Overview

overview

10

Static

static

10

mips.elf

debian-9-mips

10

Analysis

  • max time kernel
    59s
  • max time network
    150s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    08/10/2026, 12:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    mips.elf
  • Size 201KB
  • Sample261008-prxt8sxtfv
  • SHA256 132d3b2136891326548fa6fbc23de90e60f37beeb682ea3f1ff8469fa1b9a3e6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
botnetdefense_evasiondiscoverymiraipersistenceprivilege_escalation

Malware Config

Signatures

  • Family: Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

    botnetmirai
  • Executes dropped EXE 1 IoCs
  • Creates/modifies environment variables 1 TTPs 1 IoCs

    Creating/modifying environment variables is a common persistence mechanism.

    persistenceprivilege_escalationdefense_evasion
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d 2 TTPs 1 IoCs

    Adds/modifies system service, likely for persistence.

    persistence
  • Modifies rc script 2 TTPs 1 IoCs

    Adding/modifying system rc scripts is a common persistence mechanism.

    persistence
  • Modifies Bash startup script 2 TTPs 1 IoCs
    persistence
  • Changes its process name 1 IoCs
  • Reads CPU attributes 1 TTPs 64 IoCs
    discovery
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

    discovery

Processes

  • /tmp/mips.elf
    /tmp/mips.elf
    1⤵
    • Creates/modifies environment variables
    • Modifies init.d
    • Modifies rc script
    • Modifies Bash startup script
    • Changes its process name
    • Reads runtime system information
    • System Network Configuration Discovery
    PID:701
    • /bin/sh
      sh -c "/etc/init.d/magician enable 2>/dev/null"
      2⤵
      • Executes dropped EXE
      PID:704
      • /etc/init.d/magician
        /etc/init.d/magician enable
        3⤵
          PID:706
      • /bin/sh
        sh -c "chattr +i /root/.x 2>/dev/null"
        2⤵
          PID:710
          • /usr/bin/chattr
            chattr +i /root/.x
            3⤵
              PID:713
          • /bin/sh
            sh -c "chattr +i /etc/init.d/magician 2>/dev/null"
            2⤵
              PID:716
              • /usr/bin/chattr
                chattr +i /etc/init.d/magician
                3⤵
                  PID:717
              • /bin/sh
                sh -c "chattr +i /etc/rc.local 2>/dev/null"
                2⤵
                  PID:719
                  • /usr/bin/chattr
                    chattr +i /etc/rc.local
                    3⤵
                      PID:721
                  • /bin/sh
                    sh -c "pkill -9 -u daemon 2>/dev/null"
                    2⤵
                      PID:728
                      • /usr/bin/pkill
                        pkill -9 -u daemon
                        3⤵
                          PID:730
                      • /bin/sh
                        sh -c "pkill -9 -u bin 2>/dev/null"
                        2⤵
                          PID:746
                          • /usr/bin/pkill
                            pkill -9 -u bin
                            3⤵
                            • Reads runtime system information
                            PID:748
                        • /bin/sh
                          sh -c "pkill -9 -u sys 2>/dev/null"
                          2⤵
                            PID:750
                            • /usr/bin/pkill
                              pkill -9 -u sys
                              3⤵
                                PID:751
                            • /bin/sh
                              sh -c "pkill -9 -u sync 2>/dev/null"
                              2⤵
                                PID:753
                                • /usr/bin/pkill
                                  pkill -9 -u sync
                                  3⤵
                                    PID:755
                                • /bin/sh
                                  sh -c "pkill -9 -u games 2>/dev/null"
                                  2⤵
                                    PID:756
                                    • /usr/bin/pkill
                                      pkill -9 -u games
                                      3⤵
                                      • Reads CPU attributes
                                      PID:757
                                  • /bin/sh
                                    sh -c "pkill -9 -u man 2>/dev/null"
                                    2⤵
                                      PID:759
                                      • /usr/bin/pkill
                                        pkill -9 -u man
                                        3⤵
                                        • Reads runtime system information
                                        PID:761
                                    • /bin/sh
                                      sh -c "pkill -9 -u lp 2>/dev/null"
                                      2⤵
                                        PID:763
                                        • /usr/bin/pkill
                                          pkill -9 -u lp
                                          3⤵
                                          • Reads runtime system information
                                          PID:764
                                      • /bin/sh
                                        sh -c "pkill -9 -u mail 2>/dev/null"
                                        2⤵
                                          PID:765
                                          • /usr/bin/pkill
                                            pkill -9 -u mail
                                            3⤵
                                              PID:767
                                          • /bin/sh
                                            sh -c "pkill -9 -u news 2>/dev/null"
                                            2⤵
                                              PID:768
                                              • /usr/bin/pkill
                                                pkill -9 -u news
                                                3⤵
                                                  PID:769
                                              • /bin/sh
                                                sh -c "pkill -9 -u uucp 2>/dev/null"
                                                2⤵
                                                  PID:770
                                                  • /usr/bin/pkill
                                                    pkill -9 -u uucp
                                                    3⤵
                                                    • Reads CPU attributes
                                                    PID:771
                                                • /bin/sh
                                                  sh -c "pkill -9 -u proxy 2>/dev/null"
                                                  2⤵
                                                    PID:773
                                                    • /usr/bin/pkill
                                                      pkill -9 -u proxy
                                                      3⤵
                                                        PID:774
                                                    • /bin/sh
                                                      sh -c "pkill -9 -u www-data 2>/dev/null"
                                                      2⤵
                                                        PID:775
                                                        • /usr/bin/pkill
                                                          pkill -9 -u www-data
                                                          3⤵
                                                          • Reads CPU attributes
                                                          PID:776
                                                      • /bin/sh
                                                        sh -c "pkill -9 -u backup 2>/dev/null"
                                                        2⤵
                                                          PID:777
                                                          • /usr/bin/pkill
                                                            pkill -9 -u backup
                                                            3⤵
                                                            • Reads runtime system information
                                                            PID:778
                                                        • /bin/sh
                                                          sh -c "pkill -9 -u list 2>/dev/null"
                                                          2⤵
                                                            PID:779
                                                            • /usr/bin/pkill
                                                              pkill -9 -u list
                                                              3⤵
                                                                PID:780
                                                            • /bin/sh
                                                              sh -c "pkill -9 -u irc 2>/dev/null"
                                                              2⤵
                                                                PID:781
                                                                • /usr/bin/pkill
                                                                  pkill -9 -u irc
                                                                  3⤵
                                                                    PID:782
                                                                • /bin/sh
                                                                  sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                  2⤵
                                                                    PID:783
                                                                    • /usr/bin/pkill
                                                                      pkill -9 -u gnats
                                                                      3⤵
                                                                        PID:784
                                                                    • /bin/sh
                                                                      sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                      2⤵
                                                                        PID:785
                                                                        • /usr/bin/pkill
                                                                          pkill -9 -u nobody
                                                                          3⤵
                                                                          • Reads runtime system information
                                                                          PID:786
                                                                      • /bin/sh
                                                                        sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                        2⤵
                                                                          PID:787
                                                                          • /usr/bin/pkill
                                                                            pkill -9 -u systemd-timesync
                                                                            3⤵
                                                                              PID:788
                                                                          • /bin/sh
                                                                            sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                            2⤵
                                                                              PID:789
                                                                              • /usr/bin/pkill
                                                                                pkill -9 -u systemd-network
                                                                                3⤵
                                                                                • Reads CPU attributes
                                                                                PID:790
                                                                            • /bin/sh
                                                                              sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                              2⤵
                                                                                PID:791
                                                                                • /usr/bin/pkill
                                                                                  pkill -9 -u systemd-resolve
                                                                                  3⤵
                                                                                    PID:792
                                                                                • /bin/sh
                                                                                  sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                  2⤵
                                                                                    PID:793
                                                                                    • /usr/bin/pkill
                                                                                      pkill -9 -u systemd-bus-proxy
                                                                                      3⤵
                                                                                      • Reads runtime system information
                                                                                      PID:794
                                                                                  • /bin/sh
                                                                                    sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                    2⤵
                                                                                      PID:795
                                                                                      • /usr/bin/pkill
                                                                                        pkill -9 -u _apt
                                                                                        3⤵
                                                                                          PID:796
                                                                                      • /bin/sh
                                                                                        sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                        2⤵
                                                                                          PID:797
                                                                                          • /usr/bin/pkill
                                                                                            pkill -9 -u Debian-exim
                                                                                            3⤵
                                                                                              PID:798
                                                                                          • /bin/sh
                                                                                            sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                            2⤵
                                                                                              PID:804
                                                                                              • /usr/bin/pkill
                                                                                                pkill -9 -u messagebus
                                                                                                3⤵
                                                                                                • Reads CPU attributes
                                                                                                PID:806
                                                                                            • /bin/sh
                                                                                              sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                              2⤵
                                                                                                PID:811
                                                                                                • /usr/bin/pkill
                                                                                                  pkill -9 -u sshd
                                                                                                  3⤵
                                                                                                    PID:814
                                                                                                • /bin/sh
                                                                                                  sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                  2⤵
                                                                                                    PID:819
                                                                                                    • /usr/bin/pkill
                                                                                                      pkill -9 -u user
                                                                                                      3⤵
                                                                                                        PID:820
                                                                                                    • /bin/sh
                                                                                                      sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                      2⤵
                                                                                                        PID:845
                                                                                                        • /usr/bin/pkill
                                                                                                          pkill -9 -u daemon
                                                                                                          3⤵
                                                                                                            PID:850
                                                                                                        • /bin/sh
                                                                                                          sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                          2⤵
                                                                                                            PID:854
                                                                                                            • /usr/bin/pkill
                                                                                                              pkill -9 -u bin
                                                                                                              3⤵
                                                                                                                PID:855
                                                                                                            • /bin/sh
                                                                                                              sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                              2⤵
                                                                                                                PID:857
                                                                                                                • /usr/bin/pkill
                                                                                                                  pkill -9 -u sys
                                                                                                                  3⤵
                                                                                                                    PID:858
                                                                                                                • /bin/sh
                                                                                                                  sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                  2⤵
                                                                                                                    PID:860
                                                                                                                    • /usr/bin/pkill
                                                                                                                      pkill -9 -u sync
                                                                                                                      3⤵
                                                                                                                        PID:861
                                                                                                                    • /bin/sh
                                                                                                                      sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                      2⤵
                                                                                                                        PID:863
                                                                                                                        • /usr/bin/pkill
                                                                                                                          pkill -9 -u games
                                                                                                                          3⤵
                                                                                                                          • Reads CPU attributes
                                                                                                                          • Reads runtime system information
                                                                                                                          PID:864
                                                                                                                      • /bin/sh
                                                                                                                        sh -c "pkill -9 -u man 2>/dev/null"
                                                                                                                        2⤵
                                                                                                                          PID:866
                                                                                                                          • /usr/bin/pkill
                                                                                                                            pkill -9 -u man
                                                                                                                            3⤵
                                                                                                                            • Reads CPU attributes
                                                                                                                            PID:868
                                                                                                                        • /bin/sh
                                                                                                                          sh -c "pkill -9 -u lp 2>/dev/null"
                                                                                                                          2⤵
                                                                                                                            PID:869
                                                                                                                            • /usr/bin/pkill
                                                                                                                              pkill -9 -u lp
                                                                                                                              3⤵
                                                                                                                              • Reads CPU attributes
                                                                                                                              PID:870
                                                                                                                          • /bin/sh
                                                                                                                            sh -c "pkill -9 -u mail 2>/dev/null"
                                                                                                                            2⤵
                                                                                                                              PID:872
                                                                                                                              • /usr/bin/pkill
                                                                                                                                pkill -9 -u mail
                                                                                                                                3⤵
                                                                                                                                  PID:874
                                                                                                                              • /bin/sh
                                                                                                                                sh -c "pkill -9 -u news 2>/dev/null"
                                                                                                                                2⤵
                                                                                                                                  PID:875
                                                                                                                                  • /usr/bin/pkill
                                                                                                                                    pkill -9 -u news
                                                                                                                                    3⤵
                                                                                                                                    • Reads CPU attributes
                                                                                                                                    • Reads runtime system information
                                                                                                                                    PID:876
                                                                                                                                • /bin/sh
                                                                                                                                  sh -c "pkill -9 -u uucp 2>/dev/null"
                                                                                                                                  2⤵
                                                                                                                                    PID:878
                                                                                                                                    • /usr/bin/pkill
                                                                                                                                      pkill -9 -u uucp
                                                                                                                                      3⤵
                                                                                                                                        PID:881
                                                                                                                                    • /bin/sh
                                                                                                                                      sh -c "pkill -9 -u proxy 2>/dev/null"
                                                                                                                                      2⤵
                                                                                                                                        PID:883
                                                                                                                                        • /usr/bin/pkill
                                                                                                                                          pkill -9 -u proxy
                                                                                                                                          3⤵
                                                                                                                                            PID:884
                                                                                                                                        • /bin/sh
                                                                                                                                          sh -c "pkill -9 -u www-data 2>/dev/null"
                                                                                                                                          2⤵
                                                                                                                                            PID:885
                                                                                                                                            • /usr/bin/pkill
                                                                                                                                              pkill -9 -u www-data
                                                                                                                                              3⤵
                                                                                                                                                PID:887
                                                                                                                                            • /bin/sh
                                                                                                                                              sh -c "pkill -9 -u backup 2>/dev/null"
                                                                                                                                              2⤵
                                                                                                                                                PID:890
                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                  pkill -9 -u backup
                                                                                                                                                  3⤵
                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                  • Reads runtime system information
                                                                                                                                                  PID:891
                                                                                                                                              • /bin/sh
                                                                                                                                                sh -c "pkill -9 -u list 2>/dev/null"
                                                                                                                                                2⤵
                                                                                                                                                  PID:894
                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                    pkill -9 -u list
                                                                                                                                                    3⤵
                                                                                                                                                      PID:896
                                                                                                                                                  • /bin/sh
                                                                                                                                                    sh -c "pkill -9 -u irc 2>/dev/null"
                                                                                                                                                    2⤵
                                                                                                                                                      PID:897
                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                        pkill -9 -u irc
                                                                                                                                                        3⤵
                                                                                                                                                          PID:898
                                                                                                                                                      • /bin/sh
                                                                                                                                                        sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                                                                                                        2⤵
                                                                                                                                                          PID:901
                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                            pkill -9 -u gnats
                                                                                                                                                            3⤵
                                                                                                                                                              PID:902
                                                                                                                                                          • /bin/sh
                                                                                                                                                            sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                                                                                                            2⤵
                                                                                                                                                              PID:903
                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                pkill -9 -u nobody
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:905
                                                                                                                                                              • /bin/sh
                                                                                                                                                                sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:907
                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                    pkill -9 -u systemd-timesync
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:908
                                                                                                                                                                  • /bin/sh
                                                                                                                                                                    sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:910
                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                        pkill -9 -u systemd-network
                                                                                                                                                                        3⤵
                                                                                                                                                                          PID:911
                                                                                                                                                                      • /bin/sh
                                                                                                                                                                        sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:913
                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                            pkill -9 -u systemd-resolve
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:914
                                                                                                                                                                          • /bin/sh
                                                                                                                                                                            sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:915
                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                pkill -9 -u systemd-bus-proxy
                                                                                                                                                                                3⤵
                                                                                                                                                                                  PID:916
                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:917
                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                    pkill -9 -u _apt
                                                                                                                                                                                    3⤵
                                                                                                                                                                                      PID:919
                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                    sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:920
                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                        pkill -9 -u Debian-exim
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:921
                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                        sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:922
                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                            pkill -9 -u messagebus
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:923
                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                            sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:924
                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                pkill -9 -u sshd
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                  PID:925
                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:926
                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                    pkill -9 -u user
                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                      PID:927
                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                    sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:942
                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                        pkill -9 -u daemon
                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                        PID:943
                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                      sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:944
                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                          pkill -9 -u bin
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                            PID:945
                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                          sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:946
                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                              pkill -9 -u sys
                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                PID:947
                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                              sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:948
                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                  pkill -9 -u sync
                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                    PID:949
                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                  sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:950
                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                      pkill -9 -u games
                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                        PID:951
                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                      sh -c "pkill -9 -u man 2>/dev/null"
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:952
                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                          pkill -9 -u man
                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                            PID:953
                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                          sh -c "pkill -9 -u lp 2>/dev/null"
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:954
                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                              pkill -9 -u lp
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                              PID:955
                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                            sh -c "pkill -9 -u mail 2>/dev/null"
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:956
                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                pkill -9 -u mail
                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                • Reads CPU attributes
                                                                                                                                                                                                                                • Reads runtime system information
                                                                                                                                                                                                                                PID:957
                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                              sh -c "pkill -9 -u news 2>/dev/null"
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:958
                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                  pkill -9 -u news
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                    PID:959
                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                  sh -c "pkill -9 -u uucp 2>/dev/null"
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:960
                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                      pkill -9 -u uucp
                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                      • Reads CPU attributes
                                                                                                                                                                                                                                      PID:961
                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                    sh -c "pkill -9 -u proxy 2>/dev/null"
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:962
                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                        pkill -9 -u proxy
                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                        PID:963
                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                      sh -c "pkill -9 -u www-data 2>/dev/null"
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:964
                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                          pkill -9 -u www-data
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                            PID:965
                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                          sh -c "pkill -9 -u backup 2>/dev/null"
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:966
                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                              pkill -9 -u backup
                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                PID:967
                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                              sh -c "pkill -9 -u list 2>/dev/null"
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:968
                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                  pkill -9 -u list
                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                  PID:970
                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                sh -c "pkill -9 -u irc 2>/dev/null"
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:972
                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                    pkill -9 -u irc
                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                      PID:973
                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                    sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:975
                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                        pkill -9 -u gnats
                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                        PID:976
                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                      sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:978
                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                          pkill -9 -u nobody
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                            PID:979
                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                          sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:981
                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                              pkill -9 -u systemd-timesync
                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                              PID:982
                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                            sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:984
                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                pkill -9 -u systemd-network
                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                • Reads CPU attributes
                                                                                                                                                                                                                                                                PID:985
                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                              sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:987
                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                  pkill -9 -u systemd-resolve
                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                  • Reads runtime system information
                                                                                                                                                                                                                                                                  PID:988
                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:989
                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                    pkill -9 -u systemd-bus-proxy
                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                      PID:991
                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:992
                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                        pkill -9 -u _apt
                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                        PID:993
                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:995
                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                          pkill -9 -u Debian-exim
                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                            PID:997
                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:998
                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                              pkill -9 -u messagebus
                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                              PID:999
                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:1002
                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                pkill -9 -u sshd
                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                  PID:1005
                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:1007
                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                    pkill -9 -u user
                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                    • Reads runtime system information
                                                                                                                                                                                                                                                                                    PID:1012
                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:1035
                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                      pkill -9 -u daemon
                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                        PID:1038
                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:1043
                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                          pkill -9 -u bin
                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                          • Reads CPU attributes
                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                          PID:1044
                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:1045
                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                            pkill -9 -u sys
                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                            • Reads CPU attributes
                                                                                                                                                                                                                                                                                            PID:1046
                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:1047
                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                              pkill -9 -u sync
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                PID:1048
                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:1049
                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                  pkill -9 -u games
                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                  • Reads runtime system information
                                                                                                                                                                                                                                                                                                  PID:1050
                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u man 2>/dev/null"
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:1051
                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                    pkill -9 -u man
                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                      PID:1052
                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u lp 2>/dev/null"
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:1053
                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                        pkill -9 -u lp
                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                                                                        PID:1054
                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u mail 2>/dev/null"
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:1055
                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                          pkill -9 -u mail
                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                                          PID:1056
                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u news 2>/dev/null"
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:1057
                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                            pkill -9 -u news
                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                              PID:1058
                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u uucp 2>/dev/null"
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:1059
                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                pkill -9 -u uucp
                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                • Reads runtime system information
                                                                                                                                                                                                                                                                                                                PID:1060
                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:1061
                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                  pkill -9 -u proxy
                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                  PID:1062
                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u www-data 2>/dev/null"
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:1063
                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                    pkill -9 -u www-data
                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                      PID:1064
                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u backup 2>/dev/null"
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:1065
                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                        pkill -9 -u backup
                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                          PID:1066
                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u list 2>/dev/null"
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:1067
                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                            pkill -9 -u list
                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                            • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                            PID:1068
                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u irc 2>/dev/null"
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:1069
                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                              pkill -9 -u irc
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                PID:1070
                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:1071
                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                  pkill -9 -u gnats
                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                  PID:1072
                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:1073
                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                    pkill -9 -u nobody
                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                    • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                    PID:1074
                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:1075
                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                      pkill -9 -u systemd-timesync
                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                      • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                      • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                      PID:1076
                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:1077
                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                        pkill -9 -u systemd-network
                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                        PID:1078
                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:1079
                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                          pkill -9 -u systemd-resolve
                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                          • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                          PID:1080
                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:1081
                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                            pkill -9 -u systemd-bus-proxy
                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                              PID:1082
                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:1083
                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                pkill -9 -u _apt
                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                  PID:1084
                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:1085
                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u Debian-exim
                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                    • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                    PID:1086
                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                    PID:1087
                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u messagebus
                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                      • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                      PID:1088
                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:1089
                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u sshd
                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                        PID:1090
                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                        PID:1091
                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u user
                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                            PID:1092
                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:1093
                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u daemon
                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                              PID:1094
                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:1095
                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u bin
                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                PID:1096
                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                PID:1097
                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u sys
                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:1098
                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:1099
                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u sync
                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                      • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                      PID:1100
                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:1105
                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u games
                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                        PID:1108
                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u man 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:1112
                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u man
                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                          • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                          PID:1113
                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u lp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:1114
                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u lp
                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                            • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                            PID:1115
                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u mail 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:1116
                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u mail
                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                              PID:1117
                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u news 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:1118
                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u news
                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:1119
                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u uucp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:1120
                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u uucp
                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:1121
                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:1122
                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u proxy
                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:1123
                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u www-data 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:1124
                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u www-data
                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:1125
                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u backup 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:1126
                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u backup
                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:1127
                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u list 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:1128
                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u list
                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:1129
                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u irc 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:1130
                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u irc
                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:1131
                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:1132
                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u gnats
                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:1133
                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:1134
                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u nobody
                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                PID:1135
                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:1136
                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u systemd-timesync
                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1137
                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1138
                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u systemd-network
                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1139
                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1140
                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u systemd-resolve
                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1141
                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1142
                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u systemd-bus-proxy
                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1143
                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1144
                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u _apt
                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1145
                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1146
                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u Debian-exim
                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1147
                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1148
                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u messagebus
                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1149
                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1151
                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u sshd
                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1154
                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1159
                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u user
                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1164
                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1165
                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u daemon
                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1169
                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1173
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u bin
                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1174
                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1175
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1176
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1177
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u sync
                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1178
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1179
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u games
                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1180
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u man 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1181
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u man
                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1182
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u lp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1183
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u lp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1184
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u mail 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1185
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u mail
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1186
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u news 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1187
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u news
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1188
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u uucp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1189
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u uucp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1190
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1191
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u proxy
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1192
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u www-data 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1193
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u www-data
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1194
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u backup 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1195
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u backup
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1196
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u list 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1197
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u list
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1198
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u irc 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1199
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u irc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1201
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u gnats
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1202
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1203
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u nobody
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1204
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1205
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u systemd-timesync
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1206
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1207
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u systemd-network
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1209
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u systemd-resolve
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1210
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1211
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u systemd-bus-proxy
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1212
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1213
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u _apt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1214
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1215
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u Debian-exim
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1216
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1217
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u messagebus
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1218
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1219
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u sshd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1221
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u user
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1222
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1223
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u daemon
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u bin
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1231
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1236
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1237
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1238
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u sync
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1239
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1240
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u games
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1241
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u man 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1242
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u man
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1243
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u lp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u lp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1245
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u mail 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1246
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u mail
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1247
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u news 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u news
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1249
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u uucp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1250
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u uucp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1251
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1252
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u proxy
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1253
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u www-data 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1254
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u www-data
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1255
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u backup 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u backup
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1257
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u list 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1258
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u list
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1259
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u irc 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1260
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u irc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1261
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1262
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u gnats
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1263
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1264
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u nobody
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1265
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1266
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u systemd-timesync
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1267
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1268
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u systemd-network
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1269
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1270
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u systemd-resolve
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1271
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1272
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u systemd-bus-proxy
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1273
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1274
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u _apt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1275
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1276
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u Debian-exim
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1277
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1278
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u messagebus
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1279
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1281
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u sshd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1289
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u user
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1294
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1295
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u daemon
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1298
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1303
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u bin
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1304
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1305
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1306
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1307
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u sync
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1308
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1309
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u games
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1310
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u man 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1311
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u man
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1312
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u lp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1313
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u lp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1314
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u mail 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1315
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u mail
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u news 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1317
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u news
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1318
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u uucp 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1319
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u uucp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1320
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1321
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u proxy
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1322
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u www-data 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1323
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u www-data
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1324
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u backup 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1325
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u backup
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1326
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u list 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1327
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u list
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1328
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u irc 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1329
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u irc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1330
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u gnats 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1331
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u gnats
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads CPU attributes
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1332
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u nobody 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1333
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u nobody
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1334
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u systemd-timesync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1335
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u systemd-timesync
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1336
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u systemd-network 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1337
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u systemd-network
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1338
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u systemd-resolve 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1339
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u systemd-resolve
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u systemd-bus-proxy 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1341
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u systemd-bus-proxy
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1342
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u _apt 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1343
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u _apt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1344
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u Debian-exim 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1345
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u Debian-exim
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1346
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          sh -c "pkill -9 -u messagebus 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1347
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              pkill -9 -u messagebus
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1348
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sh -c "pkill -9 -u sshd 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1349
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  pkill -9 -u sshd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1350
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  sh -c "pkill -9 -u user 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1351
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      pkill -9 -u user
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1352
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      sh -c "pkill -9 -u daemon 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1353
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          pkill -9 -u daemon
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Reads runtime system information
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1354
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sh -c "pkill -9 -u bin 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1355
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            pkill -9 -u bin
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1356
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            sh -c "pkill -9 -u sys 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:1358
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                pkill -9 -u sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1361
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                sh -c "pkill -9 -u sync 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1364
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    pkill -9 -u sync
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1367
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • /bin/sh
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    sh -c "pkill -9 -u games 2>/dev/null"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1370
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • /usr/bin/pkill
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        pkill -9 -u games
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1371

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Reconnaissance

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Resource Development

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Initial Access

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Persistence

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1547

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Boot or Logon Initialization Scripts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1037

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          RC Scripts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1037.004

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Event Triggered Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1546

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Unix Shell Configuration Modification

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1546.004

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Hijack Execution Flow

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1574

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Path Interception by PATH Environment Variable

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1574.007

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Privilege Escalation

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Boot or Logon Autostart Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1547

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Boot or Logon Initialization Scripts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1037

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          RC Scripts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1037.004

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Event Triggered Execution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1546

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Unix Shell Configuration Modification

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1546.004

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Hijack Execution Flow

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1574

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Path Interception by PATH Environment Variable

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1574.007

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Defense Evasion

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Hijack Execution Flow

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1574

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Path Interception by PATH Environment Variable

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1574.007

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Credential Access

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Discovery

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          System Information Discovery

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1082

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          System Network Configuration Discovery

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          T1016

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Lateral Movement

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Collection

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command and Control

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Exfiltration

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Impact

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          magician
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Path /etc/init.d/magician
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Size 131B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • SHA256 0eec611c4ac2d5da4b0c945325219f644814e1339e865696cd85b9da46d3dfeb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          rc.local
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Path /etc/rc.local
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Size 28B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • SHA256 246bd5d98c6bbdc8ee0c754af983b0c73c6516a2eb4a2e8405b549d527185771
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • MD5 SHA1 SHA512
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          .x
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Path /root/.x
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Size 201KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • SHA256 132d3b2136891326548fa6fbc23de90e60f37beeb682ea3f1ff8469fa1b9a3e6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Submit Download