export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
[ -f /etc/os-release ]
echo $HOME
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "model name|Hardware" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep "Model name"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator 7387a2daabef w4m_seattle_01 · 2026-07-17 09:03

13 1 90%

Loading events...

Interactive Operator d04f77c58fc3 w4m_seattle_01 · 2026-07-17 09:02

13 1 90%

Loading events...

Credential Probe c9d230f4af5b w4m_seattle_01 · 2026-07-17 09:00

1 20%

Loading events...

Scanner 4e03dc393a3a w4m_seattle_01 · 2026-07-17 08:54

15%

Loading events...

Interactive Operator b70dc2e94b70 newark_01 · 2026-07-17 06:28

10 1 90%

Loading events...

Interactive Operator 3c2a9350ef86 newark_01 · 2026-07-17 06:27

10 1 90%

Loading events...

Interactive Operator a74810edc8de newark_01 · 2026-07-17 06:26

10 1 90%

Loading events...

Interactive Operator ed2dc9890640 newark_01 · 2026-07-17 06:24

10 1 90%

Loading events...

Scanner 701e60bdac97 newark_01 · 2026-07-17 06:22

15%

Loading events...

Interactive Operator 290f7c503b91 w4m_singapore_01 · 2026-07-11 11:48

13 1 90%

Loading events...

Scanner 23b17e1072ec w4m_singapore_01 · 2026-07-11 11:45

15%

Loading events...

Interactive Operator d82522eee2de w4m_singapore_01 · 2026-07-11 11:42

13 1 90%

Loading events...

Scanner 44511e9d7f1a w4m_singapore_01 · 2026-07-11 11:27

15%

Loading events...

Interactive Operator 2a7d8f4ceb9d w4m_seattle_01 · 2026-07-09 17:20

13 1 90%

Loading events...

Interactive Operator 1983ced194cf w4m_seattle_01 · 2026-07-09 17:18

13 1 90%

Loading events...

Interactive Operator d79ea8a4fb3e w4m_seattle_01 · 2026-07-09 17:17

13 1 90%

Loading events...

Interactive Operator c7b0baea8a8b w4m_seattle_01 · 2026-07-09 17:15

13 1 90%

Loading events...

Interactive Operator 66d4182231c6 w4m_seattle_01 · 2026-07-09 17:13

13 1 90%

Loading events...

Interactive Operator 5994df5bc043 w4m_seattle_01 · 2026-07-09 17:11

13 1 90%

Loading events...

Interactive Operator 41bf569c95e7 w4m_seattle_01 · 2026-07-09 17:09

13 1 90%

Loading events...

Interactive Operator 69e3baacac4b w4m_seattle_01 · 2026-07-09 17:08

13 1 90%

Loading events...

Interactive Operator 5bc445c24fe4 w4m_seattle_01 · 2026-07-09 17:06

13 1 90%

Loading events...

Interactive Operator 9f1071da751e w4m_seattle_01 · 2026-07-09 17:05

13 1 90%

Loading events...

Interactive Operator 166d5d3d5722 w4m_seattle_01 · 2026-07-09 17:03

13 1 90%

Loading events...

Interactive Operator 1ac839279a2e w4m_seattle_01 · 2026-07-09 17:01

13 1 90%

Loading events...

Interactive Operator 2d2b67099afd w4m_seattle_01 · 2026-07-09 17:00

13 1 90%

Loading events...

Interactive Operator 434e0c8612d2 w4m_seattle_01 · 2026-07-09 16:58

13 1 90%

Loading events...

Interactive Operator 2e93da6421cd w4m_seattle_01 · 2026-07-09 16:57

13 1 90%

Loading events...

Credential Probe 866df9548aa8 w4m_seattle_01 · 2026-07-09 16:55

1 20%

Loading events...

Scanner 74c93da84574 w4m_seattle_01 · 2026-07-09 16:49

15%

Loading events...

Credential Probe d9f5f30ba81a w4m_singapore_01 · 2026-07-02 11:49

1 20%

Loading events...

Credential Probe 2c11b03f383f w4m_singapore_01 · 2026-07-02 11:25

1 20%

Loading events...

Credential Probe cd58b1bb9cf7 w4m_singapore_01 · 2026-07-02 11:22

1 20%

Loading events...

Credential Probe 8ec25001a94a w4m_singapore_01 · 2026-07-02 11:19

1 20%

Loading events...

Credential Probe d5a15f4707c3 w4m_singapore_01 · 2026-07-02 11:13

1 20%

Loading events...

Reconnaissance 97f629ffbfc0 w4m_singapore_01 · 2026-07-02 11:07

1 1 60%

Loading events...

Reconnaissance 207014453856 w4m_singapore_01 · 2026-07-02 11:00

1 1 60%

Loading events...

Reconnaissance a0477b1a2c5d w4m_singapore_01 · 2026-07-02 10:47

1 1 60%

Loading events...

Reconnaissance 26c186b6316d w4m_singapore_01 · 2026-07-02 10:43

1 1 60%

Loading events...

Reconnaissance 8e81493dd15f w4m_singapore_01 · 2026-07-02 10:37

1 1 60%

Loading events...

Reconnaissance 6a60dab72d82 w4m_singapore_01 · 2026-07-02 10:24

1 1 60%

Loading events...

Reconnaissance 8d7958cff902 w4m_singapore_01 · 2026-07-02 10:11

1 1 60%

Loading events...

Reconnaissance db67e5f5e929 w4m_singapore_01 · 2026-07-02 10:08

1 1 60%

Loading events...

Reconnaissance 3d076dcf2feb w4m_singapore_01 · 2026-07-02 10:05

1 1 60%

Loading events...

Reconnaissance fbb4df8913c4 w4m_singapore_01 · 2026-07-02 10:02

1 1 60%

Loading events...

Credential Probe 5cb42b4d6876 w4m_singapore_01 · 2026-07-02 10:00

1 20%

Loading events...

Reconnaissance 68e78251441c w4m_singapore_01 · 2026-07-02 09:44

1 1 60%

Loading events...

Reconnaissance 818115b9fad6 w4m_singapore_01 · 2026-07-02 09:42

1 1 60%

Loading events...

Reconnaissance 26437a7aa876 w4m_singapore_01 · 2026-07-02 09:40

1 1 60%

Loading events...

Reconnaissance a795d8fd14b9 w4m_singapore_01 · 2026-07-02 09:36

1 1 60%

Loading events...