Joe Sandbox Cloud Basic Analysis Report

Loading ...

Play interactive tourEdit tour

Linux Analysis Report kgcfozfvhs

Overview

General Information

Sample Name:kgcfozfvhs
Analysis ID:539256
MD5:720a3a92e72054dc8d58e229c22bb892
SHA1:07a3fb97c339a186f79c33d4de32997b2ad735d4
SHA256:e7c5b3de93a3184dc99c98c7f45e6ff5f6881b15d4a56c144e2e53e96dcc0e82
Infos:

Detection

Score:68
Range:0 - 100
Whitelisted:false

Signatures

Multi AV Scanner detection for submitted file
Writes to CPU model specific registers (MSR) (e.g. miners improve performance by disabling HW prefetcher)
Sample deletes itself
Sample is packed with UPX
Tries to load the MSR kernel module used for reading/writing to CPUs model specific register
Sample reads /proc/mounts (often used for finding a writable filesystem)
Sample contains only a LOAD segment without any section mappings
Writes ELF files to disk
Reads CPU information from /sys indicative of miner or evasive malware
Yara signature match
Executes the "grep" command used to find patterns in files or piped streams
Reads system information from the proc file system
Uses the "uname" system call to query kernel version information (possible evasion)
Enumerates processes within the "proc" file system
Executes the "ps" command used to list the status of processes
Sample listens on a socket
Executes the "modprobe" command used for loading kernel modules
Sample tries to set the executable flag
Executes commands using a shell command-line interpreter
Reads CPU information from /proc indicative of miner or evasive malware

Classification

General Information

Joe Sandbox Version:34.0.0 Boulder Opal
Analysis ID:539256
Start date:14.12.2021
Start time:01:20:02
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 5m 21s
Hypervisor based Inspection enabled:false
Report type:full
Sample file name:kgcfozfvhs
Cookbook file name:defaultlinuxfilecookbook.jbs
Analysis system description:Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:default
Detection:MAL
Classification:mal68.troj.evad.mine.lin@0/3@6/0
Warnings:
Show All
  • Report size exceeded maximum capacity and may have missing behavior information.
  • VT rate limit hit for: https://wwww.certigna.fr/autorites/X

Process Tree

  • system is lnxubuntu20
  • kgcfozfvhs (PID: 5224, Parent: 5116, MD5: 720a3a92e72054dc8d58e229c22bb892) Arguments: /tmp/kgcfozfvhs
    • kgcfozfvhs (PID: 5231, Parent: 5224, MD5: 720a3a92e72054dc8d58e229c22bb892) Arguments: /tmp/kgcfozfvhs
      • bo01iz (PID: 5239, Parent: 5231, MD5: 44ff7019be34b0055c23f57fd4873f00) Arguments: SSHD2
      • bash (PID: 5247, Parent: 5231, MD5: 7063c3930affe123baecd3b340f1ad2c) Arguments: /bin/bash -c "ps axf -o \"pid\"|while read procid\ndo\n ls -l /proc/$procid/fd | grep /tmp\n if [ $? -ne 1 ]\n then\n ls -l /proc/$procid/fd| grep -a -E \"xxx\"\n if [ $? -ne 0 ]\n then\n kill -9 $procid\n\t\t\t\t\t\techo zhaodao $procid\n else\n echo \"don't kill\"$procid\n fi\n fi\ndone\n"
        • bash New Fork (PID: 5248, Parent: 5247)
        • ps (PID: 5248, Parent: 5247, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps axf -o pid
        • bash New Fork (PID: 5249, Parent: 5247)
          • bash New Fork (PID: 5250, Parent: 5249)
          • ls (PID: 5250, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/PID/fd
          • bash New Fork (PID: 5251, Parent: 5249)
          • grep (PID: 5251, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5252, Parent: 5249)
          • ls (PID: 5252, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5178/fd
          • bash New Fork (PID: 5253, Parent: 5249)
          • grep (PID: 5253, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5256, Parent: 5249)
          • ls (PID: 5256, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5179/fd
          • bash New Fork (PID: 5257, Parent: 5249)
          • grep (PID: 5257, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5258, Parent: 5249)
          • ls (PID: 5258, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2/fd
          • bash New Fork (PID: 5259, Parent: 5249)
          • grep (PID: 5259, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5260, Parent: 5249)
          • ls (PID: 5260, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/3/fd
          • bash New Fork (PID: 5261, Parent: 5249)
          • grep (PID: 5261, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5262, Parent: 5249)
          • ls (PID: 5262, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4/fd
          • bash New Fork (PID: 5263, Parent: 5249)
          • grep (PID: 5263, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5264, Parent: 5249)
          • ls (PID: 5264, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/6/fd
          • bash New Fork (PID: 5265, Parent: 5249)
          • grep (PID: 5265, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5266, Parent: 5249)
          • ls (PID: 5266, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/9/fd
          • bash New Fork (PID: 5267, Parent: 5249)
          • grep (PID: 5267, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5268, Parent: 5249)
          • ls (PID: 5268, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/10/fd
          • bash New Fork (PID: 5269, Parent: 5249)
          • grep (PID: 5269, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5270, Parent: 5249)
          • ls (PID: 5270, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/11/fd
          • bash New Fork (PID: 5271, Parent: 5249)
          • grep (PID: 5271, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5272, Parent: 5249)
          • ls (PID: 5272, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/12/fd
          • bash New Fork (PID: 5273, Parent: 5249)
          • grep (PID: 5273, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5274, Parent: 5249)
          • ls (PID: 5274, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/13/fd
          • bash New Fork (PID: 5275, Parent: 5249)
          • grep (PID: 5275, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5276, Parent: 5249)
          • ls (PID: 5276, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/14/fd
          • bash New Fork (PID: 5277, Parent: 5249)
          • grep (PID: 5277, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5278, Parent: 5249)
          • ls (PID: 5278, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/15/fd
          • bash New Fork (PID: 5279, Parent: 5249)
          • grep (PID: 5279, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5280, Parent: 5249)
          • ls (PID: 5280, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/16/fd
          • bash New Fork (PID: 5281, Parent: 5249)
          • grep (PID: 5281, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5282, Parent: 5249)
          • ls (PID: 5282, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/17/fd
          • bash New Fork (PID: 5283, Parent: 5249)
          • grep (PID: 5283, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5284, Parent: 5249)
          • ls (PID: 5284, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/18/fd
          • bash New Fork (PID: 5285, Parent: 5249)
          • grep (PID: 5285, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5286, Parent: 5249)
          • ls (PID: 5286, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/20/fd
          • bash New Fork (PID: 5287, Parent: 5249)
          • grep (PID: 5287, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5288, Parent: 5249)
          • ls (PID: 5288, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/21/fd
          • bash New Fork (PID: 5289, Parent: 5249)
          • grep (PID: 5289, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5290, Parent: 5249)
          • ls (PID: 5290, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/22/fd
          • bash New Fork (PID: 5291, Parent: 5249)
          • grep (PID: 5291, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5292, Parent: 5249)
          • ls (PID: 5292, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/23/fd
          • bash New Fork (PID: 5293, Parent: 5249)
          • grep (PID: 5293, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5295, Parent: 5249)
          • ls (PID: 5295, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/24/fd
          • bash New Fork (PID: 5296, Parent: 5249)
          • grep (PID: 5296, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5297, Parent: 5249)
          • ls (PID: 5297, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/25/fd
          • bash New Fork (PID: 5298, Parent: 5249)
          • grep (PID: 5298, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5299, Parent: 5249)
          • ls (PID: 5299, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/26/fd
          • bash New Fork (PID: 5300, Parent: 5249)
          • grep (PID: 5300, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5301, Parent: 5249)
          • ls (PID: 5301, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/27/fd
          • bash New Fork (PID: 5302, Parent: 5249)
          • grep (PID: 5302, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5303, Parent: 5249)
          • ls (PID: 5303, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/28/fd
          • bash New Fork (PID: 5304, Parent: 5249)
          • grep (PID: 5304, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5305, Parent: 5249)
          • ls (PID: 5305, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/29/fd
          • bash New Fork (PID: 5306, Parent: 5249)
          • grep (PID: 5306, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5307, Parent: 5249)
          • ls (PID: 5307, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/30/fd
          • bash New Fork (PID: 5308, Parent: 5249)
          • grep (PID: 5308, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5309, Parent: 5249)
          • ls (PID: 5309, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/35/fd
          • bash New Fork (PID: 5310, Parent: 5249)
          • grep (PID: 5310, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5311, Parent: 5249)
          • ls (PID: 5311, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/77/fd
          • bash New Fork (PID: 5312, Parent: 5249)
          • grep (PID: 5312, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5315, Parent: 5249)
          • ls (PID: 5315, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/78/fd
          • bash New Fork (PID: 5316, Parent: 5249)
          • grep (PID: 5316, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5317, Parent: 5249)
          • ls (PID: 5317, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/79/fd
          • bash New Fork (PID: 5318, Parent: 5249)
          • grep (PID: 5318, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5319, Parent: 5249)
          • ls (PID: 5319, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/80/fd
          • bash New Fork (PID: 5320, Parent: 5249)
          • grep (PID: 5320, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5321, Parent: 5249)
          • ls (PID: 5321, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/81/fd
          • bash New Fork (PID: 5322, Parent: 5249)
          • grep (PID: 5322, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5323, Parent: 5249)
          • ls (PID: 5323, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/82/fd
          • bash New Fork (PID: 5324, Parent: 5249)
          • grep (PID: 5324, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5325, Parent: 5249)
          • ls (PID: 5325, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/83/fd
          • bash New Fork (PID: 5326, Parent: 5249)
          • grep (PID: 5326, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5327, Parent: 5249)
          • ls (PID: 5327, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/84/fd
          • bash New Fork (PID: 5328, Parent: 5249)
          • grep (PID: 5328, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5329, Parent: 5249)
          • ls (PID: 5329, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/85/fd
          • bash New Fork (PID: 5330, Parent: 5249)
          • grep (PID: 5330, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5331, Parent: 5249)
          • ls (PID: 5331, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/88/fd
          • bash New Fork (PID: 5332, Parent: 5249)
          • grep (PID: 5332, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5333, Parent: 5249)
          • ls (PID: 5333, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/89/fd
          • bash New Fork (PID: 5334, Parent: 5249)
          • grep (PID: 5334, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5335, Parent: 5249)
          • ls (PID: 5335, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/91/fd
          • bash New Fork (PID: 5336, Parent: 5249)
          • grep (PID: 5336, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5337, Parent: 5249)
          • ls (PID: 5337, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/92/fd
          • bash New Fork (PID: 5338, Parent: 5249)
          • grep (PID: 5338, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5339, Parent: 5249)
          • ls (PID: 5339, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/93/fd
          • bash New Fork (PID: 5340, Parent: 5249)
          • grep (PID: 5340, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5341, Parent: 5249)
          • ls (PID: 5341, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/94/fd
          • bash New Fork (PID: 5342, Parent: 5249)
          • grep (PID: 5342, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5343, Parent: 5249)
          • ls (PID: 5343, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/95/fd
          • bash New Fork (PID: 5344, Parent: 5249)
          • grep (PID: 5344, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5345, Parent: 5249)
          • ls (PID: 5345, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/96/fd
          • bash New Fork (PID: 5346, Parent: 5249)
          • grep (PID: 5346, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5347, Parent: 5249)
          • ls (PID: 5347, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/97/fd
          • bash New Fork (PID: 5348, Parent: 5249)
          • grep (PID: 5348, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5349, Parent: 5249)
          • ls (PID: 5349, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/98/fd
          • bash New Fork (PID: 5350, Parent: 5249)
          • grep (PID: 5350, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5351, Parent: 5249)
          • ls (PID: 5351, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/99/fd
          • bash New Fork (PID: 5352, Parent: 5249)
          • grep (PID: 5352, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5353, Parent: 5249)
          • ls (PID: 5353, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/100/fd
          • bash New Fork (PID: 5354, Parent: 5249)
          • grep (PID: 5354, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5355, Parent: 5249)
          • ls (PID: 5355, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/101/fd
          • bash New Fork (PID: 5356, Parent: 5249)
          • grep (PID: 5356, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5357, Parent: 5249)
          • ls (PID: 5357, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/102/fd
          • bash New Fork (PID: 5358, Parent: 5249)
          • grep (PID: 5358, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5359, Parent: 5249)
          • ls (PID: 5359, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/103/fd
          • bash New Fork (PID: 5360, Parent: 5249)
          • grep (PID: 5360, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5361, Parent: 5249)
          • ls (PID: 5361, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/104/fd
          • bash New Fork (PID: 5362, Parent: 5249)
          • grep (PID: 5362, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5363, Parent: 5249)
          • ls (PID: 5363, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/105/fd
          • bash New Fork (PID: 5364, Parent: 5249)
          • grep (PID: 5364, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5367, Parent: 5249)
          • ls (PID: 5367, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/106/fd
          • bash New Fork (PID: 5368, Parent: 5249)
          • grep (PID: 5368, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5369, Parent: 5249)
          • ls (PID: 5369, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/107/fd
          • bash New Fork (PID: 5370, Parent: 5249)
          • grep (PID: 5370, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5371, Parent: 5249)
          • ls (PID: 5371, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/108/fd
          • bash New Fork (PID: 5372, Parent: 5249)
          • grep (PID: 5372, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5373, Parent: 5249)
          • ls (PID: 5373, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/109/fd
          • bash New Fork (PID: 5374, Parent: 5249)
          • grep (PID: 5374, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5375, Parent: 5249)
          • ls (PID: 5375, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/110/fd
          • bash New Fork (PID: 5376, Parent: 5249)
          • grep (PID: 5376, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5377, Parent: 5249)
          • ls (PID: 5377, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/111/fd
          • bash New Fork (PID: 5378, Parent: 5249)
          • grep (PID: 5378, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5379, Parent: 5249)
          • ls (PID: 5379, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/112/fd
          • bash New Fork (PID: 5380, Parent: 5249)
          • grep (PID: 5380, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5381, Parent: 5249)
          • ls (PID: 5381, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/113/fd
          • bash New Fork (PID: 5382, Parent: 5249)
          • grep (PID: 5382, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5383, Parent: 5249)
          • ls (PID: 5383, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/114/fd
          • bash New Fork (PID: 5384, Parent: 5249)
          • grep (PID: 5384, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5385, Parent: 5249)
          • ls (PID: 5385, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/115/fd
          • bash New Fork (PID: 5386, Parent: 5249)
          • grep (PID: 5386, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5387, Parent: 5249)
          • ls (PID: 5387, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/116/fd
          • bash New Fork (PID: 5388, Parent: 5249)
          • grep (PID: 5388, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5389, Parent: 5249)
          • ls (PID: 5389, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/117/fd
          • bash New Fork (PID: 5390, Parent: 5249)
          • grep (PID: 5390, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5391, Parent: 5249)
          • ls (PID: 5391, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/118/fd
          • bash New Fork (PID: 5392, Parent: 5249)
          • grep (PID: 5392, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5393, Parent: 5249)
          • ls (PID: 5393, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/119/fd
          • bash New Fork (PID: 5394, Parent: 5249)
          • grep (PID: 5394, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5395, Parent: 5249)
          • ls (PID: 5395, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/120/fd
          • bash New Fork (PID: 5396, Parent: 5249)
          • grep (PID: 5396, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5398, Parent: 5249)
          • ls (PID: 5398, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/121/fd
          • bash New Fork (PID: 5399, Parent: 5249)
          • grep (PID: 5399, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5400, Parent: 5249)
          • ls (PID: 5400, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/122/fd
          • bash New Fork (PID: 5401, Parent: 5249)
          • grep (PID: 5401, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5402, Parent: 5249)
          • ls (PID: 5402, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/123/fd
          • bash New Fork (PID: 5403, Parent: 5249)
          • grep (PID: 5403, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5404, Parent: 5249)
          • ls (PID: 5404, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/124/fd
          • bash New Fork (PID: 5405, Parent: 5249)
          • grep (PID: 5405, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5406, Parent: 5249)
          • ls (PID: 5406, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/125/fd
          • bash New Fork (PID: 5407, Parent: 5249)
          • grep (PID: 5407, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5410, Parent: 5249)
          • ls (PID: 5410, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/126/fd
          • bash New Fork (PID: 5411, Parent: 5249)
          • grep (PID: 5411, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5412, Parent: 5249)
          • ls (PID: 5412, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/127/fd
          • bash New Fork (PID: 5413, Parent: 5249)
          • grep (PID: 5413, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5415, Parent: 5249)
          • ls (PID: 5415, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/128/fd
          • bash New Fork (PID: 5416, Parent: 5249)
          • grep (PID: 5416, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5417, Parent: 5249)
          • ls (PID: 5417, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/130/fd
          • bash New Fork (PID: 5418, Parent: 5249)
          • grep (PID: 5418, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5419, Parent: 5249)
          • ls (PID: 5419, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/132/fd
          • bash New Fork (PID: 5420, Parent: 5249)
          • grep (PID: 5420, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5425, Parent: 5249)
          • ls (PID: 5425, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/141/fd
          • bash New Fork (PID: 5426, Parent: 5249)
          • grep (PID: 5426, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5428, Parent: 5249)
          • ls (PID: 5428, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/144/fd
          • bash New Fork (PID: 5429, Parent: 5249)
          • grep (PID: 5429, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5433, Parent: 5249)
          • ls (PID: 5433, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/157/fd
          • bash New Fork (PID: 5434, Parent: 5249)
          • grep (PID: 5434, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5436, Parent: 5249)
          • ls (PID: 5436, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/201/fd
          • bash New Fork (PID: 5437, Parent: 5249)
          • grep (PID: 5437, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5438, Parent: 5249)
          • ls (PID: 5438, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/202/fd
          • bash New Fork (PID: 5439, Parent: 5249)
          • grep (PID: 5439, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5440, Parent: 5249)
          • ls (PID: 5440, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/203/fd
          • bash New Fork (PID: 5441, Parent: 5249)
          • grep (PID: 5441, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5442, Parent: 5249)
          • ls (PID: 5442, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/204/fd
          • bash New Fork (PID: 5443, Parent: 5249)
          • grep (PID: 5443, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5444, Parent: 5249)
          • ls (PID: 5444, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/205/fd
          • bash New Fork (PID: 5445, Parent: 5249)
          • grep (PID: 5445, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5446, Parent: 5249)
          • ls (PID: 5446, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/206/fd
          • bash New Fork (PID: 5447, Parent: 5249)
          • grep (PID: 5447, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5452, Parent: 5249)
          • ls (PID: 5452, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/207/fd
          • bash New Fork (PID: 5453, Parent: 5249)
          • grep (PID: 5453, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5454, Parent: 5249)
          • ls (PID: 5454, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/208/fd
          • bash New Fork (PID: 5455, Parent: 5249)
          • grep (PID: 5455, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5456, Parent: 5249)
          • ls (PID: 5456, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/209/fd
          • bash New Fork (PID: 5457, Parent: 5249)
          • grep (PID: 5457, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5458, Parent: 5249)
          • ls (PID: 5458, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/210/fd
          • bash New Fork (PID: 5459, Parent: 5249)
          • grep (PID: 5459, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5460, Parent: 5249)
          • ls (PID: 5460, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/211/fd
          • bash New Fork (PID: 5461, Parent: 5249)
          • grep (PID: 5461, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5462, Parent: 5249)
          • ls (PID: 5462, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/212/fd
          • bash New Fork (PID: 5463, Parent: 5249)
          • grep (PID: 5463, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5464, Parent: 5249)
          • ls (PID: 5464, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/213/fd
          • bash New Fork (PID: 5465, Parent: 5249)
          • grep (PID: 5465, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5466, Parent: 5249)
          • ls (PID: 5466, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/214/fd
          • bash New Fork (PID: 5467, Parent: 5249)
          • grep (PID: 5467, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5468, Parent: 5249)
          • ls (PID: 5468, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/215/fd
          • bash New Fork (PID: 5469, Parent: 5249)
          • grep (PID: 5469, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5470, Parent: 5249)
          • ls (PID: 5470, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/216/fd
          • bash New Fork (PID: 5471, Parent: 5249)
          • grep (PID: 5471, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5472, Parent: 5249)
          • ls (PID: 5472, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/217/fd
          • bash New Fork (PID: 5473, Parent: 5249)
          • grep (PID: 5473, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5474, Parent: 5249)
          • ls (PID: 5474, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/218/fd
          • bash New Fork (PID: 5475, Parent: 5249)
          • grep (PID: 5475, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5476, Parent: 5249)
          • ls (PID: 5476, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/219/fd
          • bash New Fork (PID: 5477, Parent: 5249)
          • grep (PID: 5477, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5480, Parent: 5249)
          • ls (PID: 5480, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/220/fd
          • bash New Fork (PID: 5481, Parent: 5249)
          • grep (PID: 5481, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5482, Parent: 5249)
          • ls (PID: 5482, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/221/fd
          • bash New Fork (PID: 5483, Parent: 5249)
          • grep (PID: 5483, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5484, Parent: 5249)
          • ls (PID: 5484, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/222/fd
          • bash New Fork (PID: 5485, Parent: 5249)
          • grep (PID: 5485, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5486, Parent: 5249)
          • ls (PID: 5486, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/223/fd
          • bash New Fork (PID: 5487, Parent: 5249)
          • grep (PID: 5487, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5488, Parent: 5249)
          • ls (PID: 5488, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/224/fd
          • bash New Fork (PID: 5489, Parent: 5249)
          • grep (PID: 5489, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5490, Parent: 5249)
          • ls (PID: 5490, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/225/fd
          • bash New Fork (PID: 5491, Parent: 5249)
          • grep (PID: 5491, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5492, Parent: 5249)
          • ls (PID: 5492, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/226/fd
          • bash New Fork (PID: 5493, Parent: 5249)
          • grep (PID: 5493, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5494, Parent: 5249)
          • ls (PID: 5494, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/227/fd
          • bash New Fork (PID: 5495, Parent: 5249)
          • grep (PID: 5495, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5496, Parent: 5249)
          • ls (PID: 5496, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/228/fd
          • bash New Fork (PID: 5497, Parent: 5249)
          • grep (PID: 5497, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5498, Parent: 5249)
          • ls (PID: 5498, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/229/fd
          • bash New Fork (PID: 5499, Parent: 5249)
          • grep (PID: 5499, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5500, Parent: 5249)
          • ls (PID: 5500, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/230/fd
          • bash New Fork (PID: 5501, Parent: 5249)
          • grep (PID: 5501, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5502, Parent: 5249)
          • ls (PID: 5502, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/231/fd
          • bash New Fork (PID: 5503, Parent: 5249)
          • grep (PID: 5503, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5504, Parent: 5249)
          • ls (PID: 5504, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/232/fd
          • bash New Fork (PID: 5505, Parent: 5249)
          • grep (PID: 5505, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5506, Parent: 5249)
          • ls (PID: 5506, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/233/fd
          • bash New Fork (PID: 5507, Parent: 5249)
          • grep (PID: 5507, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5508, Parent: 5249)
          • ls (PID: 5508, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/234/fd
          • bash New Fork (PID: 5509, Parent: 5249)
          • grep (PID: 5509, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5510, Parent: 5249)
          • ls (PID: 5510, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/235/fd
          • bash New Fork (PID: 5511, Parent: 5249)
          • grep (PID: 5511, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5512, Parent: 5249)
          • ls (PID: 5512, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/236/fd
          • bash New Fork (PID: 5513, Parent: 5249)
          • grep (PID: 5513, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5514, Parent: 5249)
          • ls (PID: 5514, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/237/fd
          • bash New Fork (PID: 5515, Parent: 5249)
          • grep (PID: 5515, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5516, Parent: 5249)
          • ls (PID: 5516, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/243/fd
          • bash New Fork (PID: 5517, Parent: 5249)
          • grep (PID: 5517, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5518, Parent: 5249)
          • ls (PID: 5518, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/248/fd
          • bash New Fork (PID: 5519, Parent: 5249)
          • grep (PID: 5519, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5520, Parent: 5249)
          • ls (PID: 5520, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/249/fd
          • bash New Fork (PID: 5521, Parent: 5249)
          • grep (PID: 5521, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5522, Parent: 5249)
          • ls (PID: 5522, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/250/fd
          • bash New Fork (PID: 5523, Parent: 5249)
          • grep (PID: 5523, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5524, Parent: 5249)
          • ls (PID: 5524, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/251/fd
          • bash New Fork (PID: 5525, Parent: 5249)
          • grep (PID: 5525, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5526, Parent: 5249)
          • ls (PID: 5526, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/252/fd
          • bash New Fork (PID: 5527, Parent: 5249)
          • grep (PID: 5527, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5528, Parent: 5249)
          • ls (PID: 5528, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/253/fd
          • bash New Fork (PID: 5529, Parent: 5249)
          • grep (PID: 5529, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5530, Parent: 5249)
          • ls (PID: 5530, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/254/fd
          • bash New Fork (PID: 5531, Parent: 5249)
          • grep (PID: 5531, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5534, Parent: 5249)
          • ls (PID: 5534, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/255/fd
          • bash New Fork (PID: 5535, Parent: 5249)
          • grep (PID: 5535, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5536, Parent: 5249)
          • ls (PID: 5536, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/256/fd
          • bash New Fork (PID: 5537, Parent: 5249)
          • grep (PID: 5537, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5538, Parent: 5249)
          • ls (PID: 5538, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/257/fd
          • bash New Fork (PID: 5539, Parent: 5249)
          • grep (PID: 5539, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5540, Parent: 5249)
          • ls (PID: 5540, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/258/fd
          • bash New Fork (PID: 5541, Parent: 5249)
          • grep (PID: 5541, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5542, Parent: 5249)
          • ls (PID: 5542, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/259/fd
          • bash New Fork (PID: 5543, Parent: 5249)
          • grep (PID: 5543, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5544, Parent: 5249)
          • ls (PID: 5544, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/260/fd
          • bash New Fork (PID: 5545, Parent: 5249)
          • grep (PID: 5545, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5546, Parent: 5249)
          • ls (PID: 5546, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/261/fd
          • bash New Fork (PID: 5547, Parent: 5249)
          • grep (PID: 5547, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5548, Parent: 5249)
          • ls (PID: 5548, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/262/fd
          • bash New Fork (PID: 5549, Parent: 5249)
          • grep (PID: 5549, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5550, Parent: 5249)
          • ls (PID: 5550, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/263/fd
          • bash New Fork (PID: 5551, Parent: 5249)
          • grep (PID: 5551, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5552, Parent: 5249)
          • ls (PID: 5552, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/264/fd
          • bash New Fork (PID: 5553, Parent: 5249)
          • grep (PID: 5553, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5554, Parent: 5249)
          • ls (PID: 5554, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/265/fd
          • bash New Fork (PID: 5555, Parent: 5249)
          • grep (PID: 5555, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5556, Parent: 5249)
          • ls (PID: 5556, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/266/fd
          • bash New Fork (PID: 5557, Parent: 5249)
          • grep (PID: 5557, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5558, Parent: 5249)
          • ls (PID: 5558, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/267/fd
          • bash New Fork (PID: 5559, Parent: 5249)
          • grep (PID: 5559, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5560, Parent: 5249)
          • ls (PID: 5560, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/269/fd
          • bash New Fork (PID: 5561, Parent: 5249)
          • grep (PID: 5561, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5562, Parent: 5249)
          • ls (PID: 5562, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/270/fd
          • bash New Fork (PID: 5563, Parent: 5249)
          • grep (PID: 5563, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5564, Parent: 5249)
          • ls (PID: 5564, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/272/fd
          • bash New Fork (PID: 5565, Parent: 5249)
          • grep (PID: 5565, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5566, Parent: 5249)
          • ls (PID: 5566, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/274/fd
          • bash New Fork (PID: 5567, Parent: 5249)
          • grep (PID: 5567, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5569, Parent: 5249)
          • ls (PID: 5569, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/278/fd
          • bash New Fork (PID: 5570, Parent: 5249)
          • grep (PID: 5570, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5571, Parent: 5249)
          • ls (PID: 5571, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/281/fd
          • bash New Fork (PID: 5572, Parent: 5249)
          • grep (PID: 5572, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5573, Parent: 5249)
          • ls (PID: 5573, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/286/fd
          • bash New Fork (PID: 5574, Parent: 5249)
          • grep (PID: 5574, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5575, Parent: 5249)
          • ls (PID: 5575, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/322/fd
          • bash New Fork (PID: 5576, Parent: 5249)
          • grep (PID: 5576, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5579, Parent: 5249)
          • ls (PID: 5579, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/324/fd
          • bash New Fork (PID: 5580, Parent: 5249)
          • grep (PID: 5580, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5581, Parent: 5249)
          • ls (PID: 5581, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/326/fd
          • bash New Fork (PID: 5582, Parent: 5249)
          • grep (PID: 5582, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5583, Parent: 5249)
          • ls (PID: 5583, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/327/fd
          • bash New Fork (PID: 5584, Parent: 5249)
          • grep (PID: 5584, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5585, Parent: 5249)
          • ls (PID: 5585, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/328/fd
          • bash New Fork (PID: 5586, Parent: 5249)
          • grep (PID: 5586, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5587, Parent: 5249)
          • ls (PID: 5587, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/333/fd
          • bash New Fork (PID: 5588, Parent: 5249)
          • grep (PID: 5588, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5589, Parent: 5249)
          • ls (PID: 5589, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/346/fd
          • bash New Fork (PID: 5590, Parent: 5249)
          • grep (PID: 5590, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5591, Parent: 5249)
          • ls (PID: 5591, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/379/fd
          • bash New Fork (PID: 5592, Parent: 5249)
          • grep (PID: 5592, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5593, Parent: 5249)
          • ls (PID: 5593, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/419/fd
          • bash New Fork (PID: 5594, Parent: 5249)
          • grep (PID: 5594, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5597, Parent: 5249)
          • ls (PID: 5597, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/420/fd
          • bash New Fork (PID: 5598, Parent: 5249)
          • grep (PID: 5598, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5599, Parent: 5249)
          • ls (PID: 5599, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/517/fd
          • bash New Fork (PID: 5600, Parent: 5249)
          • grep (PID: 5600, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5601, Parent: 5249)
          • ls (PID: 5601, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/654/fd
          • bash New Fork (PID: 5602, Parent: 5249)
          • grep (PID: 5602, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5603, Parent: 5249)
          • ls (PID: 5603, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/655/fd
          • bash New Fork (PID: 5604, Parent: 5249)
          • grep (PID: 5604, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5605, Parent: 5249)
          • ls (PID: 5605, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/656/fd
          • bash New Fork (PID: 5606, Parent: 5249)
          • grep (PID: 5606, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5607, Parent: 5249)
          • ls (PID: 5607, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/657/fd
          • bash New Fork (PID: 5608, Parent: 5249)
          • grep (PID: 5608, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5609, Parent: 5249)
          • ls (PID: 5609, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/667/fd
          • bash New Fork (PID: 5610, Parent: 5249)
          • grep (PID: 5610, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5611, Parent: 5249)
          • ls (PID: 5611, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/670/fd
          • bash New Fork (PID: 5612, Parent: 5249)
          • grep (PID: 5612, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5613, Parent: 5249)
          • ls (PID: 5613, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/674/fd
          • bash New Fork (PID: 5614, Parent: 5249)
          • grep (PID: 5614, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5615, Parent: 5249)
          • ls (PID: 5615, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/675/fd
          • bash New Fork (PID: 5616, Parent: 5249)
          • grep (PID: 5616, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5617, Parent: 5249)
          • ls (PID: 5617, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/676/fd
          • bash New Fork (PID: 5618, Parent: 5249)
          • grep (PID: 5618, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5619, Parent: 5249)
          • ls (PID: 5619, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/677/fd
          • bash New Fork (PID: 5620, Parent: 5249)
          • grep (PID: 5620, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5621, Parent: 5249)
          • ls (PID: 5621, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/896/fd
          • bash New Fork (PID: 5622, Parent: 5249)
          • grep (PID: 5622, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5623, Parent: 5249)
          • ls (PID: 5623, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/910/fd
          • bash New Fork (PID: 5624, Parent: 5249)
          • grep (PID: 5624, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5625, Parent: 5249)
          • ls (PID: 5625, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1207/fd
          • bash New Fork (PID: 5626, Parent: 5249)
          • grep (PID: 5626, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5627, Parent: 5249)
          • ls (PID: 5627, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2746/fd
          • bash New Fork (PID: 5628, Parent: 5249)
          • grep (PID: 5628, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5629, Parent: 5249)
          • ls (PID: 5629, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2749/fd
          • bash New Fork (PID: 5630, Parent: 5249)
          • grep (PID: 5630, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5631, Parent: 5249)
          • ls (PID: 5631, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2761/fd
          • bash New Fork (PID: 5632, Parent: 5249)
          • grep (PID: 5632, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5635, Parent: 5249)
          • ls (PID: 5635, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2882/fd
          • bash New Fork (PID: 5636, Parent: 5249)
          • grep (PID: 5636, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5637, Parent: 5249)
          • ls (PID: 5637, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/3021/fd
          • bash New Fork (PID: 5638, Parent: 5249)
          • grep (PID: 5638, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5639, Parent: 5249)
          • ls (PID: 5639, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/3088/fd
          • bash New Fork (PID: 5640, Parent: 5249)
          • grep (PID: 5640, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5641, Parent: 5249)
          • ls (PID: 5641, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4457/fd
          • bash New Fork (PID: 5642, Parent: 5249)
          • grep (PID: 5642, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5643, Parent: 5249)
          • ls (PID: 5643, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4458/fd
          • bash New Fork (PID: 5644, Parent: 5249)
          • grep (PID: 5644, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5645, Parent: 5249)
          • ls (PID: 5645, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4459/fd
          • bash New Fork (PID: 5646, Parent: 5249)
          • grep (PID: 5646, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5647, Parent: 5249)
          • ls (PID: 5647, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4460/fd
          • bash New Fork (PID: 5648, Parent: 5249)
          • grep (PID: 5648, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5649, Parent: 5249)
          • ls (PID: 5649, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4482/fd
          • bash New Fork (PID: 5650, Parent: 5249)
          • grep (PID: 5650, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5651, Parent: 5249)
          • ls (PID: 5651, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4494/fd
          • bash New Fork (PID: 5652, Parent: 5249)
          • grep (PID: 5652, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5653, Parent: 5249)
          • ls (PID: 5653, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5143/fd
          • bash New Fork (PID: 5654, Parent: 5249)
          • grep (PID: 5654, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5655, Parent: 5249)
          • ls (PID: 5655, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5150/fd
          • bash New Fork (PID: 5656, Parent: 5249)
          • grep (PID: 5656, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5657, Parent: 5249)
          • ls (PID: 5657, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5152/fd
          • bash New Fork (PID: 5658, Parent: 5249)
          • grep (PID: 5658, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5659, Parent: 5249)
          • ls (PID: 5659, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5217/fd
          • bash New Fork (PID: 5660, Parent: 5249)
          • grep (PID: 5660, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5661, Parent: 5249)
          • ls (PID: 5661, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1/fd
          • bash New Fork (PID: 5662, Parent: 5249)
          • grep (PID: 5662, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5663, Parent: 5249)
          • ls (PID: 5663, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/491/fd
          • bash New Fork (PID: 5664, Parent: 5249)
          • grep (PID: 5664, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5665, Parent: 5249)
          • ls (PID: 5665, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/658/fd
          • bash New Fork (PID: 5666, Parent: 5249)
          • grep (PID: 5666, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5667, Parent: 5249)
          • ls (PID: 5667, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/720/fd
          • bash New Fork (PID: 5668, Parent: 5249)
          • grep (PID: 5668, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5669, Parent: 5249)
          • ls (PID: 5669, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/721/fd
          • bash New Fork (PID: 5670, Parent: 5249)
          • grep (PID: 5670, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5671, Parent: 5249)
          • ls (PID: 5671, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/759/fd
          • bash New Fork (PID: 5672, Parent: 5249)
          • grep (PID: 5672, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5673, Parent: 5249)
          • ls (PID: 5673, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/761/fd
          • bash New Fork (PID: 5674, Parent: 5249)
          • grep (PID: 5674, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5677, Parent: 5249)
          • ls (PID: 5677, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/772/fd
          • bash New Fork (PID: 5678, Parent: 5249)
          • grep (PID: 5678, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5679, Parent: 5249)
          • ls (PID: 5679, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/774/fd
          • bash New Fork (PID: 5680, Parent: 5249)
          • grep (PID: 5680, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5681, Parent: 5249)
          • ls (PID: 5681, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/801/fd
          • bash New Fork (PID: 5682, Parent: 5249)
          • grep (PID: 5682, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5683, Parent: 5249)
          • ls (PID: 5683, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/777/fd
          • bash New Fork (PID: 5684, Parent: 5249)
          • grep (PID: 5684, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5685, Parent: 5249)
          • ls (PID: 5685, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/785/fd
          • bash New Fork (PID: 5686, Parent: 5249)
          • grep (PID: 5686, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5687, Parent: 5249)
          • ls (PID: 5687, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/788/fd
          • bash New Fork (PID: 5688, Parent: 5249)
          • grep (PID: 5688, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5689, Parent: 5249)
          • ls (PID: 5689, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/789/fd
          • bash New Fork (PID: 5690, Parent: 5249)
          • grep (PID: 5690, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5691, Parent: 5249)
          • ls (PID: 5691, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/793/fd
          • bash New Fork (PID: 5692, Parent: 5249)
          • grep (PID: 5692, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5693, Parent: 5249)
          • ls (PID: 5693, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/796/fd
          • bash New Fork (PID: 5694, Parent: 5249)
          • grep (PID: 5694, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5695, Parent: 5249)
          • ls (PID: 5695, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/797/fd
          • bash New Fork (PID: 5696, Parent: 5249)
          • grep (PID: 5696, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5697, Parent: 5249)
          • ls (PID: 5697, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/799/fd
          • bash New Fork (PID: 5698, Parent: 5249)
          • grep (PID: 5698, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5699, Parent: 5249)
          • ls (PID: 5699, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/800/fd
          • bash New Fork (PID: 5700, Parent: 5249)
          • grep (PID: 5700, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5701, Parent: 5249)
          • ls (PID: 5701, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/847/fd
          • bash New Fork (PID: 5702, Parent: 5249)
          • grep (PID: 5702, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5703, Parent: 5249)
          • ls (PID: 5703, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/884/fd
          • bash New Fork (PID: 5704, Parent: 5249)
          • grep (PID: 5704, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5705, Parent: 5249)
          • ls (PID: 5705, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/904/fd
          • bash New Fork (PID: 5706, Parent: 5249)
          • grep (PID: 5706, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5707, Parent: 5249)
          • ls (PID: 5707, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/912/fd
          • bash New Fork (PID: 5708, Parent: 5249)
          • grep (PID: 5708, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5709, Parent: 5249)
          • ls (PID: 5709, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/918/fd
          • bash New Fork (PID: 5710, Parent: 5249)
          • grep (PID: 5710, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5711, Parent: 5249)
          • ls (PID: 5711, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/936/fd
          • bash New Fork (PID: 5712, Parent: 5249)
          • grep (PID: 5712, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5713, Parent: 5249)
          • ls (PID: 5713, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1320/fd
          • bash New Fork (PID: 5714, Parent: 5249)
          • grep (PID: 5714, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5715, Parent: 5249)
          • ls (PID: 5715, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1389/fd
          • bash New Fork (PID: 5716, Parent: 5249)
          • grep (PID: 5716, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5717, Parent: 5249)
          • ls (PID: 5717, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1463/fd
          • bash New Fork (PID: 5718, Parent: 5249)
          • grep (PID: 5718, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5719, Parent: 5249)
          • ls (PID: 5719, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1465/fd
          • bash New Fork (PID: 5720, Parent: 5249)
          • grep (PID: 5720, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5721, Parent: 5249)
          • ls (PID: 5721, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1475/fd
          • bash New Fork (PID: 5722, Parent: 5249)
          • grep (PID: 5722, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5723, Parent: 5249)
          • ls (PID: 5723, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1476/fd
          • bash New Fork (PID: 5724, Parent: 5249)
          • grep (PID: 5724, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5727, Parent: 5249)
          • ls (PID: 5727, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1477/fd
          • bash New Fork (PID: 5728, Parent: 5249)
          • grep (PID: 5728, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5729, Parent: 5249)
          • ls (PID: 5729, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1532/fd
          • bash New Fork (PID: 5730, Parent: 5249)
          • grep (PID: 5730, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5731, Parent: 5249)
          • ls (PID: 5731, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1576/fd
          • bash New Fork (PID: 5732, Parent: 5249)
          • grep (PID: 5732, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5733, Parent: 5249)
          • ls (PID: 5733, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1579/fd
          • bash New Fork (PID: 5734, Parent: 5249)
          • grep (PID: 5734, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5735, Parent: 5249)
          • ls (PID: 5735, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1629/fd
          • bash New Fork (PID: 5736, Parent: 5249)
          • grep (PID: 5736, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5737, Parent: 5249)
          • ls (PID: 5737, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1622/fd
          • bash New Fork (PID: 5738, Parent: 5249)
          • grep (PID: 5738, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5739, Parent: 5249)
          • ls (PID: 5739, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1623/fd
          • bash New Fork (PID: 5740, Parent: 5249)
          • grep (PID: 5740, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5741, Parent: 5249)
          • ls (PID: 5741, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1627/fd
          • bash New Fork (PID: 5742, Parent: 5249)
          • grep (PID: 5742, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5743, Parent: 5249)
          • ls (PID: 5743, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1632/fd
          • bash New Fork (PID: 5744, Parent: 5249)
          • grep (PID: 5744, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5745, Parent: 5249)
          • ls (PID: 5745, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1633/fd
          • bash New Fork (PID: 5746, Parent: 5249)
          • grep (PID: 5746, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5747, Parent: 5249)
          • ls (PID: 5747, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1638/fd
          • bash New Fork (PID: 5748, Parent: 5249)
          • grep (PID: 5748, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5749, Parent: 5249)
          • ls (PID: 5749, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1639/fd
          • bash New Fork (PID: 5750, Parent: 5249)
          • grep (PID: 5750, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5751, Parent: 5249)
          • ls (PID: 5751, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1642/fd
          • bash New Fork (PID: 5752, Parent: 5249)
          • grep (PID: 5752, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5755, Parent: 5249)
          • ls (PID: 5755, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1648/fd
          • bash New Fork (PID: 5756, Parent: 5249)
          • grep (PID: 5756, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5757, Parent: 5249)
          • ls (PID: 5757, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1654/fd
          • bash New Fork (PID: 5758, Parent: 5249)
          • grep (PID: 5758, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5759, Parent: 5249)
          • ls (PID: 5759, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1656/fd
          • bash New Fork (PID: 5760, Parent: 5249)
          • grep (PID: 5760, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5761, Parent: 5249)
          • ls (PID: 5761, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1661/fd
          • bash New Fork (PID: 5762, Parent: 5249)
          • grep (PID: 5762, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5763, Parent: 5249)
          • ls (PID: 5763, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1664/fd
          • bash New Fork (PID: 5764, Parent: 5249)
          • grep (PID: 5764, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5765, Parent: 5249)
          • ls (PID: 5765, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1668/fd
          • bash New Fork (PID: 5766, Parent: 5249)
          • grep (PID: 5766, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5767, Parent: 5249)
          • ls (PID: 5767, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1809/fd
          • bash New Fork (PID: 5768, Parent: 5249)
          • grep (PID: 5768, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5769, Parent: 5249)
          • ls (PID: 5769, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1888/fd
          • bash New Fork (PID: 5770, Parent: 5249)
          • grep (PID: 5770, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5771, Parent: 5249)
          • ls (PID: 5771, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1890/fd
          • bash New Fork (PID: 5772, Parent: 5249)
          • grep (PID: 5772, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5773, Parent: 5249)
          • ls (PID: 5773, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1900/fd
          • bash New Fork (PID: 5774, Parent: 5249)
          • grep (PID: 5774, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5775, Parent: 5249)
          • ls (PID: 5775, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1983/fd
          • bash New Fork (PID: 5776, Parent: 5249)
          • grep (PID: 5776, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5777, Parent: 5249)
          • ls (PID: 5777, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2050/fd
          • bash New Fork (PID: 5778, Parent: 5249)
          • grep (PID: 5778, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5779, Parent: 5249)
          • ls (PID: 5779, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2063/fd
          • bash New Fork (PID: 5780, Parent: 5249)
          • grep (PID: 5780, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5781, Parent: 5249)
          • ls (PID: 5781, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2077/fd
          • bash New Fork (PID: 5782, Parent: 5249)
          • grep (PID: 5782, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5783, Parent: 5249)
          • ls (PID: 5783, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2078/fd
          • bash New Fork (PID: 5784, Parent: 5249)
          • grep (PID: 5784, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5785, Parent: 5249)
          • ls (PID: 5785, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2079/fd
          • bash New Fork (PID: 5786, Parent: 5249)
          • grep (PID: 5786, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5787, Parent: 5249)
          • ls (PID: 5787, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2080/fd
          • bash New Fork (PID: 5788, Parent: 5249)
          • grep (PID: 5788, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5789, Parent: 5249)
          • ls (PID: 5789, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2083/fd
          • bash New Fork (PID: 5790, Parent: 5249)
          • grep (PID: 5790, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5791, Parent: 5249)
          • ls (PID: 5791, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2084/fd
          • bash New Fork (PID: 5792, Parent: 5249)
          • grep (PID: 5792, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5793, Parent: 5249)
          • ls (PID: 5793, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2069/fd
          • bash New Fork (PID: 5794, Parent: 5249)
          • grep (PID: 5794, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5795, Parent: 5249)
          • ls (PID: 5795, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2074/fd
          • bash New Fork (PID: 5796, Parent: 5249)
          • grep (PID: 5796, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5797, Parent: 5249)
          • ls (PID: 5797, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2096/fd
          • bash New Fork (PID: 5798, Parent: 5249)
          • grep (PID: 5798, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5799, Parent: 5249)
          • ls (PID: 5799, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2097/fd
          • bash New Fork (PID: 5800, Parent: 5249)
          • grep (PID: 5800, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5801, Parent: 5249)
          • ls (PID: 5801, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2102/fd
          • bash New Fork (PID: 5802, Parent: 5249)
          • grep (PID: 5802, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5803, Parent: 5249)
          • ls (PID: 5803, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2114/fd
          • bash New Fork (PID: 5804, Parent: 5249)
          • grep (PID: 5804, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5805, Parent: 5249)
          • ls (PID: 5805, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2126/fd
          • bash New Fork (PID: 5806, Parent: 5249)
          • grep (PID: 5806, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5807, Parent: 5249)
          • ls (PID: 5807, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2129/fd
          • bash New Fork (PID: 5808, Parent: 5249)
          • grep (PID: 5808, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5809, Parent: 5249)
          • ls (PID: 5809, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2146/fd
          • bash New Fork (PID: 5810, Parent: 5249)
          • grep (PID: 5810, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5811, Parent: 5249)
          • ls (PID: 5811, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1334/fd
          • bash New Fork (PID: 5812, Parent: 5249)
          • grep (PID: 5812, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5815, Parent: 5249)
          • ls (PID: 5815, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1335/fd
          • bash New Fork (PID: 5816, Parent: 5249)
          • grep (PID: 5816, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5817, Parent: 5249)
          • ls (PID: 5817, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1344/fd
          • bash New Fork (PID: 5818, Parent: 5249)
          • grep (PID: 5818, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5819, Parent: 5249)
          • ls (PID: 5819, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1601/fd
          • bash New Fork (PID: 5820, Parent: 5249)
          • grep (PID: 5820, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5821, Parent: 5249)
          • ls (PID: 5821, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1349/fd
          • bash New Fork (PID: 5822, Parent: 5249)
          • grep (PID: 5822, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5823, Parent: 5249)
          • ls (PID: 5823, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1489/fd
          • bash New Fork (PID: 5824, Parent: 5249)
          • grep (PID: 5824, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5825, Parent: 5249)
          • ls (PID: 5825, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1494/fd
          • bash New Fork (PID: 5826, Parent: 5249)
          • grep (PID: 5826, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5827, Parent: 5249)
          • ls (PID: 5827, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1582/fd
          • bash New Fork (PID: 5828, Parent: 5249)
          • grep (PID: 5828, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5829, Parent: 5249)
          • ls (PID: 5829, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1586/fd
          • bash New Fork (PID: 5830, Parent: 5249)
          • grep (PID: 5830, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5831, Parent: 5249)
          • ls (PID: 5831, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1594/fd
          • bash New Fork (PID: 5832, Parent: 5249)
          • grep (PID: 5832, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5833, Parent: 5249)
          • ls (PID: 5833, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1599/fd
          • bash New Fork (PID: 5834, Parent: 5249)
          • grep (PID: 5834, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5835, Parent: 5249)
          • ls (PID: 5835, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1612/fd
          • bash New Fork (PID: 5836, Parent: 5249)
          • grep (PID: 5836, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5837, Parent: 5249)
          • ls (PID: 5837, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1698/fd
          • bash New Fork (PID: 5838, Parent: 5249)
          • grep (PID: 5838, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5839, Parent: 5249)
          • ls (PID: 5839, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1699/fd
          • bash New Fork (PID: 5840, Parent: 5249)
          • grep (PID: 5840, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5841, Parent: 5249)
          • ls (PID: 5841, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1860/fd
          • bash New Fork (PID: 5842, Parent: 5249)
          • grep (PID: 5842, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5843, Parent: 5249)
          • ls (PID: 5843, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1872/fd
          • bash New Fork (PID: 5844, Parent: 5249)
          • grep (PID: 5844, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5845, Parent: 5249)
          • ls (PID: 5845, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1877/fd
          • bash New Fork (PID: 5846, Parent: 5249)
          • grep (PID: 5846, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5848, Parent: 5249)
          • ls (PID: 5848, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/1886/fd
          • bash New Fork (PID: 5849, Parent: 5249)
          • grep (PID: 5849, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5850, Parent: 5249)
          • ls (PID: 5850, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2009/fd
          • bash New Fork (PID: 5851, Parent: 5249)
          • grep (PID: 5851, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5852, Parent: 5249)
          • ls (PID: 5852, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2014/fd
          • bash New Fork (PID: 5853, Parent: 5249)
          • grep (PID: 5853, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5856, Parent: 5249)
          • ls (PID: 5856, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2018/fd
          • bash New Fork (PID: 5857, Parent: 5249)
          • grep (PID: 5857, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5858, Parent: 5249)
          • ls (PID: 5858, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2025/fd
          • bash New Fork (PID: 5859, Parent: 5249)
          • grep (PID: 5859, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5860, Parent: 5249)
          • ls (PID: 5860, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2028/fd
          • bash New Fork (PID: 5861, Parent: 5249)
          • grep (PID: 5861, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5862, Parent: 5249)
          • ls (PID: 5862, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2033/fd
          • bash New Fork (PID: 5863, Parent: 5249)
          • grep (PID: 5863, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5864, Parent: 5249)
          • ls (PID: 5864, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2302/fd
          • bash New Fork (PID: 5865, Parent: 5249)
          • grep (PID: 5865, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5866, Parent: 5249)
          • ls (PID: 5866, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2038/fd
          • bash New Fork (PID: 5867, Parent: 5249)
          • grep (PID: 5867, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5868, Parent: 5249)
          • ls (PID: 5868, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2048/fd
          • bash New Fork (PID: 5869, Parent: 5249)
          • grep (PID: 5869, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5870, Parent: 5249)
          • ls (PID: 5870, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2128/fd
          • bash New Fork (PID: 5871, Parent: 5249)
          • grep (PID: 5871, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5872, Parent: 5249)
          • ls (PID: 5872, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2156/fd
          • bash New Fork (PID: 5873, Parent: 5249)
          • grep (PID: 5873, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5874, Parent: 5249)
          • ls (PID: 5874, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2180/fd
          • bash New Fork (PID: 5875, Parent: 5249)
          • grep (PID: 5875, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5876, Parent: 5249)
          • ls (PID: 5876, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2195/fd
          • bash New Fork (PID: 5877, Parent: 5249)
          • grep (PID: 5877, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5878, Parent: 5249)
          • ls (PID: 5878, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2208/fd
          • bash New Fork (PID: 5879, Parent: 5249)
          • grep (PID: 5879, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5880, Parent: 5249)
          • ls (PID: 5880, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2226/fd
          • bash New Fork (PID: 5881, Parent: 5249)
          • grep (PID: 5881, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5882, Parent: 5249)
          • ls (PID: 5882, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2235/fd
          • bash New Fork (PID: 5883, Parent: 5249)
          • grep (PID: 5883, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5884, Parent: 5249)
          • ls (PID: 5884, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2242/fd
          • bash New Fork (PID: 5885, Parent: 5249)
          • grep (PID: 5885, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5886, Parent: 5249)
          • ls (PID: 5886, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2275/fd
          • bash New Fork (PID: 5887, Parent: 5249)
          • grep (PID: 5887, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5888, Parent: 5249)
          • ls (PID: 5888, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2281/fd
          • bash New Fork (PID: 5889, Parent: 5249)
          • grep (PID: 5889, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5890, Parent: 5249)
          • ls (PID: 5890, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2285/fd
          • bash New Fork (PID: 5891, Parent: 5249)
          • grep (PID: 5891, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5892, Parent: 5249)
          • ls (PID: 5892, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2289/fd
          • bash New Fork (PID: 5893, Parent: 5249)
          • grep (PID: 5893, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5894, Parent: 5249)
          • ls (PID: 5894, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2294/fd
          • bash New Fork (PID: 5895, Parent: 5249)
          • grep (PID: 5895, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5896, Parent: 5249)
          • ls (PID: 5896, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2307/fd
          • bash New Fork (PID: 5897, Parent: 5249)
          • grep (PID: 5897, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5898, Parent: 5249)
          • ls (PID: 5898, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5231/fd
          • bash New Fork (PID: 5899, Parent: 5249)
          • grep (PID: 5899, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5900, Parent: 5249)
          • ls (PID: 5900, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5239/fd
          • bash New Fork (PID: 5901, Parent: 5249)
          • grep (PID: 5901, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5902, Parent: 5249)
          • ls (PID: 5902, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5247/fd
          • bash New Fork (PID: 5903, Parent: 5249)
          • grep (PID: 5903, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5904, Parent: 5249)
          • ls (PID: 5904, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5248/fd
          • bash New Fork (PID: 5905, Parent: 5249)
          • grep (PID: 5905, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5906, Parent: 5249)
          • ls (PID: 5906, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5249/fd
          • bash New Fork (PID: 5907, Parent: 5249)
          • grep (PID: 5907, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5908, Parent: 5249)
          • ls (PID: 5908, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2062/fd
          • bash New Fork (PID: 5909, Parent: 5249)
          • grep (PID: 5909, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5912, Parent: 5249)
          • ls (PID: 5912, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2123/fd
          • bash New Fork (PID: 5913, Parent: 5249)
          • grep (PID: 5913, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5914, Parent: 5249)
          • ls (PID: 5914, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2223/fd
          • bash New Fork (PID: 5915, Parent: 5249)
          • grep (PID: 5915, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5916, Parent: 5249)
          • ls (PID: 5916, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2637/fd
          • bash New Fork (PID: 5917, Parent: 5249)
          • grep (PID: 5917, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5918, Parent: 5249)
          • ls (PID: 5918, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/3236/fd
          • bash New Fork (PID: 5919, Parent: 5249)
          • grep (PID: 5919, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5920, Parent: 5249)
          • ls (PID: 5920, Parent: 5249, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5037/fd
          • bash New Fork (PID: 5921, Parent: 5249)
          • grep (PID: 5921, Parent: 5249, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
      • k8fe6xrykc2cshb (PID: 5414, Parent: 5231, MD5: d37061bd4d78fafe76a9306b7543f099) Arguments: "/usr/java/latest/bin/java -Djava.util.logging.config.file=/data/apache-tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Djdk.tls.ephemeralDHKeySize=2048 -Djava.protocol.handler.pkgs=org.apache.catalina.webresources -Dorg.apache.catalina.security.SecurityListener.UMASK=0027 -Xms512M -Xmx5120M -server -XX:+UseParallelGC -Djavax.net.debug=ssl -Dignore.endorsed.dirs= -classpath /data/apache-tomcat/bin/bootstrap.jar:/data/apache-tomcat/bin/tomcat-juli.jar -Dcatalina.base=/data/apache-tomcat -Dcatalina.home=/data/apache-tomcat -Djava.io.tmpdir=/data/apache-tomcat/temp org.apache.catalina.startup.Bootstrap start"
        • k8fe6xrykc2cshb New Fork (PID: 5421, Parent: 5414)
          • sh (PID: 5424, Parent: 5421, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "/sbin/modprobe msr allow_writes=on > /dev/null 2>&1"
            • sh New Fork (PID: 5427, Parent: 5424)
            • modprobe (PID: 5427, Parent: 5424, MD5: 0b44462b1a40df8039d6d61cfff7ea84) Arguments: /sbin/modprobe msr allow_writes=on
          • sh (PID: 5925, Parent: 5421, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "/sbin/modprobe msr allow_writes=on > /dev/null 2>&1"
            • sh New Fork (PID: 5926, Parent: 5925)
            • modprobe (PID: 5926, Parent: 5925, MD5: 0b44462b1a40df8039d6d61cfff7ea84) Arguments: /sbin/modprobe msr allow_writes=on
      • bash (PID: 5922, Parent: 5231, MD5: 7063c3930affe123baecd3b340f1ad2c) Arguments: /bin/bash -c "ps axf -o \"pid\"|while read procid\ndo\n ls -l /proc/$procid/exe | grep /tmp\n if [ $? -ne 1 ]\n then\n ls -l /proc/$procid/exe| grep -a -E \"xxx\"\n if [ $? -ne 0 ]\n then\n kill -9 $procid\n\t\t\t\t\t\techo zhaodao $procid\n else\n echo \"don't kill\"$procid\n fi\n fi\ndone\n"
        • bash New Fork (PID: 5923, Parent: 5922)
        • ps (PID: 5923, Parent: 5922, MD5: ab48054475a6f70f8e7fa847331f3327) Arguments: ps axf -o pid
        • bash New Fork (PID: 5924, Parent: 5922)
          • bash New Fork (PID: 5927, Parent: 5924)
          • ls (PID: 5927, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/PID/exe
          • bash New Fork (PID: 5928, Parent: 5924)
          • grep (PID: 5928, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5931, Parent: 5924)
          • ls (PID: 5931, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5178/exe
          • bash New Fork (PID: 5932, Parent: 5924)
          • grep (PID: 5932, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5933, Parent: 5924)
          • ls (PID: 5933, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/5179/exe
          • bash New Fork (PID: 5934, Parent: 5924)
          • grep (PID: 5934, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5935, Parent: 5924)
          • ls (PID: 5935, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/2/exe
          • bash New Fork (PID: 5936, Parent: 5924)
          • grep (PID: 5936, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5937, Parent: 5924)
          • ls (PID: 5937, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/3/exe
          • bash New Fork (PID: 5938, Parent: 5924)
          • grep (PID: 5938, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5941, Parent: 5924)
          • ls (PID: 5941, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/4/exe
          • bash New Fork (PID: 5942, Parent: 5924)
          • grep (PID: 5942, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5943, Parent: 5924)
          • ls (PID: 5943, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/6/exe
          • bash New Fork (PID: 5944, Parent: 5924)
          • grep (PID: 5944, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5945, Parent: 5924)
          • ls (PID: 5945, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/9/exe
          • bash New Fork (PID: 5946, Parent: 5924)
          • grep (PID: 5946, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5947, Parent: 5924)
          • ls (PID: 5947, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/10/exe
          • bash New Fork (PID: 5948, Parent: 5924)
          • grep (PID: 5948, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5949, Parent: 5924)
          • ls (PID: 5949, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/11/exe
          • bash New Fork (PID: 5950, Parent: 5924)
          • grep (PID: 5950, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5951, Parent: 5924)
          • ls (PID: 5951, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/12/exe
          • bash New Fork (PID: 5952, Parent: 5924)
          • grep (PID: 5952, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5953, Parent: 5924)
          • ls (PID: 5953, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/13/exe
          • bash New Fork (PID: 5954, Parent: 5924)
          • grep (PID: 5954, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5955, Parent: 5924)
          • ls (PID: 5955, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/14/exe
          • bash New Fork (PID: 5956, Parent: 5924)
          • grep (PID: 5956, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5957, Parent: 5924)
          • ls (PID: 5957, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/15/exe
          • bash New Fork (PID: 5958, Parent: 5924)
          • grep (PID: 5958, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5959, Parent: 5924)
          • ls (PID: 5959, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/16/exe
          • bash New Fork (PID: 5960, Parent: 5924)
          • grep (PID: 5960, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5961, Parent: 5924)
          • ls (PID: 5961, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/17/exe
          • bash New Fork (PID: 5962, Parent: 5924)
          • grep (PID: 5962, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5963, Parent: 5924)
          • ls (PID: 5963, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/18/exe
          • bash New Fork (PID: 5964, Parent: 5924)
          • grep (PID: 5964, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5965, Parent: 5924)
          • ls (PID: 5965, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/20/exe
          • bash New Fork (PID: 5966, Parent: 5924)
          • grep (PID: 5966, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5967, Parent: 5924)
          • ls (PID: 5967, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/21/exe
          • bash New Fork (PID: 5968, Parent: 5924)
          • grep (PID: 5968, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5969, Parent: 5924)
          • ls (PID: 5969, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/22/exe
          • bash New Fork (PID: 5970, Parent: 5924)
          • grep (PID: 5970, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5971, Parent: 5924)
          • ls (PID: 5971, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/23/exe
          • bash New Fork (PID: 5972, Parent: 5924)
          • grep (PID: 5972, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5973, Parent: 5924)
          • ls (PID: 5973, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/24/exe
          • bash New Fork (PID: 5974, Parent: 5924)
          • grep (PID: 5974, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5975, Parent: 5924)
          • ls (PID: 5975, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/25/exe
          • bash New Fork (PID: 5976, Parent: 5924)
          • grep (PID: 5976, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5979, Parent: 5924)
          • ls (PID: 5979, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/26/exe
          • bash New Fork (PID: 5980, Parent: 5924)
          • grep (PID: 5980, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5981, Parent: 5924)
          • ls (PID: 5981, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/27/exe
          • bash New Fork (PID: 5982, Parent: 5924)
          • grep (PID: 5982, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5984, Parent: 5924)
          • ls (PID: 5984, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/28/exe
          • bash New Fork (PID: 5985, Parent: 5924)
          • grep (PID: 5985, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5986, Parent: 5924)
          • ls (PID: 5986, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/29/exe
          • bash New Fork (PID: 5987, Parent: 5924)
          • grep (PID: 5987, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5988, Parent: 5924)
          • ls (PID: 5988, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/30/exe
          • bash New Fork (PID: 5989, Parent: 5924)
          • grep (PID: 5989, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5990, Parent: 5924)
          • ls (PID: 5990, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/35/exe
          • bash New Fork (PID: 5991, Parent: 5924)
          • grep (PID: 5991, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5992, Parent: 5924)
          • ls (PID: 5992, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/77/exe
          • bash New Fork (PID: 5993, Parent: 5924)
          • grep (PID: 5993, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5994, Parent: 5924)
          • ls (PID: 5994, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/78/exe
          • bash New Fork (PID: 5995, Parent: 5924)
          • grep (PID: 5995, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5996, Parent: 5924)
          • ls (PID: 5996, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/79/exe
          • bash New Fork (PID: 5997, Parent: 5924)
          • grep (PID: 5997, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 5998, Parent: 5924)
          • ls (PID: 5998, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/80/exe
          • bash New Fork (PID: 5999, Parent: 5924)
          • grep (PID: 5999, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6000, Parent: 5924)
          • ls (PID: 6000, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/81/exe
          • bash New Fork (PID: 6001, Parent: 5924)
          • grep (PID: 6001, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6002, Parent: 5924)
          • ls (PID: 6002, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/82/exe
          • bash New Fork (PID: 6003, Parent: 5924)
          • grep (PID: 6003, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6006, Parent: 5924)
          • ls (PID: 6006, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/83/exe
          • bash New Fork (PID: 6007, Parent: 5924)
          • grep (PID: 6007, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6008, Parent: 5924)
          • ls (PID: 6008, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/84/exe
          • bash New Fork (PID: 6009, Parent: 5924)
          • grep (PID: 6009, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6010, Parent: 5924)
          • ls (PID: 6010, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/85/exe
          • bash New Fork (PID: 6011, Parent: 5924)
          • grep (PID: 6011, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6012, Parent: 5924)
          • ls (PID: 6012, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/88/exe
          • bash New Fork (PID: 6013, Parent: 5924)
          • grep (PID: 6013, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6014, Parent: 5924)
          • ls (PID: 6014, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/89/exe
          • bash New Fork (PID: 6015, Parent: 5924)
          • grep (PID: 6015, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6016, Parent: 5924)
          • ls (PID: 6016, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/91/exe
          • bash New Fork (PID: 6017, Parent: 5924)
          • grep (PID: 6017, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6018, Parent: 5924)
          • ls (PID: 6018, Parent: 5924, MD5: e7793f15c2ff7e747b4bc7079f5cd4f7) Arguments: ls -l /proc/92/exe
          • bash New Fork (PID: 6019, Parent: 5924)
          • grep (PID: 6019, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep /tmp
          • bash New Fork (PID: 6020, Parent: 5924)
          • ls (PID: 6020, Parent: 5924, MD5: e7793f15