Loading ...

Play interactive tourEdit tour

Linux Analysis Report MGYc9XVDco

Overview

General Information

Sample Name:MGYc9XVDco
Analysis ID:1664921
MD5:ae8f8cf967ca15a7689f2d1f79fbc5dc
SHA1:4f56d3f954759c8570d9a68d0ce9651e755cdb4c
SHA256:22b521f8d605635e1082f3f33a993979c37470fe2980956064aa4917ea1b28d5
Infos:

Detection

Abcbot
Score:100
Range:0 - 100
Whitelisted:false

Signatures

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)
Tries to download HTTP data from a sinkholed server
Yara detected Abcbot
Sample tries to persist itself using System V runlevels
Sample scans a subnet
Writes identical ELF files to multiple locations
Drops files in suspicious directories
Sample deletes itself
Sample is packed with UPX
Protects files from modification
Uses known network protocols on non-standard ports
Tries to resolve many domain names, but no domain seems valid
Changes permissions of common UNIX (system) binary directories
Executes the "kill" or "pkill" command typically used to terminate processes
Sample contains only a LOAD segment without any section mappings
Writes ELF files to disk
Reads CPU information from /sys indicative of miner or evasive malware
Reads system information from the proc file system
Uses the "uname" system call to query kernel version information (possible evasion)
Executes the "chmod" command used to modify permissions
Enumerates processes within the "proc" file system
Executes the "systemctl" command used for controlling the systemd system and service manager
Removes protection from files
Detected TCP or UDP traffic on non-standard ports
Executes the "ps" command used to list the status of processes
Creates hidden files and/or directories
Sample tries to set the executable flag
Executes commands using a shell command-line interpreter
Executes the "nohup" (no hangup) command used to avoid background terminal process from being killed
Writes shell script file to disk with an unusual file extension

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely the sample will exhibit less behavior

General Information

Joe Sandbox Version:
Analysis ID:1664921
Start date:30.11.2021
Start time:10:42:25
Joe Sandbox Product:Cloud
Overall analysis duration:0h 15m 21s
Hypervisor based Inspection enabled:false
Report type:full
Sample file name:MGYc9XVDco
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 88.0.1, Atril Document Viewer 1.24.0, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Detection:MAL
Classification:mal100.spre.troj.evad.lin@0/63@105/0
Warnings:
Show All
  • Report size exceeded maximum capacity and may have missing behavior information.
  • Report size exceeded maximum capacity and may have missing network information.

Process Tree

  • system is lnxubuntu20
  • MGYc9XVDco (PID: 4652, Parent: 4568, MD5: ae8f8cf967ca15a7689f2d1f79fbc5dc) Arguments: /tmp/MGYc9XVDco
    • chmod (PID: 4656, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
    • chmod (PID: 4657, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
    • pkill (PID: 4658, Parent: 4652, MD5: 8079f6eb96709ccadc78c6006593809a) Arguments: pkill -f iptablesupdate
    • pkill (PID: 4660, Parent: 4652, MD5: 8079f6eb96709ccadc78c6006593809a) Arguments: pkill -f dockerlogger
    • chattr (PID: 4661, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
    • chattr (PID: 4662, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
    • chattr (PID: 4663, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
    • sh (PID: 4664, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /tmp/MGYc9XVDco /etc/iptablesupdate"
      • sh New Fork (PID: 4665, Parent: 4664)
      • cp (PID: 4665, Parent: 4664, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /tmp/MGYc9XVDco /etc/iptablesupdate
    • sh (PID: 4666, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /tmp/MGYc9XVDco /bin/dockerlogger"
      • sh New Fork (PID: 4667, Parent: 4666)
      • cp (PID: 4667, Parent: 4666, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /tmp/MGYc9XVDco /bin/dockerlogger
    • sh (PID: 4668, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /tmp/MGYc9XVDco /usr/bin/dockerlogger"
      • sh New Fork (PID: 4669, Parent: 4668)
      • cp (PID: 4669, Parent: 4668, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /tmp/MGYc9XVDco /usr/bin/dockerlogger
    • chmod (PID: 4670, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
    • chmod (PID: 4671, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
    • chmod (PID: 4672, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/iptablesupdate
    • chmod (PID: 4673, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
    • chmod (PID: 4674, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
    • chattr (PID: 4675, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
    • chattr (PID: 4676, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
    • chattr (PID: 4677, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
    • chattr (PID: 4678, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
    • chmod (PID: 4679, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
    • chmod (PID: 4680, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
    • chattr (PID: 4681, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
    • sh (PID: 4683, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /tmp/MGYc9XVDco /etc/iptablesupdate"
      • sh New Fork (PID: 4684, Parent: 4683)
      • cp (PID: 4684, Parent: 4683, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /tmp/MGYc9XVDco /etc/iptablesupdate
    • sh (PID: 4685, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /tmp/MGYc9XVDco /bin/dockerlogger"
      • sh New Fork (PID: 4686, Parent: 4685)
      • cp (PID: 4686, Parent: 4685, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /tmp/MGYc9XVDco /bin/dockerlogger
    • sh (PID: 4687, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /tmp/MGYc9XVDco /usr/bin/dockerlogger"
      • sh New Fork (PID: 4688, Parent: 4687)
      • cp (PID: 4688, Parent: 4687, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /tmp/MGYc9XVDco /usr/bin/dockerlogger
    • chmod (PID: 4689, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
    • chmod (PID: 4690, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
    • chmod (PID: 4691, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/iptablesupdate
    • sh (PID: 4692, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
      • sh New Fork (PID: 4695, Parent: 4692)
      • ps (PID: 4695, Parent: 4692, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
      • sh New Fork (PID: 4696, Parent: 4692)
      • awk (PID: 4696, Parent: 4692, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
    • sh (PID: 4697, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "nohup /etc/iptablesupdate > /dev/null 2>&1 &"
      • sh New Fork (PID: 4698, Parent: 4697)
      • nohup (PID: 4698, Parent: 1243, MD5: d8d3ce4d7f4b1e3ac3c3e7c9790f22ca) Arguments: nohup /etc/iptablesupdate
      • iptablesupdate (PID: 4698, Parent: 1243, MD5: ae8f8cf967ca15a7689f2d1f79fbc5dc) Arguments: /etc/iptablesupdate
        • chmod (PID: 4704, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4705, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chmod (PID: 4707, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4727, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4729, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4733, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4736, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4739, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4743, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4745, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4746, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4749, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4750, Parent: 4749)
          • ps (PID: 4750, Parent: 4749, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4751, Parent: 4749)
          • awk (PID: 4751, Parent: 4749, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • sh (PID: 4765, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /etc/iptablesupdate /usr/bin/dockerlogger"
          • sh New Fork (PID: 4766, Parent: 4765)
          • cp (PID: 4766, Parent: 4765, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /etc/iptablesupdate /usr/bin/dockerlogger
        • sh (PID: 4773, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "\\cp /etc/iptablesupdate /bin/dockerlogger"
          • sh New Fork (PID: 4774, Parent: 4773)
          • cp (PID: 4774, Parent: 4773, MD5: 40f10ae7ea3e44218d1a8c306f79c83f) Arguments: cp /etc/iptablesupdate /bin/dockerlogger
        • chmod (PID: 4790, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chmod (PID: 4792, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chattr (PID: 4793, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 4795, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 4797, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 4799, Parent: 4797)
          • ln (PID: 4799, Parent: 4797, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 4800, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 4802, Parent: 4800)
          • ln (PID: 4802, Parent: 4800, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 4805, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 4806, Parent: 4805)
          • ln (PID: 4806, Parent: 4805, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 4807, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 4808, Parent: 4807)
          • ln (PID: 4808, Parent: 4807, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 4809, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 4810, Parent: 4809)
          • ln (PID: 4810, Parent: 4809, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 4811, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 4812, Parent: 4811)
          • ln (PID: 4812, Parent: 4811, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 4814, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 4815, Parent: 4814)
          • ln (PID: 4815, Parent: 4814, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 4817, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 4818, Parent: 4817)
          • systemctl (PID: 4818, Parent: 4817, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 4822, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 4823, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 4824, Parent: 4823)
          • systemctl (PID: 4824, Parent: 4823, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • sh (PID: 4827, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4828, Parent: 4827)
          • ps (PID: 4828, Parent: 4827, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4829, Parent: 4827)
          • awk (PID: 4829, Parent: 4827, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 4843, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4845, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4848, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4849, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4850, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4851, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4853, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4855, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4858, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4859, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4860, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4861, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4862, Parent: 4861)
          • ps (PID: 4862, Parent: 4861, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4863, Parent: 4861)
          • awk (PID: 4863, Parent: 4861, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 4873, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 4875, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 4877, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 4880, Parent: 4877)
          • ln (PID: 4880, Parent: 4877, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 4882, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 4885, Parent: 4882)
          • ln (PID: 4885, Parent: 4882, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 4886, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 4887, Parent: 4886)
          • ln (PID: 4887, Parent: 4886, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 4888, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 4889, Parent: 4888)
          • ln (PID: 4889, Parent: 4888, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 4890, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 4891, Parent: 4890)
          • ln (PID: 4891, Parent: 4890, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 4892, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 4893, Parent: 4892)
          • ln (PID: 4893, Parent: 4892, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 4894, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 4895, Parent: 4894)
          • ln (PID: 4895, Parent: 4894, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 4896, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 4897, Parent: 4896)
          • systemctl (PID: 4897, Parent: 4896, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 4901, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 4902, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 4903, Parent: 4902)
          • systemctl (PID: 4903, Parent: 4902, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 4905, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4906, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4910, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4911, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4912, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4913, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4914, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4917, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4921, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4922, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4924, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4926, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4927, Parent: 4926)
          • ps (PID: 4927, Parent: 4926, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4928, Parent: 4926)
          • awk (PID: 4928, Parent: 4926, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 4939, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 4940, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 4941, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 4942, Parent: 4941)
          • ln (PID: 4942, Parent: 4941, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 4943, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 4944, Parent: 4943)
          • ln (PID: 4944, Parent: 4943, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 4946, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 4948, Parent: 4946)
          • ln (PID: 4948, Parent: 4946, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 4949, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 4950, Parent: 4949)
          • ln (PID: 4950, Parent: 4949, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 4951, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 4952, Parent: 4951)
          • ln (PID: 4952, Parent: 4951, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 4953, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 4954, Parent: 4953)
          • ln (PID: 4954, Parent: 4953, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 4955, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 4956, Parent: 4955)
          • ln (PID: 4956, Parent: 4955, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 4957, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 4958, Parent: 4957)
          • systemctl (PID: 4958, Parent: 4957, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 4962, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 4963, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 4964, Parent: 4963)
          • systemctl (PID: 4964, Parent: 4963, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 4966, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4967, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4981, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4982, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4983, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4984, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4985, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4986, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4987, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4988, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4989, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4990, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4991, Parent: 4990)
          • ps (PID: 4991, Parent: 4990, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4992, Parent: 4990)
          • awk (PID: 4992, Parent: 4990, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5002, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5004, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5005, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5007, Parent: 5005)
          • ln (PID: 5007, Parent: 5005, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5008, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5010, Parent: 5008)
          • ln (PID: 5010, Parent: 5008, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5012, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5014, Parent: 5012)
          • ln (PID: 5014, Parent: 5012, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5016, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5018, Parent: 5016)
          • ln (PID: 5018, Parent: 5016, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5021, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5022, Parent: 5021)
          • ln (PID: 5022, Parent: 5021, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5024, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5027, Parent: 5024)
          • ln (PID: 5027, Parent: 5024, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5029, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5030, Parent: 5029)
          • ln (PID: 5030, Parent: 5029, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5031, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5032, Parent: 5031)
          • systemctl (PID: 5032, Parent: 5031, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5036, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5038, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5039, Parent: 5038)
          • systemctl (PID: 5039, Parent: 5038, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5041, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5042, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5045, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5046, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5047, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5048, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5049, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5050, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5053, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5055, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5056, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5058, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5059, Parent: 5058)
          • ps (PID: 5059, Parent: 5058, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5060, Parent: 5058)
          • awk (PID: 5060, Parent: 5058, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5074, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5075, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5076, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5077, Parent: 5076)
          • ln (PID: 5077, Parent: 5076, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5078, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5079, Parent: 5078)
          • ln (PID: 5079, Parent: 5078, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5080, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5081, Parent: 5080)
          • ln (PID: 5081, Parent: 5080, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5082, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5083, Parent: 5082)
          • ln (PID: 5083, Parent: 5082, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5085, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5087, Parent: 5085)
          • ln (PID: 5087, Parent: 5085, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5088, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5089, Parent: 5088)
          • ln (PID: 5089, Parent: 5088, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5090, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5091, Parent: 5090)
          • ln (PID: 5091, Parent: 5090, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5092, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5093, Parent: 5092)
          • systemctl (PID: 5093, Parent: 5092, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5098, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5099, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5101, Parent: 5099)
          • systemctl (PID: 5101, Parent: 5099, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5105, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5107, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5118, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5119, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5120, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5121, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5124, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5125, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5126, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5127, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5128, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5129, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5130, Parent: 5129)
          • ps (PID: 5130, Parent: 5129, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5131, Parent: 5129)
          • awk (PID: 5131, Parent: 5129, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5140, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5142, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5143, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5145, Parent: 5143)
          • ln (PID: 5145, Parent: 5143, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5147, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5148, Parent: 5147)
          • ln (PID: 5148, Parent: 5147, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5151, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5152, Parent: 5151)
          • ln (PID: 5152, Parent: 5151, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5156, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5157, Parent: 5156)
          • ln (PID: 5157, Parent: 5156, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5158, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5159, Parent: 5158)
          • ln (PID: 5159, Parent: 5158, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5160, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5161, Parent: 5160)
          • ln (PID: 5161, Parent: 5160, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5162, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5163, Parent: 5162)
          • ln (PID: 5163, Parent: 5162, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5164, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5165, Parent: 5164)
          • systemctl (PID: 5165, Parent: 5164, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5171, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5172, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5173, Parent: 5172)
          • systemctl (PID: 5173, Parent: 5172, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5174, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5175, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5180, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5181, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5182, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5183, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5184, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5185, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5187, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5189, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5191, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5193, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5194, Parent: 5193)
          • ps (PID: 5194, Parent: 5193, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5195, Parent: 5193)
          • awk (PID: 5195, Parent: 5193, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5207, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5209, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5210, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5211, Parent: 5210)
          • ln (PID: 5211, Parent: 5210, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5212, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5213, Parent: 5212)
          • ln (PID: 5213, Parent: 5212, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5214, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5215, Parent: 5214)
          • ln (PID: 5215, Parent: 5214, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5217, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5218, Parent: 5217)
          • ln (PID: 5218, Parent: 5217, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5220, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5221, Parent: 5220)
          • ln (PID: 5221, Parent: 5220, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5222, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5223, Parent: 5222)
          • ln (PID: 5223, Parent: 5222, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5224, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5225, Parent: 5224)
          • ln (PID: 5225, Parent: 5224, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5226, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5227, Parent: 5226)
          • systemctl (PID: 5227, Parent: 5226, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5231, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5232, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5233, Parent: 5232)
          • systemctl (PID: 5233, Parent: 5232, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5234, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5235, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5250, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5251, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5252, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5253, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5254, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5255, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5256, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5257, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5258, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5259, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5260, Parent: 5259)
          • ps (PID: 5260, Parent: 5259, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5261, Parent: 5259)
          • awk (PID: 5261, Parent: 5259, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5266, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5267, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5269, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5272, Parent: 5269)
          • ln (PID: 5272, Parent: 5269, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5274, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5275, Parent: 5274)
          • ln (PID: 5275, Parent: 5274, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5278, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5279, Parent: 5278)
          • ln (PID: 5279, Parent: 5278, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5281, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5282, Parent: 5281)
          • ln (PID: 5282, Parent: 5281, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5284, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5286, Parent: 5284)
          • ln (PID: 5286, Parent: 5284, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5288, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5290, Parent: 5288)
          • ln (PID: 5290, Parent: 5288, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5292, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5295, Parent: 5292)
          • ln (PID: 5295, Parent: 5292, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5296, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5297, Parent: 5296)
          • systemctl (PID: 5297, Parent: 5296, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5301, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5302, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5304, Parent: 5302)
          • systemctl (PID: 5304, Parent: 5302, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5306, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5307, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5310, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5311, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5312, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5313, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5314, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5315, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5316, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5317, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5318, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5319, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5320, Parent: 5319)
          • ps (PID: 5320, Parent: 5319, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5321, Parent: 5319)
          • awk (PID: 5321, Parent: 5319, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5337, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5338, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5340, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5341, Parent: 5340)
          • ln (PID: 5341, Parent: 5340, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5342, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5343, Parent: 5342)
          • ln (PID: 5343, Parent: 5342, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5344, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5345, Parent: 5344)
          • ln (PID: 5345, Parent: 5344, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5346, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5347, Parent: 5346)
          • ln (PID: 5347, Parent: 5346, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5348, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5349, Parent: 5348)
          • ln (PID: 5349, Parent: 5348, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5350, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5351, Parent: 5350)
          • ln (PID: 5351, Parent: 5350, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5352, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5353, Parent: 5352)
          • ln (PID: 5353, Parent: 5352, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5354, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5355, Parent: 5354)
          • systemctl (PID: 5355, Parent: 5354, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5362, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5363, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5364, Parent: 5363)
          • systemctl (PID: 5364, Parent: 5363, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5366, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5367, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5382, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5383, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5384, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5385, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5386, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5387, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5388, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5390, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5391, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5393, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5394, Parent: 5393)
          • ps (PID: 5394, Parent: 5393, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5395, Parent: 5393)
          • awk (PID: 5395, Parent: 5393, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5403, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5405, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5406, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5408, Parent: 5406)
          • ln (PID: 5408, Parent: 5406, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5410, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5411, Parent: 5410)
          • ln (PID: 5411, Parent: 5410, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5413, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5415, Parent: 5413)
          • ln (PID: 5415, Parent: 5413, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5417, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5419, Parent: 5417)
          • ln (PID: 5419, Parent: 5417, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5422, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5423, Parent: 5422)
          • ln (PID: 5423, Parent: 5422, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5424, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5425, Parent: 5424)
          • ln (PID: 5425, Parent: 5424, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5426, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5427, Parent: 5426)
          • ln (PID: 5427, Parent: 5426, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5428, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5429, Parent: 5428)
          • systemctl (PID: 5429, Parent: 5428, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5434, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5435, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5436, Parent: 5435)
          • systemctl (PID: 5436, Parent: 5435, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5438, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5439, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5442, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5443, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5444, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5445, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5446, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5447, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5448, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5449, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5450, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5451, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5452, Parent: 5451)
          • ps (PID: 5452, Parent: 5451, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5453, Parent: 5451)
          • awk (PID: 5453, Parent: 5451, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5468, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5469, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5470, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5471, Parent: 5470)
          • ln (PID: 5471, Parent: 5470, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5472, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5473, Parent: 5472)
          • ln (PID: 5473, Parent: 5472, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5475, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5476, Parent: 5475)
          • ln (PID: 5476, Parent: 5475, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5477, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5479, Parent: 5477)
          • ln (PID: 5479, Parent: 5477, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5480, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5481, Parent: 5480)
          • ln (PID: 5481, Parent: 5480, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5482, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5483, Parent: 5482)
          • ln (PID: 5483, Parent: 5482, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5485, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5487, Parent: 5485)
          • ln (PID: 5487, Parent: 5485, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5488, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5489, Parent: 5488)
          • systemctl (PID: 5489, Parent: 5488, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5493, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5494, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5495, Parent: 5494)
          • systemctl (PID: 5495, Parent: 5494, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5496, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5497, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5511, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5512, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5514, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5515, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5516, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5517, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5518, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5519, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5520, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5521, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5522, Parent: 5521)
          • ps (PID: 5522, Parent: 5521, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5523, Parent: 5521)
          • awk (PID: 5523, Parent: 5521, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
        • chattr (PID: 5531, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
        • chmod (PID: 5533, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5534, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
          • sh New Fork (PID: 5536, Parent: 5534)
          • ln (PID: 5536, Parent: 5534, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
        • sh (PID: 5537, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
          • sh New Fork (PID: 5539, Parent: 5537)
          • ln (PID: 5539, Parent: 5537, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
        • sh (PID: 5541, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
          • sh New Fork (PID: 5543, Parent: 5541)
          • ln (PID: 5543, Parent: 5541, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
        • sh (PID: 5545, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
          • sh New Fork (PID: 5546, Parent: 5545)
          • ln (PID: 5546, Parent: 5545, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
        • sh (PID: 5550, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
          • sh New Fork (PID: 5551, Parent: 5550)
          • ln (PID: 5551, Parent: 5550, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
        • sh (PID: 5552, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
          • sh New Fork (PID: 5553, Parent: 5552)
          • ln (PID: 5553, Parent: 5552, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
        • sh (PID: 5554, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
          • sh New Fork (PID: 5555, Parent: 5554)
          • ln (PID: 5555, Parent: 5554, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
        • sh (PID: 5556, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
          • sh New Fork (PID: 5557, Parent: 5556)
          • systemctl (PID: 5557, Parent: 5556, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
        • chmod (PID: 5562, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
        • sh (PID: 5563, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
          • sh New Fork (PID: 5564, Parent: 5563)
          • systemctl (PID: 5564, Parent: 5563, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
        • chattr (PID: 5566, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5567, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5572, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5573, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5574, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5575, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5576, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5577, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5578, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5580, Parent: 4698, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5582, Parent: 4698, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5584, Parent: 4698, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5585, Parent: 5584)
          • ps (PID: 5585, Parent: 5584, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5587, Parent: 5584)
          • awk (PID: 5587, Parent: 5584, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
    • chattr (PID: 4699, Parent: 4652, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/init.d/dockerlogger
    • chmod (PID: 4700, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
    • sh (PID: 4706, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger"
      • sh New Fork (PID: 4708, Parent: 4706)
      • ln (PID: 4708, Parent: 4706, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc0.d/S90dockerlogger
    • sh (PID: 4730, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger"
      • sh New Fork (PID: 4731, Parent: 4730)
      • ln (PID: 4731, Parent: 4730, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc1.d/S90dockerlogger
    • sh (PID: 4734, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger"
      • sh New Fork (PID: 4735, Parent: 4734)
      • ln (PID: 4735, Parent: 4734, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc2.d/S90dockerlogger
    • sh (PID: 4737, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger"
      • sh New Fork (PID: 4738, Parent: 4737)
      • ln (PID: 4738, Parent: 4737, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc3.d/S90dockerlogger
    • sh (PID: 4740, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger"
      • sh New Fork (PID: 4741, Parent: 4740)
      • ln (PID: 4741, Parent: 4740, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc4.d/S90dockerlogger
    • sh (PID: 4742, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger"
      • sh New Fork (PID: 4744, Parent: 4742)
      • ln (PID: 4744, Parent: 4742, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc5.d/S90dockerlogger
    • sh (PID: 4747, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger"
      • sh New Fork (PID: 4748, Parent: 4747)
      • ln (PID: 4748, Parent: 4747, MD5: e933cf05571f62c0157d4e2dfcaea282) Arguments: ln -s /etc/init.d/dockerlogger /etc/rc.d/rc6.d/S90dockerlogger
    • sh (PID: 4752, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl daemon-reload"
      • sh New Fork (PID: 4753, Parent: 4752)
      • systemctl (PID: 4753, Parent: 4752, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl daemon-reload
    • chmod (PID: 4757, Parent: 4652, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /etc/init.d/dockerlogger
    • sh (PID: 4758, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "systemctl start dockerlogger"
      • sh New Fork (PID: 4759, Parent: 4758)
      • systemctl (PID: 4759, Parent: 4758, MD5: 94a9ff38667d3d9be93633f0fa83c687) Arguments: systemctl start dockerlogger
    • sh (PID: 4760, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/dockerlogger/ && !/awk/ {print $2}'"
      • sh New Fork (PID: 4761, Parent: 4760)
      • ps (PID: 4761, Parent: 4760, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
      • sh New Fork (PID: 4762, Parent: 4760)
      • awk (PID: 4762, Parent: 4760, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/dockerlogger/ && !/awk/ {print $2}"
    • sh (PID: 4770, Parent: 4652, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "nohup dockerlogger > /dev/null 2>&1 &"
      • sh New Fork (PID: 4771, Parent: 4770)
      • nohup (PID: 4771, Parent: 1243, MD5: d8d3ce4d7f4b1e3ac3c3e7c9790f22ca) Arguments: nohup dockerlogger
      • dockerlogger (PID: 4771, Parent: 1243, MD5: ae8f8cf967ca15a7689f2d1f79fbc5dc) Arguments: dockerlogger
        • chmod (PID: 4780, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4781, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chmod (PID: 4782, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4785, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4787, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4788, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4789, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4791, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4794, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4796, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4798, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4801, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4803, Parent: 4801)
          • ps (PID: 4803, Parent: 4801, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4804, Parent: 4801)
          • awk (PID: 4804, Parent: 4801, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 4825, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4826, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4831, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4832, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4834, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4835, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4837, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4839, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4840, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4841, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4842, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4844, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4846, Parent: 4844)
          • ps (PID: 4846, Parent: 4844, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4847, Parent: 4844)
          • awk (PID: 4847, Parent: 4844, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 4856, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4857, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4866, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4867, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4868, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4869, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4870, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4871, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4874, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4876, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4878, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4881, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4883, Parent: 4881)
          • ps (PID: 4883, Parent: 4881, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4884, Parent: 4881)
          • awk (PID: 4884, Parent: 4881, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 4908, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4909, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4916, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4918, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4919, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4923, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4925, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4929, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4930, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4931, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4932, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4933, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4934, Parent: 4933)
          • ps (PID: 4934, Parent: 4933, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4935, Parent: 4933)
          • awk (PID: 4935, Parent: 4933, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 4945, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4947, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4969, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 4970, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 4971, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 4972, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 4973, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 4974, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 4975, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 4976, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 4977, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 4978, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 4979, Parent: 4978)
          • ps (PID: 4979, Parent: 4978, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 4980, Parent: 4978)
          • awk (PID: 4980, Parent: 4978, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 4995, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 4996, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 4999, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5000, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5001, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5003, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5006, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5009, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5011, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5013, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5015, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5017, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5019, Parent: 5017)
          • ps (PID: 5019, Parent: 5017, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5020, Parent: 5017)
          • awk (PID: 5020, Parent: 5017, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 5043, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5044, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5051, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5052, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5054, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5057, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5061, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5064, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5066, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5067, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5068, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5069, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5070, Parent: 5069)
          • ps (PID: 5070, Parent: 5069, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5071, Parent: 5069)
          • awk (PID: 5071, Parent: 5069, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 5084, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5086, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5100, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5102, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5104, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5106, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5108, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5109, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5110, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5111, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5112, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5113, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5114, Parent: 5113)
          • ps (PID: 5114, Parent: 5113, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5115, Parent: 5113)
          • awk (PID: 5115, Parent: 5113, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 5132, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5133, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5136, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5137, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5138, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5139, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5141, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5144, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5146, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5149, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5150, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5153, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5154, Parent: 5153)
          • ps (PID: 5154, Parent: 5153, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5155, Parent: 5153)
          • awk (PID: 5155, Parent: 5153, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 5176, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5177, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5186, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5188, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5190, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5192, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5196, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • chattr (PID: 5197, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -aiu /bin
        • chmod (PID: 5198, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/dockerlogger
        • chmod (PID: 5200, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/dockerlogger
        • chattr (PID: 5201, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate
        • sh (PID: 5203, Parent: 4771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -c "ps ux | awk '/etc\\/iptablesupdate/ && !/awk/ {print $2}'"
          • sh New Fork (PID: 5204, Parent: 5203)
          • ps (PID: 5204, Parent: 5203, MD5: c8800d39e018fb66b46d5804160ac13e) Arguments: ps ux
          • sh New Fork (PID: 5205, Parent: 5203)
          • awk (PID: 5205, Parent: 5203, MD5: 7e9b2ed1272331cfbd2aac2e5eb3f84b) Arguments: awk "/etc\\/iptablesupdate/ && !/awk/ {print $2}"
        • chattr (PID: 5216, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /bin/dockerlogger
        • chattr (PID: 5219, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr +iae /usr/bin/dockerlogger
        • chmod (PID: 5236, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /bin/chattr
        • chmod (PID: 5237, Parent: 4771, MD5: 739483b900c045ae1374d6f53a86a279) Arguments: chmod +x /usr/bin/chattr
        • chattr (PID: 5238, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /bin/dockerlogger
        • chattr (PID: 5239, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /usr/bin/dockerlogger
        • chattr (PID: 5240, Parent: 4771, MD5: fae2c2deaeca3bbf906fb8034304ad32) Arguments: chattr -iae /etc/iptablesupdate