-
-
/bin/grepgrep -Eq "^[[:space:]]*install[[:space:]]+sctp[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|\$)" /etc/modprobe.d/blacklist-oss.conf3⤵PID:2988
-
-
Network
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Python
1Software Deployment Tools
1Defense Evasion
Abuse Elevation Control Mechanism
1Sudo and Sudo Caching
1Deobfuscate/Decode Files or Information
1Virtualization/Sandbox Evasion
5System Checks
3Time Based Evasion
1Credential Access
OS Credential Dumping
2/etc/passwd and /etc/shadow
1Proc Filesystem
1Discovery
Process Discovery
1Remote System Discovery
1System Information Discovery
4System Network Configuration Discovery
3Internet Connection Discovery
1System Network Connections Discovery
2Virtualization/Sandbox Evasion
5System Checks
3Time Based Evasion
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path /root/.gnupg/.#lk0x0000562f9eae7500.ubuntu1804-amd64-20260513-en-4.30416
- Size 42B
- SHA256 77a85e35e3f0fe9a19e89574cc4986dd935eccdf9223aa697d176697d9ccad4c
- MD5 728d5d4c392f50257b27ea177b922cef
- SHA1 d68f4ecd2aa579b5e29c34ba535aaf24788c412a
- SHA512 961427be588dc64457043ac34721693bc4bd9587a6f15e936a1022fb01331047fd8442320abea26a0257513639225dd80c41e70b5d7cc4e3e7fd1579cbfdccbb
- MD5 SHA1 SHA512
- Path /tmp/cf31-check-o786vuvx/sentinel
- Size 4KB
- SHA256 6896d9ea3f73a4434f5832bc65714e7d066f177373f36f34dc8a6f735daa41b1
- MD5 82a7348c2e03731109d0cf45a7325b88
- SHA1 608cabc0f2fa18c260cafd974516865c772363d5
- SHA512 0b0f6d1974a86bb9f1d50d404a780d008dd7d05883286ba456325e91a381d44b5e8e27e0fb01f43cfda1132d66c363b9131c2132e8ee005949b7237f6afc9cdc
- MD5 SHA1 SHA512
- Path /tmp/cf31-probe-1492.py
- Size 4KB
- SHA256 ecc7504d76025c1c6f9792d121829fcd98c529e0a6b6bfe59e8cd34bcb60d108
- MD5 92f142037edbcc39a54fc615bea37c45
- SHA1 d6aa5e47dc905e230fe7548e6cefb4fdb31140be
- SHA512 b494ae5491248bbb730a4e5798fa00e67a2fc9802628981f99cd9e20e933d6c5923c3722dfb4877c75367e4a83cb10a7ac605a4f46403a1b48aacd2dc49d6128
- SSDEEP 96:kefRB6l6he1SKoKckje6NsmD8R2CwuwdHhqeI5m/13bT:keskKLVzNsmAR5w1n/1X
- TLSH T1B69151076E2464E3E393E66D44A2E4412734B94748568E757FEC8B703F47134C6B2EA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /tmp/fileutl.message.nUAxz3
- Size 235KB
- SHA256 7552d5ab0c3879756a860aaab8e7c2f8ffb9409ea9ff9e65fc046ba5c519ebe5
- MD5 373fe2f2ef99005d2550a482f09a3e51
- SHA1 68e6572b55b1e77f7d171ebac7b2579b7a6bd51d
- SHA512 def9e854b824d2fddc6a15f898be73cfb679ac38563f5af854546f49c9d5d2316a40176dc41d6b360bda7b65de53863a53e4eedadf6336000b031b77a113607b
- SSDEEP 3072:t18aY9GIuZ6V6EjuocG6dW9kzceITEjV3rmug/ng:tHu7uMVFT6dWCfV3q/g
- TLSH T19A3431D42934ADB3456AE70717A15481BB2C5C8036B29CDDB04D9DE2CBF6BCE5BEB408
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /tmp/linpeas_host_checker_1492.json
- Size 169B
- SHA256 6460e7e93deb48b10a640d0fc8bad0a3e1223f4d5055cc0b7fae849b495f481a
- MD5 c20300a7163e535ec58fbe311e5c494b
- SHA1 471d34517203e67bf5f75e9b146e8e1b23324cce
- SHA512 3828af0aaac6a516be6d8069619c63eae8bb2fba4781d491e244844bd8ce30d388657232f48643b3a7699f0033c4ed061446dcf7d803981035c73308105d73d2
- TLSH T1FDC08C31D4180A2301E0BA0C49FF2453A8E02523790124043B8C49280F886FB3CBB74F
- MD5 SHA1 SHA512 TLSH
- Path /tmp/z3xxvhmd
- Size 4B
- SHA256 f02285fb90ed8c81531fe78cf4e2abb68a62be73ee7d317623e2c3e3aefdfff2
- MD5 3f1d1d8d87177d3d8d897d7e421f84d6
- SHA1 dd082d742a5cb751290f1db2bd519c286aa86d95
- SHA512 2ae2b3936f31756332ca7a4b877d18f3fcc50e41e9472b5cd45a70bea82e29a0fa956ee6a9ee0e02f23d9db56b41d19cb51d88aac06e9c923a820a21023752a9
- MD5 SHA1 SHA512