export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
[ -f /etc/os-release ]

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator 179dd635d7be w4m_seattle_01 · 2026-07-15 11:51

13 1 90%

Loading events...

Interactive Operator d654d5963d4c w4m_seattle_01 · 2026-07-15 11:48

13 1 90%

Loading events...

Scanner 570109904140 w4m_seattle_01 · 2026-07-15 11:41

15%

Loading events...

Credential Probe b736b6ca766f newark_01 · 2026-07-14 22:49

1 20%

Loading events...

Credential Probe 7788c99e9821 newark_01 · 2026-07-14 22:47

1 20%

Loading events...

Credential Probe d252b02c8ab7 newark_01 · 2026-07-14 22:45

1 20%

Loading events...

Credential Probe 70a74de7c884 newark_01 · 2026-07-14 22:43

1 20%

Loading events...

Credential Probe 45d3a1fed1aa newark_01 · 2026-07-14 22:41

1 20%

Loading events...

Credential Probe a3cb356793e4 newark_01 · 2026-07-14 22:38

1 20%

Loading events...

Credential Probe e57802d98743 newark_01 · 2026-07-14 22:36

1 20%

Loading events...

Credential Probe 536684379adb newark_01 · 2026-07-14 22:34

1 20%

Loading events...

Credential Probe ef11fafb164e newark_01 · 2026-07-14 22:32

1 20%

Loading events...

Credential Probe 15730ef36e7c newark_01 · 2026-07-14 22:30

1 20%

Loading events...

Credential Probe c6c21c827cad newark_01 · 2026-07-14 22:28

1 20%

Loading events...

Credential Probe c5d12947ec92 newark_01 · 2026-07-14 22:26

1 20%

Loading events...

Credential Probe 6d1fdedebe32 newark_01 · 2026-07-14 22:24

1 20%

Loading events...

Credential Probe ec22290cdaff newark_01 · 2026-07-14 22:22

1 20%

Loading events...

Credential Probe 08c1aee875ed newark_01 · 2026-07-14 22:20

1 20%

Loading events...

Credential Probe 4d1ef4a08fde newark_01 · 2026-07-14 22:18

1 20%

Loading events...

Credential Probe 62c05347998a newark_01 · 2026-07-14 22:16

1 20%

Loading events...

Credential Probe 7507d3fdce0d newark_01 · 2026-07-14 22:14

1 20%

Loading events...

Scanner 662b75119096 newark_01 · 2026-07-14 22:12

15%

Loading events...

Credential Probe 38dfcaace8f7 newark_01 · 2026-07-14 22:10

1 20%

Loading events...

Credential Probe 4246e0c89b7a newark_01 · 2026-07-14 22:08

1 20%

Loading events...

Credential Probe 508c51859fdf newark_01 · 2026-07-14 22:06

1 20%

Loading events...

Credential Probe 5e4097d89781 newark_01 · 2026-07-14 22:04

1 20%

Loading events...

Credential Probe e98826d0d0e6 newark_01 · 2026-07-14 22:01

1 20%

Loading events...

Credential Probe 1d875482a74a newark_01 · 2026-07-14 21:59

1 20%

Loading events...

Credential Probe feb9ec28a7ca newark_01 · 2026-07-14 21:57

1 20%

Loading events...

Credential Probe e005e8cbafc0 newark_01 · 2026-07-14 21:55

1 20%

Loading events...

Credential Probe b962c5c97cb6 newark_01 · 2026-07-14 21:53

1 20%

Loading events...

Credential Probe 08c81dd033a2 newark_01 · 2026-07-14 21:51

1 20%

Loading events...

Credential Probe 583508f37c9f newark_01 · 2026-07-14 21:49

1 20%

Loading events...

Credential Probe 1f33e3ef2dc9 newark_01 · 2026-07-14 21:46

1 20%

Loading events...

Credential Probe 90e7dd4cd06d newark_01 · 2026-07-14 21:44

1 20%

Loading events...

Credential Probe 97853c28c96e newark_01 · 2026-07-14 21:42

1 20%

Loading events...

Credential Probe 66946da6547e newark_01 · 2026-07-14 21:40

1 20%

Loading events...

Credential Probe 2625275e63c6 newark_01 · 2026-07-14 21:38

1 20%

Loading events...

Credential Probe 3ccb67c6f6ab newark_01 · 2026-07-14 21:36

1 20%

Loading events...

Credential Probe 49a636993c08 newark_01 · 2026-07-14 21:34

1 20%

Loading events...

Credential Probe 38f5939c91ef newark_01 · 2026-07-14 21:32

1 20%

Loading events...

Credential Probe a00924383271 newark_01 · 2026-07-14 21:29

1 20%

Loading events...

Interactive Operator 972b0f12bb5b newark_01 · 2026-07-14 21:27

10 1 90%

Loading events...

Interactive Operator 7e7456be2c52 newark_01 · 2026-07-14 21:25

10 1 90%

Loading events...

Interactive Operator 63662c4cbe72 newark_01 · 2026-07-14 21:23

10 1 90%

Loading events...

Interactive Operator 5d224ba0d8bd newark_01 · 2026-07-14 21:21

10 1 90%

Loading events...

Interactive Operator 7409a361068b newark_01 · 2026-07-14 21:19

10 1 90%

Loading events...

Interactive Operator cc1a2ddce8b3 newark_01 · 2026-07-14 21:17

10 1 90%

Loading events...

Interactive Operator 16298981b444 newark_01 · 2026-07-14 21:14

10 1 90%

Loading events...

Interactive Operator 84e872b72b1f newark_01 · 2026-07-14 21:12

10 1 90%

Loading events...