export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo "") arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo "") uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null) cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null) cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ) gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ) last_output=$(last 2>/dev/null) filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ) echo "UNAME:$uname" echo "ARCH:$arch" echo "UPTIME:$uptime" echo "CPUS:$cpus" echo "CPU_MODEL:$cpu_model" echo "GPU:$gpu_info" echo "LAST:$last_output" echo "FILTER:$filter_output"
./xxxxxx
xxxxxx
printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter
#!/bin/bash echo "xxxxxx"

Fingerprints

1 SSH client banner · 1 HASSH fingerprint

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Scanner 380366239fe6 w4m_seattle_01 · 2026-10-19 03:51

15%

Loading events...

Credential Probe ef27a868c934 w4m_seattle_01 · 2026-10-19 03:50

1 20%

Loading events...

Credential Probe 6a1e50b82128 w4m_seattle_01 · 2026-10-19 03:48

1 20%

Loading events...

Credential Probe 9a875134c5c6 w4m_seattle_01 · 2026-10-19 03:47

1 20%

Loading events...

Credential Probe 6cfdf18b509c w4m_seattle_01 · 2026-10-19 03:45

1 20%

Loading events...

Credential Probe 48320257d084 w4m_seattle_01 · 2026-10-19 03:44

1 20%

Loading events...

Credential Probe 50ed1b342106 w4m_seattle_01 · 2026-10-19 03:43

1 20%

Loading events...

Credential Probe 11bd1b15d50e w4m_seattle_01 · 2026-10-19 03:41

1 20%

Loading events...

Credential Probe 8c90dd697f9e w4m_seattle_01 · 2026-10-19 03:40

1 20%

Loading events...

Scanner 0d7a0f9de23c w4m_seattle_01 · 2026-10-19 03:38

15%

Loading events...

Credential Probe 1bd2649f9680 w4m_seattle_01 · 2026-10-19 03:37

1 20%

Loading events...

Credential Probe fdd6feac4aa6 w4m_seattle_01 · 2026-10-19 03:35

1 20%

Loading events...

Interactive Operator 0e599f5acca8 w4m_seattle_01 · 2026-10-19 03:34

13 1 90%

Loading events...

Interactive Operator c7a7aeb5c3f1 w4m_seattle_01 · 2026-10-19 03:32

13 1 90%

Loading events...

Interactive Operator f76192cf750d w4m_seattle_01 · 2026-10-19 03:30

13 1 90%

Loading events...

Interactive Operator 67adb884451d w4m_seattle_01 · 2026-10-19 03:29

13 1 90%

Loading events...

Interactive Operator f263bb91eed1 w4m_seattle_01 · 2026-10-19 03:27

13 1 90%

Loading events...

Interactive Operator 81b8c7d8b32b w4m_seattle_01 · 2026-10-19 03:25

13 1 90%

Loading events...

Interactive Operator 24a978284f69 w4m_seattle_01 · 2026-10-19 03:23

13 1 90%

Loading events...

Interactive Operator 75175ff8e51e w4m_seattle_01 · 2026-10-19 03:22

13 1 90%

Loading events...

Credential Probe bc80085ec888 w4m_seattle_01 · 2026-10-19 03:20

1 20%

Loading events...

Credential Probe 540b3088e382 w4m_seattle_01 · 2026-10-19 03:18

1 20%

Loading events...

Credential Probe 0d7b17825b3f w4m_seattle_01 · 2026-10-19 03:15

1 20%

Loading events...

Scanner a8d3d6308913 w4m_seattle_01 · 2026-10-19 03:06

15%

Loading events...

Scanner d7a93dc980d7 w4m_seattle_01 · 2026-10-13 19:16

15%

Loading events...

Credential Probe ebe29041a1b8 w4m_seattle_01 · 2026-10-13 19:13

1 20%

Loading events...

Credential Probe 24e8af73e2ee w4m_seattle_01 · 2026-10-13 19:11

1 20%

Loading events...

Credential Probe f651bbe777d9 w4m_seattle_01 · 2026-10-13 19:09

1 20%

Loading events...

Credential Probe 122aba7b6cfd w4m_seattle_01 · 2026-10-13 19:07

1 20%

Loading events...

Credential Probe 209aab73bc7e w4m_seattle_01 · 2026-10-13 19:05

1 20%

Loading events...

Credential Probe ce3e4b3dd09c w4m_seattle_01 · 2026-10-13 19:03

1 20%

Loading events...

Credential Probe 575abcf04fd9 w4m_seattle_01 · 2026-10-13 19:01

1 20%

Loading events...

Credential Probe 2c635fc231c8 w4m_seattle_01 · 2026-10-13 18:59

1 20%

Loading events...

Credential Probe a556405b7c42 w4m_seattle_01 · 2026-10-13 18:57

1 20%

Loading events...

Credential Probe 97354b7335f3 w4m_seattle_01 · 2026-10-13 18:55

1 20%

Loading events...

Credential Probe af3bdffdf7ac w4m_seattle_01 · 2026-10-13 18:53

1 20%

Loading events...

Credential Probe 13e554f458ad w4m_seattle_01 · 2026-10-13 18:51

1 20%

Loading events...

Interactive Operator c1fb239a76c0 w4m_seattle_01 · 2026-10-13 18:49

13 1 90%

Loading events...

Interactive Operator 89c5f292a08e w4m_seattle_01 · 2026-10-13 18:47

13 1 90%

Loading events...

Interactive Operator 20d3ff41de9d w4m_seattle_01 · 2026-10-13 18:46

13 1 90%

Loading events...

Interactive Operator c1260841027d w4m_seattle_01 · 2026-10-13 18:44

13 1 90%

Loading events...

Interactive Operator a6ff8afaafac w4m_seattle_01 · 2026-10-13 18:42

13 1 90%

Loading events...

Interactive Operator 9c855485f8e6 w4m_seattle_01 · 2026-10-13 18:40

13 1 90%

Loading events...

Interactive Operator f4bf99cfa8d5 w4m_seattle_01 · 2026-10-13 18:39

13 1 90%

Loading events...

Interactive Operator 1570bf9d295c w4m_seattle_01 · 2026-10-13 18:37

13 1 90%

Loading events...

Interactive Operator 4782635e340d w4m_seattle_01 · 2026-10-13 18:35

13 1 90%

Loading events...

Scanner abec7c1d62e8 w4m_seattle_01 · 2026-10-13 18:26

15%

Loading events...

Credential Probe 96412b707d23 w4m_singapore_01 · 2026-10-13 17:51

1 20%

Loading events...

Credential Probe 1329eff3982c w4m_singapore_01 · 2026-10-13 17:50

1 20%

Loading events...

Credential Probe 94c1b2807314 w4m_singapore_01 · 2026-10-13 17:48

1 20%

Loading events...