malware-dataset/linux/17d8569d683f39d71f051cc0d2d33a662e549635cd74460c72ba1e49224bc35c/analysis/sample.svg

531 lines
54 KiB
XML
Raw Normal View History

2024-06-19 14:49:36 +00:00
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<!-- Generated by graphviz version 11.0.0 (0)
2024-06-19 14:49:36 +00:00
-->
<!-- Pages: 1 -->
<svg width="2298pt" height="760pt"
viewBox="0.00 0.00 2298.38 759.75" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 755.75)">
<polygon fill="white" stroke="none" points="-4,4 -4,-755.75 2294.38,-755.75 2294.38,4 -4,4"/>
2024-06-19 14:49:36 +00:00
<!-- guuid=1b8c051f&#45;0b00&#45;0000&#45;2b3c&#45;d78659040000 pid=1113 -->
<g id="node1" class="node">
<title>guuid=1b8c051f&#45;0b00&#45;0000&#45;2b3c&#45;d78659040000 pid=1113</title>
<path fill="white" stroke="black" d="M1031,-715.25C1031,-715.25 1100.25,-715.25 1100.25,-715.25 1106.25,-715.25 1112.25,-721.25 1112.25,-727.25 1112.25,-727.25 1112.25,-739.25 1112.25,-739.25 1112.25,-745.25 1106.25,-751.25 1100.25,-751.25 1100.25,-751.25 1031,-751.25 1031,-751.25 1025,-751.25 1019,-745.25 1019,-739.25 1019,-739.25 1019,-727.25 1019,-727.25 1019,-721.25 1025,-715.25 1031,-715.25"/>
<text text-anchor="middle" x="1065.62" y="-727.83" font-family="Arial" font-size="14.00">/usr/bin/sudo</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=c84cc31f&#45;0b00&#45;0000&#45;2b3c&#45;d7865a040000 pid=1114 -->
<g id="node2" class="node">
<title>guuid=c84cc31f&#45;0b00&#45;0000&#45;2b3c&#45;d7865a040000 pid=1114</title>
<path fill="white" stroke="black" d="M1021.25,-626.5C1021.25,-626.5 1110,-626.5 1110,-626.5 1116,-626.5 1122,-632.5 1122,-638.5 1122,-638.5 1122,-650.5 1122,-650.5 1122,-656.5 1116,-662.5 1110,-662.5 1110,-662.5 1021.25,-662.5 1021.25,-662.5 1015.25,-662.5 1009.25,-656.5 1009.25,-650.5 1009.25,-650.5 1009.25,-638.5 1009.25,-638.5 1009.25,-632.5 1015.25,-626.5 1021.25,-626.5"/>
<text text-anchor="middle" x="1065.62" y="-639.08" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=1b8c051f&#45;0b00&#45;0000&#45;2b3c&#45;d78659040000 pid=1113&#45;&gt;guuid=c84cc31f&#45;0b00&#45;0000&#45;2b3c&#45;d7865a040000 pid=1114 -->
<g id="edge1" class="edge">
<title>guuid=1b8c051f&#45;0b00&#45;0000&#45;2b3c&#45;d78659040000 pid=1113&#45;&gt;guuid=c84cc31f&#45;0b00&#45;0000&#45;2b3c&#45;d7865a040000 pid=1114</title>
<path fill="none" stroke="black" d="M1065.62,-715.11C1065.62,-703.42 1065.62,-687.67 1065.62,-674.1"/>
<polygon fill="black" stroke="black" points="1069.13,-674.41 1065.63,-664.41 1062.13,-674.41 1069.13,-674.41"/>
<text text-anchor="middle" x="1087" y="-683.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115 -->
<g id="node3" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115</title>
<path fill="#3b5741" stroke="black" d="M991.12,-502.5C991.12,-502.5 1140.12,-502.5 1140.12,-502.5 1146.12,-502.5 1152.12,-508.5 1152.12,-514.5 1152.12,-514.5 1152.12,-561.75 1152.12,-561.75 1152.12,-567.75 1146.12,-573.75 1140.12,-573.75 1140.12,-573.75 991.12,-573.75 991.12,-573.75 985.12,-573.75 979.12,-567.75 979.12,-561.75 979.12,-561.75 979.12,-514.5 979.12,-514.5 979.12,-508.5 985.12,-502.5 991.12,-502.5"/>
<text text-anchor="middle" x="1035.5" y="-556.45" font-family="Arial" font-size="14.00" fill="#fff000">/tmp/sample.bin</text>
<polyline fill="none" stroke="black" points="979.12,-550 1091.88,-550"/>
<text text-anchor="middle" x="1035.5" y="-532.7" font-family="Arial" font-size="14.00" fill="#fff000">write&#45;config</text>
<polyline fill="none" stroke="black" points="979.12,-526.25 1091.88,-526.25"/>
<text text-anchor="middle" x="1035.5" y="-508.95" font-family="Arial" font-size="14.00" fill="#fff000">write&#45;file</text>
<polyline fill="none" stroke="black" points="1091.88,-502.5 1091.88,-573.75"/>
<text text-anchor="middle" x="1122" y="-532.95" font-family="Arial" font-size="14.00" fill="#fff000">zombie</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=c84cc31f&#45;0b00&#45;0000&#45;2b3c&#45;d7865a040000 pid=1114&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115 -->
<g id="edge2" class="edge">
<title>guuid=c84cc31f&#45;0b00&#45;0000&#45;2b3c&#45;d7865a040000 pid=1114&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1065.62,-626.26C1065.62,-615.12 1065.62,-600.03 1065.62,-585.55"/>
<polygon fill="black" stroke="black" points="1069.13,-585.66 1065.63,-575.66 1062.13,-585.66 1069.13,-585.66"/>
<text text-anchor="middle" x="1081.75" y="-594.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=87e09cd9&#45;0b00&#45;0000&#45;2b3c&#45;d7865d040000 pid=1117 -->
<g id="node4" class="node">
<title>guuid=87e09cd9&#45;0b00&#45;0000&#45;2b3c&#45;d7865d040000 pid=1117</title>
<path fill="white" stroke="black" d="M12,-408C12,-408 81.25,-408 81.25,-408 87.25,-408 93.25,-414 93.25,-420 93.25,-420 93.25,-432 93.25,-432 93.25,-438 87.25,-444 81.25,-444 81.25,-444 12,-444 12,-444 6,-444 0,-438 0,-432 0,-432 0,-420 0,-420 0,-414 6,-408 12,-408"/>
<text text-anchor="middle" x="46.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=87e09cd9&#45;0b00&#45;0000&#45;2b3c&#45;d7865d040000 pid=1117 -->
<g id="edge3" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=87e09cd9&#45;0b00&#45;0000&#45;2b3c&#45;d7865d040000 pid=1117</title>
<path fill="none" stroke="black" d="M978.73,-537.45C825.42,-536.74 497.35,-529.43 224.88,-484 168.85,-474.66 155.29,-468.85 101.62,-450.25 99.87,-449.64 98.1,-449.01 96.31,-448.35"/>
<polygon fill="black" stroke="black" points="98.04,-445.26 87.45,-444.94 95.53,-451.8 98.04,-445.26"/>
<text text-anchor="middle" x="247" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=d438d0d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865f040000 pid=1119 -->
<g id="node6" class="node">
<title>guuid=d438d0d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865f040000 pid=1119</title>
<path fill="white" stroke="black" d="M123,-408C123,-408 192.25,-408 192.25,-408 198.25,-408 204.25,-414 204.25,-420 204.25,-420 204.25,-432 204.25,-432 204.25,-438 198.25,-444 192.25,-444 192.25,-444 123,-444 123,-444 117,-444 111,-438 111,-432 111,-432 111,-420 111,-420 111,-414 117,-408 123,-408"/>
<text text-anchor="middle" x="157.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=d438d0d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865f040000 pid=1119 -->
<g id="edge5" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=d438d0d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865f040000 pid=1119</title>
<path fill="none" stroke="black" d="M978.87,-535.35C843.69,-531.54 574.92,-519.76 349.88,-484 287.84,-474.14 272.24,-470.04 212.62,-450.25 210.83,-449.65 209.02,-449.03 207.19,-448.37"/>
<polygon fill="black" stroke="black" points="208.7,-445.2 198.11,-444.94 206.23,-451.75 208.7,-445.2"/>
<text text-anchor="middle" x="372" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=4b9423da&#45;0b00&#45;0000&#45;2b3c&#45;d78661040000 pid=1121 -->
<g id="node8" class="node">
<title>guuid=4b9423da&#45;0b00&#45;0000&#45;2b3c&#45;d78661040000 pid=1121</title>
<path fill="white" stroke="black" d="M234,-408C234,-408 303.25,-408 303.25,-408 309.25,-408 315.25,-414 315.25,-420 315.25,-420 315.25,-432 315.25,-432 315.25,-438 309.25,-444 303.25,-444 303.25,-444 234,-444 234,-444 228,-444 222,-438 222,-432 222,-432 222,-420 222,-420 222,-414 228,-408 234,-408"/>
<text text-anchor="middle" x="268.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=4b9423da&#45;0b00&#45;0000&#45;2b3c&#45;d78661040000 pid=1121 -->
<g id="edge7" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=4b9423da&#45;0b00&#45;0000&#45;2b3c&#45;d78661040000 pid=1121</title>
<path fill="none" stroke="black" d="M978.73,-531.23C868.61,-523.21 673.11,-507.17 506.88,-484 424.85,-472.57 402.96,-474.01 323.62,-450.25 321.66,-449.66 319.67,-449.03 317.68,-448.35"/>
<polygon fill="black" stroke="black" points="319.01,-445.12 308.42,-444.98 316.62,-451.69 319.01,-445.12"/>
<text text-anchor="middle" x="529" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=1e3463da&#45;0b00&#45;0000&#45;2b3c&#45;d78663040000 pid=1123 -->
<g id="node10" class="node">
<title>guuid=1e3463da&#45;0b00&#45;0000&#45;2b3c&#45;d78663040000 pid=1123</title>
<path fill="white" stroke="black" d="M345,-408C345,-408 414.25,-408 414.25,-408 420.25,-408 426.25,-414 426.25,-420 426.25,-420 426.25,-432 426.25,-432 426.25,-438 420.25,-444 414.25,-444 414.25,-444 345,-444 345,-444 339,-444 333,-438 333,-432 333,-432 333,-420 333,-420 333,-414 339,-408 345,-408"/>
<text text-anchor="middle" x="379.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=1e3463da&#45;0b00&#45;0000&#45;2b3c&#45;d78663040000 pid=1123 -->
<g id="edge9" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=1e3463da&#45;0b00&#45;0000&#45;2b3c&#45;d78663040000 pid=1123</title>
<path fill="none" stroke="black" d="M978.71,-528.96C889.95,-520.08 748.33,-504.37 626.88,-484 594.03,-478.49 586.38,-474.24 553.62,-468.25 501.01,-458.62 486.11,-464.78 434.62,-450.25 432.49,-449.65 430.33,-448.98 428.16,-448.27"/>
<polygon fill="black" stroke="black" points="429.37,-444.99 418.77,-444.91 427.01,-451.58 429.37,-444.99"/>
<text text-anchor="middle" x="649" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=296496da&#45;0b00&#45;0000&#45;2b3c&#45;d78665040000 pid=1125 -->
<g id="node12" class="node">
<title>guuid=296496da&#45;0b00&#45;0000&#45;2b3c&#45;d78665040000 pid=1125</title>
<path fill="white" stroke="black" d="M456,-408C456,-408 525.25,-408 525.25,-408 531.25,-408 537.25,-414 537.25,-420 537.25,-420 537.25,-432 537.25,-432 537.25,-438 531.25,-444 525.25,-444 525.25,-444 456,-444 456,-444 450,-444 444,-438 444,-432 444,-432 444,-420 444,-420 444,-414 450,-408 456,-408"/>
<text text-anchor="middle" x="490.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=296496da&#45;0b00&#45;0000&#45;2b3c&#45;d78665040000 pid=1125 -->
<g id="edge11" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=296496da&#45;0b00&#45;0000&#45;2b3c&#45;d78665040000 pid=1125</title>
<path fill="none" stroke="black" d="M978.83,-528.08C908.4,-519.71 806.88,-505.32 719.88,-484 698.78,-478.83 694.75,-473.28 673.62,-468.25 617.74,-454.93 600.99,-465.56 545.62,-450.25 543.49,-449.66 541.33,-449.01 539.16,-448.3"/>
<polygon fill="black" stroke="black" points="540.36,-445.01 529.76,-444.96 538.01,-451.61 540.36,-445.01"/>
<text text-anchor="middle" x="742" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=70b90e52&#45;0c00&#45;0000&#45;2b3c&#45;d78667040000 pid=1127 -->
<g id="node14" class="node">
<title>guuid=70b90e52&#45;0c00&#45;0000&#45;2b3c&#45;d78667040000 pid=1127</title>
<path fill="white" stroke="black" d="M567,-408C567,-408 636.25,-408 636.25,-408 642.25,-408 648.25,-414 648.25,-420 648.25,-420 648.25,-432 648.25,-432 648.25,-438 642.25,-444 636.25,-444 636.25,-444 567,-444 567,-444 561,-444 555,-438 555,-432 555,-432 555,-420 555,-420 555,-414 561,-408 567,-408"/>
<text text-anchor="middle" x="601.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=70b90e52&#45;0c00&#45;0000&#45;2b3c&#45;d78667040000 pid=1127 -->
<g id="edge13" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=70b90e52&#45;0c00&#45;0000&#45;2b3c&#45;d78667040000 pid=1127</title>
<path fill="none" stroke="black" d="M978.67,-525.26C926.08,-516.73 858.16,-503.31 799.88,-484 784.35,-478.86 782.24,-473.12 766.62,-468.25 719.33,-453.5 704.22,-463.99 656.62,-450.25 654.53,-449.65 652.41,-448.98 650.29,-448.28"/>
<polygon fill="black" stroke="black" points="651.69,-445.06 641.09,-444.96 649.31,-451.65 651.69,-445.06"/>
<text text-anchor="middle" x="822" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=01208c52&#45;0c00&#45;0000&#45;2b3c&#45;d78669040000 pid=1129 -->
<g id="node16" class="node">
<title>guuid=01208c52&#45;0c00&#45;0000&#45;2b3c&#45;d78669040000 pid=1129</title>
<path fill="white" stroke="black" d="M678,-408C678,-408 747.25,-408 747.25,-408 753.25,-408 759.25,-414 759.25,-420 759.25,-420 759.25,-432 759.25,-432 759.25,-438 753.25,-444 747.25,-444 747.25,-444 678,-444 678,-444 672,-444 666,-438 666,-432 666,-432 666,-420 666,-420 666,-414 672,-408 678,-408"/>
<text text-anchor="middle" x="712.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=01208c52&#45;0c00&#45;0000&#45;2b3c&#45;d78669040000 pid=1129 -->
<g id="edge15" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=01208c52&#45;0c00&#45;0000&#45;2b3c&#45;d78669040000 pid=1129</title>
<path fill="none" stroke="black" d="M978.8,-517.13C946.01,-508.47 908.71,-497.25 875.88,-484 862.18,-478.48 860.44,-473.46 846.62,-468.25 813.33,-455.7 802.51,-461.11 768.62,-450.25 766.8,-449.66 764.95,-449.04 763.09,-448.4"/>
<polygon fill="black" stroke="black" points="764.41,-445.16 753.82,-444.98 761.99,-451.72 764.41,-445.16"/>
<text text-anchor="middle" x="898" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=4838b08e&#45;0c00&#45;0000&#45;2b3c&#45;d7866b040000 pid=1131 -->
<g id="node18" class="node">
<title>guuid=4838b08e&#45;0c00&#45;0000&#45;2b3c&#45;d7866b040000 pid=1131</title>
<path fill="white" stroke="black" d="M789.25,-408C789.25,-408 878,-408 878,-408 884,-408 890,-414 890,-420 890,-420 890,-432 890,-432 890,-438 884,-444 878,-444 878,-444 789.25,-444 789.25,-444 783.25,-444 777.25,-438 777.25,-432 777.25,-432 777.25,-420 777.25,-420 777.25,-414 783.25,-408 789.25,-408"/>
<text text-anchor="middle" x="833.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=4838b08e&#45;0c00&#45;0000&#45;2b3c&#45;d7866b040000 pid=1131 -->
<g id="edge17" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=4838b08e&#45;0c00&#45;0000&#45;2b3c&#45;d7866b040000 pid=1131</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M991.9,-502.13C955.54,-484.87 912.77,-464.57 880.85,-449.42"/>
<polygon fill="black" stroke="black" points="882.38,-446.27 871.84,-445.14 879.38,-452.59 882.38,-446.27"/>
<text text-anchor="middle" x="965.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=52f85d8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866e040000 pid=1134 -->
<g id="node21" class="node">
<title>guuid=52f85d8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866e040000 pid=1134</title>
<path fill="white" stroke="black" d="M920,-408C920,-408 989.25,-408 989.25,-408 995.25,-408 1001.25,-414 1001.25,-420 1001.25,-420 1001.25,-432 1001.25,-432 1001.25,-438 995.25,-444 989.25,-444 989.25,-444 920,-444 920,-444 914,-444 908,-438 908,-432 908,-432 908,-420 908,-420 908,-414 914,-408 920,-408"/>
<text text-anchor="middle" x="954.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=52f85d8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866e040000 pid=1134 -->
<g id="edge20" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=52f85d8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866e040000 pid=1134</title>
<path fill="none" stroke="black" d="M1030.5,-502.28C1014.11,-486.01 994.95,-467.01 979.99,-452.16"/>
<polygon fill="black" stroke="black" points="982.79,-450.01 973.23,-445.45 977.86,-454.98 982.79,-450.01"/>
<text text-anchor="middle" x="1032" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=eb8f0390&#45;0c00&#45;0000&#45;2b3c&#45;d78670040000 pid=1136 -->
<g id="node23" class="node">
<title>guuid=eb8f0390&#45;0c00&#45;0000&#45;2b3c&#45;d78670040000 pid=1136</title>
<path fill="white" stroke="black" d="M1031,-408C1031,-408 1100.25,-408 1100.25,-408 1106.25,-408 1112.25,-414 1112.25,-420 1112.25,-420 1112.25,-432 1112.25,-432 1112.25,-438 1106.25,-444 1100.25,-444 1100.25,-444 1031,-444 1031,-444 1025,-444 1019,-438 1019,-432 1019,-432 1019,-420 1019,-420 1019,-414 1025,-408 1031,-408"/>
<text text-anchor="middle" x="1065.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=eb8f0390&#45;0c00&#45;0000&#45;2b3c&#45;d78670040000 pid=1136 -->
<g id="edge22" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=eb8f0390&#45;0c00&#45;0000&#45;2b3c&#45;d78670040000 pid=1136</title>
<path fill="none" stroke="black" d="M1065.62,-502.28C1065.62,-487.22 1065.62,-469.81 1065.62,-455.53"/>
<polygon fill="black" stroke="black" points="1069.13,-455.9 1065.63,-445.9 1062.13,-455.9 1069.13,-455.9"/>
<text text-anchor="middle" x="1087" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=31bb38cc&#45;0c00&#45;0000&#45;2b3c&#45;d78672040000 pid=1138 -->
<g id="node25" class="node">
<title>guuid=31bb38cc&#45;0c00&#45;0000&#45;2b3c&#45;d78672040000 pid=1138</title>
<path fill="white" stroke="black" d="M1142.25,-408C1142.25,-408 1231,-408 1231,-408 1237,-408 1243,-414 1243,-420 1243,-420 1243,-432 1243,-432 1243,-438 1237,-444 1231,-444 1231,-444 1142.25,-444 1142.25,-444 1136.25,-444 1130.25,-438 1130.25,-432 1130.25,-432 1130.25,-420 1130.25,-420 1130.25,-414 1136.25,-408 1142.25,-408"/>
<text text-anchor="middle" x="1186.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=31bb38cc&#45;0c00&#45;0000&#45;2b3c&#45;d78672040000 pid=1138 -->
<g id="edge24" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=31bb38cc&#45;0c00&#45;0000&#45;2b3c&#45;d78672040000 pid=1138</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1103.91,-502.28C1121.95,-485.86 1143.05,-466.65 1159.43,-451.75"/>
<polygon fill="black" stroke="black" points="1161.36,-454.73 1166.4,-445.41 1156.65,-449.55 1161.36,-454.73"/>
<text text-anchor="middle" x="1156.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=c9df14cd&#45;0c00&#45;0000&#45;2b3c&#45;d78676040000 pid=1142 -->
<g id="node29" class="node">
<title>guuid=c9df14cd&#45;0c00&#45;0000&#45;2b3c&#45;d78676040000 pid=1142</title>
<path fill="white" stroke="black" d="M1273,-408C1273,-408 1342.25,-408 1342.25,-408 1348.25,-408 1354.25,-414 1354.25,-420 1354.25,-420 1354.25,-432 1354.25,-432 1354.25,-438 1348.25,-444 1342.25,-444 1342.25,-444 1273,-444 1273,-444 1267,-444 1261,-438 1261,-432 1261,-432 1261,-420 1261,-420 1261,-414 1267,-408 1273,-408"/>
<text text-anchor="middle" x="1307.62" y="-420.57" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=c9df14cd&#45;0c00&#45;0000&#45;2b3c&#45;d78676040000 pid=1142 -->
<g id="edge28" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=c9df14cd&#45;0c00&#45;0000&#45;2b3c&#45;d78676040000 pid=1142</title>
<path fill="none" stroke="black" d="M1142.53,-502.13C1180.62,-484.8 1225.46,-464.39 1258.79,-449.22"/>
<polygon fill="black" stroke="black" points="1260.16,-452.45 1267.81,-445.12 1257.26,-446.07 1260.16,-452.45"/>
<text text-anchor="middle" x="1237" y="-470.7" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1144 -->
<g id="node31" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1144</title>
<path fill="white" stroke="black" d="M1384.25,-408C1384.25,-408 1473,-408 1473,-408 1479,-408 1485,-414 1485,-420 1485,-420 1485,-432 1485,-432 1485,-438 1479,-444 1473,-444 1473,-444 1384.25,-444 1384.25,-444 1378.25,-444 1372.25,-438 1372.25,-432 1372.25,-432 1372.25,-420 1372.25,-420 1372.25,-414 1378.25,-408 1384.25,-408"/>
<text text-anchor="middle" x="1428.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1144 -->
<g id="edge30" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1144</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1152.24,-514.95C1186.72,-505.81 1226.68,-494.84 1262.62,-484 1307.94,-470.33 1318.9,-465.72 1363.62,-450.25 1365.58,-449.57 1367.56,-448.88 1369.57,-448.18"/>
<polygon fill="black" stroke="black" points="1370.69,-451.5 1378.96,-444.88 1368.37,-444.9 1370.69,-451.5"/>
<text text-anchor="middle" x="1328.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1145 -->
<g id="node32" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1145</title>
<path fill="white" stroke="black" d="M1515.25,-408C1515.25,-408 1604,-408 1604,-408 1610,-408 1616,-414 1616,-420 1616,-420 1616,-432 1616,-432 1616,-438 1610,-444 1604,-444 1604,-444 1515.25,-444 1515.25,-444 1509.25,-444 1503.25,-438 1503.25,-432 1503.25,-432 1503.25,-420 1503.25,-420 1503.25,-414 1509.25,-408 1515.25,-408"/>
<text text-anchor="middle" x="1559.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1145 -->
<g id="edge31" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1145</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1152.32,-523.9C1239.52,-509.57 1377.34,-484.15 1493.62,-450.25 1496.18,-449.5 1498.79,-448.72 1501.41,-447.9"/>
<polygon fill="black" stroke="black" points="1502.36,-451.27 1510.8,-444.86 1500.21,-444.61 1502.36,-451.27"/>
<text text-anchor="middle" x="1440.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1146 -->
<g id="node33" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1146</title>
<path fill="white" stroke="black" d="M1646.25,-408C1646.25,-408 1735,-408 1735,-408 1741,-408 1747,-414 1747,-420 1747,-420 1747,-432 1747,-432 1747,-438 1741,-444 1735,-444 1735,-444 1646.25,-444 1646.25,-444 1640.25,-444 1634.25,-438 1634.25,-432 1634.25,-432 1634.25,-420 1634.25,-420 1634.25,-414 1640.25,-408 1646.25,-408"/>
<text text-anchor="middle" x="1690.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1146 -->
<g id="edge32" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1146</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1152.18,-529.98C1263.18,-519.4 1460.91,-495.71 1624.62,-450.25 1627.34,-449.5 1630.1,-448.69 1632.89,-447.84"/>
<polygon fill="black" stroke="black" points="1633.73,-451.25 1642.2,-444.88 1631.61,-444.58 1633.73,-451.25"/>
<text text-anchor="middle" x="1565.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1147 -->
<g id="node34" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1147</title>
<path fill="white" stroke="black" d="M1777.25,-408C1777.25,-408 1866,-408 1866,-408 1872,-408 1878,-414 1878,-420 1878,-420 1878,-432 1878,-432 1878,-438 1872,-444 1866,-444 1866,-444 1777.25,-444 1777.25,-444 1771.25,-444 1765.25,-438 1765.25,-432 1765.25,-432 1765.25,-420 1765.25,-420 1765.25,-414 1771.25,-408 1777.25,-408"/>
<text text-anchor="middle" x="1821.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1147 -->
<g id="edge33" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1147</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1152.43,-530.77C1255.92,-522.62 1433.96,-506.75 1585.62,-484 1661.8,-472.57 1681.33,-470.6 1755.62,-450.25 1758.34,-449.51 1761.11,-448.71 1763.89,-447.87"/>
<polygon fill="black" stroke="black" points="1764.73,-451.27 1773.21,-444.92 1762.62,-444.6 1764.73,-451.27"/>
<text text-anchor="middle" x="1695.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1148 -->
<g id="node35" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1148</title>
<path fill="white" stroke="black" d="M1908.25,-408C1908.25,-408 1997,-408 1997,-408 2003,-408 2009,-414 2009,-420 2009,-420 2009,-432 2009,-432 2009,-438 2003,-444 1997,-444 1997,-444 1908.25,-444 1908.25,-444 1902.25,-444 1896.25,-438 1896.25,-432 1896.25,-432 1896.25,-420 1896.25,-420 1896.25,-414 1902.25,-408 1908.25,-408"/>
<text text-anchor="middle" x="1952.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1148 -->
<g id="edge34" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1148</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1152.45,-533.16C1277.41,-526.75 1515.03,-511.9 1715.62,-484 1792.35,-473.33 1811.9,-470.67 1886.62,-450.25 1889.34,-449.51 1892.11,-448.71 1894.89,-447.87"/>
<polygon fill="black" stroke="black" points="1895.73,-451.28 1904.21,-444.93 1893.62,-444.6 1895.73,-451.28"/>
<text text-anchor="middle" x="1828.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1149 -->
<g id="node36" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1149</title>
<path fill="white" stroke="black" d="M2039.25,-408C2039.25,-408 2128,-408 2128,-408 2134,-408 2140,-414 2140,-420 2140,-420 2140,-432 2140,-432 2140,-438 2134,-444 2128,-444 2128,-444 2039.25,-444 2039.25,-444 2033.25,-444 2027.25,-438 2027.25,-432 2027.25,-432 2027.25,-420 2027.25,-420 2027.25,-414 2033.25,-408 2039.25,-408"/>
<text text-anchor="middle" x="2083.62" y="-420.57" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1149 -->
<g id="edge35" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1149</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1152.6,-534.9C1297.5,-530.36 1597.25,-517.48 1848.62,-484 1924.55,-473.89 1943.76,-470.53 2017.62,-450.25 2020.34,-449.5 2023.11,-448.7 2025.89,-447.86"/>
<polygon fill="black" stroke="black" points="2026.73,-451.27 2035.21,-444.91 2024.62,-444.59 2026.73,-451.27"/>
<text text-anchor="middle" x="1960.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1150 -->
<g id="node37" class="node">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1150</title>
<path fill="#ffbfbf" stroke="black" d="M2170.25,-402.25C2170.25,-402.25 2259,-402.25 2259,-402.25 2265,-402.25 2271,-408.25 2271,-414.25 2271,-414.25 2271,-437.75 2271,-437.75 2271,-443.75 2265,-449.75 2259,-449.75 2259,-449.75 2170.25,-449.75 2170.25,-449.75 2164.25,-449.75 2158.25,-443.75 2158.25,-437.75 2158.25,-437.75 2158.25,-414.25 2158.25,-414.25 2158.25,-408.25 2164.25,-402.25 2170.25,-402.25"/>
<text text-anchor="middle" x="2214.62" y="-432.45" font-family="Arial" font-size="14.00">/tmp/sample.bin</text>
<polyline fill="none" stroke="black" points="2158.25,-426 2271,-426"/>
<text text-anchor="middle" x="2214.62" y="-408.7" font-family="Arial" font-size="14.00">send&#45;data</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1150 -->
<g id="edge36" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1115&#45;&gt;guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1150</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1152.42,-536.13C1315.38,-533.37 1678.01,-522.99 1980.62,-484 2052.77,-474.71 2073.37,-470.81 2147.13,-450.52"/>
<polygon fill="black" stroke="black" points="2147.74,-453.99 2156.44,-447.95 2145.87,-447.24 2147.74,-453.99"/>
<text text-anchor="middle" x="2092.75" y="-470.7" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=6dddb3d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865e040000 pid=1118 -->
<g id="node5" class="node">
<title>guuid=6dddb3d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865e040000 pid=1118</title>
<path fill="white" stroke="black" d="M21.38,-307.75C21.38,-307.75 71.88,-307.75 71.88,-307.75 77.88,-307.75 83.88,-313.75 83.88,-319.75 83.88,-319.75 83.88,-331.75 83.88,-331.75 83.88,-337.75 77.88,-343.75 71.88,-343.75 71.88,-343.75 21.38,-343.75 21.38,-343.75 15.38,-343.75 9.38,-337.75 9.38,-331.75 9.38,-331.75 9.38,-319.75 9.38,-319.75 9.38,-313.75 15.38,-307.75 21.38,-307.75"/>
<text text-anchor="middle" x="46.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/ln</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=87e09cd9&#45;0b00&#45;0000&#45;2b3c&#45;d7865d040000 pid=1117&#45;&gt;guuid=6dddb3d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865e040000 pid=1118 -->
<g id="edge4" class="edge">
<title>guuid=87e09cd9&#45;0b00&#45;0000&#45;2b3c&#45;d7865d040000 pid=1117&#45;&gt;guuid=6dddb3d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865e040000 pid=1118</title>
<path fill="none" stroke="black" d="M46.62,-407.89C46.62,-393.32 46.62,-372.11 46.62,-355.03"/>
<polygon fill="black" stroke="black" points="50.13,-355.51 46.63,-345.51 43.13,-355.51 50.13,-355.51"/>
<text text-anchor="middle" x="68" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=17c205da&#45;0b00&#45;0000&#45;2b3c&#45;d78660040000 pid=1120 -->
<g id="node7" class="node">
<title>guuid=17c205da&#45;0b00&#45;0000&#45;2b3c&#45;d78660040000 pid=1120</title>
<path fill="white" stroke="black" d="M132.38,-307.75C132.38,-307.75 182.88,-307.75 182.88,-307.75 188.88,-307.75 194.88,-313.75 194.88,-319.75 194.88,-319.75 194.88,-331.75 194.88,-331.75 194.88,-337.75 188.88,-343.75 182.88,-343.75 182.88,-343.75 132.38,-343.75 132.38,-343.75 126.38,-343.75 120.38,-337.75 120.38,-331.75 120.38,-331.75 120.38,-319.75 120.38,-319.75 120.38,-313.75 126.38,-307.75 132.38,-307.75"/>
<text text-anchor="middle" x="157.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/ln</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=d438d0d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865f040000 pid=1119&#45;&gt;guuid=17c205da&#45;0b00&#45;0000&#45;2b3c&#45;d78660040000 pid=1120 -->
<g id="edge6" class="edge">
<title>guuid=d438d0d9&#45;0b00&#45;0000&#45;2b3c&#45;d7865f040000 pid=1119&#45;&gt;guuid=17c205da&#45;0b00&#45;0000&#45;2b3c&#45;d78660040000 pid=1120</title>
<path fill="none" stroke="black" d="M157.62,-407.89C157.62,-393.32 157.62,-372.11 157.62,-355.03"/>
<polygon fill="black" stroke="black" points="161.13,-355.51 157.63,-345.51 154.13,-355.51 161.13,-355.51"/>
<text text-anchor="middle" x="179" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=1c573bda&#45;0b00&#45;0000&#45;2b3c&#45;d78662040000 pid=1122 -->
<g id="node9" class="node">
<title>guuid=1c573bda&#45;0b00&#45;0000&#45;2b3c&#45;d78662040000 pid=1122</title>
<path fill="white" stroke="black" d="M243.38,-307.75C243.38,-307.75 293.88,-307.75 293.88,-307.75 299.88,-307.75 305.88,-313.75 305.88,-319.75 305.88,-319.75 305.88,-331.75 305.88,-331.75 305.88,-337.75 299.88,-343.75 293.88,-343.75 293.88,-343.75 243.38,-343.75 243.38,-343.75 237.38,-343.75 231.38,-337.75 231.38,-331.75 231.38,-331.75 231.38,-319.75 231.38,-319.75 231.38,-313.75 237.38,-307.75 243.38,-307.75"/>
<text text-anchor="middle" x="268.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/ln</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=4b9423da&#45;0b00&#45;0000&#45;2b3c&#45;d78661040000 pid=1121&#45;&gt;guuid=1c573bda&#45;0b00&#45;0000&#45;2b3c&#45;d78662040000 pid=1122 -->
<g id="edge8" class="edge">
<title>guuid=4b9423da&#45;0b00&#45;0000&#45;2b3c&#45;d78661040000 pid=1121&#45;&gt;guuid=1c573bda&#45;0b00&#45;0000&#45;2b3c&#45;d78662040000 pid=1122</title>
<path fill="none" stroke="black" d="M268.62,-407.89C268.62,-393.32 268.62,-372.11 268.62,-355.03"/>
<polygon fill="black" stroke="black" points="272.13,-355.51 268.63,-345.51 265.13,-355.51 272.13,-355.51"/>
<text text-anchor="middle" x="290" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=29a876da&#45;0b00&#45;0000&#45;2b3c&#45;d78664040000 pid=1124 -->
<g id="node11" class="node">
<title>guuid=29a876da&#45;0b00&#45;0000&#45;2b3c&#45;d78664040000 pid=1124</title>
<path fill="white" stroke="black" d="M354.38,-307.75C354.38,-307.75 404.88,-307.75 404.88,-307.75 410.88,-307.75 416.88,-313.75 416.88,-319.75 416.88,-319.75 416.88,-331.75 416.88,-331.75 416.88,-337.75 410.88,-343.75 404.88,-343.75 404.88,-343.75 354.38,-343.75 354.38,-343.75 348.38,-343.75 342.38,-337.75 342.38,-331.75 342.38,-331.75 342.38,-319.75 342.38,-319.75 342.38,-313.75 348.38,-307.75 354.38,-307.75"/>
<text text-anchor="middle" x="379.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/ln</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=1e3463da&#45;0b00&#45;0000&#45;2b3c&#45;d78663040000 pid=1123&#45;&gt;guuid=29a876da&#45;0b00&#45;0000&#45;2b3c&#45;d78664040000 pid=1124 -->
<g id="edge10" class="edge">
<title>guuid=1e3463da&#45;0b00&#45;0000&#45;2b3c&#45;d78663040000 pid=1123&#45;&gt;guuid=29a876da&#45;0b00&#45;0000&#45;2b3c&#45;d78664040000 pid=1124</title>
<path fill="none" stroke="black" d="M379.62,-407.89C379.62,-393.32 379.62,-372.11 379.62,-355.03"/>
<polygon fill="black" stroke="black" points="383.13,-355.51 379.63,-345.51 376.13,-355.51 383.13,-355.51"/>
<text text-anchor="middle" x="401" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=66aeacda&#45;0b00&#45;0000&#45;2b3c&#45;d78666040000 pid=1126 -->
<g id="node13" class="node">
<title>guuid=66aeacda&#45;0b00&#45;0000&#45;2b3c&#45;d78666040000 pid=1126</title>
<path fill="white" stroke="black" d="M465.38,-307.75C465.38,-307.75 515.88,-307.75 515.88,-307.75 521.88,-307.75 527.88,-313.75 527.88,-319.75 527.88,-319.75 527.88,-331.75 527.88,-331.75 527.88,-337.75 521.88,-343.75 515.88,-343.75 515.88,-343.75 465.38,-343.75 465.38,-343.75 459.38,-343.75 453.38,-337.75 453.38,-331.75 453.38,-331.75 453.38,-319.75 453.38,-319.75 453.38,-313.75 459.38,-307.75 465.38,-307.75"/>
<text text-anchor="middle" x="490.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/ln</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=296496da&#45;0b00&#45;0000&#45;2b3c&#45;d78665040000 pid=1125&#45;&gt;guuid=66aeacda&#45;0b00&#45;0000&#45;2b3c&#45;d78666040000 pid=1126 -->
<g id="edge12" class="edge">
<title>guuid=296496da&#45;0b00&#45;0000&#45;2b3c&#45;d78665040000 pid=1125&#45;&gt;guuid=66aeacda&#45;0b00&#45;0000&#45;2b3c&#45;d78666040000 pid=1126</title>
<path fill="none" stroke="black" d="M490.62,-407.89C490.62,-393.32 490.62,-372.11 490.62,-355.03"/>
<polygon fill="black" stroke="black" points="494.13,-355.51 490.63,-345.51 487.13,-355.51 494.13,-355.51"/>
<text text-anchor="middle" x="512" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=44c93052&#45;0c00&#45;0000&#45;2b3c&#45;d78668040000 pid=1128 -->
<g id="node15" class="node">
<title>guuid=44c93052&#45;0c00&#45;0000&#45;2b3c&#45;d78668040000 pid=1128</title>
<path fill="white" stroke="black" d="M564.75,-307.75C564.75,-307.75 638.5,-307.75 638.5,-307.75 644.5,-307.75 650.5,-313.75 650.5,-319.75 650.5,-319.75 650.5,-331.75 650.5,-331.75 650.5,-337.75 644.5,-343.75 638.5,-343.75 638.5,-343.75 564.75,-343.75 564.75,-343.75 558.75,-343.75 552.75,-337.75 552.75,-331.75 552.75,-331.75 552.75,-319.75 552.75,-319.75 552.75,-313.75 558.75,-307.75 564.75,-307.75"/>
<text text-anchor="middle" x="601.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/mkdir</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=70b90e52&#45;0c00&#45;0000&#45;2b3c&#45;d78667040000 pid=1127&#45;&gt;guuid=44c93052&#45;0c00&#45;0000&#45;2b3c&#45;d78668040000 pid=1128 -->
<g id="edge14" class="edge">
<title>guuid=70b90e52&#45;0c00&#45;0000&#45;2b3c&#45;d78667040000 pid=1127&#45;&gt;guuid=44c93052&#45;0c00&#45;0000&#45;2b3c&#45;d78668040000 pid=1128</title>
<path fill="none" stroke="black" d="M601.62,-407.89C601.62,-393.32 601.62,-372.11 601.62,-355.03"/>
<polygon fill="black" stroke="black" points="605.13,-355.51 601.63,-345.51 598.13,-355.51 605.13,-355.51"/>
<text text-anchor="middle" x="623" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=9842b152&#45;0c00&#45;0000&#45;2b3c&#45;d7866a040000 pid=1130 -->
<g id="node17" class="node">
<title>guuid=9842b152&#45;0c00&#45;0000&#45;2b3c&#45;d7866a040000 pid=1130</title>
<path fill="#ffbfbf" stroke="black" d="M685.5,-302C685.5,-302 739.75,-302 739.75,-302 745.75,-302 751.75,-308 751.75,-314 751.75,-314 751.75,-337.5 751.75,-337.5 751.75,-343.5 745.75,-349.5 739.75,-349.5 739.75,-349.5 685.5,-349.5 685.5,-349.5 679.5,-349.5 673.5,-343.5 673.5,-337.5 673.5,-337.5 673.5,-314 673.5,-314 673.5,-308 679.5,-302 685.5,-302"/>
<text text-anchor="middle" x="712.62" y="-332.2" font-family="Arial" font-size="14.00">/usr/bin/cp</text>
<polyline fill="none" stroke="black" points="673.5,-325.75 751.75,-325.75"/>
<text text-anchor="middle" x="712.62" y="-308.45" font-family="Arial" font-size="14.00">write&#45;file</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=01208c52&#45;0c00&#45;0000&#45;2b3c&#45;d78669040000 pid=1129&#45;&gt;guuid=9842b152&#45;0c00&#45;0000&#45;2b3c&#45;d7866a040000 pid=1130 -->
<g id="edge16" class="edge">
<title>guuid=01208c52&#45;0c00&#45;0000&#45;2b3c&#45;d78669040000 pid=1129&#45;&gt;guuid=9842b152&#45;0c00&#45;0000&#45;2b3c&#45;d7866a040000 pid=1130</title>
<path fill="none" stroke="black" d="M712.62,-407.89C712.62,-395.09 712.62,-377.17 712.62,-361.42"/>
<polygon fill="black" stroke="black" points="716.13,-361.44 712.63,-351.44 709.13,-361.44 716.13,-361.44"/>
<text text-anchor="middle" x="734" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=e280bd8e&#45;0c00&#45;0000&#45;2b3c&#45;d7866c040000 pid=1132 -->
<g id="node19" class="node">
<title>guuid=e280bd8e&#45;0c00&#45;0000&#45;2b3c&#45;d7866c040000 pid=1132</title>
<path fill="white" stroke="black" d="M799,-307.75C799,-307.75 868.25,-307.75 868.25,-307.75 874.25,-307.75 880.25,-313.75 880.25,-319.75 880.25,-319.75 880.25,-331.75 880.25,-331.75 880.25,-337.75 874.25,-343.75 868.25,-343.75 868.25,-343.75 799,-343.75 799,-343.75 793,-343.75 787,-337.75 787,-331.75 787,-331.75 787,-319.75 787,-319.75 787,-313.75 793,-307.75 799,-307.75"/>
<text text-anchor="middle" x="833.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=4838b08e&#45;0c00&#45;0000&#45;2b3c&#45;d7866b040000 pid=1131&#45;&gt;guuid=e280bd8e&#45;0c00&#45;0000&#45;2b3c&#45;d7866c040000 pid=1132 -->
<g id="edge18" class="edge">
<title>guuid=4838b08e&#45;0c00&#45;0000&#45;2b3c&#45;d7866b040000 pid=1131&#45;&gt;guuid=e280bd8e&#45;0c00&#45;0000&#45;2b3c&#45;d7866c040000 pid=1132</title>
<path fill="none" stroke="black" d="M833.62,-407.89C833.62,-393.32 833.62,-372.11 833.62,-355.03"/>
<polygon fill="black" stroke="black" points="837.13,-355.51 833.63,-345.51 830.13,-355.51 837.13,-355.51"/>
<text text-anchor="middle" x="855" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=1be4308f&#45;0c00&#45;0000&#45;2b3c&#45;d7866d040000 pid=1133 -->
<g id="node20" class="node">
<title>guuid=1be4308f&#45;0c00&#45;0000&#45;2b3c&#45;d7866d040000 pid=1133</title>
<path fill="white" stroke="black" d="M799,-213.25C799,-213.25 868.25,-213.25 868.25,-213.25 874.25,-213.25 880.25,-219.25 880.25,-225.25 880.25,-225.25 880.25,-237.25 880.25,-237.25 880.25,-243.25 874.25,-249.25 868.25,-249.25 868.25,-249.25 799,-249.25 799,-249.25 793,-249.25 787,-243.25 787,-237.25 787,-237.25 787,-225.25 787,-225.25 787,-219.25 793,-213.25 799,-213.25"/>
<text text-anchor="middle" x="833.62" y="-225.82" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=e280bd8e&#45;0c00&#45;0000&#45;2b3c&#45;d7866c040000 pid=1132&#45;&gt;guuid=1be4308f&#45;0c00&#45;0000&#45;2b3c&#45;d7866d040000 pid=1133 -->
<g id="edge19" class="edge">
<title>guuid=e280bd8e&#45;0c00&#45;0000&#45;2b3c&#45;d7866c040000 pid=1132&#45;&gt;guuid=1be4308f&#45;0c00&#45;0000&#45;2b3c&#45;d7866d040000 pid=1133</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M833.62,-307.35C833.62,-294.3 833.62,-276.15 833.62,-260.96"/>
<polygon fill="black" stroke="black" points="837.13,-261.08 833.63,-251.08 830.13,-261.08 837.13,-261.08"/>
<text text-anchor="middle" x="849.75" y="-270.2" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=ce4f9f8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866f040000 pid=1135 -->
<g id="node22" class="node">
<title>guuid=ce4f9f8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866f040000 pid=1135</title>
<path fill="white" stroke="black" d="M917.75,-307.75C917.75,-307.75 991.5,-307.75 991.5,-307.75 997.5,-307.75 1003.5,-313.75 1003.5,-319.75 1003.5,-319.75 1003.5,-331.75 1003.5,-331.75 1003.5,-337.75 997.5,-343.75 991.5,-343.75 991.5,-343.75 917.75,-343.75 917.75,-343.75 911.75,-343.75 905.75,-337.75 905.75,-331.75 905.75,-331.75 905.75,-319.75 905.75,-319.75 905.75,-313.75 911.75,-307.75 917.75,-307.75"/>
<text text-anchor="middle" x="954.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/mkdir</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=52f85d8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866e040000 pid=1134&#45;&gt;guuid=ce4f9f8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866f040000 pid=1135 -->
<g id="edge21" class="edge">
<title>guuid=52f85d8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866e040000 pid=1134&#45;&gt;guuid=ce4f9f8f&#45;0c00&#45;0000&#45;2b3c&#45;d7866f040000 pid=1135</title>
<path fill="none" stroke="black" d="M954.62,-407.89C954.62,-393.32 954.62,-372.11 954.62,-355.03"/>
<polygon fill="black" stroke="black" points="958.13,-355.51 954.63,-345.51 951.13,-355.51 958.13,-355.51"/>
<text text-anchor="middle" x="976" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=2bdb2c90&#45;0c00&#45;0000&#45;2b3c&#45;d78671040000 pid=1137 -->
<g id="node24" class="node">
<title>guuid=2bdb2c90&#45;0c00&#45;0000&#45;2b3c&#45;d78671040000 pid=1137</title>
<path fill="#ffbfbf" stroke="black" d="M1038.5,-302C1038.5,-302 1092.75,-302 1092.75,-302 1098.75,-302 1104.75,-308 1104.75,-314 1104.75,-314 1104.75,-337.5 1104.75,-337.5 1104.75,-343.5 1098.75,-349.5 1092.75,-349.5 1092.75,-349.5 1038.5,-349.5 1038.5,-349.5 1032.5,-349.5 1026.5,-343.5 1026.5,-337.5 1026.5,-337.5 1026.5,-314 1026.5,-314 1026.5,-308 1032.5,-302 1038.5,-302"/>
<text text-anchor="middle" x="1065.62" y="-332.2" font-family="Arial" font-size="14.00">/usr/bin/cp</text>
<polyline fill="none" stroke="black" points="1026.5,-325.75 1104.75,-325.75"/>
<text text-anchor="middle" x="1065.62" y="-308.45" font-family="Arial" font-size="14.00">write&#45;file</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=eb8f0390&#45;0c00&#45;0000&#45;2b3c&#45;d78670040000 pid=1136&#45;&gt;guuid=2bdb2c90&#45;0c00&#45;0000&#45;2b3c&#45;d78671040000 pid=1137 -->
<g id="edge23" class="edge">
<title>guuid=eb8f0390&#45;0c00&#45;0000&#45;2b3c&#45;d78670040000 pid=1136&#45;&gt;guuid=2bdb2c90&#45;0c00&#45;0000&#45;2b3c&#45;d78671040000 pid=1137</title>
<path fill="none" stroke="black" d="M1065.62,-407.89C1065.62,-395.09 1065.62,-377.17 1065.62,-361.42"/>
<polygon fill="black" stroke="black" points="1069.13,-361.44 1065.63,-351.44 1062.13,-361.44 1069.13,-361.44"/>
<text text-anchor="middle" x="1087" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=71ab3bcc&#45;0c00&#45;0000&#45;2b3c&#45;d78673040000 pid=1139 -->
<g id="node26" class="node">
<title>guuid=71ab3bcc&#45;0c00&#45;0000&#45;2b3c&#45;d78673040000 pid=1139</title>
<path fill="white" stroke="black" d="M1152,-307.75C1152,-307.75 1221.25,-307.75 1221.25,-307.75 1227.25,-307.75 1233.25,-313.75 1233.25,-319.75 1233.25,-319.75 1233.25,-331.75 1233.25,-331.75 1233.25,-337.75 1227.25,-343.75 1221.25,-343.75 1221.25,-343.75 1152,-343.75 1152,-343.75 1146,-343.75 1140,-337.75 1140,-331.75 1140,-331.75 1140,-319.75 1140,-319.75 1140,-313.75 1146,-307.75 1152,-307.75"/>
<text text-anchor="middle" x="1186.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/dash</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=31bb38cc&#45;0c00&#45;0000&#45;2b3c&#45;d78672040000 pid=1138&#45;&gt;guuid=71ab3bcc&#45;0c00&#45;0000&#45;2b3c&#45;d78673040000 pid=1139 -->
<g id="edge25" class="edge">
<title>guuid=31bb38cc&#45;0c00&#45;0000&#45;2b3c&#45;d78672040000 pid=1138&#45;&gt;guuid=71ab3bcc&#45;0c00&#45;0000&#45;2b3c&#45;d78673040000 pid=1139</title>
<path fill="none" stroke="black" d="M1186.62,-407.89C1186.62,-393.32 1186.62,-372.11 1186.62,-355.03"/>
<polygon fill="black" stroke="black" points="1190.13,-355.51 1186.63,-345.51 1183.13,-355.51 1190.13,-355.51"/>
<text text-anchor="middle" x="1208" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=e97f4fcc&#45;0c00&#45;0000&#45;2b3c&#45;d78674040000 pid=1140 -->
<g id="node27" class="node">
<title>guuid=e97f4fcc&#45;0c00&#45;0000&#45;2b3c&#45;d78674040000 pid=1140</title>
<path fill="white" stroke="black" d="M1148.25,-213.25C1148.25,-213.25 1225,-213.25 1225,-213.25 1231,-213.25 1237,-219.25 1237,-225.25 1237,-225.25 1237,-237.25 1237,-237.25 1237,-243.25 1231,-249.25 1225,-249.25 1225,-249.25 1148.25,-249.25 1148.25,-249.25 1142.25,-249.25 1136.25,-243.25 1136.25,-237.25 1136.25,-237.25 1136.25,-225.25 1136.25,-225.25 1136.25,-219.25 1142.25,-213.25 1148.25,-213.25"/>
<text text-anchor="middle" x="1186.62" y="-225.82" font-family="Arial" font-size="14.00">/usr/bin/oracle</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=71ab3bcc&#45;0c00&#45;0000&#45;2b3c&#45;d78673040000 pid=1139&#45;&gt;guuid=e97f4fcc&#45;0c00&#45;0000&#45;2b3c&#45;d78674040000 pid=1140 -->
<g id="edge26" class="edge">
<title>guuid=71ab3bcc&#45;0c00&#45;0000&#45;2b3c&#45;d78673040000 pid=1139&#45;&gt;guuid=e97f4fcc&#45;0c00&#45;0000&#45;2b3c&#45;d78674040000 pid=1140</title>
<path fill="none" stroke="black" d="M1186.62,-307.35C1186.62,-294.3 1186.62,-276.15 1186.62,-260.96"/>
<polygon fill="black" stroke="black" points="1190.13,-261.08 1186.63,-251.08 1183.13,-261.08 1190.13,-261.08"/>
<text text-anchor="middle" x="1208" y="-270.2" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1141 -->
<g id="node28" class="node">
<title>guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1141</title>
<path fill="#3b5741" stroke="black" d="M1118.12,-89.25C1118.12,-89.25 1255.12,-89.25 1255.12,-89.25 1261.12,-89.25 1267.12,-95.25 1267.12,-101.25 1267.12,-101.25 1267.12,-148.5 1267.12,-148.5 1267.12,-154.5 1261.12,-160.5 1255.12,-160.5 1255.12,-160.5 1118.12,-160.5 1118.12,-160.5 1112.12,-160.5 1106.12,-154.5 1106.12,-148.5 1106.12,-148.5 1106.12,-101.25 1106.12,-101.25 1106.12,-95.25 1112.12,-89.25 1118.12,-89.25"/>
<text text-anchor="middle" x="1156.5" y="-143.2" font-family="Arial" font-size="14.00" fill="#fff000">/usr/bin/oracle</text>
<polyline fill="none" stroke="black" points="1106.12,-136.75 1206.88,-136.75"/>
<text text-anchor="middle" x="1156.5" y="-119.45" font-family="Arial" font-size="14.00" fill="#fff000">delete&#45;file</text>
<polyline fill="none" stroke="black" points="1106.12,-113 1206.88,-113"/>
<text text-anchor="middle" x="1156.5" y="-95.7" font-family="Arial" font-size="14.00" fill="#fff000">write&#45;file</text>
<polyline fill="none" stroke="black" points="1206.88,-89.25 1206.88,-160.5"/>
<text text-anchor="middle" x="1237" y="-119.7" font-family="Arial" font-size="14.00" fill="#fff000">zombie</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=e97f4fcc&#45;0c00&#45;0000&#45;2b3c&#45;d78674040000 pid=1140&#45;&gt;guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1141 -->
<g id="edge27" class="edge">
<title>guuid=e97f4fcc&#45;0c00&#45;0000&#45;2b3c&#45;d78674040000 pid=1140&#45;&gt;guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1141</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1186.62,-213.01C1186.62,-201.87 1186.62,-186.78 1186.62,-172.3"/>
<polygon fill="black" stroke="black" points="1190.13,-172.41 1186.63,-162.41 1183.13,-172.41 1190.13,-172.41"/>
<text text-anchor="middle" x="1202.75" y="-181.45" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1151 -->
<g id="node39" class="node">
<title>guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1151</title>
<path fill="white" stroke="black" d="M1148.25,-0.5C1148.25,-0.5 1225,-0.5 1225,-0.5 1231,-0.5 1237,-6.5 1237,-12.5 1237,-12.5 1237,-24.5 1237,-24.5 1237,-30.5 1231,-36.5 1225,-36.5 1225,-36.5 1148.25,-36.5 1148.25,-36.5 1142.25,-36.5 1136.25,-30.5 1136.25,-24.5 1136.25,-24.5 1136.25,-12.5 1136.25,-12.5 1136.25,-6.5 1142.25,-0.5 1148.25,-0.5"/>
<text text-anchor="middle" x="1186.62" y="-13.07" font-family="Arial" font-size="14.00">/usr/bin/oracle</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1141&#45;&gt;guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1151 -->
<g id="edge38" class="edge">
<title>guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1141&#45;&gt;guuid=00ebffcc&#45;0c00&#45;0000&#45;2b3c&#45;d78675040000 pid=1151</title>
<path fill="none" stroke="black" stroke-dasharray="1,5" d="M1186.62,-88.83C1186.62,-75.54 1186.62,-60.59 1186.62,-47.99"/>
<polygon fill="black" stroke="black" points="1190.13,-48.26 1186.63,-38.26 1183.13,-48.26 1190.13,-48.26"/>
<text text-anchor="middle" x="1202.75" y="-57.45" font-family="Arial" font-size="14.00">clone</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=185226cd&#45;0c00&#45;0000&#45;2b3c&#45;d78677040000 pid=1143 -->
<g id="node30" class="node">
<title>guuid=185226cd&#45;0c00&#45;0000&#45;2b3c&#45;d78677040000 pid=1143</title>
<path fill="white" stroke="black" d="M1270.75,-307.75C1270.75,-307.75 1344.5,-307.75 1344.5,-307.75 1350.5,-307.75 1356.5,-313.75 1356.5,-319.75 1356.5,-319.75 1356.5,-331.75 1356.5,-331.75 1356.5,-337.75 1350.5,-343.75 1344.5,-343.75 1344.5,-343.75 1270.75,-343.75 1270.75,-343.75 1264.75,-343.75 1258.75,-337.75 1258.75,-331.75 1258.75,-331.75 1258.75,-319.75 1258.75,-319.75 1258.75,-313.75 1264.75,-307.75 1270.75,-307.75"/>
<text text-anchor="middle" x="1307.62" y="-320.32" font-family="Arial" font-size="14.00">/usr/bin/kmod</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=c9df14cd&#45;0c00&#45;0000&#45;2b3c&#45;d78676040000 pid=1142&#45;&gt;guuid=185226cd&#45;0c00&#45;0000&#45;2b3c&#45;d78677040000 pid=1143 -->
<g id="edge29" class="edge">
<title>guuid=c9df14cd&#45;0c00&#45;0000&#45;2b3c&#45;d78676040000 pid=1142&#45;&gt;guuid=185226cd&#45;0c00&#45;0000&#45;2b3c&#45;d78677040000 pid=1143</title>
<path fill="none" stroke="black" d="M1307.62,-407.89C1307.62,-393.32 1307.62,-372.11 1307.62,-355.03"/>
<polygon fill="black" stroke="black" points="1311.13,-355.51 1307.63,-345.51 1304.13,-355.51 1311.13,-355.51"/>
<text text-anchor="middle" x="1329" y="-370.45" font-family="Arial" font-size="14.00">execve</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- 4f6baed0&#45;9587&#45;596c&#45;82b3&#45;fd721afe4cc1 -->
2024-06-19 14:49:36 +00:00
<g id="node38" class="node">
<title>4f6baed0&#45;9587&#45;596c&#45;82b3&#45;fd721afe4cc1</title>
<path fill="grey" stroke="black" d="M2184.88,-307.75C2184.88,-307.75 2244.38,-307.75 2244.38,-307.75 2250.38,-307.75 2256.38,-313.75 2256.38,-319.75 2256.38,-319.75 2256.38,-331.75 2256.38,-331.75 2256.38,-337.75 2250.38,-343.75 2244.38,-343.75 2244.38,-343.75 2184.88,-343.75 2184.88,-343.75 2178.88,-343.75 2172.88,-337.75 2172.88,-331.75 2172.88,-331.75 2172.88,-319.75 2172.88,-319.75 2172.88,-313.75 2178.88,-307.75 2184.88,-307.75"/>
<text text-anchor="middle" x="2214.62" y="-320.32" font-family="Arial" font-size="14.00" fill="white">10.0.2.3:53</text>
2024-06-19 14:49:36 +00:00
</g>
<!-- guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1150&#45;&gt;4f6baed0&#45;9587&#45;596c&#45;82b3&#45;fd721afe4cc1 -->
2024-06-19 14:49:36 +00:00
<g id="edge37" class="edge">
<title>guuid=0a03d020&#45;0b00&#45;0000&#45;2b3c&#45;d7865b040000 pid=1150&#45;&gt;4f6baed0&#45;9587&#45;596c&#45;82b3&#45;fd721afe4cc1</title>
<path fill="none" stroke="blue" stroke-dasharray="5,2" d="M2214.62,-402.21C2214.62,-388.26 2214.62,-370.27 2214.62,-355.36"/>
<polygon fill="blue" stroke="blue" points="2218.13,-355.72 2214.63,-345.72 2211.13,-355.72 2218.13,-355.72"/>
<text text-anchor="middle" x="2252.5" y="-370.45" font-family="Arial" font-size="14.00" fill="blue">send: 1734B</text>
2024-06-19 14:49:36 +00:00
</g>
</g>
</svg>