export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
[ -f /etc/os-release ]
export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { grep -m1 -E "model name|Hardware" /proc/cpuinfo 2>/dev/null; lscpu 2>/dev/null | grep "Model name"; dmidecode -s processor-version 2>/dev/null; uname -p 2>/dev/null; busybox uname -p 2>/dev/null; } ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | head -c 250; printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator b851e1ea012f w4m_seattle_01 · 2026-07-13 16:44

13 1 90%

Loading events...

Interactive Operator bf53f2795118 w4m_seattle_01 · 2026-07-13 16:42

13 1 90%

Loading events...

Interactive Operator 911533c3318f w4m_seattle_01 · 2026-07-13 16:39

13 1 90%

Loading events...

Scanner f9e2c745656d w4m_seattle_01 · 2026-07-13 16:36

15%

Loading events...

Interactive Operator 5e62e0521597 newark_01 · 2026-07-11 10:24

10 1 90%

Loading events...

Interactive Operator 6b6dc27b8e84 newark_01 · 2026-07-11 10:22

10 1 90%

Loading events...

Interactive Operator a345fb991459 newark_01 · 2026-07-11 10:19

10 1 90%

Loading events...

Interactive Operator 47ce528e53bb newark_01 · 2026-07-11 10:17

10 1 90%

Loading events...

Interactive Operator 069af0d2cf70 newark_01 · 2026-07-11 10:15

10 1 90%

Loading events...

Interactive Operator 611efec6bf0b newark_01 · 2026-07-11 10:13

10 1 90%

Loading events...

Interactive Operator 7e515726f592 newark_01 · 2026-07-11 10:10

10 1 90%

Loading events...

Interactive Operator 4296a130c2cc newark_01 · 2026-07-11 10:07

10 1 90%

Loading events...

Interactive Operator 301db0b47e49 newark_01 · 2026-07-11 10:05

10 1 90%

Loading events...

Interactive Operator 64d96666080d newark_01 · 2026-07-11 10:02

10 1 90%

Loading events...

Interactive Operator dd013efcccac newark_01 · 2026-07-11 09:59

10 1 90%

Loading events...

Interactive Operator 1b2981d9bfb0 newark_01 · 2026-07-11 09:57

10 1 90%

Loading events...

Interactive Operator 8d129e801855 newark_01 · 2026-07-11 09:55

10 1 90%

Loading events...

Interactive Operator 0a9de28db514 newark_01 · 2026-07-11 09:53

10 1 90%

Loading events...

Interactive Operator 38d7dbd51a00 newark_01 · 2026-07-11 09:51

10 1 90%

Loading events...

Interactive Operator 051bf326afe8 newark_01 · 2026-07-11 09:49

10 1 90%

Loading events...

Interactive Operator a6b345ac4870 newark_01 · 2026-07-11 09:46

10 1 90%

Loading events...

Interactive Operator 5a933daed61d newark_01 · 2026-07-11 09:44

10 1 90%

Loading events...

Interactive Operator 2ede1183493a newark_01 · 2026-07-11 09:41

10 1 90%

Loading events...

Interactive Operator d1b17ddfd01a newark_01 · 2026-07-11 09:38

10 1 90%

Loading events...

Interactive Operator c99e702c7d11 newark_01 · 2026-07-11 09:36

10 1 90%

Loading events...

Interactive Operator d83fd2d02610 newark_01 · 2026-07-11 09:34

10 1 90%

Loading events...

Interactive Operator dea7d9c86b4e newark_01 · 2026-07-11 09:32

10 1 90%

Loading events...

Interactive Operator 725d8f09a2f5 newark_01 · 2026-07-11 09:29

10 1 90%

Loading events...

Interactive Operator 04db28d3676c newark_01 · 2026-07-11 09:27

10 1 90%

Loading events...

Interactive Operator 011f6d8050c7 newark_01 · 2026-07-11 09:24

10 1 90%

Loading events...

Interactive Operator 8ca6848306e6 newark_01 · 2026-07-11 09:21

10 1 90%

Loading events...

Interactive Operator 16d5e9909fe0 newark_01 · 2026-07-11 09:19

10 1 90%

Loading events...

Interactive Operator a316bb74124b newark_01 · 2026-07-11 09:17

10 1 90%

Loading events...

Interactive Operator a3348c747061 newark_01 · 2026-07-11 09:14

10 1 90%

Loading events...

Credential Probe 5b52ae9d08ba newark_01 · 2026-07-11 09:12

1 20%

Loading events...

Interactive Operator 289a8b9a98ed newark_01 · 2026-07-11 09:10

10 1 90%

Loading events...

Interactive Operator 33dc5ba10446 newark_01 · 2026-07-11 09:08

10 1 90%

Loading events...

Interactive Operator f18cb337234c newark_01 · 2026-07-11 09:06

10 1 90%

Loading events...

Interactive Operator 22627d43020f newark_01 · 2026-07-11 09:03

10 1 90%

Loading events...

Interactive Operator 70178d893cde newark_01 · 2026-07-11 09:01

10 1 90%

Loading events...

Interactive Operator 6ac3f5f49ce0 newark_01 · 2026-07-11 08:59

10 1 90%

Loading events...

Scanner 0700580d2488 newark_01 · 2026-07-11 08:54

15%

Loading events...

Scanner 18fc773b150e newark_01 · 2026-07-08 04:17

15%

Loading events...

Credential Probe 10e578336fcd w4m_seattle_01 · 2026-07-08 04:01

1 20%

Loading events...

Credential Probe 8d7735625066 w4m_seattle_01 · 2026-07-08 04:00

1 20%

Loading events...

Credential Probe 7c5044b2c21c w4m_seattle_01 · 2026-07-08 03:58

1 20%

Loading events...

Credential Probe 27809c4b2cc8 w4m_seattle_01 · 2026-07-08 03:56

1 20%

Loading events...

Credential Probe 340e41f71344 w4m_seattle_01 · 2026-07-08 03:54

1 20%

Loading events...

Credential Probe f9e811de94e2 w4m_seattle_01 · 2026-07-08 03:52

1 20%

Loading events...

Credential Probe 651fb39362b1 w4m_seattle_01 · 2026-07-08 03:50

1 20%

Loading events...