export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "model name|Hardware" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep "Model name"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[ -f /etc/os-release ]
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "model name|Hardware" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep "Model name"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null); arch=$(uname -m 2>/dev/null); uptime=$(cat /proc/uptime 2>/dev/null | cut -d. -f1); cpus=$( (nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) | head -1); cpu_model=$( (grep -m1 -E "model name|Hardware" /proc/cpuinfo | cut -d: -f2- | sed 's/^ *//;s/ *$//' ; lscpu 2>/dev/null | awk -F: '/Model name/ {gsub(/^ +| +$/,"",$2); print $2; exit}' ; dmidecode -s processor-version 2>/dev/null | head -n1 ; uname -p 2>/dev/null) | awk 'NF{print; exit}' ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia) 2>/dev/null | head -n50); cat_help=$( (cat --help 2>&1 | tr '\n' ' ') || cat --help 2>&1); ls_help=$( (ls --help 2>&1 | tr '\n' ' ') || ls --help 2>&1); last_output=$(last 2>/dev/null | head -n 10); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "CAT_HELP:$cat_help"; echo "LS_HELP:$ls_help"; echo "LAST:$last_output"
uname -m 2 > /dev/null
cat /proc/uptime 2 > /dev/null | cut -d. -f1
cut -d. -f1

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator 823e8657042a w4m_seattle_01 · 2026-07-10 00:08

13 1 90%

Loading events...

Credential Probe 29c5fa963c0f w4m_seattle_01 · 2026-07-10 00:06

1 20%

Loading events...

Interactive Operator 128119a1f7eb w4m_seattle_01 · 2026-07-10 00:04

13 1 90%

Loading events...

Interactive Operator 973194a87221 w4m_seattle_01 · 2026-07-10 00:02

13 1 90%

Loading events...

Unknown da6e0456f4a6 w4m_seattle_01 · 2026-07-10 00:00

13 10%

Loading events...

Scanner eb2ab26b5b86 w4m_seattle_01 · 2026-07-09 23:55

15%

Loading events...

Interactive Operator 9c7ee7d70d8d w4m_seattle_01 · 2026-07-08 21:55

13 1 90%

Loading events...

Interactive Operator 1464ea309e60 w4m_seattle_01 · 2026-07-08 21:54

13 1 90%

Loading events...

Interactive Operator a64e4b6f91f2 w4m_seattle_01 · 2026-07-08 21:52

13 1 90%

Loading events...

Interactive Operator 9987d3aff74c w4m_seattle_01 · 2026-07-08 21:50

13 1 90%

Loading events...

Interactive Operator 3931a0d2d075 w4m_seattle_01 · 2026-07-08 21:48

13 1 90%

Loading events...

Interactive Operator 1125dbaa2951 w4m_seattle_01 · 2026-07-08 21:46

13 1 90%

Loading events...

Interactive Operator 37c085bf89ef w4m_seattle_01 · 2026-07-08 21:45

13 1 90%

Loading events...

Interactive Operator e15eaca35889 w4m_seattle_01 · 2026-07-08 21:43

13 1 90%

Loading events...

Interactive Operator 02c0fafa2fc0 w4m_seattle_01 · 2026-07-08 21:41

13 1 90%

Loading events...

Interactive Operator 03ecef493acc w4m_seattle_01 · 2026-07-08 21:39

13 1 90%

Loading events...

Interactive Operator 70a8ffac9043 w4m_seattle_01 · 2026-07-08 21:37

13 1 90%

Loading events...

Interactive Operator 16d6765bf6f2 w4m_seattle_01 · 2026-07-08 21:35

13 1 90%

Loading events...

Interactive Operator fc6e68be7510 w4m_seattle_01 · 2026-07-08 21:34

13 1 90%

Loading events...

Credential Probe 41d6ce89e8b8 w4m_seattle_01 · 2026-07-08 21:32

1 20%

Loading events...

Scanner 1575900f50d8 w4m_seattle_01 · 2026-07-08 21:29

15%

Loading events...

Interactive Operator bf1cb415788e newark_01 · 2026-07-01 15:22

10 1 90%

Loading events...

Scanner acfc0281a828 newark_01 · 2026-07-01 14:27

15%

Loading events...

Interactive Operator 680bb1782f1c w4m_seattle_01 · 2026-06-29 22:28

13 1 90%

Loading events...

Interactive Operator 3f08c1466ab1 w4m_seattle_01 · 2026-06-29 22:11

13 1 90%

Loading events...

Interactive Operator ba5613a4ada2 w4m_seattle_01 · 2026-06-29 21:55

13 1 90%

Loading events...

Interactive Operator a3d029d85ec0 w4m_seattle_01 · 2026-06-29 21:38

13 1 90%

Loading events...

Interactive Operator e93cb8ccf942 w4m_seattle_01 · 2026-06-29 21:09

13 1 90%

Loading events...

Interactive Operator 5e42d36765c1 w4m_seattle_01 · 2026-06-29 20:59

13 1 90%

Loading events...

Interactive Operator 6559373ba20b w4m_seattle_01 · 2026-06-29 20:52

13 1 90%

Loading events...

Interactive Operator 572d9781e998 w4m_seattle_01 · 2026-06-29 20:44

13 1 90%

Loading events...

Interactive Operator f25927ab13b9 w4m_seattle_01 · 2026-06-29 20:42

13 1 90%

Loading events...

Interactive Operator f12f66e54039 newark_01 · 2026-06-29 17:20

10 1 90%

Loading events...

Interactive Operator 57845ce5a245 newark_01 · 2026-06-29 17:16

10 1 90%

Loading events...

Credential Probe 38c58ee41da0 newark_01 · 2026-06-29 17:12

1 20%

Loading events...

Interactive Operator 4712be080d92 newark_01 · 2026-06-29 17:05

10 1 90%

Loading events...

Interactive Operator 787c89ae675a newark_01 · 2026-06-29 17:00

10 1 90%

Loading events...

Interactive Operator 18b186102c23 newark_01 · 2026-06-29 16:57

10 1 90%

Loading events...

Interactive Operator 89de0b1d5e4b newark_01 · 2026-06-29 16:53

10 1 90%

Loading events...

Interactive Operator 65320ad2f948 newark_01 · 2026-06-29 16:49

10 1 90%

Loading events...

Scanner 1dd459db3a8f newark_01 · 2026-06-29 16:45

15%

Loading events...

Credential Probe 13656fc3227b newark_01 · 2026-06-29 16:17

1 20%

Loading events...

Interactive Operator 507a5d24e946 w4m_seattle_01 · 2026-06-29 09:18

13 1 90%

Loading events...

Interactive Operator ac101f11432c w4m_seattle_01 · 2026-06-29 09:12

13 1 90%

Loading events...

Interactive Operator 043fbc90b8a6 w4m_seattle_01 · 2026-06-29 09:06

13 1 90%

Loading events...

Interactive Operator fa6670c89b10 w4m_seattle_01 · 2026-06-29 09:02

13 1 90%

Loading events...

Scanner 866c01b85911 w4m_seattle_01 · 2026-06-29 08:55

15%

Loading events...

Interactive Operator 652671ae3748 w4m_singapore_01 · 2026-06-26 17:36

5 1 90%

Loading events...

Interactive Operator 810e3c5cb7d9 w4m_singapore_01 · 2026-06-26 17:34

5 1 90%

Loading events...

Interactive Operator 32d05f11f281 w4m_singapore_01 · 2026-06-26 17:32

5 1 90%

Loading events...