export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator e17e9aa72315 w4m_seattle_01 · 2026-07-17 17:59

13 1 90%

Loading events...

Interactive Operator fcdd9aeac4e2 w4m_seattle_01 · 2026-07-17 17:54

13 1 90%

Loading events...

Interactive Operator 0f996ec5e6e7 w4m_seattle_01 · 2026-07-17 17:52

13 1 90%

Loading events...

Interactive Operator 862ab74aa875 w4m_seattle_01 · 2026-07-17 17:49

13 1 90%

Loading events...

Interactive Operator 247af79e860b w4m_seattle_01 · 2026-07-17 17:46

13 1 90%

Loading events...

Interactive Operator 259f60fc4ce7 w4m_seattle_01 · 2026-07-17 17:44

13 1 90%

Loading events...

Interactive Operator e1504f774fdd w4m_seattle_01 · 2026-07-17 17:41

13 1 90%

Loading events...

Interactive Operator 2fc078c201ba w4m_seattle_01 · 2026-07-17 17:39

13 1 90%

Loading events...

Interactive Operator 4ca14fe0c270 w4m_seattle_01 · 2026-07-17 17:36

13 1 90%

Loading events...

Interactive Operator 762b4421d8d2 w4m_seattle_01 · 2026-07-17 17:34

13 1 90%

Loading events...

Interactive Operator 642b57d223f1 w4m_seattle_01 · 2026-07-17 17:31

13 1 90%

Loading events...

Interactive Operator 784551172258 w4m_seattle_01 · 2026-07-17 17:28

13 1 90%

Loading events...

Interactive Operator 92436f0165ad w4m_seattle_01 · 2026-07-17 17:26

13 1 90%

Loading events...

Interactive Operator 7db5d9bb16e1 w4m_seattle_01 · 2026-07-17 17:23

13 1 90%

Loading events...

Interactive Operator 6b1edb49d2fb w4m_seattle_01 · 2026-07-17 17:21

13 1 90%

Loading events...

Interactive Operator 9861417f1bef w4m_seattle_01 · 2026-07-17 17:18

13 1 90%

Loading events...

Credential Probe d38ee01d84d7 w4m_seattle_01 · 2026-07-17 17:16

1 20%

Loading events...

Interactive Operator dedf8bc53c3b w4m_seattle_01 · 2026-07-17 17:13

13 1 90%

Loading events...

Interactive Operator 887cfd6aed5f w4m_seattle_01 · 2026-07-17 17:11

13 1 90%

Loading events...

Interactive Operator 3df952bc7d8a w4m_seattle_01 · 2026-07-17 17:08

13 1 90%

Loading events...

Interactive Operator d2f926333c32 w4m_seattle_01 · 2026-07-17 17:05

13 1 90%

Loading events...

Interactive Operator 4b14e11e9088 w4m_seattle_01 · 2026-07-17 17:02

13 1 90%

Loading events...

Interactive Operator c2d0c1b4d1c1 w4m_seattle_01 · 2026-07-17 16:59

13 1 90%

Loading events...

Scanner 481e2b5e48d2 w4m_seattle_01 · 2026-07-17 16:50

15%

Loading events...

Interactive Operator e226b94da171 w4m_seattle_01 · 2026-07-16 14:00

13 1 90%

Loading events...

Interactive Operator ef6199dceadf w4m_seattle_01 · 2026-07-16 13:57

13 1 90%

Loading events...

Interactive Operator a819b7f9ac91 w4m_seattle_01 · 2026-07-16 13:55

13 1 90%

Loading events...

Interactive Operator 2af71e327d21 w4m_seattle_01 · 2026-07-16 13:53

13 1 90%

Loading events...

Interactive Operator bad0f8bdd974 w4m_seattle_01 · 2026-07-16 13:51

13 1 90%

Loading events...

Interactive Operator 76e18a8c6774 w4m_seattle_01 · 2026-07-16 13:48

13 1 90%

Loading events...

Interactive Operator e0d378696c8a w4m_seattle_01 · 2026-07-16 13:46

13 1 90%

Loading events...

Interactive Operator 170d3d7424c3 w4m_seattle_01 · 2026-07-16 13:44

13 1 90%

Loading events...

Interactive Operator a7f8de60c476 w4m_seattle_01 · 2026-07-16 13:42

13 1 90%

Loading events...

Interactive Operator 26c1c722f373 w4m_seattle_01 · 2026-07-16 13:40

13 1 90%

Loading events...

Interactive Operator da2e84a9c0a4 w4m_seattle_01 · 2026-07-16 13:37

13 1 90%

Loading events...

Interactive Operator c3ad6c2cf781 w4m_seattle_01 · 2026-07-16 13:35

13 1 90%

Loading events...

Interactive Operator 98390d8f915c w4m_seattle_01 · 2026-07-16 13:33

13 1 90%

Loading events...

Interactive Operator ad8ffe2cfe6b w4m_seattle_01 · 2026-07-16 13:31

13 1 90%

Loading events...

Interactive Operator adcce01cd378 w4m_seattle_01 · 2026-07-16 13:28

13 1 90%

Loading events...

Interactive Operator 91fa8c509a34 w4m_seattle_01 · 2026-07-16 13:26

13 1 90%

Loading events...

Interactive Operator f83e018b2374 w4m_seattle_01 · 2026-07-16 13:24

13 1 90%

Loading events...

Interactive Operator ccfe79f94206 w4m_seattle_01 · 2026-07-16 13:22

13 1 90%

Loading events...

Interactive Operator 1d4eb1fb4b21 w4m_seattle_01 · 2026-07-16 13:20

13 1 90%

Loading events...

Interactive Operator 294e774344db w4m_seattle_01 · 2026-07-16 13:17

13 1 90%

Loading events...

Interactive Operator 87bcc5079f4f w4m_seattle_01 · 2026-07-16 13:15

13 1 90%

Loading events...

Interactive Operator cf2939d154b3 w4m_seattle_01 · 2026-07-16 13:13

13 1 90%

Loading events...

Interactive Operator fda7f0bb0575 w4m_seattle_01 · 2026-07-16 13:11

13 1 90%

Loading events...

Interactive Operator accdaa743090 w4m_seattle_01 · 2026-07-16 13:08

13 1 90%

Loading events...

Interactive Operator 3cae526831d8 w4m_seattle_01 · 2026-07-16 13:06

13 1 90%

Loading events...

Interactive Operator f9003638ac87 w4m_seattle_01 · 2026-07-16 13:04

13 1 90%

Loading events...