export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
[ -f /etc/os-release ]
echo $HOME
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "model name|Hardware" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep "Model name"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator 886701c9dc13 w4m_seattle_01 · 2026-07-17 19:22

13 1 90%

Loading events...

Interactive Operator 9dc39a581b2c w4m_seattle_01 · 2026-07-17 19:20

13 1 90%

Loading events...

Interactive Operator 182918052ce2 w4m_seattle_01 · 2026-07-17 19:16

13 1 90%

Loading events...

Interactive Operator 9f72be02863d w4m_seattle_01 · 2026-07-17 19:14

13 1 90%

Loading events...

Credential Probe 6e59ac323b93 w4m_seattle_01 · 2026-07-17 19:10

1 20%

Loading events...

Interactive Operator 2f7515b07b16 w4m_seattle_01 · 2026-07-17 19:07

13 1 90%

Loading events...

Interactive Operator 0d2db54edffa w4m_seattle_01 · 2026-07-17 19:04

13 1 90%

Loading events...

Interactive Operator 84b10148f977 w4m_seattle_01 · 2026-07-17 19:01

13 1 90%

Loading events...

Interactive Operator b398f15f3125 w4m_seattle_01 · 2026-07-17 18:58

13 1 90%

Loading events...

Interactive Operator 19a853e8f5a9 w4m_seattle_01 · 2026-07-17 18:55

13 1 90%

Loading events...

Scanner 7064ed79f4f7 w4m_seattle_01 · 2026-07-17 18:38

15%

Loading events...

Interactive Operator 2e4c5fc90127 w4m_seattle_01 · 2026-07-17 05:27

13 1 90%

Loading events...

Interactive Operator 0da779ed0c85 w4m_seattle_01 · 2026-07-17 05:24

13 1 90%

Loading events...

Interactive Operator 5e9f43a92ef7 w4m_seattle_01 · 2026-07-17 05:22

13 1 90%

Loading events...

Interactive Operator 21ce79c07f2a w4m_seattle_01 · 2026-07-17 05:19

13 1 90%

Loading events...

Interactive Operator c35a2a63095f w4m_seattle_01 · 2026-07-17 05:16

13 1 90%

Loading events...

Interactive Operator 5e10b7e7b197 w4m_seattle_01 · 2026-07-17 05:13

13 1 90%

Loading events...

Interactive Operator 670fb6eacaa7 w4m_seattle_01 · 2026-07-17 05:11

13 1 90%

Loading events...

Interactive Operator 57bd9879f85f w4m_seattle_01 · 2026-07-17 05:08

13 1 90%

Loading events...

Credential Probe 66b352b9d25a w4m_seattle_01 · 2026-07-17 05:06

1 20%

Loading events...

Interactive Operator 301956afae4b w4m_seattle_01 · 2026-07-17 05:03

13 1 90%

Loading events...

Interactive Operator a4ef882d8b27 w4m_seattle_01 · 2026-07-17 05:01

13 1 90%

Loading events...

Interactive Operator ce91ba0c7602 w4m_seattle_01 · 2026-07-17 04:58

13 1 90%

Loading events...

Interactive Operator 7ac3aa8c6ddb w4m_seattle_01 · 2026-07-17 04:56

13 1 90%

Loading events...

Interactive Operator 80b6099c5867 w4m_seattle_01 · 2026-07-17 04:53

13 1 90%

Loading events...

Interactive Operator 453c0c524f43 w4m_seattle_01 · 2026-07-17 04:50

13 1 90%

Loading events...

Scanner 3fffd90956a5 w4m_seattle_01 · 2026-07-17 04:37

15%

Loading events...

Interactive Operator 9e692615dba6 w4m_singapore_01 · 2026-07-16 14:48

13 1 90%

Loading events...

Credential Probe 84a8f9fe86df w4m_singapore_01 · 2026-07-16 14:45

1 20%

Loading events...

Interactive Operator b42141285cf9 w4m_singapore_01 · 2026-07-16 14:42

13 1 90%

Loading events...

Interactive Operator f2f7fc2db9c0 w4m_singapore_01 · 2026-07-16 14:40

13 1 90%

Loading events...

Interactive Operator 916e722b33c8 w4m_singapore_01 · 2026-07-16 14:37

13 1 90%

Loading events...

Scanner 05fa2d28b2fa w4m_singapore_01 · 2026-07-16 14:31

15%

Loading events...

Interactive Operator 9f88a2b7b549 newark_01 · 2026-07-15 11:11

10 1 90%

Loading events...

Interactive Operator 8aae08569b06 newark_01 · 2026-07-15 11:08

10 1 90%

Loading events...

Scanner 4e741c0e9c25 newark_01 · 2026-07-15 10:52

15%

Loading events...

Interactive Operator 1c8facf1ac63 w4m_seattle_01 · 2026-07-08 23:31

13 1 90%

Loading events...

Interactive Operator 581b40926774 w4m_seattle_01 · 2026-07-08 23:29

13 1 90%

Loading events...

Interactive Operator 09aad08cdef6 w4m_seattle_01 · 2026-07-08 23:27

13 1 90%

Loading events...

Credential Probe 51ce5e3e73e8 w4m_seattle_01 · 2026-07-08 23:25

1 20%

Loading events...

Interactive Operator 926e717d9a7b w4m_seattle_01 · 2026-07-08 23:23

13 1 90%

Loading events...

Interactive Operator 519af1cdcd38 w4m_seattle_01 · 2026-07-08 23:21

13 1 90%

Loading events...

Interactive Operator 87f53d5c0f58 w4m_seattle_01 · 2026-07-08 23:19

13 1 90%

Loading events...

Interactive Operator f802827f81f9 w4m_seattle_01 · 2026-07-08 23:16

13 1 90%

Loading events...

Interactive Operator 8b31a9bbd58c w4m_seattle_01 · 2026-07-08 23:14

13 1 90%

Loading events...

Scanner 41bb981b9583 w4m_seattle_01 · 2026-07-08 22:59

15%

Loading events...

Credential Probe 21d294e428d3 w4m_seattle_01 · 2026-07-02 13:21

1 20%

Loading events...

Credential Probe fcd58c6e06d3 w4m_seattle_01 · 2026-07-02 13:17

1 20%

Loading events...

Credential Probe 6175b07e9465 w4m_seattle_01 · 2026-07-02 13:13

1 20%

Loading events...

Credential Probe bac263517ee1 w4m_seattle_01 · 2026-07-02 13:12

1 20%

Loading events...