Edit tour

Linux Analysis Report
Aqua.m68k.elf

Overview

General Information

Sample name:	Aqua.m68k.elf
Analysis ID:	1569907
MD5:	ceb5eec2b64c9e6f9a0cf95e03bc42e7
SHA1:	5471e1fdae6dbc47ad4a331af508a49840290e6e
SHA256:	18110f785d235e450e06440028e4a31580af4ecceda0f5275630fd345e790abd
Tags:	elfMiraiuser-lontze7
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Executes the "rm" command used to delete files or directories

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1569907
Start date and time:	2024-12-06 11:28:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.m68k.elf
Detection:	MAL
Classification:	mal88.spre.troj.evad.linELF@0/221@134/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Aqua.m68k.elf

Runtime Messages

Command:	/tmp/Aqua.m68k.elf
PID:	6233
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

dash New Fork (PID: 6216, Parent: 4334)

rm (PID: 6216, Parent: 4334, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.M4faKxWHkf /tmp/tmp.4plLPsybNX /tmp/tmp.kHIYOeL3dX

dash New Fork (PID: 6217, Parent: 4334)

cat (PID: 6217, Parent: 4334, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.M4faKxWHkf

dash New Fork (PID: 6218, Parent: 4334)

head (PID: 6218, Parent: 4334, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6219, Parent: 4334)

tr (PID: 6219, Parent: 4334, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6220, Parent: 4334)

cut (PID: 6220, Parent: 4334, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6221, Parent: 4334)

cat (PID: 6221, Parent: 4334, MD5: 7e9d213e404ad3bb82e4ebb2e1f2c1b3) Arguments: cat /tmp/tmp.M4faKxWHkf

dash New Fork (PID: 6222, Parent: 4334)

head (PID: 6222, Parent: 4334, MD5: fd96a67145172477dd57131396fc9608) Arguments: head -n 10

dash New Fork (PID: 6223, Parent: 4334)

tr (PID: 6223, Parent: 4334, MD5: fbd1402dd9f72d8ebfff00ce7c3a7bb5) Arguments: tr -d \\000-\\011\\013\\014\\016-\\037

dash New Fork (PID: 6224, Parent: 4334)

cut (PID: 6224, Parent: 4334, MD5: d8ed0ea8f22c0de0f8692d4d9f1759d3) Arguments: cut -c -80

dash New Fork (PID: 6225, Parent: 4334)

rm (PID: 6225, Parent: 4334, MD5: aa2b5496fdbfd88e38791ab81f90b95b) Arguments: rm -f /tmp/tmp.M4faKxWHkf /tmp/tmp.4plLPsybNX /tmp/tmp.kHIYOeL3dX

Aqua.m68k.elf (PID: 6233, Parent: 6144, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/Aqua.m68k.elf

Aqua.m68k.elf New Fork (PID: 6236, Parent: 6233)

Aqua.m68k.elf New Fork (PID: 6238, Parent: 6236)

gnome-session-binary New Fork (PID: 6241, Parent: 1477)

sh (PID: 6241, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6241, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 6246, Parent: 1)

systemd-hostnamed (PID: 6246, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 6348, Parent: 1320)

Default (PID: 6348, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6398, Parent: 1320)

Default (PID: 6398, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6411, Parent: 1)

dbus-daemon (PID: 6411, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6413, Parent: 1860)

pulseaudio (PID: 6413, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6414, Parent: 1)

rsyslogd (PID: 6414, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 6419, Parent: 2038)

fusermount (PID: 6419, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6428, Parent: 1)

rtkit-daemon (PID: 6428, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6431, Parent: 1)

systemd-logind (PID: 6431, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6492, Parent: 1)

polkitd (PID: 6492, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6493, Parent: 1)

dbus-daemon (PID: 6493, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 6494, Parent: 1320)

Default (PID: 6494, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6498, Parent: 1)

rsyslogd (PID: 6498, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6502, Parent: 1)

gpu-manager (PID: 6502, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6504, Parent: 6502)

sh (PID: 6504, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6505, Parent: 6504)

grep (PID: 6505, Parent: 6504, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6506, Parent: 6502)

sh (PID: 6506, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6507, Parent: 6506)

grep (PID: 6507, Parent: 6506, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6508, Parent: 6502)

sh (PID: 6508, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6511, Parent: 6508)

grep (PID: 6511, Parent: 6508, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6515, Parent: 6502)

sh (PID: 6515, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6516, Parent: 6515)

grep (PID: 6516, Parent: 6515, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6517, Parent: 6502)

sh (PID: 6517, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6518, Parent: 6517)

grep (PID: 6518, Parent: 6517, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6519, Parent: 6502)

sh (PID: 6519, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6520, Parent: 6519)

grep (PID: 6520, Parent: 6519, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6522, Parent: 6502)

sh (PID: 6522, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6523, Parent: 6522)

grep (PID: 6523, Parent: 6522, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6524, Parent: 6502)

sh (PID: 6524, Parent: 6502, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6525, Parent: 6524)

grep (PID: 6525, Parent: 6524, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6526, Parent: 1)

generate-config (PID: 6526, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6527, Parent: 6526)

pkill (PID: 6527, Parent: 6526, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6528, Parent: 1)

gdm-wait-for-drm (PID: 6528, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6534, Parent: 1)

dbus-daemon (PID: 6534, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6535, Parent: 1)

rsyslogd (PID: 6535, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6541, Parent: 1)

journalctl (PID: 6541, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6542, Parent: 1)

systemd-journald (PID: 6542, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6545, Parent: 1)

systemd-logind (PID: 6545, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6603, Parent: 1)

dbus-daemon (PID: 6603, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6604, Parent: 1)

rsyslogd (PID: 6604, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6605, Parent: 1)

systemd-journald (PID: 6605, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6606, Parent: 1)

gpu-manager (PID: 6606, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6610, Parent: 6606)

sh (PID: 6610, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6611, Parent: 6610)

grep (PID: 6611, Parent: 6610, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6613, Parent: 6606)

sh (PID: 6613, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6614, Parent: 6613)

grep (PID: 6614, Parent: 6613, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6615, Parent: 6606)

sh (PID: 6615, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6616, Parent: 6615)

grep (PID: 6616, Parent: 6615, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6618, Parent: 6606)

sh (PID: 6618, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6619, Parent: 6618)

grep (PID: 6619, Parent: 6618, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6621, Parent: 6606)

sh (PID: 6621, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6622, Parent: 6621)

grep (PID: 6622, Parent: 6621, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6626, Parent: 6606)

sh (PID: 6626, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6627, Parent: 6626)

grep (PID: 6627, Parent: 6626, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6628, Parent: 6606)

sh (PID: 6628, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6629, Parent: 6628)

grep (PID: 6629, Parent: 6628, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6630, Parent: 6606)

sh (PID: 6630, Parent: 6606, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6631, Parent: 6630)

grep (PID: 6631, Parent: 6630, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6633, Parent: 1)

dbus-daemon (PID: 6633, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6634, Parent: 1)

generate-config (PID: 6634, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6636, Parent: 6634)

pkill (PID: 6636, Parent: 6634, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6635, Parent: 1)

rsyslogd (PID: 6635, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6638, Parent: 1)

dbus-daemon (PID: 6638, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6646, Parent: 1)

systemd-logind (PID: 6646, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6707, Parent: 1)

gdm-wait-for-drm (PID: 6707, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6710, Parent: 1)

rsyslogd (PID: 6710, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6715, Parent: 1)

dbus-daemon (PID: 6715, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6716, Parent: 1)

rsyslogd (PID: 6716, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6723, Parent: 1)

systemd-journald (PID: 6723, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6726, Parent: 1)

systemd-logind (PID: 6726, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6784, Parent: 1)

dbus-daemon (PID: 6784, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6785, Parent: 1)

systemd-journald (PID: 6785, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6786, Parent: 1)

rsyslogd (PID: 6786, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6789, Parent: 1)

systemd-logind (PID: 6789, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6847, Parent: 1)

dbus-daemon (PID: 6847, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6848, Parent: 1)

gpu-manager (PID: 6848, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6852, Parent: 6848)

sh (PID: 6852, Parent: 6848, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6853, Parent: 6852)

grep (PID: 6853, Parent: 6852, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6854, Parent: 6848)

sh (PID: 6854, Parent: 6848, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6856, Parent: 6854)

grep (PID: 6856, Parent: 6854, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6858, Parent: 6848)

sh (PID: 6858, Parent: 6848, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6861, Parent: 6858)

grep (PID: 6861, Parent: 6858, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6857, Parent: 1)

rsyslogd (PID: 6857, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6860, Parent: 1)

dbus-daemon (PID: 6860, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6862, Parent: 1)

generate-config (PID: 6862, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6863, Parent: 6862)

pkill (PID: 6863, Parent: 6862, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6864, Parent: 1)

rsyslogd (PID: 6864, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6866, Parent: 1)

dbus-daemon (PID: 6866, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6875, Parent: 1)

gdm-wait-for-drm (PID: 6875, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6878, Parent: 1)

rsyslogd (PID: 6878, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6883, Parent: 1)

dbus-daemon (PID: 6883, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6884, Parent: 1)

systemd-journald (PID: 6884, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6887, Parent: 1)

systemd-logind (PID: 6887, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6944, Parent: 1)

rsyslogd (PID: 6944, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6945, Parent: 1)

dbus-daemon (PID: 6945, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6947, Parent: 1)

systemd-journald (PID: 6947, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6953, Parent: 1)

systemd-logind (PID: 6953, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7010, Parent: 1)

rsyslogd (PID: 7010, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7013, Parent: 1)

gpu-manager (PID: 7013, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7015, Parent: 7013)

sh (PID: 7015, Parent: 7013, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7016, Parent: 7015)

grep (PID: 7016, Parent: 7015, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7020, Parent: 7013)

sh (PID: 7020, Parent: 7013, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7022, Parent: 7020)

grep (PID: 7022, Parent: 7020, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7023, Parent: 7013)

sh (PID: 7023, Parent: 7013, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7024, Parent: 7023)

grep (PID: 7024, Parent: 7023, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7025, Parent: 7013)

sh (PID: 7025, Parent: 7013, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7027, Parent: 7025)

grep (PID: 7027, Parent: 7025, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7021, Parent: 1)

dbus-daemon (PID: 7021, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7028, Parent: 1)

rsyslogd (PID: 7028, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7029, Parent: 1)

generate-config (PID: 7029, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7030, Parent: 7029)

pkill (PID: 7030, Parent: 7029, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7031, Parent: 1)

dbus-daemon (PID: 7031, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7033, Parent: 1)

rsyslogd (PID: 7033, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7042, Parent: 1)

gdm-wait-for-drm (PID: 7042, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7047, Parent: 1)

dbus-daemon (PID: 7047, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7048, Parent: 1)

rsyslogd (PID: 7048, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7049, Parent: 1)

systemd-journald (PID: 7049, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7052, Parent: 1)

systemd-logind (PID: 7052, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7109, Parent: 1)

dbus-daemon (PID: 7109, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7111, Parent: 1)

systemd-journald (PID: 7111, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7112, Parent: 1)

rsyslogd (PID: 7112, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7115, Parent: 1)

systemd-logind (PID: 7115, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7172, Parent: 1)

dbus-daemon (PID: 7172, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7173, Parent: 1)

gpu-manager (PID: 7173, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7178, Parent: 7173)

sh (PID: 7178, Parent: 7173, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7179, Parent: 7178)

grep (PID: 7179, Parent: 7178, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7180, Parent: 7173)

sh (PID: 7180, Parent: 7173, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7181, Parent: 7180)

grep (PID: 7181, Parent: 7180, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7185, Parent: 7173)

sh (PID: 7185, Parent: 7173, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7182, Parent: 1)

dbus-daemon (PID: 7182, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7183, Parent: 1)

rsyslogd (PID: 7183, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7186, Parent: 1)

generate-config (PID: 7186, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7187, Parent: 7186)

pkill (PID: 7187, Parent: 7186, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7191, Parent: 1)

dbus-daemon (PID: 7191, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7195, Parent: 1)

rsyslogd (PID: 7195, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7200, Parent: 1)

gpu-manager (PID: 7200, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7201, Parent: 7200)

sh (PID: 7201, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7202, Parent: 7201)

grep (PID: 7202, Parent: 7201, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7204, Parent: 7200)

sh (PID: 7204, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7205, Parent: 7204)

grep (PID: 7205, Parent: 7204, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7207, Parent: 7200)

sh (PID: 7207, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7208, Parent: 7207)

grep (PID: 7208, Parent: 7207, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7209, Parent: 7200)

sh (PID: 7209, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7210, Parent: 7209)

grep (PID: 7210, Parent: 7209, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7211, Parent: 7200)

sh (PID: 7211, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7212, Parent: 7211)

grep (PID: 7212, Parent: 7211, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7213, Parent: 7200)

sh (PID: 7213, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7214, Parent: 7213)

grep (PID: 7214, Parent: 7213, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7215, Parent: 7200)

sh (PID: 7215, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7216, Parent: 7215)

grep (PID: 7216, Parent: 7215, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7217, Parent: 7200)

sh (PID: 7217, Parent: 7200, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7218, Parent: 7217)

grep (PID: 7218, Parent: 7217, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7219, Parent: 1)

generate-config (PID: 7219, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7220, Parent: 7219)

pkill (PID: 7220, Parent: 7219, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7223, Parent: 1)

gdm-wait-for-drm (PID: 7223, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7226, Parent: 1)

dbus-daemon (PID: 7226, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7227, Parent: 1)

rsyslogd (PID: 7227, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7230, Parent: 1)

systemd-journald (PID: 7230, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7233, Parent: 1)

systemd-logind (PID: 7233, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7290, Parent: 1)

dbus-daemon (PID: 7290, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7292, Parent: 1)

systemd-journald (PID: 7292, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7293, Parent: 1)

rsyslogd (PID: 7293, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7296, Parent: 1)

systemd-logind (PID: 7296, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7353, Parent: 1)

dbus-daemon (PID: 7353, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7354, Parent: 1)

gpu-manager (PID: 7354, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7359, Parent: 7354)

sh (PID: 7359, Parent: 7354, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7360, Parent: 7359)

grep (PID: 7360, Parent: 7359, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7361, Parent: 7354)

sh (PID: 7361, Parent: 7354, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7362, Parent: 7361)

grep (PID: 7362, Parent: 7361, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7366, Parent: 7354)

sh (PID: 7366, Parent: 7354, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7367, Parent: 7366)

systemd New Fork (PID: 7364, Parent: 1)

dbus-daemon (PID: 7364, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7365, Parent: 1)

rsyslogd (PID: 7365, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7368, Parent: 1)

generate-config (PID: 7368, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7369, Parent: 7368)

pkill (PID: 7369, Parent: 7368, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7370, Parent: 1)

dbus-daemon (PID: 7370, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7374, Parent: 1)

rsyslogd (PID: 7374, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7381, Parent: 1)

gpu-manager (PID: 7381, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7383, Parent: 7381)

sh (PID: 7383, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7384, Parent: 7383)

grep (PID: 7384, Parent: 7383, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7386, Parent: 7381)

sh (PID: 7386, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7387, Parent: 7386)

grep (PID: 7387, Parent: 7386, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7389, Parent: 7381)

sh (PID: 7389, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7390, Parent: 7389)

grep (PID: 7390, Parent: 7389, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7391, Parent: 7381)

sh (PID: 7391, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7392, Parent: 7391)

grep (PID: 7392, Parent: 7391, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7393, Parent: 7381)

sh (PID: 7393, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7394, Parent: 7393)

grep (PID: 7394, Parent: 7393, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7395, Parent: 7381)

sh (PID: 7395, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7396, Parent: 7395)

grep (PID: 7396, Parent: 7395, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7397, Parent: 7381)

sh (PID: 7397, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7398, Parent: 7397)

grep (PID: 7398, Parent: 7397, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7399, Parent: 7381)

sh (PID: 7399, Parent: 7381, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7400, Parent: 7399)

grep (PID: 7400, Parent: 7399, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7401, Parent: 1)

generate-config (PID: 7401, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7402, Parent: 7401)

pkill (PID: 7402, Parent: 7401, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7403, Parent: 1)

gdm-wait-for-drm (PID: 7403, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7408, Parent: 1)

dbus-daemon (PID: 7408, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7409, Parent: 1)

rsyslogd (PID: 7409, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7410, Parent: 1)

systemd-journald (PID: 7410, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7413, Parent: 1)

systemd-logind (PID: 7413, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7472, Parent: 1)

dbus-daemon (PID: 7472, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7474, Parent: 1)

rsyslogd (PID: 7474, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7475, Parent: 1)

systemd-journald (PID: 7475, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7478, Parent: 1)

systemd-logind (PID: 7478, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7536, Parent: 1)

dbus-daemon (PID: 7536, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7540, Parent: 1)

gpu-manager (PID: 7540, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7542, Parent: 7540)

sh (PID: 7542, Parent: 7540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7543, Parent: 7542)

grep (PID: 7543, Parent: 7542, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7544, Parent: 7540)

sh (PID: 7544, Parent: 7540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7545, Parent: 7544)

grep (PID: 7545, Parent: 7544, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7547, Parent: 7540)

sh (PID: 7547, Parent: 7540, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7550, Parent: 7547)

grep (PID: 7550, Parent: 7547, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7548, Parent: 1)

dbus-daemon (PID: 7548, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7549, Parent: 1)

rsyslogd (PID: 7549, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7552, Parent: 1860)

dbus-daemon (PID: 7552, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7553, Parent: 1)

generate-config (PID: 7553, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7554, Parent: 7553)

pkill (PID: 7554, Parent: 7553, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7555, Parent: 1860)

pulseaudio (PID: 7555, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7556, Parent: 1)

dbus-daemon (PID: 7556, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7558, Parent: 1)

rsyslogd (PID: 7558, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7563, Parent: 1)

gpu-manager (PID: 7563, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7564, Parent: 7563)

sh (PID: 7564, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7565, Parent: 7564)

grep (PID: 7565, Parent: 7564, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7566, Parent: 7563)

sh (PID: 7566, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7567, Parent: 7566)

grep (PID: 7567, Parent: 7566, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7568, Parent: 7563)

sh (PID: 7568, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7571, Parent: 7568)

grep (PID: 7571, Parent: 7568, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7573, Parent: 7563)

sh (PID: 7573, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7576, Parent: 7573)

grep (PID: 7576, Parent: 7573, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7581, Parent: 7563)

sh (PID: 7581, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7582, Parent: 7581)

grep (PID: 7582, Parent: 7581, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7586, Parent: 7563)

sh (PID: 7586, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7587, Parent: 7586)

grep (PID: 7587, Parent: 7586, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7588, Parent: 7563)

sh (PID: 7588, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7589, Parent: 7588)

grep (PID: 7589, Parent: 7588, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7590, Parent: 7563)

sh (PID: 7590, Parent: 7563, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7591, Parent: 7590)

grep (PID: 7591, Parent: 7590, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7570, Parent: 1)

rtkit-daemon (PID: 7570, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7579, Parent: 1)

polkitd (PID: 7579, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7592, Parent: 1)

generate-config (PID: 7592, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7593, Parent: 7592)

pkill (PID: 7593, Parent: 7592, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7596, Parent: 1)

gdm-wait-for-drm (PID: 7596, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7600, Parent: 1)

rsyslogd (PID: 7600, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7604, Parent: 1)

systemd-journald (PID: 7604, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7607, Parent: 1)

systemd-logind (PID: 7607, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7665, Parent: 1)

dbus-daemon (PID: 7665, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7667, Parent: 1)

gpu-manager (PID: 7667, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7671, Parent: 7667)

sh (PID: 7671, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7672, Parent: 7671)

grep (PID: 7672, Parent: 7671, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7675, Parent: 7667)

sh (PID: 7675, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7679, Parent: 7675)

grep (PID: 7679, Parent: 7675, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7680, Parent: 7667)

sh (PID: 7680, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7681, Parent: 7680)

grep (PID: 7681, Parent: 7680, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7683, Parent: 7667)

sh (PID: 7683, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7684, Parent: 7683)

grep (PID: 7684, Parent: 7683, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7685, Parent: 7667)

sh (PID: 7685, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7686, Parent: 7685)

grep (PID: 7686, Parent: 7685, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7687, Parent: 7667)

sh (PID: 7687, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7688, Parent: 7687)

grep (PID: 7688, Parent: 7687, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7690, Parent: 7667)

sh (PID: 7690, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7691, Parent: 7690)

grep (PID: 7691, Parent: 7690, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7693, Parent: 7667)

sh (PID: 7693, Parent: 7667, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7695, Parent: 7693)

grep (PID: 7695, Parent: 7693, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7668, Parent: 1)

rsyslogd (PID: 7668, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7674, Parent: 1)

dbus-daemon (PID: 7674, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7696, Parent: 1)

generate-config (PID: 7696, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7697, Parent: 7696)

pkill (PID: 7697, Parent: 7696, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7700, Parent: 1)

gdm-wait-for-drm (PID: 7700, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7701, Parent: 1)

rsyslogd (PID: 7701, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7706, Parent: 1)

dbus-daemon (PID: 7706, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7709, Parent: 1)

systemd-journald (PID: 7709, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7712, Parent: 1)

systemd-logind (PID: 7712, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7769, Parent: 1)

rsyslogd (PID: 7769, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7771, Parent: 1)

dbus-daemon (PID: 7771, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7775, Parent: 1)

gpu-manager (PID: 7775, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7776, Parent: 7775)

sh (PID: 7776, Parent: 7775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7777, Parent: 7776)

grep (PID: 7777, Parent: 7776, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7780, Parent: 7775)

sh (PID: 7780, Parent: 7775, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7783, Parent: 7780)

grep (PID: 7783, Parent: 7780, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7779, Parent: 1)

rsyslogd (PID: 7779, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7782, Parent: 1)

dbus-daemon (PID: 7782, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7784, Parent: 1)

generate-config (PID: 7784, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7785, Parent: 7784)

pkill (PID: 7785, Parent: 7784, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7794, Parent: 1)

gdm-wait-for-drm (PID: 7794, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7797, Parent: 1)

rsyslogd (PID: 7797, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7802, Parent: 1)

dbus-daemon (PID: 7802, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7803, Parent: 1)

systemd-journald (PID: 7803, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7806, Parent: 1)

systemd-logind (PID: 7806, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7863, Parent: 1)

rsyslogd (PID: 7863, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7864, Parent: 1)

dbus-daemon (PID: 7864, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7871, Parent: 1)

gpu-manager (PID: 7871, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7873, Parent: 7871)

sh (PID: 7873, Parent: 7871, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7874, Parent: 7873)

grep (PID: 7874, Parent: 7873, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7877, Parent: 7871)

sh (PID: 7877, Parent: 7871, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7879, Parent: 7877)

grep (PID: 7879, Parent: 7877, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7883, Parent: 7871)

sh (PID: 7883, Parent: 7871, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7884, Parent: 7883)

grep (PID: 7884, Parent: 7883, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7885, Parent: 7871)

sh (PID: 7885, Parent: 7871, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7887, Parent: 7885)

gpu-manager New Fork (PID: 7888, Parent: 7871)

gpu-manager New Fork (PID: 7890, Parent: 7871)

gpu-manager New Fork (PID: 7892, Parent: 7871)

gpu-manager New Fork (PID: 7894, Parent: 7871)

systemd New Fork (PID: 7875, Parent: 1)

rsyslogd (PID: 7875, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7876, Parent: 1)

dbus-daemon (PID: 7876, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.m68k.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Aqua.m68k.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x266f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26706:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2671a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2672e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26742:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26756:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2676a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2677e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26792:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2680a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2681e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26832:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26846:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2685a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2686e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26882:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6233.1.00007fe64c001000.00007fe64c02b000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6233.1.00007fe64c001000.00007fe64c02b000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x266f2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26706:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2671a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2672e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26742:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26756:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2676a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2677e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26792:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x267f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2680a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2681e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26832:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26846:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2685a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2686e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x26882:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Aqua.m68k.elf PID: 6233	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Aqua.m68k.elf PID: 6233	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x4192:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x41a6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x41ba:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x41ce:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x41e2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x41f6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x420a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x421e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4232:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4246:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x425a:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x426e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4282:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4296:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42aa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42be:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42d2:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42e6:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x42fa:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x430e:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x4322:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Aqua.m68k.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: Aqua.m68k.elf

ReversingLabs: Detection: 39%

Source: /usr/bin/pkill (PID: 6527)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6636)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6863)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 7030)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7187)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7220)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7369)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7402)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7554)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7555)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7593)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7697)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7785)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: Aqua.m68k.elf

String: EOF/proc//proc/%s/cmdlinewgetcurlftpechokillbash[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: server.eye-network.ru. [malformed]

Source: global traffic

TCP traffic: 192.168.2.23:50016 -> 89.190.156.145:7733

Source: global traffic

HTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue

Source: /usr/sbin/rsyslogd (PID: 6414)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6498)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6535)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6604)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6635)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6710)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6716)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6786)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6857)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6864)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6878)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6944)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7010)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7028)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7033)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7112)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7183)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7195)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7227)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7293)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7365)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7374)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7474)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7549)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7558)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7600)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7668)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7701)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7769)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7779)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7797)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7863)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7875)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 6542)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6723)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6884)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6947)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7049)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7111)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7230)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7292)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7410)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7475)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7604)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7709)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7803)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: server.eye-network.ru
Source: global traffic	DNS traffic detected: DNS query: server.eye-network.ru. [malformed]
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Source: syslog.698.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53120
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.m68k.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6233.1.00007fe64c001000.00007fe64c02b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Aqua.m68k.elf PID: 6233, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6241, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6207, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6210, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6411, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6412, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6413, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6414, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6498, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6054, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6249, result: no such process	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6431, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6528, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6534, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6535, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6542, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6602, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6603, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6604, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6606, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6632, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6633, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6635, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6637, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6710, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6646, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6707, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6714, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6715, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6716, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6723, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6726, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6783, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6784, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6786, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6848, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6857, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6859, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6860, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6864, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6865, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6866, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6785, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6789, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6875, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6878, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6882, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6883, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6884, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6887, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6944, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6945, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6946, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7010, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7013, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7021, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7026, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7028, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7031, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7033, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6953, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7042, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7045, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7047, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7048, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7049, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7052, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7109, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7110, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7112, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7172, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7173, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7174, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7182, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7183, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7186, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7190, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7191, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7195, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7111, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7115, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7223, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7224, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7226, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7227, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7230, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7233, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7290, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7291, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7293, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7353, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7354, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7355, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7364, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7365, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7368, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7370, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7374, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7292, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7296, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7403, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7406, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7408, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7409, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7410, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7413, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7472, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7473, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7474, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7536, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7540, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7541, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7548, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7549, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7552, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7553, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7555, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7556, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7558, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7475, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7478, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7596, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7599, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7600, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7664, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7665, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7668, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7673, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7674, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7604, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7607, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7700, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7701, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7705, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7706, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7769, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7770, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7771, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7775, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7779, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7781, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7782, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7709, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7712, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7794, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7797, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7801, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7802, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7863, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7864, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7865, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7875, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7876, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7803, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7900, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7903, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7907, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7910, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7967, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7972, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7976, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8059, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8063, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8067, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8127, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8177, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8178, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6241, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6207, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6210, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6411, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6412, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6413, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6414, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6498, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6054, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6249, result: no such process	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6431, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6528, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6534, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6535, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6542, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6602, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6603, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6604, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6606, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6632, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6633, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6635, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6637, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6710, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6646, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6707, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6714, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6715, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6716, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6723, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6726, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6783, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6784, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6786, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6848, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6857, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6859, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6860, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6864, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6865, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6866, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6785, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6789, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6875, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6878, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6882, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6883, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6884, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6887, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6944, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6945, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6946, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7010, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7013, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7021, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7026, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7028, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7031, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7033, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 6953, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7042, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7045, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7047, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7048, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7049, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7052, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7109, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7110, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7112, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7172, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7173, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7174, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7182, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7183, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7186, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7190, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7191, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7195, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7111, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7115, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7223, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7224, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7226, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7227, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7230, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7233, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7290, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7291, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7293, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7353, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7354, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7355, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7364, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7365, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7368, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7370, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7374, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7292, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7296, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7403, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7406, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7408, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7409, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7410, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7413, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7472, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7473, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7474, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7536, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7540, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7541, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7548, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7549, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7552, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7553, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7555, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7556, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7558, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7475, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7478, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7596, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7599, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7600, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7664, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7665, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7668, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7673, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7674, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7604, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7607, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7700, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7701, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7705, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7706, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7769, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7770, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7771, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7775, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7779, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7781, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7782, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7709, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7712, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7794, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7797, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7801, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7802, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7863, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7864, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7865, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7875, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7876, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7803, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7900, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7903, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7907, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7910, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7967, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7972, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 7976, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8059, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8063, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8067, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8127, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8177, result: successful	Jump to behavior
Source: /tmp/Aqua.m68k.elf (PID: 6238)	SIGKILL sent: pid: 8178, result: successful	Jump to behavior

Source: Aqua.m68k.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6233.1.00007fe64c001000.00007fe64c02b000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Aqua.m68k.elf PID: 6233, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal88.spre.troj.evad.linELF@0/221@134/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6411)	File: /proc/6411/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6419)	File: /proc/6419/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6493)	File: /proc/6493/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6534)	File: /proc/6534/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6603)	File: /proc/6603/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6633)	File: /proc/6633/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6638)	File: /proc/6638/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6715)	File: /proc/6715/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6784)	File: /proc/6784/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6847)	File: /proc/6847/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6860)	File: /proc/6860/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6866)	File: /proc/6866/mounts
Source: /usr/bin/dbus-daemon (PID: 6883)	File: /proc/6883/mounts
Source: /usr/bin/dbus-daemon (PID: 6945)	File: /proc/6945/mounts
Source: /usr/bin/dbus-daemon (PID: 7021)	File: /proc/7021/mounts
Source: /usr/bin/dbus-daemon (PID: 7031)	File: /proc/7031/mounts
Source: /usr/bin/dbus-daemon (PID: 7109)	File: /proc/7109/mounts
Source: /usr/bin/dbus-daemon (PID: 7172)	File: /proc/7172/mounts
Source: /usr/bin/dbus-daemon (PID: 7182)	File: /proc/7182/mounts
Source: /usr/bin/dbus-daemon (PID: 7191)	File: /proc/7191/mounts
Source: /usr/bin/dbus-daemon (PID: 7226)	File: /proc/7226/mounts
Source: /usr/bin/dbus-daemon (PID: 7290)	File: /proc/7290/mounts
Source: /usr/bin/dbus-daemon (PID: 7353)	File: /proc/7353/mounts
Source: /usr/bin/dbus-daemon (PID: 7364)	File: /proc/7364/mounts
Source: /usr/bin/dbus-daemon (PID: 7370)	File: /proc/7370/mounts
Source: /usr/bin/dbus-daemon (PID: 7408)	File: /proc/7408/mounts
Source: /usr/bin/dbus-daemon (PID: 7472)	File: /proc/7472/mounts
Source: /usr/bin/dbus-daemon (PID: 7536)	File: /proc/7536/mounts
Source: /usr/bin/dbus-daemon (PID: 7548)	File: /proc/7548/mounts
Source: /usr/bin/dbus-daemon (PID: 7552)	File: /proc/7552/mounts
Source: /usr/bin/dbus-daemon (PID: 7556)	File: /proc/7556/mounts
Source: /usr/bin/dbus-daemon (PID: 7665)	File: /proc/7665/mounts
Source: /usr/bin/dbus-daemon (PID: 7674)	File: /proc/7674/mounts
Source: /usr/bin/dbus-daemon (PID: 7706)	File: /proc/7706/mounts
Source: /usr/bin/dbus-daemon (PID: 7771)	File: /proc/7771/mounts
Source: /usr/bin/dbus-daemon (PID: 7782)	File: /proc/7782/mounts
Source: /usr/bin/dbus-daemon (PID: 7802)	File: /proc/7802/mounts
Source: /usr/bin/dbus-daemon (PID: 7864)	File: /proc/7864/mounts
Source: /usr/bin/dbus-daemon (PID: 7876)	File: /proc/7876/mounts

Source: /usr/libexec/gsd-rfkill (PID: 6241)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 6241)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6246)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6431)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6431)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6431)	File: /run/systemd/seats/.#seat0saT3ru	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 6492)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6545)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6545)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6545)	File: /run/systemd/seats/.#seat0Jbx0J7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79067FLD45B	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79068NkKwTE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79069irMOIB	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79070Gr7PoD	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79071uWo00C	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79072S4BfTE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79079xpucvC	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79080KMdYPE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79081dt1H9D	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79094Y387aE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79095qbFCTB	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79193zygqzD	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	File: /run/systemd/journal/streams/.#9:79266vnJLiE	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6646)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6646)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6646)	File: /run/systemd/seats/.#seat0ytAZ8J	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6726)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6726)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81038p1OZId	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81039SkLFvf	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:810406IWcKg	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81041kmpeSh	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81042nynJHh	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:8104317uCmh	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81044mDAqae	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81045Z0O38g	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81046dgQGze	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81053Ixl92e	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81059g1KmOd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:810689YHyyd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81238xkd2Od	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	File: /run/systemd/journal/streams/.#9:81311V7hXRg	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6789)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6789)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6789)	File: /run/systemd/seats/.#seat0B0rQcz	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6887)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6887)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6887)	File: /run/systemd/seats/.#seat0eiwNzX
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:843040cXX5t
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84306hLdUPu
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84307asZL7v
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84308TXtmow
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84309OmXDnx
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84310imTJcu
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:843113DkgMw
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84312CCYEtw
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84313pgteEu
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:84328Fi18ox
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:83223gCguww
Source: /lib/systemd/systemd-journald (PID: 6947)	File: /run/systemd/journal/streams/.#9:83382NDh6nu
Source: /lib/systemd/systemd-logind (PID: 6953)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6953)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6953)	File: /run/systemd/seats/.#seat07zbm6X
Source: /lib/systemd/systemd-logind (PID: 7052)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7052)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85498LstTPV
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85499gf9oxV
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85500TAJcVT
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85501c9NaQV
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:855027A3n7R
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85503RWTtCR
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85504QZfiFR
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85505SOd9KR
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85520Wag78S
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85521M2MdZR
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85528eklDtU
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:85537BwlpiS
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:861209aM4xV
Source: /lib/systemd/systemd-journald (PID: 7111)	File: /run/systemd/journal/streams/.#9:86136Wot6tU
Source: /lib/systemd/systemd-logind (PID: 7115)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7115)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7115)	File: /run/systemd/seats/.#seat08H6Sfb
Source: /lib/systemd/systemd-logind (PID: 7233)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7233)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:87011MoHxkC
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:87013hFUR1B
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:87014Z1cHdB
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:87015Aytm4B
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:870165JeRSz
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:87025lFIsqB
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:87027jWzkFC
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:870285QoUQA
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:87029YA42Hz
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:88066JBeWgy
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:88068hpucjC
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:88156mIsx7z
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:88193V5niXz
Source: /lib/systemd/systemd-journald (PID: 7292)	File: /run/systemd/journal/streams/.#9:88210LGLHmz
Source: /lib/systemd/systemd-logind (PID: 7296)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7296)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7296)	File: /run/systemd/seats/.#seat0YiLCGU
Source: /lib/systemd/systemd-logind (PID: 7413)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7413)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7413)	File: /run/systemd/seats/.#seat0FiyYKH
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89846UKY0po
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:898478k4uRo
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89848SEKnwr
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89849smodtr
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89850XS9pFr
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89859bcTy0p
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89860b2RpVo
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89861IlYx4q
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89862LqIRBq
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89869EsGcKp
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89870AIdUZp
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89871jPx0fs
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89886wGehnq
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89895WKmhDo
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:898967mblbp
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:89916m8cnTq
Source: /lib/systemd/systemd-journald (PID: 7475)	File: /run/systemd/journal/streams/.#9:90389FdGXzp
Source: /lib/systemd/systemd-logind (PID: 7478)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7478)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7478)	File: /run/systemd/seats/.#seat0C9328B
Source: /usr/lib/policykit-1/polkitd (PID: 7579)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:90942L3oiFc
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:90943S1vOH9
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:90944wWHn0a
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:90945UC1X7a
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:90946aQ6MLb
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:909647JTDQb
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:9106542rQta
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:911193FJLT8
Source: /lib/systemd/systemd-journald (PID: 7604)	File: /run/systemd/journal/streams/.#9:92220OBGXnc
Source: /lib/systemd/systemd-logind (PID: 7607)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7607)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7607)	File: /run/systemd/seats/.#seat0mLcXxq
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:93349BCKk28
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:93350rF2CA5
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:93356Xs8ZL5
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:93357qY3C35
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:933584SU3G8
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:93372UwWyP6
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:93378vXw6Q8
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:92765x4VSJ5
Source: /lib/systemd/systemd-journald (PID: 7709)	File: /run/systemd/journal/streams/.#9:92766sOYiB7
Source: /lib/systemd/systemd-logind (PID: 7712)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7712)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7712)	File: /run/systemd/seats/.#seat0fWJFQj
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94264g5maEd
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94265bfugYc
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94271qeT7Jf
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94272TRHT5e
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94273emwbve
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94285O3Vdxf
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94286VDtrKe
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:95370EWvIvc
Source: /lib/systemd/systemd-journald (PID: 7803)	File: /run/systemd/journal/streams/.#9:94367uKka3d
Source: /lib/systemd/systemd-logind (PID: 7806)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7806)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7806)	File: /run/systemd/seats/.#seat0l4vImr

Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/11/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/11/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/12/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/12/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/13/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/13/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/14/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/14/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/15/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/1/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/2/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/2/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/3/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/3/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/4/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/4/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/6/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/6/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/9/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/9/cmdline
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/10/status
Source: /usr/bin/pkill (PID: 7369)	File opened: /proc/10/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/6236/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/6236/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/3088/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/3088/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/230/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/230/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/110/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/110/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/231/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/231/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/111/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/111/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/232/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/232/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/112/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/112/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/233/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/233/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/113/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/113/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/234/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/234/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/1335/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/1335/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/114/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/114/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/235/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/235/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/1334/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/1334/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/2302/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/2302/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/115/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/115/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/236/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/236/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/116/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/116/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/237/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/237/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/117/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/117/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/118/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/118/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/910/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/910/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/119/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/119/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/10/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/10/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/11/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/11/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/12/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/12/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/6240/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/6240/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/13/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/13/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/14/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/14/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/15/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/15/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/16/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/16/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/17/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/17/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/18/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/18/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/120/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/120/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/121/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/121/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/1/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/122/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/122/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/243/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/243/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/123/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/123/cmdline
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/2/status
Source: /usr/bin/pkill (PID: 7402)	File opened: /proc/2/cmdline

Source: /usr/bin/gpu-manager (PID: 6504)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6506)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6508)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6515)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6517)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6519)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6522)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6524)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6610)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6613)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6615)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6618)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6621)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6626)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6628)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6630)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6852)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6854)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6858)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7015)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7020)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7023)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7025)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7178)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7180)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7185)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7201)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7204)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7207)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7209)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7211)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7213)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7215)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7217)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7359)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7361)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7366)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7383)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7386)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7389)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7391)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7393)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7395)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7397)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7399)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7542)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7544)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7547)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7564)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7566)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7568)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7573)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7581)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7586)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7588)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7590)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7671)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7675)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7680)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7683)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7685)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7687)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7690)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7693)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7776)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7780)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7873)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7877)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7883)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7885)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 6505)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6507)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6511)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6516)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6518)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6520)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6523)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6525)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6611)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6614)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6616)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6619)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6622)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6627)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6629)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6631)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6853)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6856)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6861)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 7016)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7022)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7024)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7027)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7179)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7181)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7202)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7205)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7208)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7210)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7212)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7214)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7216)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7218)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7360)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7362)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7384)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7387)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7390)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7392)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7394)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7396)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7398)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7400)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7543)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7545)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7550)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7565)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7567)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7571)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7576)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7582)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7587)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7589)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7591)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7672)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7679)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7681)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7684)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7686)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7688)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7691)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7695)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7777)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7783)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7874)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7879)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7884)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

Source: /usr/share/gdm/generate-config (PID: 6527)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6636)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6863)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 7030)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7187)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7220)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7369)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7402)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7554)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7593)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7697)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7785)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /usr/bin/dash (PID: 6216)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.M4faKxWHkf /tmp/tmp.4plLPsybNX /tmp/tmp.kHIYOeL3dX			Jump to behavior
Source: /usr/bin/dash (PID: 6225)	Rm executable: /usr/bin/rm -> rm -f /tmp/tmp.M4faKxWHkf /tmp/tmp.4plLPsybNX /tmp/tmp.kHIYOeL3dX			Jump to behavior

Source: /lib/systemd/systemd-journald (PID: 6542)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6723)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6884)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6947)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7049)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7111)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7230)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7292)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7410)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7475)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7604)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7709)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7803)	Reads from proc file: /proc/meminfo

Source: /usr/sbin/rsyslogd (PID: 6414)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6414)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6498)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6498)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6502)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6535)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6604)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6635)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6635)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6710)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6716)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6786)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6864)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6864)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6878)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6944)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7010)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7033)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7033)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7112)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7183)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7195)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7195)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7200)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7293)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7374)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7374)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7381)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7474)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7558)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7558)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7563)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7600)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 7667)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7668)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7668)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7701)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7769)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7779)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7779)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7797)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7863)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 7871)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7875)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7875)	Log file created: /var/log/auth.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.m68k.elf (PID: 6236)

File: /tmp/Aqua.m68k.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6502)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6606)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6848)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7013)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7173)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7200)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7354)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7381)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7540)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7563)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7667)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7775)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7871)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 6527)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6636)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6863)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 7030)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7187)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7220)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7369)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7402)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7554)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7555)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7593)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7697)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7785)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/Aqua.m68k.elf (PID: 6233)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6246)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6414)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6498)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6502)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6535)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6542)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6604)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6605)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6606)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6635)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6710)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6716)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6723)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6785)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6786)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6857)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6864)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6878)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6884)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6944)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6947)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7010)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7028)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7033)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7049)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7111)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7112)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7183)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7195)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7200)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7227)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7230)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7292)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7293)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7365)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7374)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7381)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7409)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7410)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7474)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7475)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7549)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7555)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7558)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7563)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7600)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7604)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7667)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7668)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7701)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7709)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7769)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7779)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7797)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7803)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7863)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7871)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7875)	Queries kernel information via 'uname':

Source: Aqua.m68k.elf, 6233.1.00007ffc84e95000.00007ffc84eb6000.rw-.sdmp	Binary or memory string: `Qx86_64/usr/bin/qemu-m68k/tmp/Aqua.m68k.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Aqua.m68k.elf
Source: Aqua.m68k.elf, 6233.1.00007ffc84e95000.00007ffc84eb6000.rw-.sdmp	Binary or memory string: /qemu-open.XXXXX
Source: syslog.49.dr	Binary or memory string: Dec 6 04:28:55 galassia kernel: [ 417.185999] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel drm parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi vmxnet3 scsi_transport_spi mptscsih libahci mptbase
Source: Aqua.m68k.elf, 6233.1.00007ffc84e95000.00007ffc84eb6000.rw-.sdmp	Binary or memory string: RV/tmp/qemu-open.BprSbx\4
Source: Aqua.m68k.elf, 6233.1.00005652c8932000.00005652c89b7000.rw-.sdmp	Binary or memory string: RV!/etc/qemu-binfmt/m68k
Source: syslog.49.dr	Binary or memory string: Dec 6 04:28:55 galassia kernel: [ 417.186032] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
Source: Aqua.m68k.elf, 6233.1.00007ffc84e95000.00007ffc84eb6000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: Aqua.m68k.elf, 6233.1.00005652c8932000.00005652c89b7000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k
Source: Aqua.m68k.elf, 6233.1.00007ffc84e95000.00007ffc84eb6000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.BprSbx

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: Aqua.m68k.elf, type: SAMPLE
Source: Yara match	File source: 6233.1.00007fe64c001000.00007fe64c02b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.m68k.elf PID: 6233, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: Aqua.m68k.elf, type: SAMPLE
Source: Yara match	File source: 6233.1.00007fe64c001000.00007fe64c02b000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.m68k.elf PID: 6233, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	2 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.m68k.elf	39%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.m68k.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
daisy.ubuntu.com	162.213.35.24	true	false	high
server.eye-network.ru	unknown	unknown	true	unknown
server.eye-network.ru. [malformed]	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.698.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.213.35.25	unknown	United States	41231	CANONICAL-ASGB	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.213.35.25	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	iwir64.elf	Get hash	malicious	Mirai	Browse
	vsbeps.elf	Get hash	malicious	Mirai	Browse
	qkehusl.elf	Get hash	malicious	Mirai	Browse
	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	jwwofba5.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
	wriww68k.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	iwir64.elf	Get hash	malicious	Mirai	Browse
	qkehusl.elf	Get hash	malicious	Mirai	Browse
	vqsjh4.elf	Get hash	malicious	Mirai	Browse
	wnbw86.elf	Get hash	malicious	Mirai	Browse
	vsbeps.elf	Get hash	malicious	Mirai	Browse
	wheiuwa4.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
	vkjqpc.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	i.elf	Get hash	malicious	Mirai	Browse
	main_arm6.elf	Get hash	malicious	Mirai	Browse
	tftp.elf	Get hash	malicious	Unknown	Browse
	memfd.elf	Get hash	malicious	Unknown	Browse
	tftp.elf	Get hash	malicious	Unknown	Browse
	x86.elf	Get hash	malicious	Mirai, Okiru	Browse
	arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse
	arm6.elf	Get hash	malicious	Mirai, Okiru	Browse
	x86.elf	Get hash	malicious	Unknown	Browse
	ppc.elf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	main_x86.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	debug.dbg.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	arm6.nn-20241205-0609.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	bin.sh.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	hidakibest.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24
	hidakibest.arm6.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	dwhdbg.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	iwir64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	qkehusl.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vqsjh4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wnbw86.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vsbeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wheiuwa4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	dvwkja7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vkjqpc.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
CANONICAL-ASGB	i.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_arm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	memfd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
INIT7CH	i.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_arm6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	tftp.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	memfd.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	tftp.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	ppc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
CANONICAL-ASGB	i.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_arm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	memfd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	ppc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/systemd/journal/streams/.#9:79067FLD45B

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.514443971852035
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8BUXXVIhHmEE7lqSZji4s:qgFq6g10+f+M8BUHVAGtLjs
MD5:	D90558F275B700303EFEAA9E685D8A7D
SHA1:	2E64263890C4E784CBE94AB13E140495205AEDB4
SHA-256:	03556300AF6D1D91543E5927679A4496D28B2E429C893160576393D3C15A1C1A
SHA-512:	4910668E743A98AF545E148CCD03006524CBC330D10619EB0D2E7506C7BE228F2C9D3CFCDCBA2591D8E820BBBFC22A13B069A7EA3675A5BEC68D8BC741A55F83
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d123506882a45c2b2fe2aa68873e3cd.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:79068NkKwTE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.445044456491511
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MywYZYT2jZcHcljX+:qgFq6g10+f+MnY9mAu
MD5:	103721B98FDD838E3AF2FCEAD61BC5A1
SHA1:	9C64A61E70763C7A09D6CB241B933EC2E644383C
SHA-256:	9E9B6A0B7970C177C0711C9E0AF55FA671D6917BE9E4309CDEF460E9A296722E
SHA-512:	5D6099BBD32250F1A6A856F2EAEFB76853C6349DAA7D75FF1AEE4B5910C9FC2E0C76E900C39A9A9BC7023E24E9906B28F85C4FA82F8660EE487898F9A62B7072
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=86b043114d6a48d6a7b1efaf4c3d3aff.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79069irMOIB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.413002787158329
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmudoSNEdWScGD0qjst:SbFuFyLVIg1BG+f+MudoDV3VjdCLKzK
MD5:	E141BFD2BFF5062AD2F505140337FF69
SHA1:	EA13A5E730DAC95DCC7CB72EBC55CB22149C03D3
SHA-256:	DFC105C40B9340E9EBFE64EC59B08A351C02E16EDDC9226B6331CC3BECA5DC59
SHA-512:	FD287835482D7B586FE2965723FD8D954BD4DE200B4E918FFAB5B99AFA94FABC3F47B17111D7746056442CB72F3334476FB5C580FE8B03E1854E888DE6E3B03D
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d4632dd8f51242728a1a5f79c7c8647d.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79070Gr7PoD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417474379842228
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6xVcfVbhg2js1Had9:SbFuFyLVIg1BG+f+M6x25ZjosQu
MD5:	721F4D22A1E0DE37E8399D52569158C8
SHA1:	CA322EB12B9B0D3D3EDB4774FADA8BFC99C48181
SHA-256:	D4F9C8A7114D538DB8A537C624BA5E2B3C8E546D60C9D05DBCFEDE998EE9998B
SHA-512:	55E702DA081BEBA96865CB9414E0C9734F08669E8A7E629E98A454025A007EDE4E3DFEC7A24D9AB9D9F848CE3B8D3E44CB599424E23B318317E79816D97CBC94
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0868b90a09024959ac16ecafbb76ce7f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79071uWo00C

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.399792150875335
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuFX5QSGxWE0jsmNzi:SbFuFyLVIg1BG+f+MuFX5HbE0jdCLKzK
MD5:	12F9C5D4EF60C3BE5D851D9F6F058466
SHA1:	B91E3F060B5FE8097690D882A9EAE2215D492584
SHA-256:	5746A3D235013F011D567971AB1344ADA151A9A39C368CAB0BC6F1AFDF420DE9
SHA-512:	AA412FF1DA1CEF0E2A4A587BB3280E283D1B3C881F9B6C28D118A23C3CBD495DFEDF5B48F06D0CFC3FF83F313DDF3004786EF180E055EED26085588FB102B76D
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d9efb9c0657c4107a23f1df63102dd18.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79072S4BfTE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.437293749082653
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6Y4zCFFRWEw02rqjosQu:qgFq6g10+f+MUCBB2EQu
MD5:	9E388E3BDC621252BA8561BC9847FB13
SHA1:	9430D23721586E16DCCC0584857CAA19EC81BBEF
SHA-256:	62FCF7D1E8E96B69CD26CC86F63B8F2C3E778ED79AAF1A8B52C2F5DB65CBDED6
SHA-512:	966434D2DCF97EA31B619354E1AD49F1295A9D8BEC5BA9AB16D034D4C419509CE9676E59381F75A6F8505131FFED8A798236A9C1178D316ADCDB2E73E0571EA3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0f99c25874564e198bdd4321dbbd80b5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79079xpucvC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.402763756206341
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MouETAAIrXKv8jNALyAZD:qgFq6g1af+Mouv0+IZD
MD5:	9072B15C5E6FC92FBE594DBFB8B3DC0F
SHA1:	C6E48BE3A45C083BAC21EED0577DB9E60987A5C9
SHA-256:	46E83276A5E84860DFE17EF8460635A1655FC9A94FF6420C1982BECB9BEC8FA1
SHA-512:	BA217E70B7431E0B4227243A5C8134E9C2883DC37EABF7FF978B474A256559BDF29E6D84D16C84A2AE06A678234E85A89C5F9D8DD0A177D3A4C5930DE3073867
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b1fd40da6ee14de5abd13ac94e75b26f.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79080KMdYPE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.395447573435237
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MwBWVQF6ZxVv8jdCLKzK:qgFq6g10+f+MwBjQZxFuCLAK
MD5:	E5C2A081C0D4B0B6B62835C031FB2063
SHA1:	71E6629D1AF0877B2579991CEE8A886C4977146D
SHA-256:	F74CD750FC139CEB1B9655316FD8FDF32945D0F47FB63F9F6FEB41560B73E450
SHA-512:	F1B582C776A33AEEED7A9056719A6361D868D7DFA8EFD1FC6755E5C5597687E4EE7BE4329BE58552E7D90986B5D1503AE514C99E70748FF71437FA694A3D22EA
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=acfd228650584ffdbfce30bdbd99a452.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79081dt1H9D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422818085206569
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/51xWxWmWy33lsjsc:SbFuFyLVIg1BG+f+MB4WhTjosQu
MD5:	CDA128C496E7E618842B85F1B3DED09D
SHA1:	50BC6C30611A60E5680EFFB0F7895D36A396CCAB
SHA-256:	F2AC3975539BB0EE4ABF7EDD9D4825D16F2E3D46BD9A02795351E5D285190782
SHA-512:	644F9778FC864F6452F446BCE0E421674C840997F52148952633AC660D994DBA2FD4E64B605076846922C95073BC57E19064A0C6AB31DD32E2FD1F627513DEA9
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5e9e5c547b8947b98b21cdd539f0899b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79094Y387aE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.439588277054973
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mur2TuMqjZcHcljX+:qgFq6g10+f+ML6MkmAu
MD5:	6D27D3004291BBC6E805D123824A07CE
SHA1:	E382DAA45313F4D22ED65EC950FF0B2531967C09
SHA-256:	47543790C6E47087782FA32DE78BC0DE1F9C76E3CFEE9C06DF525C34560640F7
SHA-512:	B3805B077ADDB65FE7BFE747ECE088C0B9712B6C2F1115D9D5631200B1A98E459C8E047332F3D16D15ACEBBED976B885BA2CCE3A4E8FF13204893FF48C9BCEB6
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3e9345c1bd541a0a21633c334253639.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79095qbFCTB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.425781461010853
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8UcBDXlmTjNdQIeXD:qgFq6g1af+M87LK2D
MD5:	A06A1918509090769871EDF9AA8C1656
SHA1:	9C5E9A8A7AD195E9CACA87231CA27CF1C1FC1FF9
SHA-256:	42D9E030621CFB029074F7671EF2DAA9BEFFD5178B45C5A5350F6AC4795BB7AE
SHA-512:	60B9E4E65563E2B8F9BB9187953768F579A55416EFD411B2ABF3C590AC5234ED5F808BFD96415301EC025D28DECDC29C349E3452A1C7CA10AADDB2FFBA252A3E
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6ceae4c609df4aa293fff38667de0e37.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79193zygqzD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.410645936217594
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmukBGX3grqjsmNz0L7:SbFuFyLVIg1BG+f+MukwX3uqjdCLKzK
MD5:	9506F6878DEBE7E9F2F342212607751B
SHA1:	833AAEF4D8CCA30082A4DB6EB1755254B632BD24
SHA-256:	3F86F1B35BC189A14DB032B84F59703EF685F286650F3D9286E435132D423E0A
SHA-512:	2BCE074F0128B61B173EC22CA497F24EB1DF51FA422964721DB114175F936EE4A81EC48BD93C08D4484A56D1750CD292B1DAC096753C6F26CB382E742B78F673
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d760f0b61a934d68b08c2f506715f775.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79266vnJLiE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.404290534657683
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsHkQ8sZ0cN2josQu:qgFq6g10+f+MsEcZ0tQu
MD5:	9CAE8D6F284A8E75CDD623766BF90AE6
SHA1:	626EDB1F1A3E2A57947222C617A26B1A0BBAD418
SHA-256:	0A11AE776A4D19914102E14BC37A5592884BC75985A7A9E41EF045CF72A3EB91
SHA-512:	CA60F59A4ED2ECC1122A9FF103107F877BFE8F73FC67F09E128297A7F6AAB228D9938631BADADC7BB9A9B304F5C4712ED311BBB6B864DF0A6E7D5DADD7975FD8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fbedccbc6947434e8a5d048d4b11ef81.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81038p1OZId

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.503033690422519
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsmMA2EEfMqjsicWmt:SbFuFyLVIg1BG+f+MsmMXfZjZcHcljX+
MD5:	F4A8126AEC70FB1FD1C1A80D04A939E5
SHA1:	58A3A087EC924F0B2264D1967A4E125CF3D817AE
SHA-256:	B8BCC7994AA415E99DF0DE8B5CC4B63CC9EA803EA7A3AE1733C3CF5B7E68A87E
SHA-512:	E08CA81DAB314A4C289D9CD42F695A13513C7BE77AA7C56DB323E426147DB8B8DA660855BDCDD6566DDEA59478DDA445E05B90B7936ED9C3E66F9C6994410B91
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f70f54354031406fb9432b30b13ac958.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:81039SkLFvf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3376782829015665
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmukV5Dr8AtCuqjsmNm:SbFuFyLVIg1BG+f+MukV5DAbjdCLKzK
MD5:	AE89D401012BD1439DAF9D1001C24958
SHA1:	7877D4573701321A003C63CCCBD8FF7745F465F6
SHA-256:	24CCB70BD54A69252290BF4A32F0BF8E84A1DB00E5AF54A84091F9B520F5D7CB
SHA-512:	CC4CD631D6DA505DE23281DD5E75E0A7B0E60B29A52018251BE849066EC2BA1E902516F1F090620B4BBA17B6289708AB82975C65CDA3B89359ACEFBB2B7BD7D2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dba07e4408da4ebda0e28c7292d22786.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:810406IWcKg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.395202548874812
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7NyRykAeGNlsjs1Ha:SbFuFyLVIg1BG+f+M8RVAZN2josQu
MD5:	5F4DBF281B0F479976808ADE3A6A3131
SHA1:	932EC5533F0A4C239CD06A3F4FC7D48943E2B7E1
SHA-256:	3BCB40C433A6964B97563C34DD6FF092C5C5E4D395B9342E03D57F4BE6A482AA
SHA-512:	6E998119B69DD290351FCA5F89CFC30B195C7679463782FBD9CE5BE79004A5E8B439FA82F6E84D2B10E550D8E828A999B70A297091A3804BDDA6784D3A7B29DA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1361ffde5e9a4fb3900084d068cd904c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81041kmpeSh

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.513327610906567
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M7T9CPGBt0jZcHcljX+:qgFq6g10+f+MdCPWtimAu
MD5:	E44AB88C38DF79952A8CC9ACC29B5685
SHA1:	143E59190A80415F4EC42081645621E8D2C48294
SHA-256:	ACC8F65BDFDE2AB9792EBBB04E0C149435409BB840C83F42DAFE21C8AFEE61C1
SHA-512:	C6BC3A89F1B7D3BFE665B2540A42C196EFD87280C95B43569EC0890386AFD9D2EA3DBF1672C02A69603491381CE4D14EABE1424CDAFB9101B211A4F5A62C2B82
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=af4257d1399f49cc9d622b1284f6cd0b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:81042nynJHh

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.395447573435237
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr5tiQTvQ3vRqjsmNm:SbFuFyLVIg1BG+f+Mmx0jdCLKzK
MD5:	DA24AABF597E3801CC42C8DFB2ECBE17
SHA1:	CABD971CC91A30E6CE5DDC0FD6DB78CF9B94A78E
SHA-256:	CC87CE0C87C03FF1ADF7E1BFEA52916A99034B95359983C8929D4297E859F380
SHA-512:	03847F9866DC4B59887EA867606E620339A96ECC5B2690CFAB43E667AF136D24F46449CECC663ABA6F99064DC1F40DB194B70B15DEF9170AB243EEED8B149BC0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a067418f10e142c5b456b5360007958f.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:8104317uCmh

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.445383469086071
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4AvERTDkwcOhh+sjx:SbFuFyLVIg1BG+f+M4fgHgZjosQu
MD5:	1F6F8EFA7C23E6A32EF40422B203DA4F
SHA1:	72BA43BCCA1707524C5ADD3962DAF71DE3E139C6
SHA-256:	9D05E7567A05C249627685A3FBFBF1F89D8329732FDB12689AA70D10102F52D1
SHA-512:	D76EBAD4A793793EA47133329E378126EAA676C255AD176AEB84719BD41694711729DE4E9FCF33A6DC9B024C4D029663D8C99114A456A2C8BBB497A07A9958D2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2e8b03f46fa44e5ea1695976a5d2f84c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81044mDAqae

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.317440061468012
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MNTFNHEmG8jdCLKzK:qgFq6g10+f+MN7kmzCLAK
MD5:	9C6A64C39F1779F2DA0D25BC569C2D71
SHA1:	FF37E26C3B2804A7ACA697809D9E382D6D570C77
SHA-256:	945BF081CBE5474735096950B335B34856384A0B40F75FCEBD5BE1DBFE347C02
SHA-512:	BCCC57CB3194777E88AF09CF3FBE6FF57BBF5117B0F792048DE3C8C5A488EFBC03A3753E4DD573C64FCDAF202623764106B370D5CA43FF4BEE5663CFAFC0CB3F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e0dd6015830641cea10a74166d149d5a.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81045Z0O38g

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.441052082843369
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsVhVRNPmA2+sjs1Ha:SbFuFyLVIg1BG+f+MsVhVRNPyjosQu
MD5:	C956D70785D342C4240CEC831D6132A0
SHA1:	67E9E5CA777811EB395DED3F348E5435F8E1FE18
SHA-256:	2DFEBD0868DC377C452C88639855EDCA8DD01CB05D2BB9E32161FB00CE1C622B
SHA-512:	0BF08013CC8EC55C9A168A246F980A13435EB8609373D79751793EB8AE691ECE7BC11E9947A7B8E4F8FA49DF751630DC3DB4C20D1D2E5032B5A536DCFFF424B1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f6f999579c834c2da419dc6875da1a00.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81046dgQGze

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.463880265045088
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsBEB3GfFBHWs+N2js2o:SbFuFyLVIg1BAf+MsSB4x02jNALyAZD
MD5:	D58F3FEA50FBF1F56A5486C96134271B
SHA1:	FB4BEAFBA2EE93165B6F9FF0122EA17211573FD8
SHA-256:	1E1F2AB1266BA23C7E99795E13359CDA74DC874F72DC53D149896D19B833354B
SHA-512:	93BE272CF7591D29382960236AB9C07FC8A2CB17B48C62B8AE4B103BE21BA740D63C4F90EBC2017290ED2A9E344E20B9FEA4AF77DD31533488CD838F37ECD788
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f518c8f44c764c4e94db327d3c2d3969.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81053Ixl92e

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.395648746415844
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoDscEC85/jdCLKzK:qgFq6g10+f+MoZEDxCLAK
MD5:	A860D747FBF8AA932E19E79244AEE9E9
SHA1:	D52CF6DCFA1E699FE7034B1D3A4ED0828D478783
SHA-256:	2E7CC571C087C0102F241E58A13787E5D80AD2EF140BC60AFBA29F422169E8EB
SHA-512:	F187091B162899A6B37499BBFDCF170362A1AD6C3F629C36EE5270A4D2B6C7F0BC10EE28369E8A20AC1BAF30B456203C25B28149A46EBBC38503022CC552B585
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bf9c99ac5b9f41339307dad283544d29.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81059g1KmOd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.391060051604608
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+z2vXlMTvQWYTjs16:SbFuFyLVIg1BG+f+M+z+MQW0josQu
MD5:	B845301EC8FEBA5BD26D8B28C97898DA
SHA1:	2A914B06476B33B0CF71B8A73AD1C1430649FFFB
SHA-256:	CC3A0A74743889480CA92A1272A8B0C95BB9D6AAAB0D27C0E153ED3C6B60B876
SHA-512:	72D83E34DA19A43FA289D0E7BAF08B7BC9231F691286173ADFCCE5C0E9CBF7E658404DCF895E7F7F12A1BCB3147336E4B549F67047B3057B17E6BDDD333A8BEA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4aa6b0e60b824bbfad05bc846f2fd7cd.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:810689YHyyd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.448316472869449
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MxXdH3+1uqjNdQIeXD:qgFq6g1af+MrX+2D
MD5:	42180E006FE60BF2E08C1B8AA9BA8079
SHA1:	8EB8480CB458F19F894D83BD77776E858F7CA916
SHA-256:	8B67E9283051C3034AAA4087D7195525682385FA2A3389103FDEE24DAE98EF88
SHA-512:	3490C589B29CEA7CB15D24C504339BE076D995A6F9DE44A6F08762335640091C0CBCD71C756C9A564121F70E1270A02EF6D8E2B9019600C5AA435DEC262DFC50
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=39f7d20e07f145d5a455a7626766caf1.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81238xkd2Od

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3680750084662785
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzIBATotcFA+sjsmNm:SbFuFyLVIg1BG+f+Mgy8jdCLKzK
MD5:	AF9557FC861BEA394EC18740FCEC2598
SHA1:	A0132A99DF4A85ADC381AC81B5016545EF912790
SHA-256:	EB7B9C4D333540070D828A055D58ADE25CA6D357CD19E5D022C5863E7D6DBE0D
SHA-512:	36E5E1C13616C673DE64411D209D29E2ECA0E3FA94FC938B73AE842BF9940144FA6259A11D879FADAAD2B5CBFDB87347E37ABD7F8A88A3AB59C9A22E65BEE52D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9d64cb471de647e0ba53b8b69000819b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81311V7hXRg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4120798314552445
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6GHCcMx9EDGJgU4AJ:SbFuFyLVIg1BG+f+M6jcMS8R+qjosQu
MD5:	6891A214FA5944982609E82D1352AEF5
SHA1:	DBFDB4F94D0ECA1E081E71A1D85BE5CA4F7C6388
SHA-256:	2133EA9F1A809927A95FA286465CF7417310B65079CF2E20C5B52B9AE002FA49
SHA-512:	41CBD35CC3253DE8FDDAC26F26188DBF91C2E347A940390B34B7EE4EFA796E8A569BA9B0DA443238814FD640F3F0AF8812170678F44E3D930163DF9831D709EF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0b25fbae382a44299daf1eafc59e6b1c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83223gCguww

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.350888919184561
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuX86n8cX1cSAjsmNm:SbFuFyLVIg1BG+f+Mus6NmbjdCLKzK
MD5:	980921130E300F2FAA938E8BA5D199E7
SHA1:	961EFBAFD18D8D010E9A890550EF8407007F516F
SHA-256:	EAECB572D758A75F995216723F70BB6BC8EE9B953D1E976196FCA61CAEE3D72A
SHA-512:	A49A40FF7B327E24160B3A6B86618624733824C8783C817C7BB5D37090A59C03DBB7EB94A4328409B9262C9AB653B2099F6A2BBD89EC56EC386D12E66993C2EB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d036103054d9405c927c97139d763306.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83382NDh6nu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.397165698423444
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvBQQLj2GSHEYr9X0d:SbFuFyLVIg1BG+f+MeQLjhSHx0josQu
MD5:	1E721B121445C41D7157F02BA07530C3
SHA1:	CEEF11237F7C7715BD73FB272F684A623697F4F8
SHA-256:	8ACC40DBFB1B74CD9B8708E3EFA767EF073FEDFBDF4CA605679BEEB257827EF9
SHA-512:	60302969609B39C88533E537993C7EA9708A731BEB18A59A02E44A23A5DBC0CB36021D2F34DCB745B8D7A7A8E20961B0F2A60D62325867FC7CB7B5FD7DA4E1B3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ec352e31bd1e45c7bafe04d802d4fc85.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:843040cXX5t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.484588888554474
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsXZ86kxgR5jsicWmt:SbFuFyLVIg1BG+f+MsO6k4jZcHcljX+
MD5:	68D3AD754558EE93C148249F048D71B8
SHA1:	06BC46F50ED4EC30CFBD53DC71ED6DE89BD8B202
SHA-256:	BF9FE2E01A91982944D8C04FA2F1C1415E5D5CF6399E846E4AC30B874BD414A3
SHA-512:	AD104D31D91B741504739CADF45A1AED886FBCE0A69424CC527360258071DDFF668251165A47A21315C086905CDC612340B573EFFCC1D8D85D2BE96B666B1E8C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f35592a0050a4706944ecf615b09ca85.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:84306hLdUPu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.402114986646356
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoX1ERRWUDhejsmNzi:SbFuFyLVIg1BG+f+MoXajejdCLKzK
MD5:	822F550906BE3AD5679059E26A6F71E0
SHA1:	E058C4B25E955A5344ED2AF99F24E07BFF336865
SHA-256:	D5DD09DDC175BA4DE99E9BECD2EFFB16935E300CC97BD41EA6CA6B9189EEFC01
SHA-512:	8DF314544B1CE2823606790290A04084BA7E828ED8603E79C6C553F05BFCAB7A2E77EAEF64F67FEE81738655C7DBD07C77547805586E2394A56147EDDDF39DEB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b9d7224fabb4431faf440687d0883768.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84307asZL7v

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.419967406627906
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu+m7THhUGkeFvFlsd:SbFuFyLVIg1BG+f+Mu+qTijcF2josQu
MD5:	7F88E8E762F77F19DCE141ED3E4BB7F9
SHA1:	539566B7BC1A2DFFEC166B167DCAF23E8A2E6377
SHA-256:	A563DCA7896B87D7E2A5F6E8FAB089A03D9487BA3D0C4EF3930451ED74A901DA
SHA-512:	B5F6E7B519159CD6F99BD33987F2A5B8D2588F4A2FA4AD1C6468629424340445E6E753C98E9F7EEA8FAD78C1106BB0186E1F0BB80BB3A5653E1A9F35138733D3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d4a8bc486b4441c7a4a2095b0813cf42.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84308TXtmow

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.504512908419304
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MPFDUtghTjZcHcljX+:qgFq6g10+f+M9DXmAu
MD5:	230A191624E1635E1E02F19E5EA6E12A
SHA1:	756BF5AFBF5E73C75AD4DD3742DA3F7F4594C286
SHA-256:	C9B3C98BC84951DAB50558FF8B6EF4C541FB884C90E084CB9D1804C510B39B01
SHA-512:	52D2CD807147447CE67F357A82FA9EE50AA4E04310DC0F850FA3C45191872775F6BF6EFC9FED3EA222EACA5CC2F4D40FB6DB6067E10B627C16E0D3D7E2A79E03
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a18ce32937b745ee92a681c18b7d04bf.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:84309OmXDnx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.445677021998159
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpKE8eeWeXjUJxsjsc:SbFuFyLVIg1BG+f+MkE9eWejUkjosQu
MD5:	E8B04EEB00CE9E47002CB184B987E08E
SHA1:	7F72E2F43BA43676B1D41FA0BC952094386E1A8A
SHA-256:	F70AC6BAE424B239B5B85F47E01DBE080377E0722F9BD67F6FA020D849714C7A
SHA-512:	366ADFDF741154E4DC799BDE667376DC253BC183681BE4A8C617706AE22706F5E2613C978747FF3EF7E9E1D419776BD3F3B8635E1CBBE9888B04ADA749F12286
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c6ca4f891b0a48f2a1fa336735750de2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84310imTJcu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390052576120707
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MwTMsO1Ra0jdCLKzK:qgFq6g10+f+MwTnkCLAK
MD5:	EF5575D1827FDBE92029AA5790FFFCC0
SHA1:	3D4465E4C5AC2D171CFC53FC301C034743C4BCD1
SHA-256:	7C6AA8C8BBF9E44D8EF0697616F0016083EDF944F434D7BB8E376821D03280CF
SHA-512:	7D88A719282442737A92F36BE63F479582DF3CF5D1E1A31F25287FF6BC94A81EFAE029845E65F322606A1BBCC313F7D1C2D78F1D8E020FE86ABCAE6D26A654DA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a6512aff6e3d40c39c83bc5069a11676.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:843113DkgMw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.438594340930291
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8rUMRSTFGlsjs2ALAXA:SbFuFyLVIg1BAf+M8rzgzjNALyAZD
MD5:	EF85EBCC252CD133945BFA790AA938BC
SHA1:	F47059E32356F9A5B409D21C84DC1347DF3656F1
SHA-256:	65995FFAC9631A1F1EDFB98BCDCED33DC402918A4CB56F6C73568979A21F169F
SHA-512:	165F6C8407EC11F6E988642F9C9B81600619060CD657C3FB84698CB144CBA0434CD6871452E918A9E44FA471317033BF50EBD4C084FCD6C2C83BF240F932B796
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=67bdfabcc7ba48a9b4223edad61905e1.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:84312CCYEtw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.408308241836277
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+sYdYL6/cvATjs1Ha:SbFuFyLVIg1BG+f+M+rEqc0josQu
MD5:	559475C012D393335C7E9A13F502AD86
SHA1:	58CFA01EECA97CE0C8C340FC95287701C46E445B
SHA-256:	EB296A5923DB59DC91BBFDF6837DAEC4534447CF7B3B0F4BC6D236FA1CCFD74F
SHA-512:	337EAE1A4A6A11AACDD78DC258693BDF428555093116F55EE661BEF14BC6FF199C47A61C0B8B1E50788A16058C311FE9AE6B1F221A85520DB2D9766CC6662F39
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=429c6e65cbb7477481de0e1e8d054009.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84313pgteEu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.399869133716699
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9gImWc0mSlsjsmNzi:SbFuFyLVIg1BG+f+MUYd2jdCLKzK
MD5:	AFEF690B79F1B12AF1668662DBF038D6
SHA1:	61C7D5AD5FA383BD494F524E8F115C3DDAD096DC
SHA-256:	5126F5FCBD00AE9788E90C4FC736D8D38EA90825FE576100821730B971AC4E6B
SHA-512:	0C0D3E5D17519063C2376351FE58F1935D0403CA94A400B1BF6D3F88612DC34ABCB38B546AF7C4464A5F61B6E5C557FD45C5E6D89D63DB0B9075BB4692899062
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=718628dc8bc14c979339e421c1459823.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84328Fi18ox

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.473770546409303
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrNVtST92rfssjs2BbQL:SbFuFyLVIg1BAf+MQEjNdQIeXD
MD5:	FABAD429C8DDBA010F7D1DC4DD788790
SHA1:	1D9C1B4FF9F6B58ECEE2D01678F9B6800FB8693E
SHA-256:	A1351FC296B41F27757B4209C80DB60F45D7F92CAE3AD4A66F0B832099B4CFCA
SHA-512:	06FEDE7A9A8D0FE9B2E274F7574C3E965B0725A2F7D94FFF21FA137EDAA7FBF72FD21855E8E3B2BABE5DEC872D65556FD899E3E8702DF76D869DA09F339737CC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa560130b0ec4456b89b4d8662b87a63.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:85498LstTPV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.450145181225248
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm61YuDcNUqlwsjsicN:SbFuFyLVIg1BG+f+M61nXQjZcHcljX+
MD5:	941BAB6B1BC0816103D2737D6F181907
SHA1:	BA7C2E3A5A9EFA21CA18B3775FDAFB72F744D188
SHA-256:	CF063ABC0CA1DE13A58F93EF8577929AF62D071F7152FF299ECC6C5DFBCAD338
SHA-512:	5721D6734EB8B71E81946C0FB9A7C667E74357597195062E46B6A47B6BF1C62D0D5FBFEC3C78E01237B4F5372EBCD43FDF1CEB9C15902A648244E621CBE6C773
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0225e1d64ee942f79abee57c52aaea63.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:85499gf9oxV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.443308785304087
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmywJeT0/Rbj8js1Ha7:SbFuFyLVIg1BG+f+MyGlRbj8josQu
MD5:	3F77E55C8E6CA379019CA4F22D2A601C
SHA1:	5EBA2720F6CBBFB25E287A1368B27D9F020D57F2
SHA-256:	89160CECE6600F369A9F4171BF1D761700047126C2F4AF95506605A035FE59D8
SHA-512:	A8D5873B6A3120D6BD357CB88417EE7BC9DB9E987BDE3631D836A39050A2855952DA2B7EEF8943BD60AACF45B55F4B6B6C87174F62AF3EE2FE8E1ECCDC83AAA9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8c0f0596765040dcb0ca3be2418f2396.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85500TAJcVT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.358738573322738
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvaNVHzOGWdyhgrqje:SbFuFyLVIg1BG+f+MsHEHqjdCLKzK
MD5:	8194A125FA27CAFAF839CA02ABE4C0B0
SHA1:	1315B334BCE9F40557B8725B9200ED51697B9EE8
SHA-256:	2F9E346708A8D58E9051106587830589660A35AED5B22940A1C53B70FBDE863B
SHA-512:	9E90286B773EF70E3B802DB2A7FA544E131D8E65EB8C572D9471AB24C03DC8ED2C07ADB72D2599F9BE5406B924B266C3E860394EFE0145EE1079F7D9C49268C0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e6501db3aaff40b99070a3555ac386a9.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85501c9NaQV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.511480465649446
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M43XRmGvjZcHcljX+:qgFq6g10+f+M43XRmGFmAu
MD5:	A498D729DC0FB798B8508C07EFEC25FF
SHA1:	3569EC1A401F737D2CCEB0A16533A4CC82E401F1
SHA-256:	29C15D00762AE7239DC9DD143527FDE4CF0C41AD1408B4076A56BA7345F41A17
SHA-512:	6756F0E8B8C665988CD37E9684E17B11D073DD3BDF57C7A4C90B26582092001100C7485A19120C3FA6A1AC8592E959D6DC9E6237E4A1FC60143BC46BBBC9EF64
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27c8227c847a41ff845b5d43e4f2b637.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:855027A3n7R

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.413031459366168
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+e24R+bTGHR0ZjosQu:qgFq6g10+f+My4sTEiQu
MD5:	182BA998CA9CFCECE86B0F60183E2FC0
SHA1:	642167A9F049546A98288A9CABCF17C38A6A33C0
SHA-256:	9E275EF9F4DD41D063F32E622877AB0A440ABBFFDD393BA43C5B6CCB1639723A
SHA-512:	193A7FC2CCDE51FC5C00C013F4C94561A2D92448C7ADF1A1B344A0D9E8A59D0846AE911F3D7C555A75D94D66E33DA223B5474EE78BD6137140E45E9C098363DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=438f4740e8fb46dd94f72401a9ee6cb4.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85503RWTtCR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.365939877069291
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MpAUGEcWQZMzZjdCLKzK:qgFq6g10+f+MplnN3CLAK
MD5:	C470652B35CEAEF39076F515BAE2C07F
SHA1:	7C3E566C95CBA10747F027DFE51F6FDB163486B3
SHA-256:	D01EBA82202677C880A14F92921D477FCACE28C75E0EBB63EA5CF72C1C6F195C
SHA-512:	B43DA70DAC55AD9FB81655F96DF9B3F8102FBD40225B4ECD0DF7F416A9476EDCA75400135F5C62A75D82E9C951CEAC7ECFA6DBA67AA72C9A6A4E05E7FF5D6A90
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7fb4ff71493e405ca2772eafe351e6e9.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85504QZfiFR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.400532200896969
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+1ulARcIY4RTjs1Ha:SbFuFyLVIg1BG+f+M+1uXIY4pjosQu
MD5:	F0A8EDECE1D5AA0AE2BE7FEE30714E8A
SHA1:	C4BFA1863685D58D27E790C1DF686FB79520ABBB
SHA-256:	20FB1101E424F730B10A6B6BE12FCDBDB41746ABFC81C6940EEDE03EC7E8F769
SHA-512:	B129C2672BB0674C5E07B2CF9C01C4C802817F492D21F4B0D14956A2F800EA680F5635616721413B67347287CFCE87C4B00DDB9C6C7D0405B3440C4564D156FF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4b69ee1184fe496a8a26f34ce8dc8a38.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85505SOd9KR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4534487003529755
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrf2SgXRX3SUA+grqjsx:SbFuFyLVIg1BAf+MiXNnAejNALyAZD
MD5:	3D9832CE71F3622D4F751E3EE809B5A9
SHA1:	E2692203E95701A88B6B59E44E5CB04F5AA44EFB
SHA-256:	BD2B76B03D44AA8C759057F82227D08EF3FE311F5AFD32A1388D0CFE9A48536C
SHA-512:	DF5DF990574FED8544D84B64A8142B408EA95588E5E15CF56977FBBF7FE64F5C1B59ADE3C182D39383DE308F052053FCDEA6AD99DCE66226975EBBDC97BD556F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a88f2b9136704a759ed8d2f425a471e8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:85520Wag78S

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.393291895475109
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzFXQelicWKrxsjsmM:SbFuFyLVIg1BG+f+MJAsicZrqjdCLKzK
MD5:	5C6762ABECEE7134ADB894D56888A74A
SHA1:	B6AAD4B1D74943083B59FE0F91C0754FCE453A4B
SHA-256:	B74DEC5D1EE042B7CC9DD540A6BF515A3F5639C232C99C0C7A97351C010634ED
SHA-512:	D2042352369BBDFFC153AEBD5A243D7D82187E63A48D7839D3293060F088569EFF514C443AA5AB70DB80AF2013677241703D7E6FA070C9A348F00B9F121CD824
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9973e750292e4c36b4feb9e11d2b0841.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85521M2MdZR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.402215850875697
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsHVsgO3cEBGHTYTjx:SbFuFyLVIg1BG+f+MsHug2BGHT0josQu
MD5:	CBB4CF071367B98D8765AEAECE12701D
SHA1:	373C8FC1AE95EAF19074E32B8D831C25BC36A044
SHA-256:	F3B17D49976B559231156E5C372ACCECAE27A965E351BFACD29C428AADDB644C
SHA-512:	4744AA75DDC790437BF8C1BF8631E95D2EBFA0DEDE70C76C5A81B97D44D0ED690CABD0ECE00CD00471C61DE19FD793160847CCEC8BB0D90B6713B8AF3B6E6A56
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fb0008c9438d40b298b4095a34af8cb6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85528eklDtU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.437643241214959
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5tmRD+XAsZjs2ALAXaN:SbFuFyLVIg1BAf+MrmRD+X7jNALyAZD
MD5:	18F642F85DC7F0A1DF587809571357B6
SHA1:	512E8BF3A4F682A48763D1404FF1AFFCE13E12A4
SHA-256:	178C160ACDFF91F3987D6A06E872F83633DE4B21F9718E47679D25A486803EDF
SHA-512:	82E404DB05FB90255514BCA4B0391D071AE88E5C52DAD7B330A9034958A5DAE9F851FC0D85B4BD401ADD11DF51F3A51FC27B9D91D7263AA6E83394235BD2596D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=38a5039e73454be0b5373015f58ce269.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:85537BwlpiS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.472195484630062
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MyFycnW4yqjNdQIeXD:qgFq6g1af+MkykWy2D
MD5:	CA12649DC5583C15865D28368C06DE5B
SHA1:	CE61AC12297C5FE88CC70627CC9290BFA293551E
SHA-256:	6E556D7268D41D3A31C76A01F9D30992034AA6CDFBAE5BD3C8B22D302332650E
SHA-512:	2837628E5EBA12F7289A864F2B29D6B6C4C81AF6196D98FA334984C75B6013FC596D509017C589C00922C2E2B77A59C3B0CF152A363827DE66F7E170FCAE8E41
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=86a49b0839b5473d9d4800d766c3c797.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:861209aM4xV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.407016669380269
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MAQz5IRjXv8jdCLKzK:qgFq6g10+f+MA5kCLAK
MD5:	47395C119EB2061EE59A403D5067CA21
SHA1:	375476559D0A12596155BA153F2C42DCCB2E8A75
SHA-256:	48E4C31C7BE658FB36495A8B7BD516A89B18B13C98200EC1A6822B8F93EDE322
SHA-512:	18FEA13D95626E2A2CA8997008D8717FF6A5E690AE4815F923CEE44602CBC781DF2DCD43B23CD1CB6E95B9845F01F434A6F8B2EBB976B948251968A079BF58A6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c449f6b23b4047ceb1861429ef877d02.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:86136Wot6tU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.426374274136528
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MumXoFHWQdAG0josQu:qgFq6g10+f+M7QCTQu
MD5:	E49B800B9E25B134C6B4ACFCECFB3B99
SHA1:	FF2FEA3A1907A5335E8FCCD391666652273FF346
SHA-256:	2EC4BB7F7834606ABBC451E9108B6CBD0E808284C78A9D1BAEA95DA1AB6B61B8
SHA-512:	AA9BECB74CF45949D422AB502BB025DBC9670320921BC30E2D8443028A46C1550AC5DE06644598ADC3A0F667920D1215EB7353E816DE124891D943C567BA59F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dbc23c66c21c40f997e8f2472aacb8ec.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87011MoHxkC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.481789243032902
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MwBw02rqjZcHcljX+:qgFq6g10+f+Mwq0MkmAu
MD5:	3E15AFA35A288A8D3B1ACA549FB135A7
SHA1:	3B08F2CD1F5E7EC06E6B04F7A66D7FA6ABA388E8
SHA-256:	751A31D4D70F9776700D2BC8E7F6DB072B81175D017EA1C394D61B6F66C54268
SHA-512:	7BA87C369684AE0CF392D9BE81A107C5D705E64A12B06A76F7CCEC42886DD6472E6B5C29038D047E59C9A9B7EE85C61E3F6CC81B4E958DCFEFC217E52D8CEB17
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a654c406862d431aaf1e0996b7120a6c.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87013hFUR1B

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398960085151595
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv0JLc0h+sjs1Hadme:SbFuFyLVIg1BG+f+MsJL9josQu
MD5:	1914A3AF6C139D70359BC0B6F0F8CFF4
SHA1:	6DCAD2EF7CD42B8A92F5C66AB30C2BA83582FCFF
SHA-256:	972A082070A54D8E027603D7BA467B2AF655C2C3DF8EFD1E9DCD2CB8491C706D
SHA-512:	ED94EFC396E66C637159401A88D68D08AC2EBE3327B6FD285AF397B55ED732E711688D97B4F9A753D542410CB9F9D107AEBFD4B22A644C4F13D7D69D4DB84466
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=edfd70ed7da841cea7e862952198eafb.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87014Z1cHdB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.372107414914693
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu7HuKcQW6WGAgrqje:SbFuFyLVIg1BG+f+MuzuH618jdCLKzK
MD5:	BC3A01A0B4303008610A2C4C6958606B
SHA1:	225C2AC92D131455EEB392436D24DFB8C46FE945
SHA-256:	508CAB37A34730A057E52C18F6221D5E32E74EAEE25312FB851D89B1B664AD6B
SHA-512:	07AAC5B926B681EAE59A3421F06856A0D9B42A0E91A63E72DE77CC540304068C11E06220A89A5B84FE06E6CF08AD3ECB3C91204607924CD0CBC45B2299D6345B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d688a931736f4838a8951a18f00b13c6.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87015Aytm4B

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.429281133653507
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4HAxRNEEkdbjZcHcljX+:qgFq6g10+f+M45EknmAu
MD5:	C46ADD319C5C4D5FB264B93A800AA5CD
SHA1:	CF73E55AC8F3A2507FBDCD69ED2D9AE2A34A62DB
SHA-256:	D80365BD250CA5B78BDDEBDFF32360AB10D7DCAE567954CAEC61A0F04369E66B
SHA-512:	684F4C3D6C01AE38CC87F04831671189487F7CDF77E711CB9C2DFEE4F23D94A17A6AA62AE0F839F94AFBD1CF3DCD602557ED40825C0FFFDBC301F3DA428989C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2bedbeaffa524f11aeb0ea340d7781df.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:870165JeRSz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4428263434194974
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzlyfnxu2OUIWM0jsc:SbFuFyLVIg1BG+f+MoYU7josQu
MD5:	5075B4F909518CB0AB58B552E7BBE876
SHA1:	35D3F4DF4D98A72DFB194BFFB15BA639D37285AA
SHA-256:	D51836501071E41EDCEA1BFCBA0A011D14F21E15ECD58D163861224599969EC4
SHA-512:	F5FA6D38DE458CA81B2F0B195650700AC17992BA8D8E3175DE1EAE7495CEBE8B3AACE46D778C46CC57BBDDAE7548B2EDAFFAB6A1FC3A11F3751E88389B99B283
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9a89e21cd545423f8b4b1f8f71f1cdf5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87025lFIsqB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.409283345351476
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6wuV3rpD9jdCLKzK:qgFq6g10+f+McpDbCLAK
MD5:	339A3D03E6BD8F4787B5422B79CA5B03
SHA1:	2850F87D3F2658A44CA1288BB2FC87DDC4A91D3A
SHA-256:	BA99726125F0F974E57CDF1B9EFA163463822BC02692E2BC05832EF46620FBEA
SHA-512:	1B4BD8B892B065F1B0F1DBFAB6FDA74B83963BBB9B076A657D505B03DBF8E0AA10175815950234A10460140AA9FB4A5FFD36B5DDAF483EC09D3B981227D4A7AB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0e08b16d27fb4a45885938d136d015f9.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87027jWzkFC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.428225889451805
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp1cmZXQDXbSEvAuxU:SbFuFyLVIg1BG+f+Mf5XVuqjosQu
MD5:	FFF5CAEE4158AFBB53130CEAEE02FC3C
SHA1:	F30C566582C8B2E07FAF08109CB17221189E9603
SHA-256:	69B96CFCF8B2BDD624D3522F671DAC653C9B473CC9B78F6C3286333D5370B5F0
SHA-512:	E7DA0BCACE5C719F069EB97E1C7EFE51495F7A8EC4FE63D322D57997065E70EE91D3805642A968F4890B97D1AEDDF337156109AA35F462F11F97D946AFFCCAB6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c4acbff9bc404263a825f42436644e7a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:870285QoUQA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.420807019532627
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M4VeRNbEfDvjNALyAZD:qgFq6g1af+M4VQqDRIZD
MD5:	09463F56FCE0ED35DABF153221A01F00
SHA1:	DFEB5A95A1EC0DBA4EE53E8DB8A8AF3EFED70C00
SHA-256:	68136D2156CF7FD3A102AACBA1C34E0F76EE289B6D402AB2F7E616378A308D43
SHA-512:	AA3F86382140ADF4540A07C652D1875BE3913FE511F908464E9FADA9C87C5CB47EF15973894DF315C47CB3A5409E1F7B26ADA8BE97E09C8A9AB2AF3203D3159F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=29fc6ad22a184118aa2e7a9baa7f3695.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87029YA42Hz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398757940320839
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpHVXmltEUri+sjs16:SbFuFyLVIg1BG+f+MrM2xjosQu
MD5:	8ACB78EBD58D961EE8D056D20A022587
SHA1:	3337936DA0991F4632F175AAE788EB00AE885E69
SHA-256:	AE31C93A55B7F6114FB48C0FC6D92299D23901E53515CEC31095DC8BD2BE8EAF
SHA-512:	6A4CD54EEAC87B938B5D81D341BB725A9AAD96E669E17ED6790429CD5B33C4526B2C28FAB045556110BBBD751D5581C46E837E826146FE89702D718FE669593D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c3f211a4029242ce974a30c8af132c90.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:88066JBeWgy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.351993383620383
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MOTACHDOYqjdCLKzK:qgFq6g10+f+MOTVjOYgCLAK
MD5:	64F6ACB5FCCCDD931875B7B976ED98F3
SHA1:	8FEEE2D26F798680061E949D305507B410CABE03
SHA-256:	A05218AEBE8B598F7AFFFBEA085269A8C1BA5D3AA50E73EEF8EAA066CB04DC97
SHA-512:	33DB71FBAAE994E0920BC8D9C2C8390FD83661A9C242C391421BFE4CEE7A10FA393E6869C7A636290D866535DEB41E79635BA52240C05768B1B93D150D34EB5D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cedb3baa54de4b1db47fe1a07ea62791.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:88068hpucjC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.425309477092184
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm63pt5L65HvRxsjs2ALl:SbFuFyLVIg1BAf+M61L6Zv8jNALyAZD
MD5:	84C3CA5ED4D56375262F2D39A69884DE
SHA1:	6E57DE7A2B1BFD288F8F1485AFE27E81DC6A0D30
SHA-256:	05F6FCC5374FC038B4BBABA3B0F376B763AC260CF841ABE12C5A34262B88EDAD
SHA-512:	12A44E04299F0B086948D1605A9CD70DB43A5CB5CA787079A630503BCDA5399FB8FF3BE94A7295DE4143936D944D5475C5522354D3158EB984F831F65105F182
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0fecb903b4514c679ea5caba8f7859eb.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:88156mIsx7z

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.439433520353205
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M+PjIyRTslqjNdQIeXD:qgFq6g1af+MG5RT32D
MD5:	015585F554543F94AB0E27D2FC936ABA
SHA1:	5D7E6610ADF1D2352F14B02E836A244934C001E3
SHA-256:	B92CDE4173512AB85F64A88B17821AB293E677D4C959A93D4DFB1E0571D1FD9D
SHA-512:	692D5E3A69DF253D6D28B0679A9E4A99C13A73343CA98D0017762095AF125C23055E3848203108760976B0499C9E9B284238BD1A1E62777FF925B9D72814A6A1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4b0e19724cc445e1b4a3734c460cb433.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:88193V5niXz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.373859953263732
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpxGHjXEIrxsjsmNzi:SbFuFyLVIg1BG+f+MfGHjMjdCLKzK
MD5:	E08F7832D9881126A3923B72D95BA7AD
SHA1:	4709688E37E1714C3CFBFD00B634488C418DA2CE
SHA-256:	A99B14DF94603BB912BAD1E24762D7674E272FB71C54010DB33E4D81ED17C49B
SHA-512:	4738CDB1570B7F74D92BB9725AA01976B15BCD81AA85925CAB3C5D0C2487C22633EE694F325A0668E1CE19809AEF9AB253DAC8EA74F6FE2DB7DC64037D197A81
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c862c2e21fea47908f8fa2d32424a83b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:88210LGLHmz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.41463695712182
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyAGOY1tUIGvATjs16:SbFuFyLVIg1BG+f+MyAtmTjosQu
MD5:	A55C681F8836A679774726667DD42938
SHA1:	483B8E89F1AA5D043418C375A3D667AC74AA9209
SHA-256:	F3DEB1ECE707180517B55EC98643E73183811230D30B85E99DC05D8A20E3A2E7
SHA-512:	D14E0B143B4BBAEA797C8CBC1C7AF56BD0A372AE4A4A5CF8E33D7637F5F9BE6D0C3C1D4CDA0BD635CB36ECD00675D869F8C99FCE488BF39FF2924C72044E9AD5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f9c9f88d89f472bafb6bb0aa1c862cd.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89846UKY0po

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4767009908567035
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8LQm7RfQn5NHH/Agv:SbFuFyLVIg1BG+f+M8VmRHkjZcHcljX+
MD5:	9E0B5C4425773B8FE44E45B3DA6FB367
SHA1:	A692C12BBE49FC886D6E9EFF09B159FB77C0BD75
SHA-256:	F8AFE8401FF87511CF58426005447FD0A000F73516F0021408E5F25A77A97392
SHA-512:	38574BBCF2EB685FD75ED080EF174D894ECA3F0B47162884CBD8CFB509A0A3A44550FEE00B2D8070276FBDBDB2FE5E1B449CCD7994B0497AA1A10EA13EC0F3FA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6175bc0444904555b1e9ddac9fc57c52.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:898478k4uRo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.390779754550775
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvtc2DOcwi4qjs1Ha7:SbFuFyLVIg1BG+f+MW2DOxqjosQu
MD5:	84FE5D42134BB011D70A003B8F8D7B47
SHA1:	9F46D6960B4326FC805A3CF5AF39103C23FDA833
SHA-256:	D93ABD6E7AFB18450F3FAD3849661DA14B349717D2B4CA21CBE2E438B4E56FDD
SHA-512:	275C94BAADD5B5791C21180751CEA92E05A98AC73EC86278DF6C94FEF081D4054C7DC9AF2D83F7245FA71FB421C555934144FF3F580ED2E64A723D28EAFBAAF0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e999b3cda85240e9943ecfbbcd9714a9.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89848SEKnwr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.400953568760847
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+QAdHdK3SEU1ScTjdCLKzK:qgFq6g10+f+MvAi3+VCLAK
MD5:	08EA7C2BC32C2676F4A335043BAD2E64
SHA1:	68BD6FEC41BE618691C59E3DAE55E561DF93B72B
SHA-256:	3D436E01A6AB8A30D348746BD383F1474DCB7F0CA420681B89A221DABD044F2D
SHA-512:	D8282E2D6C1F3C458538B3002A7051B9B001FF943FE589CA09F61209090BD8B6B7B523DE01B02B256CEC2E76912B12F568DE0C71B3173590FDB4F967832A6D1B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=40dac2822816447db78b98055d3c738e.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89849smodtr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4867311772946445
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5WvVkWb9N2jsicWmt:SbFuFyLVIg1BG+f+Me572jZcHcljX+
MD5:	ED497C973239244584C7A5DFBDFBD4BF
SHA1:	3BB309A7E6B7C3F407796281729025F3DE9C6551
SHA-256:	CFAE58846BCBCE56119C109164DC39E228D8682F013DE34200818BA5FBBAFF86
SHA-512:	CB45D2BEA138900CD5918E6E2848996637BE82B30C75AE831C0EFA04BD826E2790349845111239260681231FE6120FDD007554EB80FC2C2EF849C515E601CF05
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3cf983ff63914d5ca6b0784cecdf4bfd.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:89850XS9pFr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.412875952403943
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/9QBRLg5J6GG8js16:SbFuFyLVIg1BG+f+M6nMqG1josQu
MD5:	77BF4CB0726D5C6B1979196BA79E702F
SHA1:	D2B30E8950321BAADB8AFEE54C755ACB6E56693F
SHA-256:	AC17C6B360D7D7824DBFC5FE6394501A8731E2C1D2C73BC3CB9F5FB34EA635DF
SHA-512:	7930E51891BD555D8FF9BECA2B5333F89F004FD26F0C18AA2E0F7228254489643136663BA71D071EDAFC44E25071967AB9768D141A3E33A1C5C992880A929C0A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5a122c0a693c4c859435150d884abc54.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89859bcTy0p

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.392486409902806
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MSRFFUT4jM5qjdCLKzK:qgFq6g10+f+MSFrA5gCLAK
MD5:	8530C8C99440F9889B650C2C980BE77C
SHA1:	19B5B3B657D4599B9DE405B50DC5101705A3BEA2
SHA-256:	1FC305ACDF1F999DB6D09751DB598BFB518C26F929106E6ECAA16BEBDB2B40A4
SHA-512:	5811A5C79CB581324596E498039288D500909DE3D17E230E34F46AF565BA7D5B22C3E2B17AC9F05F2AF61491E1772F163CBCE3F3BE153D935DF5B536EC3CDF44
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a08982db21a3471a8b12f07e243865ce.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89860b2RpVo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.409620984163771
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv0gkV1p+sjs1Hadme:SbFuFyLVIg1BG+f+M8p1pTjosQu
MD5:	0229E1620C345F5E4529053E866BFB92
SHA1:	438B43EEC844B36F7D9B583343128C0883A5CFB1
SHA-256:	691E22FD33842A6C6E41C7646C97156D9636263E96DE44C0002CACA98C49B0FE
SHA-512:	CA0C0629E1AF3784F76882CC769C0B013DFC898A8AAA9CFDD3AE653ABCA74EA3559D04CB704403EB0AD7E044BC1484B28CB67D93283D2A8265ABC0F0E45557A1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=efeb6d952e4c450a982780e5088b9efa.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89861IlYx4q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.346872165210622
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrTS1hFXDRAeHjs1Ha:SbFuFyLVIg1BG+f+MSXF1AYjoa
MD5:	518236948A5321D8A16A830E0548F2F6
SHA1:	015F566E680126FA065FB82B287445436F5368A1
SHA-256:	DF7E32CD0D5AB6E3E42C32A7A44F2DEC7C5D7BD5233F56DF93FA5814F5ADFCD7
SHA-512:	0F9D5FC13365ACDF3679BC876FD8991B3C8B23C5E38DDB9C494408D69FC1B822080D4E647A10CB4EA0D4FFA690D62266F5AAA0C763B97D7D13A0C5590D50BEF8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a3412ebdf9504251972f5ae1f000246e.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:89862LqIRBq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.392358598337212
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoB3Woi1tf2js2ALAXaN:SbFuFyLVIg1BAf+MoBcf2jNALyAZD
MD5:	A123334037A62FBDC24CE2FB81275531
SHA1:	5B74FC9C9843CB6DCE8F5CFCD4C185BA1D70FEEB
SHA-256:	CA63C6094D0F28FDCA32391129EB91F629523AD268C57B2B86252EB49E6E44ED
SHA-512:	C301DC7830085848A4E60C8CA765B5A4B3DDCE6CE40AB921F82D1F8D6ECCFF0EF7429F13D0771CC05A28E15F188BC7D89AEB66FCC276494FEF43FCBC74984DFE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bdb23a7e5af045d0b0f0810cee2a09d8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89869EsGcKp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.355556817235233
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoB2HUIlMxtRxsjshQ:SbFuFyLVIg1BG+f+MoB2HUImRqjtWL0
MD5:	5F6C9F60B56D2839434F8644D01FBF45
SHA1:	342BEFFF2D5845546ED9233135E396EC83627A10
SHA-256:	F8690E9704EBD46892BB0638097743C22441E25629B6C5FD265138ECAA548F73
SHA-512:	5B375AFEEBDEA34B96DDC7D28D9E2F362EB856E532C5501C83B4C3454B99F2941F50FEE417FC1FC862DF98A01DE82E67348FDB76D89BD09F62BE73253F730817
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bdde6921216a4f67932dc2d7bebbc413.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:89870AIdUZp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.372565605251945
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyOGhdTvdYahaFlsjx:SbFuFyLVIg1BG+f+Myp3v5AF2josQu
MD5:	175138E939BBD74781CFC08CC06907D9
SHA1:	C8E3A5BCC22E5FD21C421A53C14F858EC22A4C31
SHA-256:	DE37F0178A9E016FE45030B5A7776DAFAB2A37EBB6956E7C13DBEDF1B672965E
SHA-512:	8BA60EB56A349BB2148E1777096BF7FEF8B26B946F82701488CBD2865383A97F4BB49B2886D9C058C1F0C8E5F45E2E34601853A4F444593AF74C5D309DEC0023
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=82aeb5cea8c44aea9128fa3ac9584ed0.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89871jPx0fs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4256431260193425
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzPXpGIUHtJSWnO0je:SbFuFyLVIg1BG+f+MjpNS7jdCLKzK
MD5:	CE6E35B3B036F0312900C7CACB6B3C58
SHA1:	BA7428843F79D493AA88547BB32FD7DA49775F1A
SHA-256:	03780CD41E369B24893F1532A87285580A66CCF8522FEC759B5916E60BA46798
SHA-512:	A76B98C0AA6689DCC20278E6A0640C8517DB63A28F26F1AA907880EA9E151EA3A30B865DB46AFECA02F05975BADEE82360E1F90E872C59A03C3E61B77CA95CAC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=96f21e7694c14643b8b21573dd2ccf6e.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89886wGehnq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.418885011555857
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6WDjR2g6ZjsjOdlJO:SbFuFyLVIg1BG+f+M6WDtJCjNE
MD5:	87028735B8D0898F43DC0A1080ADF0CE
SHA1:	86E54ABEE30D2D65A62DBEDC176DFE7A6F66CFF8
SHA-256:	7B097383C9E98779BD5B8A60DDEEF888AB0133585D3B5C82711BA60651E07C1B
SHA-512:	CEA84D8513495E6F92A54F041066CEEF7B004B66CF930886C615B76621C1AC7FD1D4CF32BA60FB7A3B3907FB004E6ED06485A0ADAA78DBD775D8510B47651C96
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=05f4440019424ebc9c6520cb0bad7d4f.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:89895WKmhDo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.427665052636987
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8eZWnXcxzCIhglsj0:SbFuFyLVIg1BG+f+M8eonqxhg2jbVC
MD5:	D66BA3A8947794C35AF4E7956771BAB9
SHA1:	81DC0BB2030C8EBBFFA1E91FC6E2BF9C668B699C
SHA-256:	4265C4BC4ADB1C69589399E14C781F10458CAF621F87E09DC8C231811E9B73C0
SHA-512:	5FBE78C364A6A6D2F0265EA678B7DF4B876309B9BDD6EFE024802AFCE8D83BC5034BEB5988CD892EB230C2E10D9A88553ED01A7FFCBEFDFE307861114F1A7858
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=66f8b91f73924529aac63fee86f766f2.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:898967mblbp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4107314104797055
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoAzV9GHnhwYuqjs2ALl:SbFuFyLVIg1BAf+MoGqhw5qjNALyAZD
MD5:	377FB8CD91B0E2913966575E42AD2916
SHA1:	E520918BCBC5289B6485D42E047A7EC576288E7D
SHA-256:	BA2FA70B25A29815F7B40DAFFFAF475E19010B180489BEBF4502AE769B4B79D0
SHA-512:	038E9FB6B9573799129F7ED125646EB0D00646C8642EF071FDF332BEB6D3CA269F29EEDAC8F98224696858392D03D0851E2738EB81F08C927D54FD6947BFFC72
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=be74505952ec44ddab6ab0c59b4c6d05.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89916m8cnTq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.450454505942268
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmryRmMTT9GS28js2BbQL:SbFuFyLVIg1BAf+MWRpTQ+jNdQIeXD
MD5:	A7E89C3894BF5A6309A11A3B8D545AA9
SHA1:	29674C19BD3BAEF323DD6E7117587BA616E8A062
SHA-256:	3B709CF1F3B6E51DDA03718C1F3351144E6E03A843B336878079CB8DDABF7A56
SHA-512:	9C81482EC6B209610D82ADD2BE2E9427D97BDF24586934E21CBAC52F8EDE3911943AC716153BDCF9BCA8A3298E7072DD520974BC659686DAF312863752EFE880
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a7d4b8a102fd443dab9a578c5f0ebc5d.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:90389FdGXzp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.373178657830674
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzriTwTHR8rEZfjsmM:SbFuFyLVIg1BG+f+MnDTuQVjdCLKzK
MD5:	307BBF997EBFFDF229C25517DE9453D9
SHA1:	5F9F96FD38C6C942359F3614A6DC6D7EF8153CE6
SHA-256:	2132199EF5C02CBCC960E55F5AD41A5E99DD204DDE0F81B46B28320D1626FA0C
SHA-512:	EC84BB1B9537CFDE75EA01BDCDCBFE6236D0633FE04F6979C81E9F536942F296A99E470D1B41133DBD2F7E719AD1F57B9C38B621F6A9D9B2D9A0B148209CBDC1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=988f9667f6c5463aa0e4c76f7a5c0df5.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:90942L3oiFc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.440356029974702
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4N54WKqNqjZcHcljX+:qgFq6g10+f+M4LxNkmAu
MD5:	0BCF8A7868EF282E2B7032AD83EBD125
SHA1:	256307EE9A632053ABDD16F84C5A2BD214839F4D
SHA-256:	0E6A4B1DFE19AC08ECDAEB82036D924B321621039A5ED3941D6F6FA585500F4B
SHA-512:	81E32B761322A1F034096486935614C3BD52FFC39352F111CC08090F3DDD10100EF7B7BF9D5FB77541160DC401E4F0F9B53EAF04C657CEA28D3B1B1E5EB4EFF7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2c8331fd0e824454a3e1e85eae73fa9a.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:90943S1vOH9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.372976691200193
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4ssDQTRy8S/OKswsS:SbFuFyLVIg1BG+f+M4ssMdkgZjdCLKzK
MD5:	B775FD2BA5C7106155F5179885080A4E
SHA1:	FDAA80CE3824419339EB357A39237B050ADC9E6D
SHA-256:	D027C62148F2B8C8C29FC762FD0B88868E8F6EB4F1D72DDFC83ECC097700019F
SHA-512:	3811038CF0186A839067F61F6A7EFE627B4915296A6A1397B9234D1E522E627B6B55DA00729F06CE612542155AB635619C2AE32C832F860B3406045FB88F7058
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=20cdd108c15646bcbeec7d0d89507773.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:90944wWHn0a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.392554015126905
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MeYtR+BIUvRqjosQu:qgFq6g10+f+MeoGpvaQu
MD5:	AD934DDC459F6AEB3A98E354B452091E
SHA1:	FFDD888F4C99CFB49F60740CEE4BF1C428CCF68E
SHA-256:	25514B8A81F34ED980765427B1FC59DEAF596AF5B9400871A48E35C76A2E9D37
SHA-512:	CAFCAB747BEC29BE33A07D7788ECA063169AC013FE6555926B17A9FC83412A7F67DD27DC16D8F627B8DEA6CFF7A801980626792EDE9C0D55D56BBACA021119F3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5ec5b69d4e38440d81dc95b073cdc4d1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:90945UC1X7a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.365329003692495
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mu3RfBjh+pjdCLKzK:qgFq6g10+f+MuynCLAK
MD5:	7B9A4202E4657291C7C76194A62A6A14
SHA1:	4DEEF0A5ADE9E0D276021C8B2CCFD6BF303174FD
SHA-256:	12152C2CAB02AA9274A3AE2327995B4B3D4DBD96D8E179FF9C92CE91C2BDF996
SHA-512:	7782D817369CEB634857A9E7ED72D192D756331D3E60F6C179C19D8B7A01191940CACEBEFC51B32EDA834BF34434E1EBC1C0AFA37474BA00D291E63A38815DE7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d42d6ca8843148dc925520a3cd651d6e.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:90946aQ6MLb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.429909539430532
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8AwJMPWRFe7RT0jsc:SbFuFyLVIg1BG+f+M8vqPWj20josQu
MD5:	6C76468AB365C033B5FFCA93747E05BB
SHA1:	D016D590BC080B9218347A5C628E54DD158B9896
SHA-256:	301FD45AF97117007DF56B1AB1B52CF12DEAF176965DCD96E52E6011F43CFCE1
SHA-512:	3676E9CC28FF17F58D6CA633262F50E558D448B3183BD440CC6EBBFD397DAD2CDAB7BA70FBFA2E485B76F9FD3E8A19AB8802E9690760D6C17411D1616CD8E322
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6e43f03459da48528a42c32b067042d6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:909647JTDQb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4423752338801545
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrARCJRJ/LsTcNs2rqj+:SbFuFyLVIg1BAf+MMUJRN//2jNALyAZD
MD5:	F8B2E2D00502EFE2C9777DA72989F6FA
SHA1:	A9DAD5F96DF3F0D5C39F6F239DD5450973000C52
SHA-256:	3969E074E63FC67BF0634D4F5D7577FEE9DBD0E79BF829CCB36E2BA980AF66C2
SHA-512:	DDEF79C3A4DB1D76A8CCDFF37828260A27B1EFF2403BCA3C6CE9263AAEECBFCD3953AECDF48A31C248D26673EDE4BD4B97E4BF647B38FC81B0294530FDF29F9F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a25427155af64beca32b2b170c6d70b8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:9106542rQta

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.475971463218355
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzyTdSHcXFnsVVS2swsA:SbFuFyLVIg1BAf+MmTdSHc1RjNdQIeXD
MD5:	00BB42DD7E337E5A55448F78BD34BB0F
SHA1:	C7CA9E78AC549A776AF266DDCDC62B567111637B
SHA-256:	856D02A8BFA6F24B913BCB6BFF0D776D5D532D496D3B493204D368593313077D
SHA-512:	D9B1B4C0DDBC117446DDC6CB08D27DB3CC5F23BF02011B1098A0506F28935CBF742625BBBC5877B0D8DB842257D533469CFFCFA4231B4F3A232622B28816E187
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=952bae8464dc4e9b92b25e17640e0071.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:911193FJLT8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.358258450870287
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmplDEGR5gmHTQAGISX:SbFuFyLVIg1BG+f+MHDv/bxG2jdCLKzK
MD5:	574F49A43D902FCA061133F769F4C6FF
SHA1:	A270FE7588E63134B784EDD668337D646D903794
SHA-256:	9D13C2E22E8350EE819F7555FD68D3E5ACF6F2BC0209E1421D232F44C1366711
SHA-512:	B7DEF3C77BD985FF3C4E75AAE4491AC3C1B337EC31C1FF6E534567408CCEE180B7A7B7135DEB1AEBFF93D828B8C6A8BDC9944F345A818F3C6E7C5C74438D7298
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c48251fac4064cd2b5de1d65ecf1a0f0.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:92220OBGXnc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.424613269418653
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7jUqDe2iDCQTd8qjx:SbFuFyLVIg1BG+f+Mk4/iZTqqjosQu
MD5:	2D220441DAD2764A08A70FC7A3BFDB8A
SHA1:	97E0D53E6AFB87C74C52E0D9BF62995075DFC25D
SHA-256:	EC3B76BA415F3D8796EBC192EDB376443AAA5ED311F29053EEFA51F32D3CD1F0
SHA-512:	8DD0AB28107D78D32233CCD03A4E88B7AFC71D80D9EF22FC75F8001D814DAFA5E6DC0CF7E2CAC125D0636992DE06F3564B60CB57757E42807EDE8ED1341CA687
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11e81d9f0db7458dbcf528761b0c90ce.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:92765x4VSJ5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390532698573157
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7odUDdQadN2jsmNzi:SbFuFyLVIg1BG+f+MsuDdGjdCLKzK
MD5:	F337BF8BAA965224F5D3549513E55473
SHA1:	26D03FEE165D8EE8BFD3E60259A15C4F05B97735
SHA-256:	B42220E3067A568A936170DF9B00052A18B949DC06D772F011D49ADD44F82923
SHA-512:	81C2982EEA65D514A6AE97329C8BB40B8665C2A12F70395B4D52A51BED0E174B86517F8087A396F72AF8C896E3207556FC8FCAAA1527D4BFC445B238EFF4721F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1ee1b2b07daa4cf2a67988783b0d4015.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:92766sOYiB7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.445663766139905
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm40fnTOqzXycAglsjx:SbFuFyLVIg1BG+f+M406S72josQu
MD5:	D3038D968FBC93C708A39C101B27823E
SHA1:	168D424EB6F68247B3A7EADC3B97AF99038C5AC9
SHA-256:	FB80CA8CB2008C60959E510F9A39E433567DAAE291B89943D34DA2DCEF20379E
SHA-512:	04BE63169028E37B34219A4F8289DC931E2C8787CC3A621A3C76D1962B6F1F3573F0D5DB4C26992FA86FAA123E65E92566EF04D4DF784B2B6AA2F0AE196D813C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27b816cd467a4a65ade68732e329f942.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93349BCKk28

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.45796029514573
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6dI7+V/0jZcHcljX+:qgFq6g10+f+MC/imAu
MD5:	E947494153A597061DF73C99281C3405
SHA1:	AB4FEFC17058AE232E7C49CFAD5274F091AD5D5A
SHA-256:	40ECB89A63E22227FA198C92992D9459EF8D999B95227BEDF8E03D1A6F4040A6
SHA-512:	EC1ABE85A7B42660569794D3DAF8761477E762C8429D04E8D187BFD8365B419B2C25164409ED471FA7435B820F6DC6508374C834AC984A0D99EA18C82BF799B4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0cc6f6f364894e6593ef559fc0f6ebff.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:93350rF2CA5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.415359638099066
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MswRIhvViTjdCLKzK:qgFq6g10+f+MswahNiVCLAK
MD5:	833D9D88F17585B7C21CF4ADDAFAB11F
SHA1:	C300EB3695A107FE31C81DD4F1856FCC56642FB8
SHA-256:	51FAFD11662569FC0F8E4B85DCB2A12D7E1225F9ECBE4BCBAAAE5079FCE93490
SHA-512:	CCF6EF50C55A25A4353609D2CD5AD2A211111D61BEECDF8F25797EB32E4EC53666CBFA86375DF47FA4C2E2052BDF64B654A3789D69A96F7D8E8BF8DCB934C460
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f2471521140f46989685573498c6c042.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93356Xs8ZL5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.43118810226382
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5WAT4xR+nVSt22jsc:SbFuFyLVIg1BG+f+MYHXiSt22josQu
MD5:	D626569F96AA1ED3E24900404E370086
SHA1:	C1C718023EABC36CF1E5EE106CB0810F0C5C62FE
SHA-256:	D1AC5AFC810A7454992E34DEFD3E39E8A1610186F14D672DDECFB7964BCC5176
SHA-512:	E940346289FB241C6B723CF19EC3BC282ED77799DCCDC056D836031236AF7D500FD3B0D24CF240444B42F127C44BC49D0D12768AD34EFB6DD2BE9B8D55FDBB3A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=30d986e7dafa4e14a2bb5f7791188d66.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93357qY3C35

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.350720967723795
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7xQ42lRoT7HPOsjst:SbFuFyLVIg1BG+f+M+Ro/vDjdCLKzK
MD5:	F903BC2D91F4FD0A6855888AA887791C
SHA1:	FA8B080824F59A31459B5C7B13EB210B0DE20B98
SHA-256:	69FCCF61ACF6E1B2E52FF3508B1E41EE59189B6B528EC47F7EB526270BF91246
SHA-512:	142A3CAB8D70DF847C1AE1ED2DF88C60F36EA790412A9411D7CD31DEE5A5605626B679E5A5BB8D64670A3C0C2A743E67305B6513BAE6463AFB50F4F02EC7B688
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=142506e32ce64d648e84b6a2abd5e1cc.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:933584SU3G8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.447549560949389
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo5RQRHU2cT4wB9glU:SbFuFyLVIg1BG+f+Mo5icTg2josQu
MD5:	5F9D2E3BEFB1BFC91A1AFA7210EDEF50
SHA1:	2F7DBAB3450E17EEC59ECDC45CFDA0FF1948AED2
SHA-256:	5DC98B5AF2164CE5C42563DAACDDC3C7135FA8007026ABE12ED26BC114CCC692
SHA-512:	D1CB6B49FF81E3984B95361DDA9C0986D701798713B78349BED1B570F8FF0811464BB536920D5E883C2FAC3E9F8537FD7F6F01700962B457EC2F3883EF259534
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b359919886cb42219cc96d934a7fd66a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93372UwWyP6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.440330188437911
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmufQzKCHEEfR1Ijs2ALl:SbFuFyLVIg1BAf+MulCkEfQjNALyAZD
MD5:	779C3043CDFE8376647E903D2CDA59D8
SHA1:	85EB391B67DA46D82448BC390E0BB4BE7F4E20AB
SHA-256:	CD3E2C8A90B996B3C526ACB551ABC5F42E86D405E2D8BACAB0CBFF65B8E2FEC5
SHA-512:	17AE8CEB6FF431F30913727E255AE4E778ACD1480B0A0DED76E5FBE734E19988BF548717451A41149FD461E46A1E454588B7AA360ED8F2EE8104596147B07B34
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d26f5503b0e84d5ba8cc8a42972e0a84.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:93378vXw6Q8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.453909747426632
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MDudpfRDkhTjNdQIeXD:qgFq6g1af+MDuNkn2D
MD5:	A4A34DD50CF1FF9CB3E7EEDB16B4ED68
SHA1:	19CCF0582FA1C149630CD5A91E92C093ECD8137B
SHA-256:	1392CF0CA7CF9B03297144706643900A53027DE0CD6DCC5B69BAB90590AD8E10
SHA-512:	0295E8B6C6802519FFC83E7B31E401842F8FA5B5B9BFDCF4A5BCDADDF05D6A989BF0CA7304E98B4F65159D8EDF8453606DA8D1C206CA345CD0EAB909303659EE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e459bee15b184b7e8859b661b9a169b3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:94264g5maEd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.472888533850932
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrUUhWEQHXDFlsjsig:SbFuFyLVIg1BG+f+MH0DF2jZcHcljX+
MD5:	2A9C7BA818AEB34A3BCCF1DE2E8BEDCC
SHA1:	FE26B1A7D1BCFC36CD5907C18726FF668D552F96
SHA-256:	1E1F9CBA639AB79E6185B5F9402D0B0CA4B5927BADB3EF5E2714C4CA6AE3C669
SHA-512:	2F388CD56617D3A0B44E553772E5BE0C18EA7C955032D55C4ECB34D4E50EC39391BAEC8D9573FA11B0FA9D14F270B44E4B559207C45CF81A7EB81C6635009BD0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa47fe80b2474b76b09477e18d69b240.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:94265bfugYc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.431670544148409
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/+Ra/SEd6QUdzXhgC:SbFuFyLVIg1BG+f+M//t6QUjTjosQu
MD5:	C370A137C8D2BF5C83737784BDC1145C
SHA1:	FA6B1A59AA6DA22333A5480BA5686D6926B75584
SHA-256:	DD45AD425F297E14D04AF3F5F869F30309FFDE24E452028188DB23AD2D00B2DC
SHA-512:	62F1662C178CE14F8FF741D2718B41E6ABD20E130A86E912E4BD30AFB4CD357F1A93CD64265C7022753B0C833F274B2593B89E2A37BADB0A38B8DD46B67EE5E4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=50706d40defe4c7a849518b69438f83b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94271qeT7Jf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.35658289536261
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5/QEXVITH6wGBPsje:SbFuFyLVIg1BG+f+MS+apjdCLKzK
MD5:	2DF4CC3E6D374A19BC98264C6FD23402
SHA1:	AAA55749A8FA5C4964E8B43EC184DF5B9658EABE
SHA-256:	58A9089223E4A013FDA73B87E0262879F126DDED19833B49F844E3A5278E4C55
SHA-512:	69C2F2EECE680176E3FE63DF91ECC1CBE2A811B1B4C89A0E50489008105642C49767C279589592C897C4AA5DE25AB86E0EA0F1D0E2F3C11490BB99A74E3979C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3a35a2063f6446a2a88f3dcbed4e0cdb.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:94272TRHT5e

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.423614206155268
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrPdxtDXRW4JXAN2jx:SbFuFyLVIg1BG+f+M5xZB1W2josQu
MD5:	CFB4CE5C77B0C3E1BF068E9E3F72D3F1
SHA1:	AAD73D1F72E14CF12D5624FFD671309781BAD6FD
SHA-256:	0B3CFBF4A567BF7B22B4F5E6215A46898934CC4089DB16AF6BF4BC3C06E8634D
SHA-512:	0384DD5E7DE55BB6FE9A103FAE0ADCC8509D4024971E1393C5A315D410D83647BC5F4C95D47BE70E50B0C2679343465EA4B38171FB52626E6E70AB954188E135
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a38a8d5118a4458591825c243f6e592e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94273emwbve

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.382794042446058
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsqU5gU1v0jdCLKzK:qgFq6g10+f+MsqugQ+CLAK
MD5:	058251B12C2648CB0E7CC2E470989F1B
SHA1:	91D5A1F7AB401ECF627729459D3501A3AAF97B14
SHA-256:	CF66D517A0CBA9AFB4C51925A0A787C0F585A3E6A8A90AC97D1609713B27D82E
SHA-512:	3C67197FD55CED46EA7485B357A49441A0AF0D9523B50F63297A48768989DB1F18D999887372C1EB1F2535724EC9920352B708BE551667CE07A5FCF5B40EDE4A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fec871d31c094762afb4facc99dd0098.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:94285O3Vdxf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.423527657971297
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Mo2Vit8DEAAA+jNALyAZD:qgFq6g1af+Mo2VitSOIZD
MD5:	87CA3BDF44C05234B63C308901E17E8D
SHA1:	1E79D51F249A3AA9EFC59604581EDEC3404F32EE
SHA-256:	DCA0E1B7FA10382DABD204C923F73CEEA0819E6B83E067444AD83F594210EB43
SHA-512:	252C34B7BFE47379912087716DA1D3D93238991C07F0194DD1385C7BB1DAD8967FABFA5C7659EB6761F780C31060FBA541D5470CDF878EDF3329FCCDD8B0622D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b090dd740dbd4fbf9fac271896dad8b8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:94286VDtrKe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.452963155292888
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+McAW/EDnDuqjNdQIeXD:qgFq6g1af+MvjDF2D
MD5:	F09CB938856FB97ECBF543C32BAB4D6B
SHA1:	806805CB4E6CA572798E4841CDADAA62C07F39D3
SHA-256:	5C80164D6ADA9F8AD4CA749FBC56DFC8697A4FC94F26745831DA8B93345525FB
SHA-512:	841576ADA69141E5296AFACF6A1C43E27262C9E3DA50F5BD6721A66E58B4F8D4CA348B0DFFD1460109A0DEAA9CAE8A8AEBFDB0E870A6B07773E1C356BB7F7763
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=781e0dc13a3542d59bc8bedbf120d2c3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:94367uKka3d

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.475570763240855
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz3VjkU6sMqjsicWmt:SbFuFyLVIg1BG+f+MzVjHMqjZcHcljX+
MD5:	1C9D2BBE49985EF87380B996F1FC777C
SHA1:	CF2A5B06A0CC06FE1A2D93B89FD5C8CA3EC56D8D
SHA-256:	BF365DEE2A99DAC81A67EB92D259DFCFF67BBFE8F63C6312CE815EFA8D6412B7
SHA-512:	4E1E39D8A9F2B12F6B08F8CEF1D9E0AF597EB8475439BB74FA4ECE76CC3D9BE3D03A7306245DEB945E711792692E749B2AFECA564A1C78DEA7A575144983DD1C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=904f8098adc542c1b8000dd6ef61b825.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:95370EWvIvc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.39479746172937
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpnH1k0KaSZjs1Had9:SbFuFyLVIg1BG+f+MtHW0KVZjosQu
MD5:	8676F5F9EAD633DAB796D23DB9E4A1EA
SHA1:	EFC4BE8011E25D75C2B09CFA22788D97EED78F4F
SHA-256:	DA35AD1ED713C37FB67B436E4913B4F57965411E241D13E0574C1B0D2665ADBF
SHA-512:	CE27E8DC0023485B50820EC086C4A7775E9BDFE73CB42E1A6442A248F9FB0754CA1031093BA7061552C8DB2F5295F8E5C1D9F2CD84B931D58F2CE3B057592950
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c09ee85ea649472bac9e06a4d21b088d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/seats/.#seat07zbm6X

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat08H6Sfb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0B0rQcz

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0C9328B

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0FiyYKH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Jbx0J7

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0YiLCGU

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0eiwNzX

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0fWJFQj

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0l4vImr

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0mLcXxq

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0saT3ru

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ytAZ8J

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.3709505944546687
Encrypted:	false
SSDEEP:	3:jFv:xv
MD5:	CB78A4E042A09BF478BEA96FC1EE1A8F
SHA1:	90036676F392DAEC4342B5D5472C81B8E5050D16
SHA-256:	BA4C1AB5B85374DA624C3DAF1E7965E6B1CACC4565485C105055418BA294B363
SHA-512:	85200138440C8B2AFA49319126B26179A9A1DAF9BB67673B26E562B446C77F00E8BC61D79AF6FF4577456589A9B4C7FB519F10BFDD2A7671081A462F10B8413D
Malicious:	false
Preview:	7555.

/tmp/qemu-open.BprSbx (deleted)

Download File

Process:	/tmp/Aqua.m68k.elf
File Type:	data
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.254195650150781
Encrypted:	false
SSDEEP:	3:Tg9s+HJN:Tg9FJN
MD5:	F3F397AFAB5A2FAFD3ED15D9AC539FA5
SHA1:	00B3C1035E9A9C328B0F37AD2E20410918634831
SHA-256:	813A791800A8D59AC86723939917FF66B9D438D4A6BB7C81203E842AFF6C6FD8
SHA-512:	B241A66C747803C1B652C0B3613148CAB9E743389B5EB8E139EA3D2496A3BF7E375BD5F89CFCD5D20FA0CDCB47A6BDE4C42BEEAD18C89F5063CE0D277EDB9428
Malicious:	false
Preview:	/tmp/Aqua.m68k.elf.nwlrbbmqbh

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	859
Entropy (8bit):	4.860893869742678
Encrypted:	false
SSDEEP:	24:VTtZeaBTtZ4BBTDGBTHRTHpTo0TIAvZTIA2+VDTB:d/EYRpF9v59fV3B
MD5:	A607ADF513C74FAF8AD7561CF96FAD9A
SHA1:	020D75799594B3A4DEFF93F3E6EA8D10606E9707
SHA-256:	5152F62F5734755475C4915235C2D11B4175C9F79079A93534A12170D238AC7B
SHA-512:	40219EBB1C14F9B4FB623A3D37BDA2D2461B3CBD091504A3F75948C8255ADC141D1F53702322BBC4B5D4E027C779E95628C15D5DD8EEE18084D70B2621259180
Malicious:	false
Preview:	Dec 6 04:31:07 galassia systemd-logind[7806]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 6 04:31:07 galassia systemd-logind[7806]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 6 04:31:07 galassia systemd-logind[7806]: User enumeration failed: Invalid argument.Dec 6 04:31:07 galassia systemd-logind[7806]: User of session 2 not known..Dec 6 04:31:07 galassia systemd-logind[7806]: User of session c1 not known..Dec 6 04:31:07 galassia systemd-logind[7806]: Session enumeration failed: No such file or directory.Dec 6 04:31:07 galassia systemd-logind[7806]: Watching system buttons on /dev/input/event0 (Power Button).Dec 6 04:31:07 galassia systemd-logind[7806]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 6 04:31:07 galassia systemd-logind[7806]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.459526019450492
Encrypted:	false
SSDEEP:	3:F31Hl4oW9F4tmoW9F4P/:F3VWP4tfWP4P/
MD5:	99C703F574D52D9318F4363A96147ED3
SHA1:	C2EFF2D4D5F5948345DECFE490DAF84F58CBFE07
SHA-256:	CA563452FE74CD5F9F40BAEC16A30847F9E56BDE90FED2BD7CCBCE0F183C1038
SHA-512:	934801889266104517FD78842943F3441BEB64AE8C45C322BFF10F9EDC35CB86C7619FDB9605D70ACB5962A47D0377DDA4DC9A561B017827241120FC626528FC
Malicious:	false
Preview:	LPKSHHRH................p....MB....tuy.................................p....MB....tuy.........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4313806548581443
Encrypted:	false
SSDEEP:	3:F31Hl/wRcyCs15wRcyCsVl:F3MDv1eDv
MD5:	68E213CD5BA39D700D129D669DEECC90
SHA1:	61D49D73734BCEC23EC4CAF6FE04EAA7343F4DF4
SHA-256:	7FBBD88A03C1E8DE6B1D031A3A25F15CDE5675D0FE9C8ED357D8E46E9EA32565
SHA-512:	057F1A3CCA540D6FD17979A0D6283242B0585C33F8C1AA568BC3F033D771B014E728AD2E3D266315DAE095E27EA1E23D76E9EBF636E0FCDACDAE4634658A757E
Malicious:	false
Preview:	LPKSHHRH.................p..Jk.F..#....................................p..Jk.F..#...........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	7362
Entropy (8bit):	4.759095849110015
Encrypted:	false
SSDEEP:	96:Gff7ue5eohPzUhowGfldXjnQ3Ly9sq/Lv+:fefnoqZ/Lv+
MD5:	883256B359931C2D4298F27529A522FC
SHA1:	FC0BBC20602771105A18B81F012B88A1887A1251
SHA-256:	360D7115B302D5BEEC85A1298254644DA3A000DEA2C6607609B53545A5788B97
SHA-512:	66DAB00B6D6B79A89F0691E3D448D0FD1D275E1A1DDD0CC39E854F9312EA49CDF11036EFA9302EFF2271396A9C5CD1ADB8F9F1C246D251A6F6D8BA428A365A87
Malicious:	false
Preview:	Dec 6 04:31:04 galassia kernel: [ 545.020612] New task spawned: old: (tgid 7865, tid 7865), new (tgid: 7865, tid: 7872).Dec 6 04:31:04 galassia kernel: [ 545.097139] New task spawned: old: (tgid 7871, tid 7871), new (tgid: 7873, tid: 7873).Dec 6 04:31:04 galassia kernel: [ 545.187649] New task spawned: old: (tgid 7873, tid 7873), new (tgid: 7874, tid: 7874).Dec 6 04:31:04 galassia kernel: [ 545.578596] blocking signal 9: 6238 -> 658.Dec 6 04:31:04 galassia kernel: [ 545.631677] New task spawned: old: (tgid 7871, tid 7871), new (tgid: 7877, tid: 7877).Dec 6 04:31:04 galassia kernel: [ 545.774015] blocking signal 9: 6238 -> 720.Dec 6 04:31:04 galassia kernel: [ 545.833966] New task spawned: old: (tgid 7877, tid 7877), new (tgid: 7879, tid: 7879).Dec 6 04:31:04 galassia kernel: [ 545.944060] blocking signal 9: 6238 -> 772.Dec 6 04:31:04 galassia kernel: [ 546.043063] New task spawned: old: (tgid 7875, tid 7875), new (tgid: 7875, tid: 7880).Dec 6 04:31:04 galassia kernel

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	11824
Entropy (8bit):	4.9902193912738015
Encrypted:	false
SSDEEP:	96:Gxf7tZwRJe5ePBhPz2howGfldXjnQ3LX9skG6MY7G6MqUwNA6lB/Lv+:nveUnoBPG6MCG6Mn2lB/Lv+
MD5:	49AEEFD546B747353968DE029774252B
SHA1:	7F269CB8BE35B29ACC2AA4AB337E001A63EC18BD
SHA-256:	EC65A3B196D8D5599254ABC9A0AD2A359BB1C5102EC55DBBE8D5C9A85E20A17C
SHA-512:	2CEC6426611865860F04231707CC44A1661B1BE2ED429E76E9F4905F828EB61E3F43B6E7734A59190026EF03897FC2C8BDE55100A23BB209E614FC9A32FDB8C6
Malicious:	false
Preview:	Dec 6 04:31:04 galassia kernel: [ 545.020612] New task spawned: old: (tgid 7865, tid 7865), new (tgid: 7865, tid: 7872).Dec 6 04:31:04 galassia kernel: [ 545.076176] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 6 04:31:04 galassia kernel: [ 545.076263] systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 6 04:31:04 galassia kernel: [ 545.097139] New task spawned: old: (tgid 7871, tid 7871), new (tgid: 7873, tid: 7873).Dec 6 04:31:04 galassia kernel: [ 545.187649] New task spawned: old: (tgid 7873, tid 7873), new (tgid: 7874, tid: 7874).Dec 6 04:31:04 galassia kernel: [ 545.209024] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 35..Dec 6 04:31:04 galassia kernel: [ 545.209049] systemd[1]: Stopped System Logging Service..Dec 6 04:31:04 galassia kernel: [ 545.210094] systemd[1]: Starting System Logging Service....Dec 6 04:31:04 galassia kernel: [ 545.217850] systemd[1]: dbus.service: Main process exi

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.891689724835183
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.m68k.elf
File size:	188'256 bytes
MD5:	ceb5eec2b64c9e6f9a0cf95e03bc42e7
SHA1:	5471e1fdae6dbc47ad4a331af508a49840290e6e
SHA256:	18110f785d235e450e06440028e4a31580af4ecceda0f5275630fd345e790abd
SHA512:	561940f715f03a65ae7d52a9dd88559cc0de1831e0e26d2a290c54e1c6d3bc8beea0a48cbcd2f0126c7f5fb61161ec650591610e1a290bdd5ee7e2a4c2e77def
SSDEEP:	3072:guYf3IURFpTwAN+DVg/e2R12qdXLGy3IDFy9OoAsKPMHxV26VMjbigLqKIte3:fYfnVSy3wFy9lAARV2rLqHe3
TLSH:	3D045BCBF801DEBEF80BE73B48130916B530B7A150925B3722677977ED3A1991427E86
File Content Preview:	.ELF.......................D...4.........4. ...(.......................b...b...... ........h...h...h..I(...`...... .dt.Q............................NV..a....da...`.N^NuNV..J9....f>"y.... QJ.g.X.#.....N."y.... QJ.f.A.....J.g.Hy...dN.X.........N^NuNV..N^NuN

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	187856
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0x2611a	0x0	0x6	AX	4
.fini	PROGBITS	0x800261c2	0x261c2	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x800261d0	0x261d0	0x3292	0x0	0x2	A	2
.ctors	PROGBITS	0x8002b468	0x29468	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x8002b474	0x29474	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8002b480	0x29480	0x4910	0x0	0x3	WA	32
.bss	NOBITS	0x8002fd90	0x2dd90	0x4638	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x2dd90	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x29462	0x29462	6.2451	0x5	R E	0x2000	.init .text .fini .rodata
LOAD	0x29468	0x8002b468	0x8002b468	0x4928	0x8f60	0.4639	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 6, 2024 11:29:01.175820112 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Dec 6, 2024 11:30:21.191852093 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 6, 2024 11:28:52.511132002 CET	192.168.2.23	8.8.8.8	0x4b80	Standard query (0)	server.eye-network.ru	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:52.922262907 CET	192.168.2.23	8.8.8.8	0x4b80	Standard query (0)	server.eye-network.ru	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:53.060847044 CET	192.168.2.23	8.8.8.8	0x4b80	Standard query (0)	server.eye-network.ru	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:53.197920084 CET	192.168.2.23	8.8.8.8	0x4b80	Standard query (0)	server.eye-network.ru	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:53.403258085 CET	192.168.2.23	8.8.8.8	0x4b80	Standard query (0)	server.eye-network.ru	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:57.175026894 CET	192.168.2.23	8.8.8.8	0xa30a	Standard query (0)	server.eye-network.ru. [malformed]	256	489	false
Dec 6, 2024 11:28:57.301341057 CET	192.168.2.23	8.8.8.8	0xa30a	Standard query (0)	server.eye-network.ru. [malformed]	256	489	false
Dec 6, 2024 11:28:57.432995081 CET	192.168.2.23	8.8.8.8	0xa30a	Standard query (0)	server.eye-network.ru. [malformed]	256	489	false
Dec 6, 2024 11:28:57.565455914 CET	192.168.2.23	8.8.8.8	0xa30a	Standard query (0)	server.eye-network.ru. [malformed]	256	489	false
Dec 6, 2024 11:28:57.691401005 CET	192.168.2.23	8.8.8.8	0xa30a	Standard query (0)	server.eye-network.ru. [malformed]	256	489	false
Dec 6, 2024 11:28:58.742018938 CET	192.168.2.23	1.1.1.1	0xe486	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:28:58.742018938 CET	192.168.2.23	1.1.1.1	0x67e0	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:59.256891966 CET	192.168.2.23	1.1.1.1	0x436d	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:29:06.457668066 CET	192.168.2.23	8.8.8.8	0xc8cd	Standard query (0)	server.eye-network.ru. [malformed]	256	498	false
Dec 6, 2024 11:29:06.581253052 CET	192.168.2.23	8.8.8.8	0xc8cd	Standard query (0)	server.eye-network.ru. [malformed]	256	498	false
Dec 6, 2024 11:29:06.711195946 CET	192.168.2.23	8.8.8.8	0xc8cd	Standard query (0)	server.eye-network.ru. [malformed]	256	498	false
Dec 6, 2024 11:29:06.835038900 CET	192.168.2.23	8.8.8.8	0xc8cd	Standard query (0)	server.eye-network.ru. [malformed]	256	498	false
Dec 6, 2024 11:29:06.961761951 CET	192.168.2.23	8.8.8.8	0xc8cd	Standard query (0)	server.eye-network.ru. [malformed]	256	499	false
Dec 6, 2024 11:29:08.729327917 CET	192.168.2.23	8.8.8.8	0x6fa9	Standard query (0)	server.eye-network.ru. [malformed]	256	500	false
Dec 6, 2024 11:29:08.854589939 CET	192.168.2.23	8.8.8.8	0x6fa9	Standard query (0)	server.eye-network.ru. [malformed]	256	500	false
Dec 6, 2024 11:29:08.978566885 CET	192.168.2.23	8.8.8.8	0x6fa9	Standard query (0)	server.eye-network.ru. [malformed]	256	501	false
Dec 6, 2024 11:29:09.105143070 CET	192.168.2.23	8.8.8.8	0x6fa9	Standard query (0)	server.eye-network.ru. [malformed]	256	501	false
Dec 6, 2024 11:29:09.229142904 CET	192.168.2.23	8.8.8.8	0x6fa9	Standard query (0)	server.eye-network.ru. [malformed]	256	501	false
Dec 6, 2024 11:29:13.579103947 CET	192.168.2.23	1.1.1.1	0x2597	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:29:18.236623049 CET	192.168.2.23	1.1.1.1	0x2c4b	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:29:19.992016077 CET	192.168.2.23	8.8.8.8	0xa161	Standard query (0)	server.eye-network.ru. [malformed]	256	256	false
Dec 6, 2024 11:29:20.116072893 CET	192.168.2.23	8.8.8.8	0xa161	Standard query (0)	server.eye-network.ru. [malformed]	256	256	false
Dec 6, 2024 11:29:20.241662025 CET	192.168.2.23	8.8.8.8	0xa161	Standard query (0)	server.eye-network.ru. [malformed]	256	256	false
Dec 6, 2024 11:29:20.365753889 CET	192.168.2.23	8.8.8.8	0xa161	Standard query (0)	server.eye-network.ru. [malformed]	256	256	false
Dec 6, 2024 11:29:20.490572929 CET	192.168.2.23	8.8.8.8	0xa161	Standard query (0)	server.eye-network.ru. [malformed]	256	256	false
Dec 6, 2024 11:29:25.253856897 CET	192.168.2.23	8.8.8.8	0x393f	Standard query (0)	server.eye-network.ru. [malformed]	256	261	false
Dec 6, 2024 11:29:25.379240990 CET	192.168.2.23	8.8.8.8	0x393f	Standard query (0)	server.eye-network.ru. [malformed]	256	261	false
Dec 6, 2024 11:29:25.504554987 CET	192.168.2.23	8.8.8.8	0x393f	Standard query (0)	server.eye-network.ru. [malformed]	256	261	false
Dec 6, 2024 11:29:25.628312111 CET	192.168.2.23	8.8.8.8	0x393f	Standard query (0)	server.eye-network.ru. [malformed]	256	261	false
Dec 6, 2024 11:29:25.752089024 CET	192.168.2.23	8.8.8.8	0x393f	Standard query (0)	server.eye-network.ru. [malformed]	256	261	false
Dec 6, 2024 11:29:33.502403021 CET	192.168.2.23	8.8.8.8	0x2c3	Standard query (0)	server.eye-network.ru. [malformed]	256	269	false
Dec 6, 2024 11:29:33.633769035 CET	192.168.2.23	8.8.8.8	0x2c3	Standard query (0)	server.eye-network.ru. [malformed]	256	269	false
Dec 6, 2024 11:29:33.765335083 CET	192.168.2.23	8.8.8.8	0x2c3	Standard query (0)	server.eye-network.ru. [malformed]	256	269	false
Dec 6, 2024 11:29:33.893486023 CET	192.168.2.23	8.8.8.8	0x2c3	Standard query (0)	server.eye-network.ru. [malformed]	256	269	false
Dec 6, 2024 11:29:34.021374941 CET	192.168.2.23	8.8.8.8	0x2c3	Standard query (0)	server.eye-network.ru. [malformed]	256	270	false
Dec 6, 2024 11:29:34.296974897 CET	192.168.2.23	1.1.1.1	0x6418	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:29:35.808343887 CET	192.168.2.23	8.8.8.8	0x30e8	Standard query (0)	server.eye-network.ru. [malformed]	256	271	false
Dec 6, 2024 11:29:35.932715893 CET	192.168.2.23	8.8.8.8	0x30e8	Standard query (0)	server.eye-network.ru. [malformed]	256	271	false
Dec 6, 2024 11:29:36.056299925 CET	192.168.2.23	8.8.8.8	0x30e8	Standard query (0)	server.eye-network.ru. [malformed]	256	272	false
Dec 6, 2024 11:29:36.188715935 CET	192.168.2.23	8.8.8.8	0x30e8	Standard query (0)	server.eye-network.ru. [malformed]	256	272	false
Dec 6, 2024 11:29:36.312504053 CET	192.168.2.23	8.8.8.8	0x30e8	Standard query (0)	server.eye-network.ru. [malformed]	256	272	false
Dec 6, 2024 11:29:44.076324940 CET	192.168.2.23	8.8.8.8	0x6772	Standard query (0)	server.eye-network.ru. [malformed]	256	280	false
Dec 6, 2024 11:29:44.205338955 CET	192.168.2.23	8.8.8.8	0x6772	Standard query (0)	server.eye-network.ru. [malformed]	256	280	false
Dec 6, 2024 11:29:44.343280077 CET	192.168.2.23	8.8.8.8	0x6772	Standard query (0)	server.eye-network.ru. [malformed]	256	280	false
Dec 6, 2024 11:29:44.470853090 CET	192.168.2.23	8.8.8.8	0x6772	Standard query (0)	server.eye-network.ru. [malformed]	256	280	false
Dec 6, 2024 11:29:44.883078098 CET	192.168.2.23	8.8.8.8	0x6772	Standard query (0)	server.eye-network.ru. [malformed]	256	280	false
Dec 6, 2024 11:29:47.854401112 CET	192.168.2.23	1.1.1.1	0xae67	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:29:48.663465023 CET	192.168.2.23	8.8.8.8	0xde09	Standard query (0)	server.eye-network.ru. [malformed]	256	284	false
Dec 6, 2024 11:29:48.799336910 CET	192.168.2.23	8.8.8.8	0xde09	Standard query (0)	server.eye-network.ru. [malformed]	256	284	false
Dec 6, 2024 11:29:48.926537037 CET	192.168.2.23	8.8.8.8	0xde09	Standard query (0)	server.eye-network.ru. [malformed]	256	284	false
Dec 6, 2024 11:29:49.055512905 CET	192.168.2.23	8.8.8.8	0xde09	Standard query (0)	server.eye-network.ru. [malformed]	256	285	false
Dec 6, 2024 11:29:49.179527044 CET	192.168.2.23	8.8.8.8	0xde09	Standard query (0)	server.eye-network.ru. [malformed]	256	285	false
Dec 6, 2024 11:29:56.942157984 CET	192.168.2.23	8.8.8.8	0x5605	Standard query (0)	server.eye-network.ru. [malformed]	256	292	false
Dec 6, 2024 11:29:57.118479967 CET	192.168.2.23	8.8.8.8	0x5605	Standard query (0)	server.eye-network.ru. [malformed]	256	293	false
Dec 6, 2024 11:29:57.247188091 CET	192.168.2.23	8.8.8.8	0x5605	Standard query (0)	server.eye-network.ru. [malformed]	256	293	false
Dec 6, 2024 11:29:57.377387047 CET	192.168.2.23	8.8.8.8	0x5605	Standard query (0)	server.eye-network.ru. [malformed]	256	293	false
Dec 6, 2024 11:29:57.506402969 CET	192.168.2.23	8.8.8.8	0x5605	Standard query (0)	server.eye-network.ru. [malformed]	256	293	false
Dec 6, 2024 11:30:00.289575100 CET	192.168.2.23	8.8.8.8	0x7afa	Standard query (0)	server.eye-network.ru. [malformed]	256	296	false
Dec 6, 2024 11:30:00.416835070 CET	192.168.2.23	8.8.8.8	0x7afa	Standard query (0)	server.eye-network.ru. [malformed]	256	296	false
Dec 6, 2024 11:30:00.543297052 CET	192.168.2.23	8.8.8.8	0x7afa	Standard query (0)	server.eye-network.ru. [malformed]	256	296	false
Dec 6, 2024 11:30:00.676662922 CET	192.168.2.23	8.8.8.8	0x7afa	Standard query (0)	server.eye-network.ru. [malformed]	256	296	false
Dec 6, 2024 11:30:00.803103924 CET	192.168.2.23	8.8.8.8	0x7afa	Standard query (0)	server.eye-network.ru. [malformed]	256	296	false
Dec 6, 2024 11:30:01.108486891 CET	192.168.2.23	1.1.1.1	0xa7b6	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:30:01.108486891 CET	192.168.2.23	1.1.1.1	0xb95	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:30:10.602478981 CET	192.168.2.23	8.8.8.8	0xf2e	Standard query (0)	server.eye-network.ru. [malformed]	256	306	false
Dec 6, 2024 11:30:10.731009007 CET	192.168.2.23	8.8.8.8	0xf2e	Standard query (0)	server.eye-network.ru. [malformed]	256	306	false
Dec 6, 2024 11:30:10.867598057 CET	192.168.2.23	8.8.8.8	0xf2e	Standard query (0)	server.eye-network.ru. [malformed]	256	306	false
Dec 6, 2024 11:30:11.004654884 CET	192.168.2.23	8.8.8.8	0xf2e	Standard query (0)	server.eye-network.ru. [malformed]	256	307	false
Dec 6, 2024 11:30:11.142483950 CET	192.168.2.23	8.8.8.8	0xf2e	Standard query (0)	server.eye-network.ru. [malformed]	256	307	false
Dec 6, 2024 11:30:14.359345913 CET	192.168.2.23	1.1.1.1	0xa9f7	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:30:19.943766117 CET	192.168.2.23	8.8.8.8	0x1b63	Standard query (0)	server.eye-network.ru. [malformed]	256	316	false
Dec 6, 2024 11:30:20.067964077 CET	192.168.2.23	8.8.8.8	0x1b63	Standard query (0)	server.eye-network.ru. [malformed]	256	316	false
Dec 6, 2024 11:30:20.191431046 CET	192.168.2.23	8.8.8.8	0x1b63	Standard query (0)	server.eye-network.ru. [malformed]	256	316	false
Dec 6, 2024 11:30:20.316521883 CET	192.168.2.23	8.8.8.8	0x1b63	Standard query (0)	server.eye-network.ru. [malformed]	256	316	false
Dec 6, 2024 11:30:20.463691950 CET	192.168.2.23	8.8.8.8	0x1b63	Standard query (0)	server.eye-network.ru. [malformed]	256	316	false
Dec 6, 2024 11:30:28.822442055 CET	192.168.2.23	1.1.1.1	0x7624	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:30:31.371001005 CET	192.168.2.23	8.8.8.8	0xd7a6	Standard query (0)	server.eye-network.ru. [malformed]	256	327	false
Dec 6, 2024 11:30:31.497612000 CET	192.168.2.23	8.8.8.8	0xd7a6	Standard query (0)	server.eye-network.ru. [malformed]	256	327	false
Dec 6, 2024 11:30:31.631556034 CET	192.168.2.23	8.8.8.8	0xd7a6	Standard query (0)	server.eye-network.ru. [malformed]	256	327	false
Dec 6, 2024 11:30:31.758539915 CET	192.168.2.23	8.8.8.8	0xd7a6	Standard query (0)	server.eye-network.ru. [malformed]	256	327	false
Dec 6, 2024 11:30:31.885495901 CET	192.168.2.23	8.8.8.8	0xd7a6	Standard query (0)	server.eye-network.ru. [malformed]	256	327	false
Dec 6, 2024 11:30:35.747514009 CET	192.168.2.23	8.8.8.8	0xde01	Standard query (0)	server.eye-network.ru. [malformed]	256	331	false
Dec 6, 2024 11:30:35.871085882 CET	192.168.2.23	8.8.8.8	0xde01	Standard query (0)	server.eye-network.ru. [malformed]	256	331	false
Dec 6, 2024 11:30:35.994405985 CET	192.168.2.23	8.8.8.8	0xde01	Standard query (0)	server.eye-network.ru. [malformed]	256	332	false
Dec 6, 2024 11:30:36.322912931 CET	192.168.2.23	8.8.8.8	0xde01	Standard query (0)	server.eye-network.ru. [malformed]	256	332	false
Dec 6, 2024 11:30:36.446727037 CET	192.168.2.23	8.8.8.8	0xde01	Standard query (0)	server.eye-network.ru. [malformed]	256	332	false
Dec 6, 2024 11:30:38.204719067 CET	192.168.2.23	8.8.8.8	0xb44	Standard query (0)	server.eye-network.ru. [malformed]	256	334	false
Dec 6, 2024 11:30:38.331132889 CET	192.168.2.23	8.8.8.8	0xb44	Standard query (0)	server.eye-network.ru. [malformed]	256	334	false
Dec 6, 2024 11:30:38.464538097 CET	192.168.2.23	8.8.8.8	0xb44	Standard query (0)	server.eye-network.ru. [malformed]	256	334	false
Dec 6, 2024 11:30:38.598046064 CET	192.168.2.23	8.8.8.8	0xb44	Standard query (0)	server.eye-network.ru. [malformed]	256	334	false
Dec 6, 2024 11:30:38.726929903 CET	192.168.2.23	8.8.8.8	0xb44	Standard query (0)	server.eye-network.ru. [malformed]	256	334	false
Dec 6, 2024 11:30:41.732203007 CET	192.168.2.23	1.1.1.1	0x9654	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:30:42.509474993 CET	192.168.2.23	8.8.8.8	0xea8	Standard query (0)	server.eye-network.ru. [malformed]	256	338	false
Dec 6, 2024 11:30:42.634248018 CET	192.168.2.23	8.8.8.8	0xea8	Standard query (0)	server.eye-network.ru. [malformed]	256	338	false
Dec 6, 2024 11:30:42.763823032 CET	192.168.2.23	8.8.8.8	0xea8	Standard query (0)	server.eye-network.ru. [malformed]	256	338	false
Dec 6, 2024 11:30:42.896930933 CET	192.168.2.23	8.8.8.8	0xea8	Standard query (0)	server.eye-network.ru. [malformed]	256	338	false
Dec 6, 2024 11:30:43.025895119 CET	192.168.2.23	8.8.8.8	0xea8	Standard query (0)	server.eye-network.ru. [malformed]	256	339	false
Dec 6, 2024 11:30:47.788479090 CET	192.168.2.23	8.8.8.8	0xd606	Standard query (0)	server.eye-network.ru. [malformed]	256	343	false
Dec 6, 2024 11:30:48.130198956 CET	192.168.2.23	8.8.8.8	0xd606	Standard query (0)	server.eye-network.ru. [malformed]	256	344	false
Dec 6, 2024 11:30:48.262381077 CET	192.168.2.23	8.8.8.8	0xd606	Standard query (0)	server.eye-network.ru. [malformed]	256	344	false
Dec 6, 2024 11:30:48.387352943 CET	192.168.2.23	8.8.8.8	0xd606	Standard query (0)	server.eye-network.ru. [malformed]	256	344	false
Dec 6, 2024 11:30:48.518457890 CET	192.168.2.23	8.8.8.8	0xd606	Standard query (0)	server.eye-network.ru. [malformed]	256	344	false
Dec 6, 2024 11:30:55.044749975 CET	192.168.2.23	1.1.1.1	0xa042	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:30:57.283977032 CET	192.168.2.23	8.8.8.8	0xcfa5	Standard query (0)	server.eye-network.ru. [malformed]	256	353	false
Dec 6, 2024 11:30:57.410068989 CET	192.168.2.23	8.8.8.8	0xcfa5	Standard query (0)	server.eye-network.ru. [malformed]	256	353	false
Dec 6, 2024 11:30:57.534794092 CET	192.168.2.23	8.8.8.8	0xcfa5	Standard query (0)	server.eye-network.ru. [malformed]	256	353	false
Dec 6, 2024 11:30:57.658097029 CET	192.168.2.23	8.8.8.8	0xcfa5	Standard query (0)	server.eye-network.ru. [malformed]	256	353	false
Dec 6, 2024 11:30:57.781907082 CET	192.168.2.23	8.8.8.8	0xcfa5	Standard query (0)	server.eye-network.ru. [malformed]	256	353	false
Dec 6, 2024 11:31:04.540081024 CET	192.168.2.23	8.8.8.8	0x99f7	Standard query (0)	server.eye-network.ru. [malformed]	256	360	false
Dec 6, 2024 11:31:04.674479961 CET	192.168.2.23	8.8.8.8	0x99f7	Standard query (0)	server.eye-network.ru. [malformed]	256	360	false
Dec 6, 2024 11:31:04.804389000 CET	192.168.2.23	8.8.8.8	0x99f7	Standard query (0)	server.eye-network.ru. [malformed]	256	360	false
Dec 6, 2024 11:31:04.977741957 CET	192.168.2.23	8.8.8.8	0x99f7	Standard query (0)	server.eye-network.ru. [malformed]	256	361	false
Dec 6, 2024 11:31:05.114139080 CET	192.168.2.23	8.8.8.8	0x99f7	Standard query (0)	server.eye-network.ru. [malformed]	256	361	false
Dec 6, 2024 11:31:06.962680101 CET	192.168.2.23	1.1.1.1	0x2806	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:31:06.962737083 CET	192.168.2.23	1.1.1.1	0x254b	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:31:15.047240973 CET	192.168.2.23	1.1.1.1	0xe978	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:31:15.891442060 CET	192.168.2.23	8.8.8.8	0x87be	Standard query (0)	server.eye-network.ru. [malformed]	256	371	false
Dec 6, 2024 11:31:16.015589952 CET	192.168.2.23	8.8.8.8	0x87be	Standard query (0)	server.eye-network.ru. [malformed]	256	372	false
Dec 6, 2024 11:31:16.069370031 CET	192.168.2.23	1.1.1.1	0x4d24	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:31:16.139870882 CET	192.168.2.23	8.8.8.8	0x87be	Standard query (0)	server.eye-network.ru. [malformed]	256	372	false
Dec 6, 2024 11:31:16.266427040 CET	192.168.2.23	8.8.8.8	0x87be	Standard query (0)	server.eye-network.ru. [malformed]	256	372	false
Dec 6, 2024 11:31:16.391501904 CET	192.168.2.23	8.8.8.8	0x87be	Standard query (0)	server.eye-network.ru. [malformed]	256	372	false
Dec 6, 2024 11:31:18.123150110 CET	192.168.2.23	1.1.1.1	0xd006	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:31:18.369195938 CET	192.168.2.23	1.1.1.1	0x2962	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 6, 2024 11:31:20.141041040 CET	192.168.2.23	8.8.8.8	0x6f65	Standard query (0)	server.eye-network.ru. [malformed]	256	376	false
Dec 6, 2024 11:31:20.264708042 CET	192.168.2.23	8.8.8.8	0x6f65	Standard query (0)	server.eye-network.ru. [malformed]	256	376	false
Dec 6, 2024 11:31:20.388596058 CET	192.168.2.23	8.8.8.8	0x6f65	Standard query (0)	server.eye-network.ru. [malformed]	256	376	false
Dec 6, 2024 11:31:20.514718056 CET	192.168.2.23	8.8.8.8	0x6f65	Standard query (0)	server.eye-network.ru. [malformed]	256	376	false
Dec 6, 2024 11:31:20.638494968 CET	192.168.2.23	8.8.8.8	0x6f65	Standard query (0)	server.eye-network.ru. [malformed]	256	376	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 6, 2024 11:28:52.921008110 CET	8.8.8.8	192.168.2.23	0x4b80	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:53.059039116 CET	8.8.8.8	192.168.2.23	0x4b80	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:53.196697950 CET	8.8.8.8	192.168.2.23	0x4b80	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:53.334081888 CET	8.8.8.8	192.168.2.23	0x4b80	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:53.538973093 CET	8.8.8.8	192.168.2.23	0x4b80	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:58.968229055 CET	1.1.1.1	192.168.2.23	0x67e0	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:28:58.968229055 CET	1.1.1.1	192.168.2.23	0x67e0	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:30:01.347187042 CET	1.1.1.1	192.168.2.23	0xb95	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:30:01.347187042 CET	1.1.1.1	192.168.2.23	0xb95	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:31:07.198402882 CET	1.1.1.1	192.168.2.23	0x2806	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:31:07.198402882 CET	1.1.1.1	192.168.2.23	0x2806	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-12-06 10:29:02 UTC	307	OUT	POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1 Host: daisy.ubuntu.com Accept: / Content-Type: application/octet-stream X-Whoopsie-Version: 0.2.69ubuntu0.3 Content-Length: 164887 Expect: 100-continue
2024-12-06 10:29:02 UTC	25	IN	HTTP/1.1 100 Continue
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61 Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20 Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67 Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37 Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73 Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
2024-12-06 10:29:02 UTC	16384	OUT	Data Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "_source" "server/udev"Aug 17 20:25
2024-12-06 10:29:03 UTC	279	IN	HTTP/1.1 400 Bad Request Date: Fri, 06 Dec 2024 10:29:03 GMT Server: gunicorn/19.7.1 X-Daisy-Revision-Number: 979 X-Oops-Repository-Version: 0.0.0 Strict-Transport-Security: max-age=2592000 Connection: close Transfer-Encoding: chunked 17 Crash already reported. 0

Start time (UTC):	10:28:44
Start date (UTC):	06/12/2024
Path:	/usr/bin/dash
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	10:28:51
Start date (UTC):	06/12/2024
Path:	/tmp/Aqua.m68k.elf
Arguments:	/tmp/Aqua.m68k.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	10:28:52
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:28:53
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:28:54
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:28:55
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:28:56
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:28:57
Start date (UTC):	06/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	10:28:58
Start date (UTC):	06/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	10:28:59
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:29:00
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:29:06
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.m68k.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/journal/streams/.#9:79067FLD45B

/run/systemd/journal/streams/.#9:79068NkKwTE

/run/systemd/journal/streams/.#9:79069irMOIB

/run/systemd/journal/streams/.#9:79070Gr7PoD

/run/systemd/journal/streams/.#9:79071uWo00C

/run/systemd/journal/streams/.#9:79072S4BfTE

/run/systemd/journal/streams/.#9:79079xpucvC

/run/systemd/journal/streams/.#9:79080KMdYPE

/run/systemd/journal/streams/.#9:79081dt1H9D

/run/systemd/journal/streams/.#9:79094Y387aE

/run/systemd/journal/streams/.#9:79095qbFCTB

/run/systemd/journal/streams/.#9:79193zygqzD

/run/systemd/journal/streams/.#9:79266vnJLiE

/run/systemd/journal/streams/.#9:81038p1OZId

/run/systemd/journal/streams/.#9:81039SkLFvf

/run/systemd/journal/streams/.#9:810406IWcKg

/run/systemd/journal/streams/.#9:81041kmpeSh

/run/systemd/journal/streams/.#9:81042nynJHh

/run/systemd/journal/streams/.#9:8104317uCmh

/run/systemd/journal/streams/.#9:81044mDAqae

/run/systemd/journal/streams/.#9:81045Z0O38g

/run/systemd/journal/streams/.#9:81046dgQGze

/run/systemd/journal/streams/.#9:81053Ixl92e

/run/systemd/journal/streams/.#9:81059g1KmOd

/run/systemd/journal/streams/.#9:810689YHyyd

/run/systemd/journal/streams/.#9:81238xkd2Od

Linux Analysis Report
Aqua.m68k.elf

Start time (UTC):	10:29:07
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:29:09
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:29:10
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:29:11
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	10:29:12
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	10:29:13
Start date (UTC):	06/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	10:29:14
Start date (UTC):	06/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	10:29:16
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:29:17
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:29:25
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75