export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
uname -s -v -n -m 2 > /dev/null
/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m 2 > /dev/null
/usr/bin/uname -s -v -n -m
busybox uname -s -v -n -m 2 > /dev/null
( [ -f /proc/version ]
[ -f /proc/version ]
head -1 /proc/version | cut -d -f1
[ -f /etc/os-release ]

Fingerprints

HASSH

2ec37a7cc8daf20b10e1ad6221061ca5

SSH Client

SSH-2.0-Go

Evidence Timeline

Interactive Operator c5bdd42689f6 w4m_seattle_01 · 2026-07-16 18:47

13 1 90%

Loading events...

Interactive Operator 27fc7dadd599 w4m_seattle_01 · 2026-07-16 18:45

13 1 90%

Loading events...

Interactive Operator 1feb7ba97344 w4m_seattle_01 · 2026-07-16 18:44

13 1 90%

Loading events...

Interactive Operator 1007b7dcef52 w4m_seattle_01 · 2026-07-16 18:42

13 1 90%

Loading events...

Interactive Operator ec6d156f64f7 w4m_seattle_01 · 2026-07-16 18:40

13 1 90%

Loading events...

Interactive Operator 01830bddec9a w4m_seattle_01 · 2026-07-16 18:38

13 1 90%

Loading events...

Interactive Operator 6d3960c1f032 w4m_seattle_01 · 2026-07-16 18:36

13 1 90%

Loading events...

Interactive Operator 511f38df8545 w4m_seattle_01 · 2026-07-16 18:34

13 1 90%

Loading events...

Interactive Operator 069747e884cd w4m_seattle_01 · 2026-07-16 18:32

13 1 90%

Loading events...

Interactive Operator 18cda0b6ea30 w4m_seattle_01 · 2026-07-16 18:31

13 1 90%

Loading events...

Interactive Operator a363a31a328e w4m_seattle_01 · 2026-07-16 18:29

13 1 90%

Loading events...

Interactive Operator f0c8bc64c98c w4m_seattle_01 · 2026-07-16 18:27

13 1 90%

Loading events...

Interactive Operator b95d552ae769 w4m_seattle_01 · 2026-07-16 18:25

13 1 90%

Loading events...

Credential Probe 115886b4bb54 w4m_seattle_01 · 2026-07-16 18:23

1 20%

Loading events...

Interactive Operator 7badc802ab27 w4m_seattle_01 · 2026-07-16 18:22

13 1 90%

Loading events...

Interactive Operator f770106cb06b w4m_seattle_01 · 2026-07-16 18:20

13 1 90%

Loading events...

Interactive Operator edaf9e516956 w4m_seattle_01 · 2026-07-16 18:18

13 1 90%

Loading events...

Interactive Operator be6ceaea715c w4m_seattle_01 · 2026-07-16 18:16

13 1 90%

Loading events...

Interactive Operator 2905e1c08c75 w4m_seattle_01 · 2026-07-16 18:14

13 1 90%

Loading events...

Scanner 56cf91dedb41 w4m_seattle_01 · 2026-07-16 18:08

15%

Loading events...

Interactive Operator 879b59607e25 w4m_seattle_01 · 2026-07-15 17:14

13 1 90%

Loading events...

Interactive Operator fa2dfdcdaef2 w4m_seattle_01 · 2026-07-15 17:13

13 1 90%

Loading events...

Interactive Operator 04467c9de28f w4m_seattle_01 · 2026-07-15 17:11

13 1 90%

Loading events...

Interactive Operator f984b2ef4bdc w4m_seattle_01 · 2026-07-15 17:09

13 1 90%

Loading events...

Interactive Operator f29dcfc358bc w4m_seattle_01 · 2026-07-15 17:07

13 1 90%

Loading events...

Interactive Operator aee97aaf6aa8 w4m_seattle_01 · 2026-07-15 17:05

13 1 90%

Loading events...

Interactive Operator 2df16c02df65 w4m_seattle_01 · 2026-07-15 17:03

13 1 90%

Loading events...

Interactive Operator eefbf5c57ca3 w4m_seattle_01 · 2026-07-15 17:01

13 1 90%

Loading events...

Interactive Operator d471fcbb7f78 w4m_seattle_01 · 2026-07-15 16:59

13 1 90%

Loading events...

Interactive Operator 739c31a34bbb w4m_seattle_01 · 2026-07-15 16:57

13 1 90%

Loading events...

Interactive Operator 3b190ce057e8 w4m_seattle_01 · 2026-07-15 16:55

13 1 90%

Loading events...

Interactive Operator b4239b929a8e w4m_seattle_01 · 2026-07-15 16:53

13 1 90%

Loading events...

Interactive Operator 17ed546f9b38 w4m_seattle_01 · 2026-07-15 16:51

13 1 90%

Loading events...

Interactive Operator 73e402de780b w4m_seattle_01 · 2026-07-15 16:49

13 1 90%

Loading events...

Interactive Operator a18899aae6f1 w4m_seattle_01 · 2026-07-15 16:47

13 1 90%

Loading events...

Credential Probe ef9fb66b0a4d w4m_seattle_01 · 2026-07-15 16:45

1 20%

Loading events...

Scanner 117ee8b71adf w4m_seattle_01 · 2026-07-15 16:38

15%

Loading events...

Interactive Operator 577584f83cac w4m_singapore_01 · 2026-07-14 09:43

13 1 90%

Loading events...

Interactive Operator f3d08bbe0db5 w4m_singapore_01 · 2026-07-14 09:41

13 1 90%

Loading events...

Interactive Operator 9e5ffa5644cf w4m_singapore_01 · 2026-07-14 09:40

13 1 90%

Loading events...

Interactive Operator 404c3ab6ae75 w4m_singapore_01 · 2026-07-14 09:38

13 1 90%

Loading events...

Interactive Operator 659c2dd642e4 w4m_singapore_01 · 2026-07-14 09:37

13 1 90%

Loading events...

Interactive Operator 89e854310ae9 w4m_singapore_01 · 2026-07-14 09:35

13 1 90%

Loading events...

Interactive Operator a78c65cb9be4 w4m_singapore_01 · 2026-07-14 09:33

13 1 90%

Loading events...

Interactive Operator b7f1220e7e3f w4m_singapore_01 · 2026-07-14 09:31

13 1 90%

Loading events...

Interactive Operator d0396ab655db w4m_singapore_01 · 2026-07-14 09:30

13 1 90%

Loading events...

Interactive Operator 9635268baed4 w4m_singapore_01 · 2026-07-14 09:28

13 1 90%

Loading events...

Interactive Operator 27badca26eb8 w4m_singapore_01 · 2026-07-14 09:26

13 1 90%

Loading events...

Interactive Operator 0ddbbe31ed01 w4m_singapore_01 · 2026-07-14 09:25

13 1 90%

Loading events...

Interactive Operator 5db291df3bd7 w4m_singapore_01 · 2026-07-14 09:23

13 1 90%

Loading events...