Edit tour

Linux Analysis Report
Aqua.ppc.elf

Overview

General Information

Sample name:	Aqua.ppc.elf
Analysis ID:	1569913
MD5:	433d4338f05ba7de2c09cdcb2c3a6131
SHA1:	c7136669dea59e3ed9a0052886104b97becc5710
SHA256:	1bb61516ab526b599de0916d5380ef34792f66fa40e10ab96119cd06bc2f17f6
Tags:	elfMiraiuser-lontze7
Infos:

Detection

Mirai

Score:	88
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1569913
Start date and time:	2024-12-06 11:31:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.ppc.elf
Detection:	MAL
Classification:	mal88.spre.troj.evad.linELF@0/252@230/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Aqua.ppc.elf

Runtime Messages

Command:	/tmp/Aqua.ppc.elf
PID:	6269
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.ppc.elf (PID: 6269, Parent: 6192, MD5: ae65271c943d3451b7f026d1fadccea6) Arguments: /tmp/Aqua.ppc.elf

Aqua.ppc.elf New Fork (PID: 6271, Parent: 6269)

Aqua.ppc.elf New Fork (PID: 6273, Parent: 6271)

gnome-session-binary New Fork (PID: 6275, Parent: 1477)

sh (PID: 6275, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6275, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 6280, Parent: 1)

systemd-hostnamed (PID: 6280, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 6428, Parent: 1320)

Default (PID: 6428, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6432, Parent: 1320)

Default (PID: 6432, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6445, Parent: 1320)

Default (PID: 6445, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6448, Parent: 1)

dbus-daemon (PID: 6448, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6449, Parent: 1860)

pulseaudio (PID: 6449, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6450, Parent: 1)

rsyslogd (PID: 6450, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 6454, Parent: 2038)

fusermount (PID: 6454, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6465, Parent: 1)

systemd-logind (PID: 6465, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6512, Parent: 1)

rtkit-daemon (PID: 6512, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6524, Parent: 1)

dbus-daemon (PID: 6524, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6527, Parent: 1)

rsyslogd (PID: 6527, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6528, Parent: 1)

gpu-manager (PID: 6528, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6529, Parent: 6528)

sh (PID: 6529, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6530, Parent: 6529)

grep (PID: 6530, Parent: 6529, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6532, Parent: 6528)

sh (PID: 6532, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6533, Parent: 6532)

grep (PID: 6533, Parent: 6532, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6537, Parent: 6528)

sh (PID: 6537, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6538, Parent: 6537)

grep (PID: 6538, Parent: 6537, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6539, Parent: 6528)

sh (PID: 6539, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6540, Parent: 6539)

grep (PID: 6540, Parent: 6539, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6541, Parent: 6528)

sh (PID: 6541, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6542, Parent: 6541)

grep (PID: 6542, Parent: 6541, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6543, Parent: 6528)

sh (PID: 6543, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6544, Parent: 6543)

grep (PID: 6544, Parent: 6543, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6548, Parent: 6528)

sh (PID: 6548, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6550, Parent: 6548)

grep (PID: 6550, Parent: 6548, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6551, Parent: 6528)

sh (PID: 6551, Parent: 6528, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6552, Parent: 6551)

grep (PID: 6552, Parent: 6551, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6545, Parent: 1)

agetty (PID: 6545, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6555, Parent: 1)

generate-config (PID: 6555, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6556, Parent: 6555)

pkill (PID: 6556, Parent: 6555, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6558, Parent: 1)

gdm-wait-for-drm (PID: 6558, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6563, Parent: 1)

dbus-daemon (PID: 6563, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6564, Parent: 1)

rsyslogd (PID: 6564, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6573, Parent: 1)

systemd-logind (PID: 6573, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6633, Parent: 1)

journalctl (PID: 6633, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6634, Parent: 1)

systemd-journald (PID: 6634, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6636, Parent: 1)

dbus-daemon (PID: 6636, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6637, Parent: 1)

agetty (PID: 6637, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6638, Parent: 1)

rsyslogd (PID: 6638, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6641, Parent: 1)

systemd-logind (PID: 6641, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6698, Parent: 1)

systemd-journald (PID: 6698, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6699, Parent: 1)

gpu-manager (PID: 6699, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6704, Parent: 6699)

sh (PID: 6704, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6705, Parent: 6704)

grep (PID: 6705, Parent: 6704, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6706, Parent: 6699)

sh (PID: 6706, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6707, Parent: 6706)

grep (PID: 6707, Parent: 6706, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6708, Parent: 6699)

sh (PID: 6708, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6709, Parent: 6708)

grep (PID: 6709, Parent: 6708, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6711, Parent: 6699)

sh (PID: 6711, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6712, Parent: 6711)

grep (PID: 6712, Parent: 6711, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6714, Parent: 6699)

sh (PID: 6714, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6715, Parent: 6714)

grep (PID: 6715, Parent: 6714, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6719, Parent: 6699)

sh (PID: 6719, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6720, Parent: 6719)

grep (PID: 6720, Parent: 6719, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6721, Parent: 6699)

sh (PID: 6721, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6722, Parent: 6721)

grep (PID: 6722, Parent: 6721, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6723, Parent: 6699)

sh (PID: 6723, Parent: 6699, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6724, Parent: 6723)

grep (PID: 6724, Parent: 6723, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6726, Parent: 1)

generate-config (PID: 6726, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6728, Parent: 6726)

pkill (PID: 6728, Parent: 6726, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6727, Parent: 1)

rsyslogd (PID: 6727, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6734, Parent: 1)

dbus-daemon (PID: 6734, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6738, Parent: 1)

systemd-logind (PID: 6738, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6799, Parent: 1)

gdm-wait-for-drm (PID: 6799, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6803, Parent: 1)

rsyslogd (PID: 6803, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6808, Parent: 1)

dbus-daemon (PID: 6808, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6811, Parent: 1)

rsyslogd (PID: 6811, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6818, Parent: 1)

systemd-logind (PID: 6818, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6877, Parent: 1)

systemd-journald (PID: 6877, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6879, Parent: 1)

dbus-daemon (PID: 6879, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6881, Parent: 1)

rsyslogd (PID: 6881, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6884, Parent: 1)

systemd-logind (PID: 6884, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6942, Parent: 1)

systemd-journald (PID: 6942, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6946, Parent: 1)

gpu-manager (PID: 6946, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6950, Parent: 6946)

sh (PID: 6950, Parent: 6946, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6951, Parent: 6950)

grep (PID: 6951, Parent: 6950, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6952, Parent: 6946)

sh (PID: 6952, Parent: 6946, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6953, Parent: 6952)

grep (PID: 6953, Parent: 6952, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6955, Parent: 6946)

sh (PID: 6955, Parent: 6946, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6956, Parent: 6955)

grep (PID: 6956, Parent: 6955, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6948, Parent: 1)

dbus-daemon (PID: 6948, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6949, Parent: 1)

agetty (PID: 6949, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6957, Parent: 1)

rsyslogd (PID: 6957, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6958, Parent: 1)

generate-config (PID: 6958, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6959, Parent: 6958)

pkill (PID: 6959, Parent: 6958, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6960, Parent: 1)

dbus-daemon (PID: 6960, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6962, Parent: 1)

rsyslogd (PID: 6962, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6963, Parent: 1)

dbus-daemon (PID: 6963, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6968, Parent: 1)

gpu-manager (PID: 6968, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6970, Parent: 6968)

sh (PID: 6970, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6971, Parent: 6970)

grep (PID: 6971, Parent: 6970, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6974, Parent: 6968)

sh (PID: 6974, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6975, Parent: 6974)

grep (PID: 6975, Parent: 6974, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6976, Parent: 6968)

sh (PID: 6976, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6977, Parent: 6976)

grep (PID: 6977, Parent: 6976, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6979, Parent: 6968)

sh (PID: 6979, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6980, Parent: 6979)

grep (PID: 6980, Parent: 6979, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6982, Parent: 6968)

sh (PID: 6982, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6983, Parent: 6982)

grep (PID: 6983, Parent: 6982, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6985, Parent: 6968)

sh (PID: 6985, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6986, Parent: 6985)

grep (PID: 6986, Parent: 6985, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6987, Parent: 6968)

sh (PID: 6987, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6988, Parent: 6987)

grep (PID: 6988, Parent: 6987, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6989, Parent: 6968)

sh (PID: 6989, Parent: 6968, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6990, Parent: 6989)

grep (PID: 6990, Parent: 6989, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6991, Parent: 1)

generate-config (PID: 6991, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6992, Parent: 6991)

pkill (PID: 6992, Parent: 6991, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6995, Parent: 1)

gdm-wait-for-drm (PID: 6995, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6997, Parent: 1)

rsyslogd (PID: 6997, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6998, Parent: 1)

dbus-daemon (PID: 6998, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7003, Parent: 1)

systemd-logind (PID: 7003, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7060, Parent: 1)

systemd-journald (PID: 7060, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7062, Parent: 1)

rsyslogd (PID: 7062, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7063, Parent: 1)

dbus-daemon (PID: 7063, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7068, Parent: 1)

systemd-logind (PID: 7068, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7116, Parent: 1)

systemd-journald (PID: 7116, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7129, Parent: 1)

agetty (PID: 7129, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7130, Parent: 1)

gpu-manager (PID: 7130, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7132, Parent: 7130)

sh (PID: 7132, Parent: 7130, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7133, Parent: 7132)

grep (PID: 7133, Parent: 7132, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7137, Parent: 7130)

sh (PID: 7137, Parent: 7130, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7138, Parent: 7137)

grep (PID: 7138, Parent: 7137, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7139, Parent: 7130)

sh (PID: 7139, Parent: 7130, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7142, Parent: 7139)

grep (PID: 7142, Parent: 7139, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7131, Parent: 1)

rsyslogd (PID: 7131, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7141, Parent: 1)

dbus-daemon (PID: 7141, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7143, Parent: 1)

generate-config (PID: 7143, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7144, Parent: 7143)

pkill (PID: 7144, Parent: 7143, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7145, Parent: 1)

rsyslogd (PID: 7145, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7147, Parent: 1)

dbus-daemon (PID: 7147, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7152, Parent: 1)

gpu-manager (PID: 7152, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7153, Parent: 7152)

sh (PID: 7153, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7154, Parent: 7153)

grep (PID: 7154, Parent: 7153, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7215, Parent: 7152)

sh (PID: 7215, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7216, Parent: 7215)

grep (PID: 7216, Parent: 7215, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7218, Parent: 7152)

sh (PID: 7218, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7219, Parent: 7218)

grep (PID: 7219, Parent: 7218, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7220, Parent: 7152)

sh (PID: 7220, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7221, Parent: 7220)

grep (PID: 7221, Parent: 7220, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7222, Parent: 7152)

sh (PID: 7222, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7223, Parent: 7222)

grep (PID: 7223, Parent: 7222, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7226, Parent: 7152)

sh (PID: 7226, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7227, Parent: 7226)

grep (PID: 7227, Parent: 7226, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7228, Parent: 7152)

sh (PID: 7228, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7229, Parent: 7228)

grep (PID: 7229, Parent: 7228, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7230, Parent: 7152)

sh (PID: 7230, Parent: 7152, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7231, Parent: 7230)

grep (PID: 7231, Parent: 7230, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7158, Parent: 1)

systemd-logind (PID: 7158, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7232, Parent: 1)

generate-config (PID: 7232, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7233, Parent: 7232)

pkill (PID: 7233, Parent: 7232, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7234, Parent: 1)

gdm-wait-for-drm (PID: 7234, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7238, Parent: 1)

rsyslogd (PID: 7238, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7243, Parent: 1)

dbus-daemon (PID: 7243, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7244, Parent: 1)

systemd-journald (PID: 7244, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7247, Parent: 1)

systemd-logind (PID: 7247, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7305, Parent: 1)

rsyslogd (PID: 7305, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7307, Parent: 1)

dbus-daemon (PID: 7307, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7308, Parent: 1)

systemd-journald (PID: 7308, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7311, Parent: 1)

systemd-logind (PID: 7311, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7371, Parent: 1)

agetty (PID: 7371, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7372, Parent: 1)

gpu-manager (PID: 7372, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7374, Parent: 7372)

sh (PID: 7374, Parent: 7372, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7375, Parent: 7374)

grep (PID: 7375, Parent: 7374, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7379, Parent: 7372)

sh (PID: 7379, Parent: 7372, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7380, Parent: 7379)

grep (PID: 7380, Parent: 7379, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7384, Parent: 7372)

sh (PID: 7384, Parent: 7372, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7385, Parent: 7384)

grep (PID: 7385, Parent: 7384, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7373, Parent: 1)

rsyslogd (PID: 7373, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7387, Parent: 1)

dbus-daemon (PID: 7387, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7388, Parent: 1)

generate-config (PID: 7388, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7389, Parent: 7388)

pkill (PID: 7389, Parent: 7388, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7390, Parent: 1)

rsyslogd (PID: 7390, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7392, Parent: 1)

dbus-daemon (PID: 7392, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7397, Parent: 1)

gpu-manager (PID: 7397, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7398, Parent: 7397)

sh (PID: 7398, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7399, Parent: 7398)

grep (PID: 7399, Parent: 7398, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7401, Parent: 7397)

sh (PID: 7401, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7402, Parent: 7401)

grep (PID: 7402, Parent: 7401, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7404, Parent: 7397)

sh (PID: 7404, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7405, Parent: 7404)

grep (PID: 7405, Parent: 7404, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7406, Parent: 7397)

sh (PID: 7406, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7407, Parent: 7406)

grep (PID: 7407, Parent: 7406, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7408, Parent: 7397)

sh (PID: 7408, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7409, Parent: 7408)

grep (PID: 7409, Parent: 7408, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7410, Parent: 7397)

sh (PID: 7410, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7411, Parent: 7410)

grep (PID: 7411, Parent: 7410, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7412, Parent: 7397)

sh (PID: 7412, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7413, Parent: 7412)

grep (PID: 7413, Parent: 7412, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7414, Parent: 7397)

sh (PID: 7414, Parent: 7397, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7415, Parent: 7414)

grep (PID: 7415, Parent: 7414, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7418, Parent: 1)

generate-config (PID: 7418, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7419, Parent: 7418)

pkill (PID: 7419, Parent: 7418, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7420, Parent: 1)

gdm-wait-for-drm (PID: 7420, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7424, Parent: 1)

rsyslogd (PID: 7424, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7429, Parent: 1)

dbus-daemon (PID: 7429, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7430, Parent: 1)

systemd-journald (PID: 7430, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7433, Parent: 1)

systemd-logind (PID: 7433, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7491, Parent: 1)

rsyslogd (PID: 7491, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7492, Parent: 1)

dbus-daemon (PID: 7492, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7494, Parent: 1)

systemd-journald (PID: 7494, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7497, Parent: 1)

systemd-logind (PID: 7497, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7557, Parent: 1)

agetty (PID: 7557, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7558, Parent: 1)

gpu-manager (PID: 7558, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7560, Parent: 7558)

sh (PID: 7560, Parent: 7558, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7561, Parent: 7560)

grep (PID: 7561, Parent: 7560, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7563, Parent: 7558)

sh (PID: 7563, Parent: 7558, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7564, Parent: 7563)

grep (PID: 7564, Parent: 7563, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7569, Parent: 7558)

sh (PID: 7569, Parent: 7558, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7570, Parent: 7569)

grep (PID: 7570, Parent: 7569, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7559, Parent: 1)

rsyslogd (PID: 7559, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7568, Parent: 1)

dbus-daemon (PID: 7568, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7572, Parent: 1)

generate-config (PID: 7572, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7573, Parent: 7572)

pkill (PID: 7573, Parent: 7572, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7576, Parent: 1)

rsyslogd (PID: 7576, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7577, Parent: 1)

dbus-daemon (PID: 7577, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7583, Parent: 1)

gpu-manager (PID: 7583, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7584, Parent: 7583)

sh (PID: 7584, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7586, Parent: 7584)

grep (PID: 7586, Parent: 7584, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7588, Parent: 7583)

sh (PID: 7588, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7589, Parent: 7588)

grep (PID: 7589, Parent: 7588, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7590, Parent: 7583)

sh (PID: 7590, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7591, Parent: 7590)

grep (PID: 7591, Parent: 7590, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7592, Parent: 7583)

sh (PID: 7592, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7593, Parent: 7592)

grep (PID: 7593, Parent: 7592, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7594, Parent: 7583)

sh (PID: 7594, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7595, Parent: 7594)

grep (PID: 7595, Parent: 7594, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7596, Parent: 7583)

sh (PID: 7596, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7597, Parent: 7596)

grep (PID: 7597, Parent: 7596, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7598, Parent: 7583)

sh (PID: 7598, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7599, Parent: 7598)

grep (PID: 7599, Parent: 7598, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7600, Parent: 7583)

sh (PID: 7600, Parent: 7583, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7601, Parent: 7600)

grep (PID: 7601, Parent: 7600, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7602, Parent: 1)

generate-config (PID: 7602, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7603, Parent: 7602)

pkill (PID: 7603, Parent: 7602, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7606, Parent: 1)

gdm-wait-for-drm (PID: 7606, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7608, Parent: 1)

rsyslogd (PID: 7608, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7609, Parent: 1)

dbus-daemon (PID: 7609, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7617, Parent: 1860)

dbus-daemon (PID: 7617, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7618, Parent: 1)

systemd-journald (PID: 7618, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7619, Parent: 1860)

pulseaudio (PID: 7619, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7622, Parent: 1)

systemd-logind (PID: 7622, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7680, Parent: 1)

rsyslogd (PID: 7680, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7681, Parent: 1)

dbus-daemon (PID: 7681, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7683, Parent: 1)

systemd-journald (PID: 7683, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7687, Parent: 1)

gpu-manager (PID: 7687, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7748, Parent: 7687)

sh (PID: 7748, Parent: 7687, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7751, Parent: 7748)

grep (PID: 7751, Parent: 7748, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7753, Parent: 7687)

sh (PID: 7753, Parent: 7687, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7754, Parent: 7753)

grep (PID: 7754, Parent: 7753, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7758, Parent: 7687)

sh (PID: 7758, Parent: 7687, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7759, Parent: 7758)

grep (PID: 7759, Parent: 7758, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7690, Parent: 1)

systemd-logind (PID: 7690, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7747, Parent: 1)

agetty (PID: 7747, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7749, Parent: 1)

dbus-daemon (PID: 7749, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7750, Parent: 1)

rsyslogd (PID: 7750, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7760, Parent: 1860)

pulseaudio (PID: 7760, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7762, Parent: 1)

generate-config (PID: 7762, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7763, Parent: 7762)

pkill (PID: 7763, Parent: 7762, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7764, Parent: 1)

dbus-daemon (PID: 7764, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7765, Parent: 1)

rsyslogd (PID: 7765, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7773, Parent: 1)

rtkit-daemon (PID: 7773, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7777, Parent: 1)

polkitd (PID: 7777, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7781, Parent: 1)

gdm-wait-for-drm (PID: 7781, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7786, Parent: 1860)

dbus-daemon (PID: 7786, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7788, Parent: 1860)

pulseaudio (PID: 7788, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7790, Parent: 1)

dbus-daemon (PID: 7790, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7791, Parent: 1)

rsyslogd (PID: 7791, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7794, Parent: 1)

systemd-journald (PID: 7794, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7797, Parent: 1)

systemd-logind (PID: 7797, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7854, Parent: 1)

agetty (PID: 7854, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7855, Parent: 1)

dbus-daemon (PID: 7855, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7857, Parent: 1860)

pulseaudio (PID: 7857, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7858, Parent: 1)

rsyslogd (PID: 7858, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7859, Parent: 1)

gpu-manager (PID: 7859, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7860, Parent: 7859)

sh (PID: 7860, Parent: 7859, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7861, Parent: 7860)

grep (PID: 7861, Parent: 7860, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7867, Parent: 7859)

sh (PID: 7867, Parent: 7859, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7868, Parent: 7867)

grep (PID: 7868, Parent: 7867, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7870, Parent: 7859)

sh (PID: 7870, Parent: 7859, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7862, Parent: 1)

dbus-daemon (PID: 7862, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7871, Parent: 1)

rsyslogd (PID: 7871, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7872, Parent: 1)

generate-config (PID: 7872, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7874, Parent: 7872)

pkill (PID: 7874, Parent: 7872, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7873, Parent: 1860)

pulseaudio (PID: 7873, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7880, Parent: 1)

rtkit-daemon (PID: 7880, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7886, Parent: 1)

polkitd (PID: 7886, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7891, Parent: 1)

gdm-wait-for-drm (PID: 7891, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7896, Parent: 1860)

dbus-daemon (PID: 7896, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7898, Parent: 1)

rsyslogd (PID: 7898, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7903, Parent: 1860)

pulseaudio (PID: 7903, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7904, Parent: 1)

dbus-daemon (PID: 7904, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7905, Parent: 1)

rtkit-daemon (PID: 7905, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7908, Parent: 1)

systemd-logind (PID: 7908, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7967, Parent: 1)

polkitd (PID: 7967, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7971, Parent: 1)

systemd-journald (PID: 7971, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7975, Parent: 1)

rsyslogd (PID: 7975, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7977, Parent: 1)

dbus-daemon (PID: 7977, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7978, Parent: 1)

gpu-manager (PID: 7978, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7983, Parent: 7978)

sh (PID: 7983, Parent: 7978, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7984, Parent: 7983)

grep (PID: 7984, Parent: 7983, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7985, Parent: 7978)

sh (PID: 7985, Parent: 7978, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7986, Parent: 7985)

grep (PID: 7986, Parent: 7985, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7992, Parent: 7978)

sh (PID: 7992, Parent: 7978, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7988, Parent: 1860)

pulseaudio (PID: 7988, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7989, Parent: 1)

rsyslogd (PID: 7989, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7991, Parent: 1)

dbus-daemon (PID: 7991, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7993, Parent: 1)

generate-config (PID: 7993, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7994, Parent: 7993)

pkill (PID: 7994, Parent: 7993, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.ppc.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Aqua.ppc.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x219d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x219ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21aa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21ab4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21ac8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21adc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21af0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Memory Dumps

Source	Rule	Description	Author	Strings
6269.1.00007f894c001000.00007f894c026000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6269.1.00007f894c001000.00007f894c026000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x219d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x219ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a00:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a14:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a28:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a3c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a50:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a64:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a78:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21a8c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21aa0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21ab4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21ac8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21adc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21af0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b54:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x21b68:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: Aqua.ppc.elf PID: 6269	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Aqua.ppc.elf PID: 6269	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x18b0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18c4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18d8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x18ec:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1900:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1914:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1928:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x193c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1950:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1964:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1978:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x198c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19a0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19b4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19c8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19dc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x19f0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a04:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a18:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a2c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1a40:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Aqua.ppc.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: Aqua.ppc.elf

ReversingLabs: Detection: 39%

Source: /usr/bin/pkill (PID: 6556)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6728)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6959)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6992)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7144)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7233)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7389)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7419)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7573)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7603)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7760)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7763)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7874)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7873)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7903)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7988)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7994)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: Aqua.ppc.elf

String: EOF/proc//proc/%s/cmdlinewgetcurlftpechokillbashrebootshutdownhaltpoweroff[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: server.eye-network.ru. [malformed]

Source: global traffic

TCP traffic: 192.168.2.23:50022 -> 89.190.156.145:7733

Source: global traffic

HTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue

Source: /usr/sbin/rsyslogd (PID: 6450)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6527)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6564)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6638)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6727)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6803)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6811)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6881)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6957)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6962)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6997)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7062)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7131)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7145)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7238)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7305)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7373)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7390)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7424)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7491)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7559)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7576)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7608)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7680)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7750)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7765)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7791)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7858)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7871)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7898)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7975)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7989)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 6634)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6877)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 7060)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7116)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7244)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7308)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7430)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7494)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7618)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7683)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7794)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7971)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 109.202.202.202
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: server.eye-network.ru
Source: global traffic	DNS traffic detected: DNS query: server.eye-network.ru. [malformed]
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Source: syslog.215.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 37686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37686
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.ppc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6269.1.00007f894c001000.00007f894c026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: Aqua.ppc.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6275, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6251, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6252, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6446, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6448, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6449, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6450, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6523, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6524, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6527, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6545, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6100, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6282, result: no such process	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6558, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6562, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6563, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6564, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6565, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6634, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6635, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6636, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6699, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6725, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6637, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6727, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6729, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6734, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6802, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6802, result: no such process	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6803, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6698, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6799, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6807, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6811, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6877, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6878, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6879, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6880, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6881, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6946, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6948, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6957, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6958, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6960, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6961, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6949, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6962, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6963, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6884, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6942, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6995, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6996, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6997, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6998, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7003, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7060, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7061, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7062, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6999, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7063, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7130, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7131, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7140, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7141, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7143, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7129, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7145, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7146, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7147, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7116, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7158, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7234, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7237, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7238, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7242, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7243, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7244, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7247, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7304, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7305, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7306, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7307, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7372, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7373, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7386, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7387, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7388, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7371, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7390, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7391, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7392, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7308, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7311, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7420, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7423, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7424, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7428, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7429, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7430, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7433, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7490, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7491, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7492, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7493, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7558, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7559, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7568, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7571, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7572, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7557, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7576, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7577, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7494, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7497, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7606, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7607, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7608, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7609, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7610, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7617, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7618, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7622, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7679, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7680, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7681, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7619, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7682, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7687, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7749, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7750, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7747, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7760, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7761, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7764, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7765, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7683, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7690, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7781, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7786, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7787, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7788, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7789, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7790, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7791, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7855, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7856, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7857, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7858, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7859, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7854, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7862, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7871, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7873, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7794, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7891, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7896, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7897, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7898, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7899, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7904, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7903, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7975, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7976, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7977, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7978, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7972, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7988, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7989, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7990, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7991, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7971, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8070, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8072, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8075, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8076, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8077, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8083, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8085, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8091, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8149, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8150, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8151, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8155, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8157, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8169, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8249, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8250, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8254, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8257, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8259, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8148, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8248, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8326, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8327, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8331, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8332, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8337, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8343, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8345, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8350, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8354, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8418, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6275, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6251, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6252, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6446, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6448, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6449, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6450, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6523, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6524, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6527, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6545, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6100, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6282, result: no such process	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6558, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6562, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6563, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6564, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6565, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6634, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6635, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6636, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6699, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6725, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6637, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6727, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6729, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6734, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6802, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6802, result: no such process	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6803, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6698, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6799, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6807, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6811, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6877, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6878, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6879, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6880, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6881, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6946, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6948, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6957, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6958, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6960, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6961, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6949, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6962, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6963, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6884, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6942, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6995, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6996, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6997, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6998, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7003, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7060, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7061, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7062, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 6999, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7063, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7130, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7131, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7140, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7141, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7143, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7129, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7145, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7146, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7147, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7116, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7158, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7234, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7237, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7238, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7242, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7243, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7244, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7247, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7304, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7305, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7306, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7307, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7372, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7373, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7386, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7387, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7388, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7371, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7390, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7391, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7392, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7308, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7311, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7420, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7423, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7424, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7428, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7429, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7430, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7433, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7490, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7491, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7492, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7493, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7558, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7559, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7568, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7571, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7572, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7557, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7576, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7577, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7494, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7497, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7606, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7607, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7608, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7609, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7610, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7617, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7618, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7622, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7679, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7680, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7681, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7619, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7682, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7687, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7749, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7750, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7747, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7760, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7761, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7764, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7765, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7683, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7690, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7781, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7786, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7787, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7788, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7789, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7790, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7791, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7855, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7856, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7857, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7858, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7859, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7854, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7862, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7871, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7873, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7794, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7891, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7896, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7897, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7898, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7899, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7904, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7903, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7975, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7976, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7977, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7978, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7972, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7988, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7989, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7990, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7991, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 7971, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8070, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8072, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8075, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8076, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8077, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8083, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8085, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8091, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8149, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8150, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8151, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8155, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8157, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8169, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8249, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8250, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8254, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8257, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8259, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8148, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8248, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8326, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8327, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8331, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8332, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8337, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8343, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8345, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8350, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8354, result: successful	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	SIGKILL sent: pid: 8418, result: successful	Jump to behavior

Source: Aqua.ppc.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6269.1.00007f894c001000.00007f894c026000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: Aqua.ppc.elf PID: 6269, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal88.spre.troj.evad.linELF@0/252@230/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6448)	File: /proc/6448/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6454)	File: /proc/6454/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6524)	File: /proc/6524/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6563)	File: /proc/6563/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6636)	File: /proc/6636/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6734)	File: /proc/6734/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6808)	File: /proc/6808/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6879)	File: /proc/6879/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6948)	File: /proc/6948/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6960)	File: /proc/6960/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6963)	File: /proc/6963/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6998)	File: /proc/6998/mounts
Source: /usr/bin/dbus-daemon (PID: 7063)	File: /proc/7063/mounts
Source: /usr/bin/dbus-daemon (PID: 7141)	File: /proc/7141/mounts
Source: /usr/bin/dbus-daemon (PID: 7147)	File: /proc/7147/mounts
Source: /usr/bin/dbus-daemon (PID: 7243)	File: /proc/7243/mounts
Source: /usr/bin/dbus-daemon (PID: 7307)	File: /proc/7307/mounts
Source: /usr/bin/dbus-daemon (PID: 7387)	File: /proc/7387/mounts
Source: /usr/bin/dbus-daemon (PID: 7392)	File: /proc/7392/mounts
Source: /usr/bin/dbus-daemon (PID: 7429)	File: /proc/7429/mounts
Source: /usr/bin/dbus-daemon (PID: 7492)	File: /proc/7492/mounts
Source: /usr/bin/dbus-daemon (PID: 7568)	File: /proc/7568/mounts
Source: /usr/bin/dbus-daemon (PID: 7577)	File: /proc/7577/mounts
Source: /usr/bin/dbus-daemon (PID: 7609)	File: /proc/7609/mounts
Source: /usr/bin/dbus-daemon (PID: 7617)	File: /proc/7617/mounts
Source: /usr/bin/dbus-daemon (PID: 7681)	File: /proc/7681/mounts
Source: /usr/bin/dbus-daemon (PID: 7749)	File: /proc/7749/mounts
Source: /usr/bin/dbus-daemon (PID: 7764)	File: /proc/7764/mounts
Source: /usr/bin/dbus-daemon (PID: 7786)	File: /proc/7786/mounts
Source: /usr/bin/dbus-daemon (PID: 7790)	File: /proc/7790/mounts
Source: /usr/bin/dbus-daemon (PID: 7855)	File: /proc/7855/mounts
Source: /usr/bin/dbus-daemon (PID: 7862)	File: /proc/7862/mounts
Source: /usr/bin/dbus-daemon (PID: 7896)	File: /proc/7896/mounts
Source: /usr/bin/dbus-daemon (PID: 7904)	File: /proc/7904/mounts
Source: /usr/bin/dbus-daemon (PID: 7977)	File: /proc/7977/mounts
Source: /usr/bin/dbus-daemon (PID: 7991)	File: /proc/7991/mounts

Source: /usr/libexec/gsd-rfkill (PID: 6275)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 6275)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6280)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6465)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6465)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6465)	File: /run/systemd/seats/.#seat02BnGl1	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6641)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6641)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6641)	File: /run/systemd/seats/.#seat0p9XhPm	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79226flz2nF	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:792282Y7H2D	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79229EdOe9F	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:792303Psm7D	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79231cge42D	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79232ZnyAZH	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:792404xFMPE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:792414PPCJG	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79250Csun7E	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79251sQynmH	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79259VIafZE	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:793548djT3H	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	File: /run/systemd/journal/streams/.#9:79359tNNwdH	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6738)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6738)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6738)	File: /run/systemd/seats/.#seat07wNjVG	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6884)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6884)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6884)	File: /run/systemd/seats/.#seat0AwkUdJ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82426FAI7J7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82427EQgri7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82428NqrQA7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82429NEqEm6	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82431Oe4VE9	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82432oUOD38	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82433lSLnX6	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82434djbld8	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82435uAtY55	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82451OQdFd8	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82452ASZPK6	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:824609HyT96	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82469Hul0P7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82550FvJ8X7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	File: /run/systemd/journal/streams/.#9:82658DtFRv9	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 7003)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7003)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7068)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7068)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7068)	File: /run/systemd/seats/.#seat0MHTnCC
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83441m8NKtg
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83442jBMJIg
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83443YX2PDh
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83444l6UyBg
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83445eMsE6h
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83446vq9LUg
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83447D8ElHh
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83448lxqKif
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83449dPCrmi
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83464YXAIff
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83465mDhXbf
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83474x306pf
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83487YfzaHg
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83655hkArGg
Source: /lib/systemd/systemd-journald (PID: 7116)	File: /run/systemd/journal/streams/.#9:83656ebgHdg
Source: /lib/systemd/systemd-logind (PID: 7158)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7158)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7158)	File: /run/systemd/seats/.#seat0S369Fq
Source: /lib/systemd/systemd-logind (PID: 7247)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7247)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86493FZlHuN
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86494kCWLpM
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86495ogpIjN
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:8649620XmlM
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86497hkdm7M
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86498ArmGOM
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86499njKBFM
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86500QBgMtM
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86501493czN
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86524JTICcL
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86525hyaxBM
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86537NQ6XJM
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:86704scFXYO
Source: /lib/systemd/systemd-journald (PID: 7308)	File: /run/systemd/journal/streams/.#9:87052dDcaXM
Source: /lib/systemd/systemd-logind (PID: 7311)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7311)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7311)	File: /run/systemd/seats/.#seat09BsbX1
Source: /lib/systemd/systemd-logind (PID: 7433)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7433)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87963w6fFuR
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87964P2l9NS
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87965AAQQ9O
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87966GPYu3S
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:8796783ZGIR
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87968nSj0NR
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87970Zn6anT
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87971hBMvmP
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87986LLjpxQ
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:87987gopAMT
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:879970EDuNQ
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:89104UoHUlR
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:89216xRXE3Q
Source: /lib/systemd/systemd-journald (PID: 7494)	File: /run/systemd/journal/streams/.#9:89226llDN6Q
Source: /lib/systemd/systemd-logind (PID: 7497)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7497)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7497)	File: /run/systemd/seats/.#seat07tAoE5
Source: /lib/systemd/systemd-logind (PID: 7622)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7622)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91023UTlNza
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91033KvuoGb
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:910345Cm0M7
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91035JUzFT9
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91036MI02Xa
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91037FbXPO8
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:910385S8Bu7
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91039SPtGR9
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91040P8ho1a
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91041tr1Uyb
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91042aAdCP8
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91050dyWga9
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:9105621hyL7
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:910651NT3q8
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91066GQkY69
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91067zBEtZa
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91163MeJbA8
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:911726udYS7
Source: /lib/systemd/systemd-journald (PID: 7683)	File: /run/systemd/journal/streams/.#9:91173AuY8vb
Source: /lib/systemd/systemd-logind (PID: 7690)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7690)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7690)	File: /run/systemd/seats/.#seat0qWcC4F
Source: /usr/lib/policykit-1/polkitd (PID: 7777)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91650TW68Vx
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91651VYTdfw
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91652dKsEey
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:916531E5x5w
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91665cHZEfw
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91666rlhfHy
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91672jDZwLv
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91680HsBeJy
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91682ocpr9z
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:916835skSTy
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91684ndxGEv
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91693xfZ4Av
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:91707e9O7Sy
Source: /lib/systemd/systemd-journald (PID: 7794)	File: /run/systemd/journal/streams/.#9:918069qu5Kw
Source: /lib/systemd/systemd-logind (PID: 7797)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7797)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7797)	File: /run/systemd/seats/.#seat0dVGEdM
Source: /usr/lib/policykit-1/polkitd (PID: 7886)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7908)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7908)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7908)	File: /run/systemd/seats/.#seat0OKS8cb
Source: /usr/lib/policykit-1/polkitd (PID: 7967)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94890ZpAuLW
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94891tGIUNU
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94892uBYMuU
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94893THMCWV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94894uM0FLX
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94895llH3YU
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94896KI2sYV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94897DsMxZV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94898KPquqV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94899OfuSpV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94905FAapFT
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94913VTp2BV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94914lSlDBX
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94915Y0BadU
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94916uoeBWW
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94917HVAj0T
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94918aeYyFV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:94964VbZ31V
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:95095pPhXCV
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:95101Lq8N0X
Source: /lib/systemd/systemd-journald (PID: 7971)	File: /run/systemd/journal/streams/.#9:95123nfzgKT

Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1582/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/3088/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/3088/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/3088/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/3088/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/230/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/230/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/230/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/110/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/110/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/110/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/231/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/231/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/231/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/111/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/111/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/111/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/232/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/232/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/232/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1579/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/112/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/112/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/112/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/233/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/233/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/233/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1699/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/113/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/113/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/113/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/234/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/234/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/234/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1335/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1335/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1335/fd	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1335/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1335/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1698/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/114/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/114/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/114/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/235/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/235/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/235/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1334/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1334/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1334/fd	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1334/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1334/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/1576/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/2302/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/2302/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/2302/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/2302/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/115/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/115/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/115/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/236/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/236/stat	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/Aqua.ppc.elf (PID: 6273)	File opened: /proc/236/stat	Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6529)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6532)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6537)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6539)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6541)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6543)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6548)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6551)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6704)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6706)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6708)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6711)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6714)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6719)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6721)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6723)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6950)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6952)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6955)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6970)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6974)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6976)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6979)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6982)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6985)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6987)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6989)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7132)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7137)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7139)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7153)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7215)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7218)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7220)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7222)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7226)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7228)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7230)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7374)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7379)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7384)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7398)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7401)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7404)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7406)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7408)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7410)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7412)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7414)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7560)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7563)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7569)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7584)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7588)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7590)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7592)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7594)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7596)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7598)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7600)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7748)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7753)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7758)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7860)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7867)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7870)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7983)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7985)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7992)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"

Source: /bin/sh (PID: 6530)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6533)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6538)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6540)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6542)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6544)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6550)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6552)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6705)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6707)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6709)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6712)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6715)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6720)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6722)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6724)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6951)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6953)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6956)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6971)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6975)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6977)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6980)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6983)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6986)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6988)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6990)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7133)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7138)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7142)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7154)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7216)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7219)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7221)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7223)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7227)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7229)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7231)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7375)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7380)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7385)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7399)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7402)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7405)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7407)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7409)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7411)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7413)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7415)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7561)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7564)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7570)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7586)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7589)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7591)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7593)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7595)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7597)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7599)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7601)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7751)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7754)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7759)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7861)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7868)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7984)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7986)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 6556)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6728)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6959)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6992)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7144)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7233)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7389)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7419)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7573)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7603)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7763)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7874)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7994)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 6634)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6877)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 7060)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7116)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7244)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7308)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7430)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7494)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7618)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7683)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7794)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7971)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 6545)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6637)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6949)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 7129)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7371)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7557)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7747)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7854)	Reads version info: /etc/issue

Source: /usr/sbin/rsyslogd (PID: 6450)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6527)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6527)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6528)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6564)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6638)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6638)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6727)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6727)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6803)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6811)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6881)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6962)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6962)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6968)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7062)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7131)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7145)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7145)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7152)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7238)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7305)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7373)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7390)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7390)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7397)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7424)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7491)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7559)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7576)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7576)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7583)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7608)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7680)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7750)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7765)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7765)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7858)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7871)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7871)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7898)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7975)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7989)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7989)	Log file created: /var/log/auth.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.ppc.elf (PID: 6271)

File: /tmp/Aqua.ppc.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6528)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6699)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6946)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6968)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7130)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7152)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7372)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7397)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7558)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7583)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7687)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7859)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7978)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 6556)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6728)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6959)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6992)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7144)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7233)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7389)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7419)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7573)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7603)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7760)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7763)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7874)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7873)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7903)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7988)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7994)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/Aqua.ppc.elf (PID: 6269)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6280)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6450)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6527)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6528)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6545)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6564)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6634)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6637)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6638)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6698)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6699)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6727)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6803)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6811)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6877)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6881)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6942)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6949)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6957)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6962)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6968)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6997)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7060)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7062)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7116)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7129)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7131)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7145)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7152)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7238)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7244)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7305)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7308)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7371)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7373)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7390)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7397)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7424)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7430)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7491)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7494)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7557)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7559)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7576)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7583)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7608)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7618)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7680)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7683)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7747)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7750)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7760)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7765)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7791)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7794)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7854)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7858)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7871)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7873)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7898)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7903)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7971)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7975)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7988)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7989)	Queries kernel information via 'uname':

Source: Aqua.ppc.elf, 6269.1.0000555f103f2000.0000555f104a2000.rw-.sdmp	Binary or memory string: !/etc/qemu-binfmt/ppc11!hotpluggableq
Source: kern.log.31.dr	Binary or memory string: Dec 6 04:32:46 galassia kernel: [ 435.472837] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
Source: Aqua.ppc.elf, 6269.1.00007ffe7a48a000.00007ffe7a4ab000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.WpIftg
Source: Aqua.ppc.elf, 6269.1.00007ffe7a48a000.00007ffe7a4ab000.rw-.sdmp	Binary or memory string: _U/tmp/qemu-open.WpIftg\42D
Source: Aqua.ppc.elf, 6269.1.00007ffe7a48a000.00007ffe7a4ab000.rw-.sdmp	Binary or memory string: hx86_64/usr/bin/qemu-ppc/tmp/Aqua.ppc.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Aqua.ppc.elf
Source: Aqua.ppc.elf, 6269.1.0000555f103f2000.0000555f104a2000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/ppc
Source: Aqua.ppc.elf, 6269.1.00007ffe7a48a000.00007ffe7a4ab000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-ppc
Source: Aqua.ppc.elf, 6269.1.00007ffe7a48a000.00007ffe7a4ab000.rw-.sdmp	Binary or memory string: %s/qemu-op
Source: kern.log.31.dr	Binary or memory string: Dec 6 04:32:46 galassia kernel: [ 435.472808] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel drm parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi vmxnet3 scsi_transport_spi mptscsih libahci mptbase
Source: Aqua.ppc.elf, 6269.1.00007ffe7a48a000.00007ffe7a4ab000.rw-.sdmp	Binary or memory string: MPDIR%s/qemu-op

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: Aqua.ppc.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.00007f894c001000.00007f894c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.ppc.elf PID: 6269, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: Aqua.ppc.elf, type: SAMPLE
Source: Yara match	File source: 6269.1.00007f894c001000.00007f894c026000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.ppc.elf PID: 6269, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.ppc.elf	39%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.ppc.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
daisy.ubuntu.com	162.213.35.25	true	false	high
server.eye-network.ru	unknown	unknown	true	unknown
server.eye-network.ru. [malformed]	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.215.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.213.35.24	unknown	United States	41231	CANONICAL-ASGB	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.213.35.24	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	vqsjh4.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
	jwwofba5.elf	Get hash	malicious	Mirai	Browse
	vkjqpc.elf	Get hash	malicious	Mirai	Browse
	wnbw86.elf	Get hash	malicious	Mirai	Browse
	wriww68k.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
	wheiuwa4.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
89.190.156.145	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse
	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	iwir64.elf	Get hash	malicious	Mirai	Browse
	qkehusl.elf	Get hash	malicious	Mirai	Browse
	vqsjh4.elf	Get hash	malicious	Mirai	Browse
	wnbw86.elf	Get hash	malicious	Mirai	Browse
	vsbeps.elf	Get hash	malicious	Mirai	Browse
	wheiuwa4.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	main_x86.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	debug.dbg.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.24
	arm6.nn-20241205-0609.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	162.213.35.25
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	bin.sh.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	hidakibest.ppc.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.arm4.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.25
	hidakibest.arm7.elf	Get hash	malicious	Gafgyt, Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	dwhdbg.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	iwir64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	qkehusl.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vqsjh4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wnbw86.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	vsbeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wheiuwa4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	dvwkja7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
CANONICAL-ASGB	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	i.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	main_arm6.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	memfd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	tftp.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	91.189.91.42
	x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
INIT7CH	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	i.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	main_arm6.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	tftp.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	memfd.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	tftp.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	arm5.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	109.202.202.202
	arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	109.202.202.202
	x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/systemd/journal/streams/.#9:79226flz2nF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.563119994149226
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DrU36CewAQR2js77:SbFuFyLVIg1BG+f+M8DAKhji4s
MD5:	FF547B16B62DC766DA16E8050F62E477
SHA1:	1A43A8806179244D1A427240F08B7FDFC3A1CBDE
SHA-256:	4B8D73B6324C4698A255A5530FB6E440E4E35D4E53A69A3E86F278FB18A8E9D1
SHA-512:	0DE15912B8AAAB03FFFBF888FFFBADB3641BC8FDF337188FCD058DC32DE2C815681D16C5EAFA5282398CD26F89E9D291F3A9AFD7955DE2A0BCB697FEC462AEB0
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6fc25601c85f4952899de6927de8b134.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:792282Y7H2D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.353356768136374
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/oyizHVfh0jsmNz0/:SbFuFyLVIg1BG+f+MAykL0jdCLKzK
MD5:	6611584BE854E22AB3F3FF42BB3790CE
SHA1:	A69BF764A0BD429BB7689CCA94FA89DD258F7AF5
SHA-256:	F4A07380D69D7610500849A0E8263AD1F82871246CDDC1913CCDA43E4244FC61
SHA-512:	BB239BE84A9D0D96EC0F3916759365B826C56B37AFB766810F93A677317B6DC150F92E0554284876DB5C7BC137C1486CAC60F08DA073B6FA57F54083AEC0BF54
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5adb760f47eb46a0960dab0c09e6c62f.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79229EdOe9F

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.392867694191016
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5ZUH5kSHTNlsjs1Ha:SbFuFyLVIg1BG+f+Mubz0josQu
MD5:	30B8F6A9B21455452C58D7962A992A6C
SHA1:	FA4530CBB5002AF5FA38D54A90CA97EAD1E030E8
SHA-256:	0AB70DCCD7A5B2F1002B34EA694A988F67CADAA8BE9DCABCEAFFC5C11ACDDF38
SHA-512:	A3AC8354C0A7E59AE77EC2C25D9EB1E3A2461684F191831A2BF393D1373196E025E37DF48EB2F0A1107903A127C9D1FACA336A854105BFAC8C5B7FEF5006FFEF
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3be4e1120b344e5fb43cba79892e9be3.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:792303Psm7D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.522872453952521
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpjWfT9mYK8jsicWmt:SbFuFyLVIg1BG+f+M4Bmd8jZcHcljX+
MD5:	ED3F3E75E6449071585F1A36C4A9E530
SHA1:	76A5D3262A282DBC30A8E4F59856026361ECCCAB
SHA-256:	8B9F12CC07B927F56250EA76921FFEE470987693A38F77231862D56D462AB129
SHA-512:	635F0F3AFBA9C66133D798EE46779612F0DD7FDAA73195DDB0366AA7A94FB3FDF6219BD55781363C1022D02C7621387F5F87DE00E3217588243D7E4451B7990B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c0893638864f4f9fbb73d221c5b2e81e.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79231cge42D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.401913813665748
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/SNgG4BMeRqjsmNzi:SbFuFyLVIg1BG+f+McgGs8jdCLKzK
MD5:	0B2F641630FD2EC68C16F12E789D3B07
SHA1:	191B5C6B35C03DD5A6146C06113F311591C5B282
SHA-256:	DC968C7019B9E0749C3EACC67CCC0DB8D1075CEFFB75544B957000BC5DCA89F1
SHA-512:	D057858AE9F9AE38C71047B138FD9C42C74205F9897B6315C02BCE254DFA530B91977F4438EAA1AB0BFFBFF46F6AE37588DA3DA6B7F4009C7ED74A91366D264E
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5f0928bec07e4f579931c6190b2ebf58.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79232ZnyAZH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.421206319718847
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+dkuRBABTgrRqUD9q0J:SbFuFyLVIg1BAf+M+AWqURqPjNALyAZD
MD5:	35023D71A717985E18828B1E62DCE435
SHA1:	BA56B7393F25F77CDF3816A031C83BF20232EF87
SHA-256:	E5AA1861742C7509F6C1C5C192D63E4A6EE33934DEB9ADC66F87EFD6647096F8
SHA-512:	C8AF5E4D753FD9C13283DC83B9F75785B37077552B962AF7E6894F0E274B67101B308CA0DA3EC53E3873DD35CC09138C453AA089C4F81A668E7EAA767A114FC2
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4fd72ab4ded6445d84868ef1f181d916.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:792404xFMPE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.385227876228156
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M64ZseO4cF2jdCLKzK:qgFq6g10+f+MY14cuCLAK
MD5:	04B2BAE0F0389582A5300CC1F3FCC5C0
SHA1:	16475C427A168A33CC8BD9ABA2FA06F7C46970C7
SHA-256:	20C6FC8E9080B95786DFEF3E67699CED50CBDEF42996122D7EA29B1F07ECFFCD
SHA-512:	C83AA83C9FF248F937C9C493B9A3AFA5C92E013EF7B180BFC4BEBAACBB1CB92E0631D0C51F2BFE2DCCEF9DE561EE7FFF69E6C8335704316B533A62AE88803743
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0a4f2bc1d7ee4df29f50cb4ad6108b4c.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:792414PPCJG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.38614435981154
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5kWk1yV5YdGEvsjsV:SbFuFyLVIg1BG+f+MeW6cdE0jLkGq
MD5:	2410DEA6AAAD4E8195D8E454D1D5658C
SHA1:	DB0ED59C4BF4F2A752FAEFEED0CD9C2343D8FFD3
SHA-256:	22D6039F3AB001584659A4DA7D0E2FA59B459B88818F35EC01B64DE10F4BA4F1
SHA-512:	070370611F7FDBB1876279AC0ADF3D85BF6B051ECBBCF602ABBAD67C78AB5F4A1222A8C8CCDC598DB50473FE24E4B7BAA5FB6B48DFD2D77F572A232D59A7911B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3edec39b43a24c2f852b0e25e06618ca.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:79250Csun7E

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.433758483788648
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4eTXcxD6QFGEdkk0j:SbFuFyLVIg1BG+f+M4eTXShFQk0josQu
MD5:	CC4207243F0134A189B2DBDB9557EF1D
SHA1:	7EE7174F01C9E4D308BDAB1EE0F363C24E8191E9
SHA-256:	F305B5562F27BF146D1E2EDEF22926CC2805AF1353E62AEDDBBF3BB9B8EB4C34
SHA-512:	77E1CCD6A5643BE920103DA1C905DB2D119708EEBA516A5CE7A83EF5D494E5A99AE4C09F3E1F2EAA860F76394F65909D2914A4900A1A792664BC310C66F6E9CF
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=267629e1f0f14cf59d20c418f9d1d7ed.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79251sQynmH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.501186545165399
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9Z0uOdCSG3W6v8jsV:SbFuFyLVIg1BG+f+MidE0jZcHcljX+
MD5:	825F979222EA07210C913A3B9B6BA99D
SHA1:	4B88ADEEFB27E93871C89F201DE7C5E556598271
SHA-256:	7EEF811C1314C4E4B5EB09AB9E1215715D7D8BACC95814A9E9119646ADE1AFEA
SHA-512:	3D5011E0F592BE90DE91A17BDF183A93D34D57AAF4A08C9FF76E03CFE8F8E2D3D63B5B853D1330A5A084B6310A0D6F5E70C719F81DB763DEC39574BC40A89281
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=760fa5385b194deb9c8527ce7d6b1c7e.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79259VIafZE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.477943932765871
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzAWzTFmeG0hg2js2BbM:SbFuFyLVIg1BAf+MrgehhTjNdQIeXD
MD5:	F5A3765F084692A72E892C584243F756
SHA1:	87A34A47BFD7F0E278CD511043B97799CA9E1616
SHA-256:	6605D458FA500DDF7DC1CFA77AFB265F9B03F7D0D304F0C09657BB2E2193056C
SHA-512:	5A089EB4953CC91EB1847C705776AC6CF8FA055BE36CB743C55A75B3B5E3892B761EE88DD3309A8662BEC9B31C06B0CD73CEA6F3207183A46AFB9B996F0C1A44
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=91995e392a114406bb67c97fd5045b3d.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:793548djT3H

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.349046205865991
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6mfi41TqwIVDdWsje:SbFuFyLVIg1BG+f+M6mNy1jdCLKzK
MD5:	3EE5B47489076E6D0B7BCA98F33DBF07
SHA1:	8E3B6D60A169DA59182C3DFAACD695FEB435AB32
SHA-256:	7708B355B47F9846474C41615FBEC776065B110D79C86CD0F2BF6186E51D8A88
SHA-512:	1D07DEAE803EE35C42827A995424033F51FF17E02CC85CD146920937B43867D6AA20DD6C060F9E18FA957168068A6C9D01FC846B9EF838FBBD16A8BBC470C770
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=070884a077c644afb51de6445a10f801.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79359tNNwdH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.399240382205427
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6uv0AWwKVwYTjs1Ha:SbFuFyLVIg1BG+f+M6uv0zG0josQu
MD5:	AA16B1723E929278D7E8C679E19CDFCE
SHA1:	5D5BC1A09C42745D59ADDE84D7997CD87A1DD7ED
SHA-256:	BCF1E31E0B084A46D686CC77B73D7C0ED55C5505D215DF84A51C0AAECD1F7039
SHA-512:	6F0DA5F15C6D2C7D228B7C9C676B6ED6727279C93C90E839903ABA6255004834BDFB200EB8166C4E5471659278E26A4EBB46D98CA33F31621401E27F242F54B5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0cad9448cc5747e39dcdba908274d259.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82426FAI7J7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.519441147124505
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8vHI1h4dHTjsicWmt:SbFuFyLVIg1BG+f+M8fmWzjZcHcljX+
MD5:	5CD1CBA73F116E30526FD7013ED681D6
SHA1:	97C219CA87E9EB8A8E9F32EFA23BC7E848ED5A36
SHA-256:	BDCE402FDE1E97960A242BFFD646B4587FBF93919DFCAB06F7F84D9FFDA68CD6
SHA-512:	FE355F1998988F80FCAA9E55D571DC37276EE246B0EE2806C34BA3BB34D62F6258CF97354798C2B07213851CD98C2CB376021B8CBB0D4A6D3C7863B890811847
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=679bb09f35fb48c397bde88755222ec8.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:82427EQgri7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.397324301923521
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy2PUXqHXvXsjsmNzi:SbFuFyLVIg1BG+f+MyCoqH/8jdCLKzK
MD5:	FB9C4DE498B69FE27986DE2456982D4B
SHA1:	334D7D39834B6EF09D7213EC10DF6EFCF67C644C
SHA-256:	2F258E0753C3C23F28E765B0C205FC423A2A0D4AF33355388DA8950BCD19BB23
SHA-512:	EBAAF99EC5218E4033E9E0D53CACCA6479586155BBD2ABC38046856DF154A53D160595A9CA26A4B86D33554E60D1A8C3C87C753B6DEA27451D8DFA23240B89FE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=893881fbf82f4156832b420f807ba5f0.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82428NqrQA7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.388691814910535
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6hLDyfd2whQm2lsjx:SbFuFyLVIg1BG+f+M64fDhu2josQu
MD5:	0BF1EF507DA84FD9A3359D79EA6BB4E4
SHA1:	C0BFE578A23ED6D20432B3D101A5BE113BAD678C
SHA-256:	3F78A0C900EAB3F527E7A0884E632DF913D74F1923CB83C6AAFB76A3C0756AD8
SHA-512:	42C596EB2DE646944A2D7F5070AE9C3324E94524A90FB223E2DC39394EEC91C0D88298CADDE484EDE0CF5069AB9E43407D382BE9C9587A25BFA783EF3A698918
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0ea78a5d149341888b3dc33b51307603.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82429NEqEm6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.472552016027536
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm79G0tB9uqjsicWmIo:SbFuFyLVIg1BG+f+MltBUqjZcHcljX+
MD5:	6B7ADBAE54C7C2EA684EF0BD56B87DD3
SHA1:	E6DBD656B2F6EDFC7CABA7DD9171F5F1128E0DC3
SHA-256:	A5AE6237F1108A9E3094F385557D8549AAD8CC337D21143EB3CE3C16891C0B3C
SHA-512:	9415394290E9A861E97D239F4B4DE0EEE23F8B16EC4905053A58CC878C7FE788A440EDE85EAC526E468B3C5759385191A1AB5082B718620A75A3FE1E4D38C0DF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=197268cde3374971a63e2599df36e9e5.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:82431Oe4VE9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390733871553765
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoVVdagAHEzCsZglsS:SbFuFyLVIg1BG+f+MoVyFHEA2jdCLKzK
MD5:	1B4FE0EDBB1B377EC1B27F72480BCBFF
SHA1:	3685C0A69894CD1AB6BA35DDE710F8B5CF75A3A6
SHA-256:	50454A444A4CEC205966AA08A8DCB7FE997617FDBF3E52943DB4269F2429AD0E
SHA-512:	ED1D8E7B57ED922233EEA0E4CB4D38E0E0FAC346FC2E58A3C80F2ADAAD652BC2405468201BDEB3EB5F35ECF0A78617CEFCA11E84E00E382B303DF23D8A30D515
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b5b100fd0db3476ebab68726c5fb960c.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82432oUOD38

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.424703880016053
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv6F0WTRXLeEusjs16:SbFuFyLVIg1BG+f+MiFdeEjjosQu
MD5:	165CB97A1785EB25F50D58E23CC4DBCA
SHA1:	72B6273D113D25EAE4F9BC9739A789D62AF683A0
SHA-256:	DA72252EC17EABA983B725B6CC6C9E73E1EE44B75B2AAA1FB375AF10A24103D9
SHA-512:	992A1E73EBAA49F4904BF4AE8E4EE0221DC1A444E201BFD970BCCA81A86B8B863B93C6B1F14FBB8E642D234A9A6E98C89E3DF6788243DBC525790E510D436670
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ea6839479e5642aba1bd08794ca54b23.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82433lSLnX6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.43491032237874
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoucmr7wsjs2ALAXaGKX:SbFuFyLVIg1BAf+Mofm5jNALyAZD
MD5:	22DDEAD360048FA7E06DD17573910307
SHA1:	BBD89BF587022996BD81DFF5041D8E42C2CFF803
SHA-256:	87961102CA798504F3849A46D36968E2E5BC70C5F35FC1EB07C6765CC907DB11
SHA-512:	A537CA4C319CAA5A67683D7551496D46578D84424E285274745D26410EA6F37FA65250B9388F8BF25848887FD49FCFF19ADC5828B408C167DFA69DEFEF07BA1E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b9db31d738394a5194336bb57f07001a.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82434djbld8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.394641954767144
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+r1GJyWNQ0pRtlsjx:SbFuFyLVIg1BG+f+M+rhW1V2josQu
MD5:	4C0DD390BC27BFE19F799276DF6E59CA
SHA1:	D9407AD12407DE7237EEF0BDBF4872A9B240433A
SHA-256:	9CC0D9EC5FC228A437C5CF3A2FB9AF157221AAFCF0147790AA440E5BEE5BBC05
SHA-512:	DB6C6121235C731CB4FB16E18B1CE2BC1B83CABF6EC46F4235DAA4EA0727FC5DD8C91D16FF8217655A31B002FB4E10A43076BC4514D4AE6C204726FC495DF9CE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4ae25a46cc104134aba5fdb6fc24c94b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82435uAtY55

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390733871553765
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4lShaD6HhTjdCLKzK:qgFq6g10+f+M4IEuCLAK
MD5:	415A43460A7E36B8928E1D562363EEB8
SHA1:	547D462A056DF308C11AA784BAFE3F8AD3F5A3FD
SHA-256:	0C77F1C70CB1F67848CAB208A8E69F5BEE2B290753F8B5BF51B7D811D28F89AE
SHA-512:	9DCF8F626A80164B7A4959BD6DB2919217D87DA8BE5465E9026782B62AA76B36495D949DE6B797FF4CC32EC57B16CA7B86A0EEE44F0434AB635D3C1F6919898A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2144fc7188674ba1bf5f831e3aad7e35.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82451OQdFd8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.446180387518702
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/nDQic3Vd3xsjs1Ha:SbFuFyLVIg1BG+f+M7Qi4VojosQu
MD5:	E50F0064352D70DF9F246BD12CEE47D1
SHA1:	FBBED3F0A46E30B050B8E6BE003BDF563DF387F4
SHA-256:	C869F458C4B9DB7185822E9F732C264A9FA19001DC9249CC795C8F3FAAAF7FDF
SHA-512:	1EC07A5179A5A91381468761C6E90E32FC5F12C01C84E6435B3952B771F8DE172EA17A93BAA3EA66911C0B76ADF1D62938A8A9145EF3951BA380C6D2854C9CB0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=571200e476974657aea2fc18f3697b10.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82452ASZPK6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.363640256056652
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MugRmCTE2YTsqjdCLKzK:qgFq6g10+f+MqCTE2+HCLAK
MD5:	288DA9509AA716EF1C162D4232EAC42D
SHA1:	6F9E5F12853799FD129199899C99AD70670B621A
SHA-256:	267CBAB0EAB4DB455D11FC294DCF965C6B4783855ABCBF572B557BA538857B7C
SHA-512:	0DA7CF2AB8C36F790A449E255007731E7C9CBEFD2F2B16B957A843D246A56880AE7CDDCF1FB7E0772E287859FEA6042BB7A335B9DC7212E06EAE691D21A13C47
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dbe4da02f0b042a6a55823c5b5e760cd.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:824609HyT96

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.396532008479386
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvzl4ECVRSXm2jswkT:SbFuFyLVIg1BG+f+Mbl4EWWjLkGq
MD5:	BE7B34025C755B5021D9739CA0F98232
SHA1:	EE410BC946A01FA2DE4CFD9D3B42A1620EFD76BE
SHA-256:	BEF6A871716F184C898F2B89B960E19B6D6EA046DC34732059B33C3206E730DB
SHA-512:	AF0E8FD6328DE3DD8B31F241B2AD78D252019543E8114020938199F328619E8A9AB68491522207EDC6EC329ED386C32FA27007A9BFE7B77320615586F958BD24
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=eb86c3d612254fb0a0955ce2d2681ea8.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:82469Hul0P7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.401683150813562
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzGjzampecolsjs2ALAQ:SbFuFyLVIg1BAf+M7mE2jNALyAZD
MD5:	CD4D08753F7E71BF52B3D4619A20EBF6
SHA1:	24529519B3D07F2545C33768BC8CEA04F3666D32
SHA-256:	FB5796DBD1B9600D85FC94871FBFB1A84FF7DCB823D480CD71F4FFF452B27872
SHA-512:	F786877C6F82D819911CAD556ACA411082660125DB81A73663C409F425E61E26A87AF6BF6522E63A0F4F0C695E3F739D6722D29981C3EE715AD1306CB59BC2AE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=93480a8746d040fcb4a7e0e778006501.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82550FvJ8X7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.47097390913071
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+60rdCaglsjs2BbQIeT:SbFuFyLVIg1BAf+M+RdJTjNdQIeXD
MD5:	965E357AF57EBD59908800431B4DAE54
SHA1:	4628D3A7D29F69970E151011D3BBE77959AA6394
SHA-256:	86421D10CB6358C83A59DB5EA40A768C00D0F1EE6D8D0DA8D6A21086EEEF7934
SHA-512:	40CCF8C109F9E233959F9F0FEE326722E52AA8343405C32ED9F3DE6738600750B89D49DD9E629A3172B6347C0388B8C6329FDB5FDF645CB9952BF9E1C9D22EAD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4ab07ab1d972441e848c4a7798672f32.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82658DtFRv9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.45320694537784
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDdXUi1lQlGmsjs16:SbFuFyLVIg1BG+f+MohUi1KKjosQu
MD5:	AEB1E81CCC4DA476BE39D6F60B165B31
SHA1:	83AC56A8E155E79A1183ED8F3A0C4419768DF1B6
SHA-256:	DEDEA40F788EC47F337613CAEED52B5DDC552D6D783CACFC6118864C7BC2757F
SHA-512:	19A438D8A9CF5539384902708518989BDFBACC7519DC86478D7E97C224C1AF8AA27BCD87EFCECB15A3C1ADF87B7EABC9F4372B6235D55AD57D717DFE0B0D5DA4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b268214a983f46849506c6a5d63db72b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83441m8NKtg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.355700426948944
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp/pQgmv9PyqjsmNzi:SbFuFyLVIg1BG+f+Mvf29aqjdCLKzK
MD5:	7FCC0AF13FE6379B8B8ED0ADEF966CFF
SHA1:	5F76FA9C2740A24309156D223FC9662AC60F8E6C
SHA-256:	06A504C306D6D1FB56876074EC75120AB916611286786F8B43A4A5F8908E5815
SHA-512:	D25998BE1FCE5E398B17613720EEC8FA51B773C2DD96D1A23CAABBC9BC03D2C0FECFC99D3190E1CC5410C2BF3D88D36ACF9A06EDF726B67FCD819278015F1E7C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c338acf0f5944e9a947505023a7de797.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83442jBMJIg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.5100137202102015
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M46yQQ0zwXvFrqjZcHcljX+:qgFq6g10+f+M46yQQUwRkmAu
MD5:	C5F07C7A4CF0A807E50E2BA22C907D60
SHA1:	487D19ADC44BDA6ED7999D478858C4F1B6E22A44
SHA-256:	C72E612651F46C15906BDD1CFDD3652574C16D7614D33BE8EC28F082DEFDA311
SHA-512:	01AB3CED8AF079A2DC82543CFB10ABE4910649696685D909C8593D48E3EBE1F16508DC93AE1540C1BEB2E8B79D076CA4EDE8DC2BA507C5E4D3BDF22C2A69F44F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=288734a81426416485b1b8594851c767.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:83443YX2PDh

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398039174111289
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmseH6FQTV0hEAjOshJ:SbFuFyLVIg1BG+f+Ms6ZgEAn22josQu
MD5:	33B81B056C2AAFA9FF5623863808469F
SHA1:	1285C0057EBC9DE323D474E9882B9379146D9D1B
SHA-256:	CA969E79ACFE3831043E2EAD0EEB8B257064B24D14853515F332B06C606E7116
SHA-512:	C978E9EC340F7795758082A092A88D9F64136EFC05C410F2E8F5ED9B390FB4D2250983DB7569B0528AD9DD490A0ED18F388B56AE6F60B1E54EC8286CA9E51219
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f6f92b0980064b2cb60e49c4aeecf3b8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83444l6UyBg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.50200840638078
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+kTwpX/UW7RtEQDZL:SbFuFyLVIg1BG+f+M+aVMtqjZcHcljX+
MD5:	2A2E1016CB70EC3BCA3B44E111C78B39
SHA1:	0F42DDEC2790D178ADB7B15D85E3978140ECBEB6
SHA-256:	3FE45253FB41D8EA2FB799E9A15B266ACD5BA0AF85120B80E5C1D325A3097B18
SHA-512:	4113CD6D30070DB754AEA712CB277FB69138098F7CF0DBB9906EE2C42AD28B4D929BB7E6438D497841D7E93B3B9FA973BF7DD2132543B8805B6A52343F977F1B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=49f7767f0f264bb8833a654aaa527e3e.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:83445eMsE6h

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3713921043119175
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp416kUGQGDQdJ0jst:SbFuFyLVIg1BG+f+MO6EQGDVjdCLKzK
MD5:	2F38694687A4AB3FD13B0D6751531140
SHA1:	408A9578960A6B890FCBB5403C50F0766FD04476
SHA-256:	131A5755B2C835653CE42DEA5376D37361B3D2321F8D35BE7B8DFA2B215B1B02
SHA-512:	4FCB93C6E61C30BCE7357D2F5B0DBFF87FA1B342D0A8CF2496F11EA1DD2A847A2F19002E6AC094A9040FADFEA63DDF160D54E7B6B7C11D1789207D4DCDFDCD82
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c82fafe920404e6ba1c58af56b855aed.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83446vq9LUg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.444027551513638
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+tdXKBLatsAzYg2jx:SbFuFyLVIg1BG+f+M+tdW6Yg2josQu
MD5:	49DDE95A6CA5AAAA5D84437624F5FA37
SHA1:	380DAA228ED8DD37E33FC04F87E1FFD1647FA456
SHA-256:	F49D19EB66BDB5DF301D0B6B88856811AA6C9290DC068FEF9C055BFD6DBAF3A1
SHA-512:	D9D714526C817497DD28491D4E5F97B63D5732DA55CF3B11B57A0E3FBF614782B96EEF1ACE9CB22D726A02691F1247FD8582379427B7856AD37CAE26D86274C4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=40bc1ff283584cd8a926c3faf6c6e129.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83447D8ElHh

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.449977005337734
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M4KbWxPiT2jNALyAZD:qgFq6g1af+M4mWxPiwIZD
MD5:	00091E768788F9403D4340AB45A30F97
SHA1:	247844D4F6D955CAE676AABE37899B944EB808D5
SHA-256:	7033132944DCAD64101F1F2DBB5284E2C10D530345CA0A9C8CF1BCF75820B245
SHA-512:	C306FFA898F00F21A97DDB929C7E6C519C39643E4B7117024B4FE691E3F5670DB281595557B560C44D0E457F6A02DB0664884BA1AE4D9ED83A9ACDE23361A912
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=22b47f8daee24334b116c941778cd96d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83448lxqKif

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.357187207954306
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+UB+Sek2njxsjsmNm:SbFuFyLVIg1BG+f+M+UBEDqjdCLKzK
MD5:	CA4866342A5AC00F356307F9FA494475
SHA1:	44F9510800294D7E24463F0F70D7106CB672F662
SHA-256:	D0D9EE3E13BAA4CFDFF2EF5E35B30718739CD74C350646B408CA1C45C655E4FD
SHA-512:	66352FDE92CD33CD00D6C52A4F6D6B6F15FC8B15E7B47F38280C6191B4C090AE7E60425D3C9AF0365F3E09FFC9E8AE7267EBA7725EC1942B4B3BF2C2FF08DBFB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=42ad58fd475a42eeabe6bd50624557ba.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83449dPCrmi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.402215850875698
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrUdTsTRVc37hgehu2:SbFuFyLVIg1BG+f+MwOR23NZjosQu
MD5:	54C7CBC4E32B71C8B784C34856930F79
SHA1:	BD2BDAC5F5B8EA7FECDFABBFEA2A9425F0BF0A10
SHA-256:	1E482DFED8F177D873155BE2F72847FC09F6DDC2EB2C1A90CBF9149F50CF1A52
SHA-512:	25C4AF9B1A2E9E53D825F060EDAB838F240A88A6A7C2308518642E50E2B86590764BD7488B89890BB9A253A78BAF9DBB3C1852EE0506A7E8C217F40C1069D162
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a6f9885c986444098a54c4a0a74bb508.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83464YXAIff

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.485410749769857
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrIEUfR7vCcwRwZjsV:SbFuFyLVIg1BG+f+M8EsRvjZcHcljX+
MD5:	49EAD0CDFC8E25A6F429882F466CF99C
SHA1:	DB6F73C09B06D069360C56ABEFE9D75D59444723
SHA-256:	DF2A4BB02AF68AEFFFCC72C3F4AB1483B7C5FD65E9294AC87BAB09DBC092FE99
SHA-512:	F9285AEB54490224508D6C6BD0ABE9BAEC1A054686AB817F63D22369FDB0B7A45FD381F2740D349741E05CB71FA8DF94C7247578296954339C765CED4D3308BA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ac37d181915a48c0a4d915297f4bdee6.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:83465mDhXbf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.394252140380013
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DVGLkUUrS0S022j+:SbFuFyLVIg1BG+f+M8DsAUKS0ZjLkGq
MD5:	D1D73AE4A41BB87F30A9B7AF2D16591B
SHA1:	15B5EDACAD45E2624036F43FCB09005E6B6DB75B
SHA-256:	BDB17BE887117E912DFE2F198130246924A613397899ED5CE0AFEDC50DFB7839
SHA-512:	BACFC431537508566FD756280DDAA22E3E4DF761C3B10FF114BDC1966EA3EEC111D06BC79872DDC55921EF75CB070EDDB97AAD86C9CA2E57A58B4B73081B6F98
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f0cf262cbe44084a39de1baa7fe7477.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:83474x306pf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.455616753171232
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M4kEv6xgjUBPATjNALyAZD:qgFq6g1af+M4kY8RBPAFIZD
MD5:	90181DD76C0DC7FCA4F030E5136B5F0C
SHA1:	4E524F58A46E00B81534FF49E20474C51D8602B3
SHA-256:	2A8703D78027ADA2AA2D5714E102FAC211ACA953EC774C22B244AD17CE339F85
SHA-512:	E660F98C0857D2C0CD3CDE5453939FADF1095B62AFB1C57ACC1F64F5C946F8AA530543A2083A1096E2DE3C0EDB3688B0C8F32FCA5C05DBFDA32415F9630CAAA1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2e485f68ea794942be5c0868bfb74f8b.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83487YfzaHg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.42432882363428
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MoUGRNcEMT0ZjNdQIeXD:qgFq6g1af+MoHUlQn2D
MD5:	24516DED232658A450172A34C9F675E9
SHA1:	4C7C77B8CF4D2C99776EC00179DD8EFE0479B512
SHA-256:	874FFFFC2717F7F4A4B4446AF1CB40E7C1C67CE6F15A4852954D83EF292DEE0D
SHA-512:	58A01850A68101413E9B5C502DA577F85E2AF7C60EDE12BB50F30B7323389D4D1717FAA451A8B040187B89C4656E1CDE02B0E9183DD9AAF50CA3D7EEF7780E44
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b83a02ccfcfa4c11ba1fc1224838fcb6.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83655hkArGg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4159507585625954
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4oCdc94Yshg2jdCLKzK:qgFq6g10+f+M4oBHAVCLAK
MD5:	4E2D2D5957B7D3A71EB96FC706BB1CB6
SHA1:	21E50F28C85FC41BA96FAC4833533CF76C4DECB0
SHA-256:	A56C077D9888C659FD28A67D84A0B7A24087950EFE8A94F349DE976712799205
SHA-512:	0BC63C4791F4EE5D258D10D1F539536B51F24A3D6C8D4E5E7CEDD5D304F19555CE8C74B186B2410415CC483B18B20416AAADF9B2E24D2D22DC98C9B6C2A68630
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2797154bf7f841d2b4789795e075d165.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83656ebgHdg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3796570594759086
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvqcGBRAQmtH2rqjsc:SbFuFyLVIg1BG+f+MydeH22josQu
MD5:	9735C7648BDB90298D19421A25E78B02
SHA1:	12A61A251F5DA039697C23205C10C20C317EDC80
SHA-256:	E572F47F48C42284DB73258655B93191E0FACF6AFBB5FA67074D411063179A27
SHA-512:	F167600983945E40F3ECEECF1E45D9947B519A5F77C6088B25EF69E3037251766D1CD07D6E338A6E9DAE35A148FACDF6EDBCE7AE2E42EFD2E05D862D6F66C873
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=eaf0dc9a353d42b298d5bc3faaab0a6f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:86493FZlHuN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.495409526770855
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M80G2+C22jZcHcljX+:qgFq6g10+f+M8w+CzmAu
MD5:	9CFCB3ED9AC7505E69329B4F163F598E
SHA1:	3E419BF395DFB8B1CAA60EF901BFB9C84824716F
SHA-256:	90A8C0F81EE93D038D50667F708587FAD559EF3D60BC0D2E61CC3BB8C4D9FE8D
SHA-512:	562D5E3FBCB7EC190B11FCE8296E359083750B64AE69ECF706AC63EE4F4A9FAB36D6DA97365C31134F5AAB74EB8876FFCC79E5B06209DF959B44907BF549EC36
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9479f72823434da895ed52a34bd467b4.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:86494kCWLpM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3493243616879615
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzJH+5GCGXTSViMqje:SbFuFyLVIg1BG+f+MeGC4SgZjdCLKzK
MD5:	FC3C16F43B24CF0401319AAC9A0F59EA
SHA1:	218581319E66EDF461B19073F581FA52D49E9829
SHA-256:	36A8A8CFAD9031035C28B3370EF622D02BE9722C3B6D2148AD7867CAFB1CE990
SHA-512:	35FF40F9595E0570C61E7B45A81CFCF8DE4EC58F44B1EEE70AAE238C252D43C93970FADDEFF23B6E5A176A16B5F65C12FAAF81D84325D17A351C3B1E75FD91E2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=93a0b330706c43999c7b7c2ca7dc052d.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:86495ogpIjN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.430313829092044
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8aAeIcHQUW3f+vAgC:SbFuFyLVIg1BG+f+M8P3fQ8josQu
MD5:	27F88E9EB316BB5D31079A1CADDD7037
SHA1:	0DA447C523FA4ECC612EC992BBCF6874A7109973
SHA-256:	A39DF2F4809C5FE6C7D477BF7674F4A210ABEEEF882D7E090D9B1470EB70584F
SHA-512:	F4DE3FA6845CE2485640AB5CD6AA0B05BDBD2E719B1A4E295359E85B452F9FC1002A924C071B2119D737844A612679DF52C737020DD48E4DFA9A0018F36DFF0C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=68d01e1be96c496c95138b9e7218325a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:8649620XmlM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.468444415538716
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+Uu6OMbqjZcHcljX+:qgFq6g10+f+MjzbkmAu
MD5:	6E828049E56691DF3DE10B030CFE292A
SHA1:	B60F59F21262D167F8DB8A831EBBDC65CBA534FC
SHA-256:	E90283C93AD394F142E5CED15894E249D3E22E2FF5A89EE5328CD0DBC67118AD
SHA-512:	6BEF7719821A70A1073256B69F4FD8E506E66F54B02F7EE797FC51AC9198643728A187389700F86BC64DEED5607E060133755EB5C1CBFECB1552469260EBA664
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4eee33b2ed234751a6f1421f5a603939.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:86497hkdm7M

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.326276344767427
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4GAhLdqjsmNz0LKzK:SbFuFyLVIg1BG+f+M4dNdqjdCLKzK
MD5:	D54BBEB80A7C1E8BC2F3760657C135D5
SHA1:	A99AB36C499293106924F57B84F522C921631492
SHA-256:	DCFF6AFA5157B1874DB499DFD044E201ABEE3DB7BDDDF049CEC1F2C6806FB990
SHA-512:	EECA133AB6FB35608CF0580C346C27C23877AA6EEECBC8799B07426FBFECE2A5BBBFD318EADC29AFCDA8CF4C9926DE572282DDBC6919BECB729368F9BB6DC0CC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2c95040085ce44b98460a249e9e2a205.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:86498ArmGOM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.456246512929004
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6F+3QdBD7kvFrqjsc:SbFuFyLVIg1BG+f+M6cQH7arqjosQu
MD5:	FB4A328CC69F8E90C3F2B1A5575C53BE
SHA1:	38E1F0DF12797867C299E3E1FC258FC12AF099DF
SHA-256:	1D04906EEAF18C676D9806970766818DEAD9C4A60D6F0BC2EDA1C6086379FC10
SHA-512:	7562DE3DB9BFCC0191A6B2578B61C0C18B000F34A565A44BDD4E212853A5B59B1D43FE94DB01B6187EB0DD664F7969A4DDDCA2DC8B5BD182577730CEEBBAF45C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=02376fc9c5824c27b98821383d16d1d7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:86499njKBFM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.425186469716171
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M873oArHVa0ZjNALyAZD:qgFq6g1af+M873owlnIZD
MD5:	48E2A85165464C6F4464870658C50118
SHA1:	C16EEEFDFD08759291433F92CB8D6326F7459FB7
SHA-256:	94E2B1153F824B4B332EDD3DB32DF81D7234B2574C669E3F416378549E073AB3
SHA-512:	8D325165610C28A7BA92BE8793AD64DFB2D6080A455240B0A9B26FA3AB88F678D738DFECEB42BC04DA82D32F3AB8EC94B13FA093CAD66AA313BDC9A9A2AC7497
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6e4f8f7973a74115aa94ee3c45b07893.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:86500QBgMtM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3289321745716824
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6YHcWnl0ZjdCLKzK:qgFq6g10+f+MFcGl03CLAK
MD5:	7599A5E63FE10C4623DF82FF1945A333
SHA1:	A584CC650168424638E9F09FE2C8EEB3B5ADFA72
SHA-256:	930A1666515597DB0458E57D5D1108634BD99D5A5BE9719968F9426ACBF83AF7
SHA-512:	4CEAE9E86A7DEA53EE0E0B8B84946268824B432AA6E173AB35BA60AF9792B9C9C128ED4D76DEFDFE3142B406F28C2FBD84EAF615919A7242FA40703A2FF590F4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0a39d741a33b4c9cbe16c319a96d9a73.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:86501493czN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.389173459311193
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6MNAOQhGVYuqjs1Ha:SbFuFyLVIg1BG+f+M6MN7wG7qjosQu
MD5:	0221B9D74C2E3BE31AD8FD45D7984262
SHA1:	1BCC900339A1F0C2681B1A4C10A80BAB8C3C9AA5
SHA-256:	4D2C0478CFC3F6BA08784CBB6B832E9D5976A3AF3A91A1245F361DEB29AAE8A2
SHA-512:	520CAE1DB0900EB04326F4F2602770187035E6D17EC27053E2666E4829251FD1FC12CDF0CA956995C1DFA714CD5547B03072C46E72B45D879BFBB1C2A32EA2E3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0106fce6d2a04c6e82a08bc953edcba9.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:86524JTICcL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.370764576961842
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7lI6XDRDXVS0hg2j+:SbFuFyLVIg1BG+f+MJXDlXVSYTjLkGq
MD5:	A5CCB946BA7223E0F80B5FDAD9468583
SHA1:	60397C1919736B1C3C296DBC3EF2BF7A4FC2B80C
SHA-256:	0A2D37E25115B8364375B2C977548695235972FF7E9EF8235F074A6F7AB86754
SHA-512:	858C2F4DF2F2D0276D795067BFFFCE2706A6892339BC2A52123E070A854721D1288AC4A09A1824E15D8546AC22D62722E7DA50735F5379C4BC2BA804121DC286
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1e388d145ae94e44a0272f2df49ef5e7.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:86525hyaxBM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.441989786274087
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzROV/yKpXYuxsjs2ALl:SbFuFyLVIg1BAf+Mtay8YTjNALyAZD
MD5:	7917F7B3B75A4B5F4410E1F0FEF9C43F
SHA1:	DD9F592DC3253031152DE10C2F95683B18BFFC18
SHA-256:	49681FA38CCDCB5CE758F54F85435DD4D7047DAE0FCF6FEA8EDC9BE6FAACA67B
SHA-512:	2B5BA8F0418171765CE205DD92835A25FF524C48BCF84D393928F12ED7E373DF6BB8F24D76BF11A02A01F8FC71A2FB4014DC29E0B366904D3A962F62BEFDB99F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=97c5776ad13d4230b2f6e2c875fae002.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:86537NQ6XJM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.440181799785684
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5Ncbx5yMqjs2BbQIeXD:SbFuFyLVIg1BAf+MIyZjNdQIeXD
MD5:	A97CE37E884C7A1F910615FDEA789602
SHA1:	21F56296DB52748284827D9E9660716C88F2323D
SHA-256:	D3BEE0117562085C0F9B54100A493EA2861627BA23C82CCE2918267DC626884C
SHA-512:	4C63249E0BB4F06A1FA2A9DA42D7D6E894E6F0F6E6E00A86CB4AA70DC2114067F219C03F1C14687F61C5F83ACCAA98E60AF93E7F264370472CCFF9FC68C354E4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=36d9cd93d6504ee6aa869edf7b57bebd.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:86704scFXYO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.387584727168892
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsgN/DZP0WI8Aglsje:SbFuFyLVIg1BG+f+MsgZZV8TjdCLKzK
MD5:	4D80EEA2BC4524538A5A3264D6DF58E6
SHA1:	A0D12DE8F29046453A7AFA5698A5798FA2DC7420
SHA-256:	DD9CB5AD9584CE1C9FA586B6FB6C9B2FED9BF8F75E2DDCF38211CBCFED9EE2E1
SHA-512:	D0A16DD4E85AE798075050DFE559DD816B52DF1310E0A0263CD9334423CF7F1CAC9304836FAD8B5B55002101273FCE48A0991A5C859D16025DC4970EC77CE735
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f762a63f2b6f46cca56fa8c3364f7f92.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87052dDcaXM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.359516621207725
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+QS2PRVSAuBSCOhAJ:SbFuFyLVIg1BG+f+M+QnPzKSrCjosQu
MD5:	5B93339B0EFFD819CA7622B3009D226B
SHA1:	3CDEF39462F50717DA8E792700AEF204CED10DCD
SHA-256:	5AA8CB2FF9B5E41BCF85FAA63C3010F5D8306B1A8CBDED266D2567402F7DFEF0
SHA-512:	FC9F331E21D469547E176475BAB7679DBFBB62573F429CDB5FF9855B90D08A08A3F26A2455CDF2EB4C0D75CE4BC2370959AF291B9F15AC81F71598C5D674EE22
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=42e7ba77adf5407eabd7dbaff1d37e92.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87963w6fFuR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.454147838139958
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6OonqYTjZcHcljX+:qgFq6g10+f+McnqYRmAu
MD5:	EADC5362FD6AEDB3F3440AEAFEA0A68E
SHA1:	CB62431147A6A2B893331AD7C955A2B1606BDC18
SHA-256:	6C6B057E32E2624154B9CAA3B336DDA71AAE2EE7C35AC5ABD44010FD2BE94C29
SHA-512:	A126211B14CF8978EB94220F2D5CD32160A2A0B3A0405CD48228413BD50223F07FC3BB3432A6B77C6156163AB920405DE7AC395539DB003B30DC54F05DA865AF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0cc7fc28a82e4021a51582c86c2e8276.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87964P2l9NS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.427743447567215
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8ETmJSbDEhG2js1Ha:SbFuFyLVIg1BG+f+M8ygEDEg2josQu
MD5:	583D0C8CC7A81CF9E94B8A6630F113A8
SHA1:	F28D07E36194C984A3909B2666AE73190EB161C7
SHA-256:	91E4D9D288D2DAF78DFADB926D0C1B6B1473BF9814A0148ACCF4A6E14DE8D668
SHA-512:	31FCDBC55F7A86EC54EEDDF92DB2BC4BB6B8F55D08251B0FBAF9D2F2970C9394855BE3E7401689B22F1ABCBD70DFB6DF3535708E89CE41951CE5D62342FF9316
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6a9434e478e74fd3ab926306b017b5fe.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87965AAQQ9O

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.394564311371697
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7eULNDDjV+sjsmNzi:SbFuFyLVIg1BG+f+MxLRVjdCLKzK
MD5:	AC3AC03A79650151124FA6E371655992
SHA1:	C91D227BB3AC8376AB2490EC67C1E458A66DB91D
SHA-256:	31C8E15CC4FC1DFBF9FC72A3D4043F2FDADB2BBD8BACF0ED881B03108DBF0246
SHA-512:	4E233EBD44FA6E7BA78178DF70BB930982722F306D9C9E3C486B46E48D68CA38B1B0B91682AD60F1519DFD19BCFF533E3D9475CB722706F40E7BC00D7369A9FF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1fd142dbcf1645578cf3ffec9e00323c.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87966GPYu3S

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.460673933972595
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+KQHVEERqjZcHcljX+:qgFq6g10+f+MnQHVErmAu
MD5:	027D22E568652E4FB63002B7171BF520
SHA1:	DB92F846CC05BF46A80B9A3B696D117080CF3B0F
SHA-256:	764DD11B9F828B89231D4F75CB206B56F090B8C2DF0998355F420151AA39880F
SHA-512:	9C9EE5169A2CE19836883F06C99A99E052ED6758E16530C1A021DEA67CC348163793D39692AFAA047E2A57CF1C028E5C85CCD550731E89667FA912218FD6B04D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=46ce54be61e34761bb3d07bef74a4c18.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:8796783ZGIR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.455325601888698
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5HeDlxkXTdXqZjs16:SbFuFyLVIg1BG+f+MsYXTdCjosQu
MD5:	5C6494796D424C301F9096077ED66627
SHA1:	4ABAB0DD7F665EB3F731E5185D8146BA4FA2CAC7
SHA-256:	C42F311033797DCA72C03C8EBFE78AAE7F6879EF2C8D2442EA678F05F57F791D
SHA-512:	2A4249AD068854C45BF07E84D2EBDAC96CC9B7AE4B681590B50418EDCEFED4863689CD58882F70DE544943B2304BB3563C3EE014B074140C6C8600245B0D6D5D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3c5b9aa42c234fe1af8e1743596828c5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87968nSj0NR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.379846071041793
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MjM6XNoN+2jdCLKzK:qgFq6g10+f+MjnXNCCLAK
MD5:	206EA347E5FA46E382E4420573DF4323
SHA1:	E19D1B592B3FB84191433AA6E208B9F754B4FEE5
SHA-256:	71016415D571314A68EC8A2D14568DE9CA3F48285603BC2C8A1B15B85050ADAE
SHA-512:	3785409134B17041949F18C8101454C6F7400AFB7FE1033A6D3765DD3BD9CFAECC4812590D3C82886C007A28CC667DD7AF5B0DD6483B98B52B19D918605133FA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=963f9429d6df494baa2cc4402ad11b07.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87970Zn6anT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.404004489066012
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxms35PwCSl9Z6ATjs2ALl:SbFuFyLVIg1BAf+MsXAj5jNALyAZD
MD5:	D26CBE6B85582C98D2DDF4A73775BB48
SHA1:	69FFC24000A2D417C9769004C5E89775FB0CC335
SHA-256:	9FD0FC1821B34A9D7898C4C461AE17352DBE97F2CF8ACE144C711053B8B90BDE
SHA-512:	F499E19965707A190EBF403389D1EB82146A8B4EE357A6584123D8BF61E0F809944CEE1276CF766BF1145C0D63DB61AEA6549310660B5124C9B618DC4FBB7BEA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f9c19f43dc9341639c0773e30cbcab35.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87971hBMvmP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.337916121097402
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvwAn7XXGAuxsjs1Ha:SbFuFyLVIg1BG+f+MIm7mAuqjosQu
MD5:	5823F4D5FB0C04C894AD68BE3C7E3458
SHA1:	381C228EAFCCA6CFA31D7E9EC6866F356DB1AE74
SHA-256:	994F93E6B5F59F6369F0314E3D9E3188B2C403D6FF6ADA099BE2FE695E54BE75
SHA-512:	D691284A775D41AA6126E4C3680E10D091DAA7809229788EE65806AA7E0612DF057210221BD1C7F634E87E04A0D0B2CFEFDA341BE2D632DA607BDFAFD6FD8C85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e0eeaed16ad44aaa8f5f45df801a852a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87986LLjpxQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390733871553765
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8d7TXBrIDsjsmNz0/:SbFuFyLVIg1BG+f+M8dxrIwjdCLKzK
MD5:	85CEFFF43C35C36526FD48AB9BCD5132
SHA1:	AF478648A493CB9521429324C8A29E892873C490
SHA-256:	505536EBE06A53B5B5DFBD152E3C49C244CE54A3B82852E6B98336000946B978
SHA-512:	34E6F7EAB240FBBDA7A719B69EE52BD901A7ACC70871B38A96325553228775514DD8944BFE20F05DDCE8CEF2543915F21B45442C329CDE57FD0F9CA920EFC314
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=641af44b806d4d6fbbecd8f8f158b092.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87987gopAMT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.39533657542416
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9eTfEI+BjWURz5RqS:SbFuFyLVIg1BG+f+MoTsIuTRzKjLkGq
MD5:	A87A34B760DE29B6C4CDF775DBF8A455
SHA1:	41E65B9836E3985C94014EDD099AA60E3439E9DC
SHA-256:	F469F7F225546DF9ADD81446B1E45956DB7D0CCF8A18788F93A387C0D2107CA4
SHA-512:	CDAC7904850019D5FCDA6889187B9047376E76B8B5013304390861599E69EDE611E375EFBC5A4CEC6D53F5D6A4DBED0B21B2F7DCD4F323002AA20DA7CD9427D7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7d7e560a01a1476eaf8f9c314bca7ebd.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:879970EDuNQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.465140562695042
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8cDbHscUhTjNALyAZD:qgFq6g1af+M8cHHsthFIZD
MD5:	A295F36CDBA877725F1F3113591F8F46
SHA1:	5F4BB9BED86F970B83AA649D82A1A4A79C4AAFC7
SHA-256:	3E6A630A3B7BB02A7F3593D4AD42B0ACC275836E547D9C796ADE7ECAF7483EE1
SHA-512:	74D2399D5B1A0D6AA5A6E38016527B3E1DEBA1847C1F9B5A4C2F730794C1FD914D077DB657C8C6D893466C652A79A9CD097863FC15F42BAEBF0C5E4A257DC0B2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=66e8520ac99c4f38bc457101842422b2.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89104UoHUlR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.51353528349728
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8pnmc+M80MqjNdQIeXD:qgFq6g1af+M8prn822D
MD5:	AF2462EAAC169A90D6D0FAB7D4AC8593
SHA1:	87866EED436E7B3D9F074960883DE6979562D497
SHA-256:	B7C7A2C438E691293FBA320B80B715E7FBE7986B453A597B00095B34D225F192
SHA-512:	A150020B57EAF9AB0D085E8D0D5FDBF7092115C57C5D02F877F17B8CB9992B7EE306704D5D9870D092B94BD6575BCBFA0CBA5C786EF6C4707EDC51BF18806A1E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=660b71fcd9854b43bc9e4b8387276405.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89216xRXE3Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.407735189354287
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvTRccIH4NGt+Frqjx:SbFuFyLVIg1BG+f+M2d7QrqjosQu
MD5:	61A415093E16F71915B45ECDDAACE2E3
SHA1:	9A2B7C7CFB728807806ED69C96E46CA6DEF92439
SHA-256:	BFDC19F8E3765CFEB615B7302F50247B15B7643B3FC3C9978B286F3B702AE90A
SHA-512:	381804AA6BF14B397E783F0EBABD9D790360C61AD194EA33F26A96F6234A3EEE8033069D9AE80E3A84CC15CA47C01B1FED236E1A770547DF7CE327F1BDE6A55C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e5c5afe9166b45e3860d06023af36225.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89226llDN6Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.359856229886728
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoHE8Q0G1fYrTjsmNm:SbFuFyLVIg1BG+f+MoHEXdArTjdCLKzK
MD5:	C8D03260E8BCA92476A53C1D15778624
SHA1:	59EEE39F4F37971D0001A440866794D6B3812DF7
SHA-256:	429DA65F629779276D7E1DB9D9D768CF3547713FDE92E97D067F64E229C635E9
SHA-512:	839A520D6B0778F56E12A8BE583E742A3B63B6EAF8347550E669F82AB00CF02C52A94FB51B934CBC7E746E8DBA7313E12E3284EF628B0457E005138CFC28BA97
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bb54dd6e2e504c5eb7dab2eac4c489d9.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91023UTlNza

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.381961765452683
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmptGiKjHCCcshTjs16:SbFuFyLVIg1BG+f+MfijHCJATjoa
MD5:	87066D4E0FE033D2B67463B5B17614F8
SHA1:	42489148A527FFC14EBAA011687F89CB0B3761D9
SHA-256:	312196942711F5078900AABDB8F15C4D9E8B3C3318017A761B4548CA4DAAC0D1
SHA-512:	96BC00FAA59A5AF84BF5F443C1ACEBDFD841875435226BF4EFD2FDC8F2DAF7DE13277B83034A62F5509A64F67033EE4341899F071818C655DB783B4383E10D66
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c857820fc5a94bf5a382bfac2b357c07.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:91033KvuoGb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.358509777671104
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoi1TAtUNeSgS0hgrQ:SbFuFyLVIg1BG+f+Moi1TKSgSYgrqjtT
MD5:	B4307644C35676F59D741C88D22C5127
SHA1:	474C9C66E2FFB80FCEB7D5676B31DF4D2BE8578D
SHA-256:	82C47889F0D40A81733E8E6A00B377A92ADD83EBA59CDAC1A545E130A134AC0D
SHA-512:	90B1EEC9B94B9074F4D4DBB71E35AF43E03264AD2AE5FAE6CA177598010E37D110DCD2D69C8E9D64131075D7737F63AEB0384CC493AE9412E44C63BA8138BCBA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b952a711be8341e0b2a4bc6831a97767.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:910345Cm0M7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.45498292227276
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoFH3gVH8VkKZjsicN:SbFuFyLVIg1BG+f+MoFXiwZjZcHcljX+
MD5:	CC18B434E5F4619589CB0B1A0202B66E
SHA1:	31D7E48563D4F0898C84B6C5C45B6FA28BD9A0AA
SHA-256:	BEA35EA08AEB23355808D285728CAB9F851E70A1BF37448ACA3B6941CB058DB9
SHA-512:	DF8E07291009EBF0243EFC260C6B1F660B52CDD4FC3811D97A5B62000FFAD80E5BDEFFBBBCFA5CCAB09A95A07F6ADC528B2C794039EDEFB3A72DAD7BD9965365
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b917b21bb2be4e178ad6b12819009f1e.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:91035JUzFT9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3341005587495625
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmumB43BhBBYhlsjs16:SbFuFyLVIg1BG+f+MumWXA2josQu
MD5:	E77CC92D82D8971DC21755815F9A82AB
SHA1:	FE377A849B33BB8AE57F3B174BEBD3F35285BF9B
SHA-256:	15A3A1740ECFDB360BDD8821B6C537EC9F73F3BBB711BE191A3001DE8621CEC8
SHA-512:	E9EF60501CC49EA75FBD43CED8F8D5494571597BE2E27C37801DB1D60ABDC072E747B82BC4476EA79FCD95C79FECBB9F120A7391BABEE1391BE76E19D11E2E70
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d0b1dd656abc44d4bdd67b0a314ce663.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91036MI02Xa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.42731868152702
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9FD9TSkxWHWvFrxsS:SbFuFyLVIg1BG+f+MhIHW0jdCLKzK
MD5:	B27C206B4611111BFB058400494D8947
SHA1:	5E5658FC2C8B7157D3AB51BFE3AA1E34CE16C849
SHA-256:	1B991333447D0726E293236C8420409D21CF44A77F982A174B6E1A595238ADF7
SHA-512:	DF0F8BCC3ED8DE4A0715E6548A6BC6802A6283191F7B8CB7291FF429BDE1FB98164D2F494A7F846F042B72D2D34DE3E245B6F4E701A270A8D2BDF57B3D72E4B1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7b516f57867246459e39b7cc93252c3b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91037FbXPO8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.454706715669114
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoPCNujXXEV28jsicN:SbFuFyLVIg1BG+f+MoPBjkXjZcHcljX+
MD5:	B5F534CEC3FA9B96EACD2E9F1E1306B7
SHA1:	1D661F144A608B2D1FBB2AB7BBB1CF7470D64B63
SHA-256:	81653DA4AF26585566BAB435E7D8FF9729A9981CE13D8ECA4B33EC02FA552242
SHA-512:	FB705B0EFFA8044EA25C47F66FCC3083E59DF40EDB63E1178EC9C09C900BD91CCC0E2CFEE152834F0A45015327432A229EF067626ADE42D729BEF770AD1A1401
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b1c22ce8e619483088b4c01228c0dca7.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:910385S8Bu7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.409978635956751
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvOilnMNEmDL3W2jsc:SbFuFyLVIg1BG+f+Mp1M5FjosQu
MD5:	1466501798BDC89803A7382675AAEF7C
SHA1:	1FD3F1E5F0098D8AFBB5F82A5F6AE003962A2AFB
SHA-256:	63B3A67B8FCC7F6A6CD07BA046C2652D8C1E2DF6FA5B3D9F2AEDAA54B07C9D79
SHA-512:	01EDD39B829CD51E91189EDA4EB7264C36D3F7223D24CB7BAF779D17C364EBA60853D0FCCA63CF368016A7DC153279CD6B83A292ABD3626819B8CB7DC00250BF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e0657f23d2ed429790a80d5d3a1785a5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91039SPtGR9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.315080006200995
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9eXHg/STPSU2sh+sh:SbFuFyLVIg1BG+f+MiHkS+OTjtWL0
MD5:	019B8D31ECAAAD7E0790C0F1A09692EA
SHA1:	871F94639E5B83C0CE8599ED1FE1BB42739E064B
SHA-256:	092536E772FAFF4D3D5A6A65790FD2A85B5CD6A97660849A2DAF4037911787AD
SHA-512:	9C805FB53492C3DFED3606CF50EF45F31C2F74F0DA1BF0E2E2473957FB5129AFF7D01DAD799237C3C85C1E7EAAAD50CFD4F186EA3F9D9B914CD8DEF8A16C0F11
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7dd122ceb2be4807beb7d8407fcd2711.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91040P8ho1a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.416632053995654
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4ySuA3xeFxhglsjst:SbFuFyLVIg1BG+f+M4ySpkFTjdCLKzK
MD5:	53F2119E7025133A6A198E881604C4A6
SHA1:	D5F3A235680345FDAC78E3F7ED9E0BD8EC4350B5
SHA-256:	318D20BBDA33D261A181662CB2900883BD63FCCD6EF92B2C89C91A9C8DB8A162
SHA-512:	9247B45A1CFD63848ECF781883842165FBB960F5BC07AAEB251C4578716C146486DB9614A6D3263189D0A613E79FB303FEDE2777CCD13C46E50A1C12053546BD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=241033b7785044939cd61f4d14b28453.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91041tr1Uyb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4571664101202435
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuhicbk0Mxsjs2ALAXaN:SbFuFyLVIg1BAf+Muhicg0ZjNALyAZD
MD5:	4CEC802AEE8A768605426134818B7B55
SHA1:	FEF72570CF94BDEBF58337BF7540FBF4FD358699
SHA-256:	D3D9D8FA8103C25C7B014650FA5B9EA37549E48E94BBAFE36463EF2490CFE634
SHA-512:	1CB9D4D067921CE11D30F13D8BA70D0D5304B546C93FB6741092BFB09A271F598F82F7B38F66CB55CB2AEB77B76F0E7F8DAD76D32BD525B423F821D4E693B748
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dd04632b498b474d98a6ee965b919b52.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91042aAdCP8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.436922841431419
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5aBTHwQUG6A/dvA+U:SbFuFyLVIg1BG+f+Mq6GxvATjosQu
MD5:	78D32803F87ABC67C58231BA5E3D0333
SHA1:	675CFC810C8DA511C234E306F3E0FB376F24D166
SHA-256:	E389D3ADADCA2F0C66BD3CE93677457DE5BB33ACA68B0157B06BF21FCBE54544
SHA-512:	0005F6F99F6D43DD34443E55CE28D25B9C36B0104A9FDD5E1DDADB998924D8F3174EFEEC57329C46E93797031DF91D134D3212DBDAB42170CBCD561BF47D69D0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=35d5143c6b27409d8e51c375edcc6df2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91050dyWga9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.431250911847789
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5bhSRH+fFSy8vh+sO:SbFuFyLVIg1BG+f+MDSRyFb2jNE
MD5:	C0233F635B1C32120F91E0F4434D8B07
SHA1:	BE940F1630BC2171005ACF61E7207165E5F44660
SHA-256:	207E14172447145802CFB8FBCC80160680C2C73A0D871FDB78A11F30B8D35649
SHA-512:	6824C0EC4EE116951AC13FF0E0906C5994DEDC2DF80B61A52BD409CE1C0F4CCFA308F525B4877898E6DD882379812573F5B47E4E98A9BFF691B90EB25F929E00
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=304a8e82f4b74b4a8ff17b2d79fb91bb.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:9105621hyL7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.399687796571088
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MAH1gjNBaAGn0jbVC:qgFq6g10+f+MAejXE1
MD5:	55D95424677CA0A3E68B0CC492EFB6D9
SHA1:	8CDA3E0EA6274A94BCF44DBD81366CA6AEDE64BF
SHA-256:	A808F90231A6225A18ED433778A5F3FA166FA659B99B575D55DBC5C1A46CA79A
SHA-512:	1E27204A6C5DA33242045788006C4C685534B320E9DEF19A030DD89ADDFC0D99B49FBA61ED0DDAC17DD856096300D447CFC3470D0427399EDC9A59BED7C659F6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a3fb4676c5404ca4926a243843a9cccd.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:910651NT3q8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.403978523006475
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4BnWSdRHnBPs22jsV:SbFuFyLVIg1BG+f+M4BnJHnBP8jLkGq
MD5:	C2AD2E8A33332A4B7448ABBCFB3A502F
SHA1:	3348ED61A7B49453DC07D8637F6FE26D7E8C1F6E
SHA-256:	BC047F18E1FE04C85EC70AD2A19E5FC6127F1DDD5DDE74F2E48A282814862E48
SHA-512:	EA6C788F7F2FB791A9E4E0E3360901372D8A468190B803A97BFBD41679C70914BA5254055F94149A039D9882A2A2AE23AD60FD2D42BB52912C12E5261DF89187
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2de0fd5f79bf47dd821a5849e42d4dc5.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:91066GQkY69

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.487895901818525
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmz/3mRY8D3Nrxsjs2BbM:SbFuFyLVIg1BAf+MTmY8lqjNdQIeXD
MD5:	05879C002959B90122F108A86C55641C
SHA1:	D3630640CA4E37C7CB29B106A833C22B86CC61FA
SHA-256:	267A55E3535B57060F03AE77D581A39F8B8B703071B238674202B472377223DB
SHA-512:	5679469D964C7A8AB1087DEFCC25922185994F1B8F2A88215A298185FE17711CC78F8F45BA1DEECE515B274650C61112BE58C3905AD9648C3BC98716176E6625
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=91d7dd22638d48079871c405fdb165c3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91067zBEtZa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.353289744875469
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmukDWbSQZRkjs1Han:SbFuFyLVIg1BG+f+MuKkSqmjoa
MD5:	88F93777B5BE76A3ECE19931B2A8AF41
SHA1:	E5AE052F60684992570E3F3955A5F63504A522EF
SHA-256:	E80422E5EAE2B111C0175FA1C2211A67754037A3F7F7DBAED0C2A94769C44A59
SHA-512:	8C210C870023176F8B048D6F3B5112F91AB8AEEC44773696084A1C95948E5D591F2F7CAEB81E6E43E7EC91EAA7E32F25B7AD9D547406D5A8BC15F24B6573E7A7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d57af3e185b5497bbde9aabbac32ca98.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:91163MeJbA8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.355556817235233
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmviTUmJUjzruvA+sjt:SbFuFyLVIg1BG+f+M4HJcg8jtWL0
MD5:	2DC6ED82242933006182B8C13E0C9048
SHA1:	FD3922A119D598F95F13DF7A769318A3068C4264
SHA-256:	A69FB8FE28E0FD6B4C031975EABD467EE42EB509E2D4FB00DC5D1091DCB7B719
SHA-512:	B83F43217504DAB5A02FCDF49C27D9273A120E7A63834C33EC574C2839EB45AA7563675A8DC06AF35FEBA54EFDD691FD5EB50E33C5405DCFFDF2AD512B335210
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e6cc944861704c0f921d0b128e66faf0.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:911726udYS7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.348051945791372
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4BWamSDU7nR82sZje:SbFuFyLVIg1BG+f+M4BWalMR+jdCLKzK
MD5:	1CA284ECABD720F78AAD9BC9B3399270
SHA1:	79AAA9A7AEEFB303737FC99D5D7A3D1C6BF3E56B
SHA-256:	D18E9606B1A51B3A8F22AF7BB3BBA424DD74CC64215210058835B8B3F0A8602F
SHA-512:	61B964647B98F4E3CC69220C2B62CD7DA4C651D91CE7473E96A8424D9B56B85578DABBC7C26D6B8AF3302977557C5D2B53428A50DAF1FA218EEEEE9685257FBF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2d8138bc7f104ca1b922ba0eae7aba14.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91173AuY8vb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.410194036645762
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8EywH8XUXxRFEDCcz:SbFuFyLVIg1BG+f+M8jwHGUXxQTjosQu
MD5:	980C5BA24CD010CD0F7BBEAA8C55D92F
SHA1:	EC2874B868F8F5075E4180BBFC064D7F5BC2A8CD
SHA-256:	68687F749DF09E0377B87727E436EC58628BD3BEC0C10408E8AD117F14426CB1
SHA-512:	C2FEDBB0AB4AE290E327A5AF69363447A8A3B5458931F1E7640217583E31FCBCE8EA2F23CC92CA0990756DE0C75C9C5013B4610C7C266FAA0AD7054E81D229E5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6adcb45257fa4212b4455ad20279fae7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91650TW68Vx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4777138023409035
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr6LbqOGk7zvsjsicN:SbFuFyLVIg1BG+f+Mm3qOBojZcHcljX+
MD5:	1FA6AFEFC1412E2BE2666F4F441E3221
SHA1:	1F483366DFC2C5EF96441624AC00E48C66F4BEB4
SHA-256:	733DEC4E331243A1B79387F160A06EF05DCE4F799AF85BCCD5D35FB401C0E8E8
SHA-512:	DCB41299DBDB996391620A53D61838DDDC125A509B9FCC5E3506AC6721F74341BE14DF2C9A3D8FB6A2E27DBA6C69CF97D3CFC045D5583C9CF85660A61F763AAB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a4968cc23f6f48a4bf31b4cbaecb9cc1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:91651VYTdfw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.400330056066213
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+cKoRiuqjs1HadmQ9:SbFuFyLVIg1BG+f+M+cKolqjosQu
MD5:	812EDE80116038136FC11237CED85052
SHA1:	B03937904941437348874EF56DE85507E8175B14
SHA-256:	CDC5598D9E7B495312E04F17EE70A87DCEA80DD060BB06FE5DB76364CB87630D
SHA-512:	D4E0CCC559842BE49A1F87AC6C38D5DD40A2D9D74596104082D17CBDB7C46DB28345E4581B35AE767EC10A3C19B123AA3B2351AE1B445DB9DF7A90FE574AA66A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=426e5f5dfed44944b46672a404229467.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91652dKsEey

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.378483480175674
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpMGcEZETUGKBTjsmM:SbFuFyLVIg1BG+f+Myw6TfcTjdCLKzK
MD5:	2651A431885DD4935BB4A2D93ED2984A
SHA1:	B8EB71B88FFE3CDEBF81843A53A56CB2206D6D82
SHA-256:	08D78BE255F3CD928AA2811AD6B5C1A9440AC5CE1FEEF869AF711FA06BD56AD9
SHA-512:	14995D6E89E5513A2A463C086B0D78C3CE8015B365A2E53A84FACB8BDE2F8A31964C7ADE3CC129CD0F20DBE868FB21315A6C3F5877415DB0D7F53985E464AC3A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c4da08c9a0ea409d8bc3df61cc7f21d5.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:916531E5x5w

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.333663849676119
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuKRizBWxs5RhJF2jt:SbFuFyLVIg1BG+f+MuTBtRPF2jtWL0
MD5:	336364B79C7E614686181B465E4799EB
SHA1:	799CD5363862D73FB3BEE6FE715BD06EE2EE2F9F
SHA-256:	5642461A9AFA86BAC62D7891F5DF4F193920A0A3C868F645907D98C8EC6AF435
SHA-512:	25A7FE5E66C8784D7A91077BD65A0DF6CD5877E30941BBC5DB8A7636A6D145B671C8AEA73D9E8F0AB19BA58EED7CAA3630DEAEE65578CFFC9810FB00863FCF45
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3d84e1b1e384d639e90bf58aa492424.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91665cHZEfw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.394503908817283
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuSHUMDBQwP5W2js16:SbFuFyLVIg1BG+f+MutMWQ42josQu
MD5:	B603D3E9DE8C2242706178A27FDCBA4F
SHA1:	646110797995955FBEA36B1C8DE1E9EC35BAD6B4
SHA-256:	A3BE4AEED7800231A9E199FFDD871B213FA8267D116BA630583F5D3B44206552
SHA-512:	8D4EDA07CF0818414C798C201F7000C6BD7CCD06F57E8563B35905EB4C782299E48D2BD2E0ED18934439CCB1342F0C337A6BEDF9BC6DA3334C8661856DD080CF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d5f0b16e8dce46a3a74d6e744acc7f87.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91666rlhfHy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.355233496624659
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp0at/1hYNWtrxsjst:SbFuFyLVIg1BG+f+M3t/11UjdCLKzK
MD5:	BB2E9D06D05EB156495363B4AD06BFCD
SHA1:	C9DA609933CB53789769A1869357B4A240F979A3
SHA-256:	8CEC4B9C91C003DD5F73F34E090EA73BF60F254998AA0D4CBAD84E9DD905D894
SHA-512:	A21FD8642F1FC42E1F24E96852F535BE193D9D40CDB6402B1A5196F5B2A8FEA64612216659191AA9D240A76E179FF03FE47F491E9D23C652EDDEF8F23209452B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cdcdfc99a61f4e19a27adc3b036baa3b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91672jDZwLv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.413803805308725
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MctUoil86rqjNALyAZD:qgFq6g1af+M0ia6MIZD
MD5:	0B528401959588CEFDDFC4B3E5EE4AA8
SHA1:	9AC195B48C36F001BBF72EBB08369558984ADED5
SHA-256:	13E7CD956055454506E9B38E5C5250A9BA6E78CB588C7E4A18AE850ECDBF3FAD
SHA-512:	C2D30307153E0F3ECFBE9B2F677036518EEE1CD0A721E3363A88AD91A0B05715E4BBA67EB1051EC38703787F760AC30821FBF5C540298F31210481ADD3E7182F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7bc0b1a4e38048d1a317c32f0d49882a.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91680HsBeJy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.354494418617044
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6FXGOh+eqjshQJWL0:SbFuFyLVIg1BG+f+M6p3hNqjtWL0
MD5:	EB42A68332D4748A8C361A6BFACD770B
SHA1:	45F776A5509350F9B3CC46FB2938CA3D92C3C593
SHA-256:	F51E8835D90530B7E0619E0DF922A2BF334172F5529ACF257876D79A4139BA2D
SHA-512:	4A493266BE42F60288444C3D1132317B7D34A2A4EC263B70F85E9BE29574D7AA4A94CEE5B86A556782394723D9A3E3433278BCBE92F55BFC07622DFE34F9C535
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0c788097b8c54bdcb90c026367cedbb5.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91682ocpr9z

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.40443056969742
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6AV+REXLJ6XMEg2ja:SbFuFyLVIg1BG+f+M6A40LJ682jNE
MD5:	B3B0E7FF273AADF9E8410D674CB00F8D
SHA1:	CCB6BE5CBC0310B102BC4C294DC2D8A54C2B0381
SHA-256:	C11259B95194E03AC9E13C53BDF642221F99A9801C8762CF17ED16F6C2ED3DCB
SHA-512:	F8C9D0381DCBD64A36E6CA3E3984D4E44B624622EDB935BB09DF3C8F84DA7897FF517ACFD04B10553DB8020AE0183FCCDF480E059E3DDD5CE22D82117BB1B6E0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=03e4c0446d9d4a2a8dcf02f4f9d263bf.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:916835skSTy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.444094640706504
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu5HHH5RS++FlsjshP:SbFuFyLVIg1BG+f+MulKhF2jbVC
MD5:	4472099497444103A1D2D1BF99C9B4B2
SHA1:	29FD7C3EE3A32AD6D0BF8EFE3589E312EC9A3FB0
SHA-256:	1B09038245498C6043780CF4C5A53DE40D52F598D31430E84367E7D82901E996
SHA-512:	F383433FB025B05743310F7FB7A74210165677C5894D8BA32EC00E00BF6333D0BA542BFCF23407910D515B42BFD07950A760A6C27F859EDAE10C211BADAF2471
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d9b987f8e5f543ebb8e51a2472126481.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:91684ndxGEv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.385818996691688
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyBDtzJTHTo4gLXsj+:SbFuFyLVIg1BG+f+MynaN8jLkGq
MD5:	A5D63E8B71F585716EC9CA194F0732FA
SHA1:	B5C3E7E17E1BFCA7EB7EE22D9F8A3E0BF8C48A77
SHA-256:	361C48A4F66FD528ABF6F858E21853B5AED6D2ED18CFF86FE84DAEA44B6752C6
SHA-512:	F63C291797664C8CF9D8BD12CC9012AD2A3770753BC92FB36FA85B95F6221EE49A59FBA1D2C165C1660B7FDAD712E5772D6ED64EB648974BA62FC01152CCD2C7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=824faa0c7c704763b6a6d607b3bc81e3.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:91693xfZ4Av

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.475773150517092
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M0Pg6Ha022jNdQIeXD:qgFq6g1af+MT6602M2D
MD5:	D9AA04485B83DAEFE597C4C13CA94661
SHA1:	0DCA387488C1C4D461F0CE9A5DF7A28BA5776F38
SHA-256:	DC23B812BCB8D4B401C2D097328D69E8B827A15DAF0C0B2D013F92BEB94F9D6A
SHA-512:	B9E1B6715148BD26BD30F5E70176818A95D02E664613547DBB2B24DDB054F9F4245AAA88AD0B396CC9CEDF054FBD7E38AFF2470311CEC0311A79BBF9A8B600CD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9601b4e5b8374ddcac9d8557dca9be82.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91707e9O7Sy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.3931943213067255
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5xHGXGGW7wdQfDUs9:SbFuFyLVIg1BG+f+MLmXUwU1joa
MD5:	B249EADC6642D791A7214B57BE2BDF31
SHA1:	7C31E07222479737CB2547BF5340E967B1E7CE29
SHA-256:	08A120BA7021EC4BFC43797365EC88A9CB60281E184FCA4D5499BA822ADA634A
SHA-512:	6718228E388EBE825705F75BA1B58C9B6C084F4CE0AE98EBE79E368503524143E908DF2645A34D3E3E68440671672FD8649903D673424B9DC30BECA93A1287CE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3fa9a7fc2cc04704b0567d7185851cfa.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:918069qu5Kw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.335912552424359
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mu0sdQDWD+grqjdCLKzK:qgFq6g10+f+MDDWDfcCLAK
MD5:	C12A4611CB04FBE1F5D8E0FC030388E9
SHA1:	F9BD1A58824E077C0C902C02B5BDA662D2580EE2
SHA-256:	C623C6B1D86B5D173A2B8156A6EBA7B834EAAFB89DA3B30A8BE8A6BC035CEC48
SHA-512:	3FAD4DF1884B51B6E338288259077B1879D6D345094EF52F070A4B23ABFDE135692B78068288B3443101471E9C4765002ABA7FB57E976EF4EC0A83FC0290700F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d1c91c0c645a4ac094f5f14a81438c0e.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:94890ZpAuLW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.386940511543159
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+LBAHmfRUctQk02lm:SbFuFyLVIg1BG+f+M+1FUctb0jtWL0
MD5:	CE025C137EC5F2C5C93ED251CB48F488
SHA1:	B7F67EF089050B23AEF2D8D3010309831D7E252D
SHA-256:	B44F4742DAAA3C832871E3E0DA3F045DDACCBD758C6CDB7C3225321F6A3FA6AA
SHA-512:	901F5A037F1C4F5785F9FC62C3D143A6B9C776337E0D89D794054AE8F374F187EA645ED9DB9A083F6A9492F7D52FC14F1E0F1D10C1374262C96AB9D25BFE1259
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4213fdeb701c419480c96716f5086290.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:94891tGIUNU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.40823088709713
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu7QVdXRWcsX3/Sc2b:SbFuFyLVIg1BG+f+MuIw/SVRjosQu
MD5:	281E6E901809F0B9DC12EED2F4E9135F
SHA1:	BF6FDD761F67A81FD714933D3CDD5F3CC1239965
SHA-256:	023574A8326C7E1A4A68BD8FD0EC8253DAD09394B797E74146FE455EB563E1D0
SHA-512:	A5D36DC093F69781D2BA7C847C35828616B6E05925F42F4B09284E0660AA933110641124D3AD4AE549876D608BC170A2A827F00A92C9AD9FDBCD491C7D2DE355
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d0f0655c01a24bb390c2334a379451d0.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94892uBYMuU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.443435793541073
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6KM9dVGLIH2BBYuqO:SbFuFyLVIg1BG+f+M6KMlGe2EjNE
MD5:	90AC2C9AEC50AFC698CFD6CBDB63A8CE
SHA1:	B08CDD769258752092F6B51169716427DB8A3F61
SHA-256:	76F84FD03ECBC9D77BC7BFAEE0D4BC5373DFC3BA4E8F8BC465B3E6E3C859FC3F
SHA-512:	23FF6537058E4EA65962553E1E0D1FCA7FCD5D9E3D58423EA8CF28CECFB10D570897D54B05C8A955F5D3DBAC82D32629BAE86A60A745D8B52ACD7F5FBC89B2A1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=01650516e9594fd28b2ef5c6b14b45dd.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:94893THMCWV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.487566261427446
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsEaZ3CHjsicWmI2Zj:SbFuFyLVIg1BG+f+MsERHjZcHcljX+
MD5:	575BF56ED74ECBAD191BD3D512429E52
SHA1:	300CF506684AC063867D80670DEE96674A754315
SHA-256:	D966A055141D568A7CF88B78DE28E682C5FB09C6F7F606279567FD7E7786965C
SHA-512:	78527201144DCE8D261A30072E68CE163746F5959A678EA600135D4C09D613C129CD76E93EAC9BF5A5488A5BC098285C11CB289845B1F57807DC37E3935BBC22
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f18e55fc73cd46bbb2a81f86888bd0b6.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:94894uM0FLX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.4296818678168295
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4PWhSXdTUm6BRUr2z:SbFuFyLVIg1BG+f+M4uhEdTMyq2jbVC
MD5:	BFF443389F1DA8EA5193BE169C12E9EC
SHA1:	C3D680C33406D3B3F9CBE83CC9F940FEE7E53DEC
SHA-256:	96F94B42306E14916CFAA7A6514763EB45B960F4A7B95F95A8AEB6D7A188E8B4
SHA-512:	076E1999915F39A2D6EB89C38D7599CE38E2383D364D4B743C9A736C58E0DBECC1204570AB4E97AC780E2E70ADC9C64832C728DC4A26FF43295A0A30596D2270
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2375a23c907b48a7861d5c7a9cd417fd.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:94895llH3YU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.367192540052613
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6XMXElTMMqjsmNz0/:SbFuFyLVIg1BG+f+M6cW4jdCLKzK
MD5:	F1BAC20F1BA92CDE8467EBDCB6FDC92C
SHA1:	4E551BFB89762DD502F4947AE6F7D4E1AE494E3F
SHA-256:	8D2630AAD43702914B0EDA71448BA201F4198DCEC6BE53B2C9AD32D6044BD3F8
SHA-512:	BD2EDFF90FF18D0D12E391853C40941A211C60923C4812153CBEED27C4C0432B723B4023776E6DA7B9138FA0A012A52E34AF52ED1AF98387972D7B4FBE8A0B43
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0b6cdc3e27f14d50b2dd23d67a066e9d.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:94896KI2sYV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.428428034282559
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4EVVyDH2iTgEZhuqd:SbFuFyLVIg1BG+f+M4LDHtFhuqjosQu
MD5:	D39174E591F46F88909CA5E4EC83FA79
SHA1:	8D9B57994AD6E9E0DBAAB2518D1E3E1D3403C78E
SHA-256:	D043273CFDE800590F339C74899BDD6D4C96A6D4E936295BFDD41E80677DEC54
SHA-512:	43602FFF3764A7E89CE841ABA37D7F4B368ACEF5BDABCCD663B8ED35AEF0A40DCD0A4F95F4C9D5EFA430AAA8F1308F7923A44154882AA020229A89435CEFFF75
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2a5ec915b5bf4e96b34adae860cd2167.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94897DsMxZV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.315388631148566
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyJQ/dwgV36vRqjshQ:SbFuFyLVIg1BG+f+MyqigN65qjtWL0
MD5:	7433826BFFEAD194132EE4DD791E237D
SHA1:	3345B1028CE621D9A381E1A385510233238FA379
SHA-256:	73842A6F6584BFB38E7066F870129D13E982315EF93B17DE259409212815CB44
SHA-512:	99506EDBA52CCE21CE5139C8E96378EDACD5BB79758FAD2A408DBEBE8FFA6F86B7C96FE4B09DE9C2E54D468C3343B456129E1B6C8A7C43236522C45C4C9EDE86
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f032008a4ca454ba4b766b0efe7f0ee.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:94898KPquqV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.366802592569691
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+6RKYWTZF2jsmNz0/:SbFuFyLVIg1BG+f+M+6KojdCLKzK
MD5:	8441AFFAD94114B985C9653482F319BF
SHA1:	3287543F3CC8B70C91287E31E44DBBE765B693C3
SHA-256:	3355D3A7C9733174B1DE01EA199C504D01A085FE7C8D55B4F045951A2004404B
SHA-512:	81897D90F926141B2AC8429079BD6096CF9051BE688CC4F5675A0D7E0FB691133197F82AF29F344C5E6DF1FAECEEE317D7D7B00ECB275111FDAB5E0BB572FCD5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4d66dcac91a54f34959f355b45bcd5cd.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:94899OfuSpV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398086609463747
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzua8fVRNExELhglsd:SbFuFyLVIg1BG+f+MalzEkjosQu
MD5:	96345FDB76F0D9E086FCFF4DED0E93DE
SHA1:	74CF870D63396AC3F8EC02119CB7A909DDAC7D21
SHA-256:	A2E4A735D86FD1425B2C0FDE2AF2D07763E3BE02062C0D5A3BC44EB55260F595
SHA-512:	D793B0B93ABF901F07CE971D03F604FC52B81B029F0D2D291353D9815B852B275576C61EAE04AB92818C4B4DCB263559E89688154D75E3B7199E2FD99405A1F3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9195963a31fa49b1b06604175a18dba1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94905FAapFT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4151108606632485
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MyUKRHfcRAVrqjNALyAZD:qgFq6g1af+M8R/ceVMIZD
MD5:	942AEE302895777908CD93D9D6FFC79E
SHA1:	FCF724841909418DF14A6AC64020E38AF4F99634
SHA-256:	5DF7410994AE64C4ED01491AC9CDE022979E6775C864FF0C836C37CE9B8992FA
SHA-512:	0CDD390CD516B2E9C4429E3DC5A01C1A299B4E758EF5B84BB06FC28FDD16B31AAB04EFB174F8A954A711312EF5DBA0A5C5A15C73F29BAF32A6CAF3DB0D26F219
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8833f9ef4fb14fb79493c248c34cc81c.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:94913VTp2BV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.484207738376718
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoJugEiHJiKuqjZcHcljX+:qgFq6g10+f+MoggEkcvkmAu
MD5:	9DDB4A21E4DE5144D42A5368B60C26CD
SHA1:	0880A76C9061878F7A597329FE34C8B795C317CD
SHA-256:	173179C5C959312B274EE4ADAE9CA871E9AC9A6EF48F3AA992FE991509573827
SHA-512:	45F523BA312BC3BC01ECC1A25C0214E402F03F89E2CF8DB73A852C163C066F901004E0B5E66F264A0A4D09EBC79F860E40904B8DCF9AC4B8F48765389F5A3371
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b78c008a4ca74b7ba153f2c61a588e83.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:94914lSlDBX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.3547389625407416
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmukEcBEXh30Aa5qjsx:SbFuFyLVIg1BG+f+MuNmEXjfjNE
MD5:	1B353E48AF28E58DC15EF17199C5AFFC
SHA1:	1FCD5ED9C24FFD23A8A78C15F23CB0BEE6435F6A
SHA-256:	07129528550B9E498A5A1F948029066FD168C15D9E4C2349EB2C1740947CD2EC
SHA-512:	7CCA00AB4050CAFD093BC7BA34F63A343EB12D0D793E77A17B04E9381AEDC6566CCCA9A5E7F89DBC8C2AEEF1ACC62C0E105AEBAEBB0BDBCDF7A8438E4EA74782
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=de04a9c3a2774cadbed123d04ddde21f.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:94915Y0BadU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.428264823643886
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6fTg1migQVL3lYTj0:SbFuFyLVIg1BG+f+M67o3WTjbVC
MD5:	E768F544E9857277814114E364BE6A33
SHA1:	2DC3A791E2E35BDC354CA9F554F654ED0206DD23
SHA-256:	46BAFB467F92C47765BC7FF9D109A81C0A3B588713C0B3448D18BEEE468A162A
SHA-512:	02F3402B00C6EDCAB0D7503BAFBF869EE4A031B19B4E04BED341E74EDC83163499EBFFC2663672FDDEF3ED24F711624492C5EFC3A54827B79676AAFFA746543C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=01c694a9ef884873ad35826ba10f6b6d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:94916uoeBWW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390052576120707
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8BRC3zR2kQtWArF2S:SbFuFyLVIg1BG+f+M8B2RstWa2jLkGq
MD5:	C0838705E3468FAF74C140CBF798DA53
SHA1:	6E01362FCD67F85BBEA861E21B79DDBDCA7A6B4D
SHA-256:	4F2878B7F69848079A0E6918A99D3C0E2AFF83E0727C5FA90F7023A01735319D
SHA-512:	DAC49F19E800B5B5D73D923E45771DA2AA4EB07B0BAB67808FA02208D540EAA1065904ED31306A80C82B0AC4C891C0ED5AAAC8395D237B4304853ED3B5B638D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d4230dddc5640548b188ab1e6a77e04.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:94917HVAj0T

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.471248892496319
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm51SUJKic1Cwtvsjs2BI:SbFuFyLVIg1BAf+MOSKsjNdQIeXD
MD5:	A4795C9927B5ED43A3A222AEEEF916F9
SHA1:	1060021233DE82874E1A6214E8A63713544A0432
SHA-256:	42B1A00476FF02640195733F96392071136209C3D29306DC1CD0265638703300
SHA-512:	5369FA5A4FE1BCC0BAE886B85560CA0DC889FB1F49C6210E5F8259ECE1609470C3648673FCF18B21BCB6E61A773A0EE3B0E83782E0ED8021D1D2D28D82929773
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3b65457159c84ad9b03e6b3db9c5018a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:94918aeYyFV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.401847612435825
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/yIaJS6d+xsjs1Han:SbFuFyLVIg1BG+f+MpaJSHqjoa
MD5:	9BE57959EC06E24A000339B3BCCB142C
SHA1:	D7A69C66738EAF700A9A4E9DBB1B9422C38F4ABA
SHA-256:	6236429BE303750F8B47836B83DF7EE9CEAC5CBDFA2D6F99320941E1598FA20D
SHA-512:	55167B310C0E4504E091733FAB912CE3965A2220CA0DB9F22E0DD2C6D4E29F3CD5FD4022B5961371578E1F433414A8E17F42C79DD2E47428DEDEADE86B9425C1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5d146a3135bc428394b42a779cb4298c.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:94964VbZ31V

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.370210474161635
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9OWNRDS6ozDUs2rqh:SbFuFyLVIg1BG+f+MAGRDS6ov1ZjtWL0
MD5:	D707DF3974A5F1C29FE5286375BE1A3B
SHA1:	29CD1EADFF9981A97A47490F64DA477491EBDE9D
SHA-256:	3262E05A84A78DDEACEFA3A1C186E80BE9622A56829ACAEED972CF949977AE16
SHA-512:	060891572882EC3757E83DD19D1F2FC0FB59641DCF082C1D6F0F689218A857C9B5C818404110A94A6F7FDCF76B6EAD094EFCD257551BE0C5D04991CF5DE9E7E9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7c42671435cd4537b1fcde58315dcfaf.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:95095pPhXCV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.36827697509676
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvsEDvUHmzBcs22jst:SbFuFyLVIg1BG+f+MUEoGSF2jdCLKzK
MD5:	60D985AE2D082D33E7FFDD567FA377D4
SHA1:	8F007C948254A24EA9F5C22ACCA6F932A6635E88
SHA-256:	5F9B9062F88DAB533011BFBACE8F683F802A9E2C70175E10E83DDB5BADA79E0F
SHA-512:	7229AFF0461ABE774DEF566F6E9C9925BC7B9E2792754B671B2EC4916AB53A1A692C7D301D62A3E20E330E5B1ADE44797EA6B5C227A23D96737C758E5E2F3BC1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e055a3ec65fa40f191892402ddaded87.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:95101Lq8N0X

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.38100638456863
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrmuJDSkATBTHBS5qd:SbFuFyLVIg1BG+f+M62mlHBS5qjosQu
MD5:	27B8E827433ADC6427B168D2B866D198
SHA1:	AEF2836B8F6F45412415847BADD421B7FB0CB291
SHA-256:	63C66558E4BD0CC2DA393C029215E1323D320DA99CCE367E43297E41076190FB
SHA-512:	CC356F9E4FBB84140601799C3CA85BC3C3CDE179068A666AA713C48EDE73A129834B12413F1A5FB6F239FA09829D972D7CDFC2B88C53254D1C56EF1877F6FFB9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a4eab765ac4b4f75a72161e677d46bd7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:95123nfzgKT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.470777654547704
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MAktdqEuyF2jZcHcljX+:qgFq6g10+f+MAo/KmAu
MD5:	043B98A993DDFC1BFE42EBB3C20B4D38
SHA1:	688965CC607A75DC046BE8137D363B38B6ACC577
SHA-256:	A613B2CCC38029E115FB7E2BEA2AC0A6FDE833D5288FA6D7649352C1AE81CC02
SHA-512:	86F88FC02D07406D755748B906697BC6D023A3B6CD43AD1B326D92C6C01E75FC2111CF4C7D03853F593EE3A64F476ADF2E31C3B466E25E7772AEFCE08F5BA238
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1ba46e561e55451ca6c8f89a4b56b603.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/seats/.#seat02BnGl1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat07tAoE5

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat07wNjVG

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat09BsbX1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0AwkUdJ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0MHTnCC

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0OKS8cb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0S369Fq

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0dVGEdM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0p9XhPm

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0qWcC4F

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:vH:v
MD5:	E9AEB46FCD5D36D29BA69D88BF887A70
SHA1:	2B48B538EF750BD4BC21F6DDCA4BDB3974ADE6AC
SHA-256:	C5B05CFB355FBF380DCF874907091A2AABC1686F9F6E775F37935133345A6282
SHA-512:	DF04CE3E341B5A7CDC04E916E3BE1E33F7E6115547EF9AB768CE31BE80D531E520CDBB99D56469F350F84EA9A00B8CBF6401D50966FD60854B847E8201E96EAC
Malicious:	false
Preview:	7988.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:blmlsXlXEWtl/EX/:8A+yls
MD5:	3C1A100671FAB3BEFD42F61B0A086F7C
SHA1:	BA676448B06DD62AD5868F2D6BB5156C73DF1D1B
SHA-256:	384283F71B410B9E87C681379ECDDBF516E85988AE2F95F9A53A8CBC4F7A55D4
SHA-512:	5EDDEE7179F66030F55AEABEBA0D9B5DA204B60AD0B4CF8198068D6601CBCF5BAC101A650580B85BBB11ADDE44491ED883B436F7E0E725A0180F2AACB4BE4838
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN...................................................................................................................................................................................................................................................................................................;.Rg7.......................................

/tmp/qemu-open.WpIftg (deleted)

Download File

Process:	/tmp/Aqua.ppc.elf
File Type:	data
Category:	dropped
Size (bytes):	28
Entropy (8bit):	4.110577243331642
Encrypted:	false
SSDEEP:	3:TgqLs+HJN:TgcJN
MD5:	DE551D3C32F07A6668813E2D0A0AFD72
SHA1:	E2F9EA925C75F83104708519C2A345AF78C4B4D1
SHA-256:	7256A6F7ABA524B5BBDFAFA4A2FB9C3CCD32E08AEEBE909B07F610704AA00E3C
SHA-512:	C5E9560425A0C399B8F79496321D14B59A1755B2A5337EF9E17060C80C1A2227B5836C593D01F87D8A9F56BE85AAA9DA816FB4BA898A0531A6F6ECBD9F2F318C
Malicious:	false
Preview:	/tmp/Aqua.ppc.elf.nwlrbbmqbh

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1718
Entropy (8bit):	4.902256465877843
Encrypted:	false
SSDEEP:	48:hfffGf6f5f5f4WfJvVfJfVTfbt48b3z7vV7fVTD:hfffGf6f5f5fVfJvVfJfpfbt48b3z7vT
MD5:	B97E03F4679DB9DAB5997596C60462FE
SHA1:	6FF33AD1D2D9FC2BD2C4DC06F25EA7B30DE7253B
SHA-256:	B0C95BA19926D5A7869051C00D243896E27208CD5F02A711014E8D919E0E3672
SHA-512:	2B7F071492404A641D0F66A9FBF0AED94764BF3E6F7970F7944BE0C3AD4A3B049A43A57E436A2BA94D0368115D9348DB89B303238FF3350B7146FDB18C4AC04D
Malicious:	false
Preview:	Dec 6 04:34:52 galassia systemd-logind[7908]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 6 04:34:52 galassia systemd-logind[7908]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 6 04:34:52 galassia systemd-logind[7908]: User enumeration failed: Invalid argument.Dec 6 04:34:52 galassia systemd-logind[7908]: User of session 2 not known..Dec 6 04:34:52 galassia systemd-logind[7908]: User of session c1 not known..Dec 6 04:34:52 galassia systemd-logind[7908]: Session enumeration failed: No such file or directory.Dec 6 04:34:52 galassia systemd-logind[7908]: Watching system buttons on /dev/input/event0 (Power Button).Dec 6 04:34:52 galassia systemd-logind[7908]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 6 04:34:52 galassia systemd-logind[7908]: New seat seat0..Dec 6 04:34:52 galassia systemd-logind[8002]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 6 04:34:52 galassia syst

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838254
Encrypted:	false
SSDEEP:	3:F31HllHGtU//ltHGtM/:F3oUa
MD5:	F293EA48A847E29E4DA1B35E7B1B15A6
SHA1:	8CF286406351C06CFD3F9B7CD0F28F486B041AC7
SHA-256:	9B3B08C0C94EECBE7CEE5C70DE4ABC6873AF49B5ED4CE31CE0C2720C9AFD6F8F
SHA-512:	C9DA5ED365E6415BEE81139BEA4271EA86DA96FE47470D59F33077601EAE4111611D4CE02AB5524B98469CEB330BC2724258228C1AA41AA6E32991FAC37B2D76
Malicious:	false
Preview:	LPKSHHRH.................dfy.G..\|.f'..................................dfy.G..\|.f'.........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4226312153993532
Encrypted:	false
SSDEEP:	3:F31HlzAYzCisx7AYzCisTlll:F38YtsxEYtsT
MD5:	7F8A1785D0E0F945776D2BEF1B41E73D
SHA1:	2197F639411005169F6AF7F9D0FAEE18E3744006
SHA-256:	775AA12EF57242928595A9CC4B3A3C00EB8EDE0979FA6F81FFD0E34DB723DD56
SHA-512:	881EDE4DAAA2D250B3ECD28F74DF17C108F86E20C7604EFECCF6279BEDF983B2965FB2D58AE0EBEA0FD5AAC8680C0CBBB8DBE57D1F8697FFF27946877138F8CC
Malicious:	false
Preview:	LPKSHHRH................6...M.E..H.4..l................................6...M.E..H.4..l........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	6386
Entropy (8bit):	4.721541853353257
Encrypted:	false
SSDEEP:	48:1wUgNx6Eto7a6CcyF7JyQbXK/cRdSwyac51hV0tLgbNGzyp9c5ucy5c4JxcvJqcE:PFR70uJE+5S5YU64vxulrS4QgMja
MD5:	5F77ACF4FBBAA7CC4CF8FC1BCC7460C5
SHA1:	11E096C530D69E57A90FF465449B8D6C3E55CB41
SHA-256:	0256426B22152E22A6D8B0F9502D185BE11452EAF28F4891C2CA3FBFDFE8EFE1
SHA-512:	7A91DAF6FEF81DC0B60D1705FA9B6EE830412A3F5CB75F5C7700618F7AAA02F26FE0FEA544F9DBCC7212231B0FB409E1C7DD004D3C2120604C036FA02DD7059E
Malicious:	false
Preview:	Dec 6 04:34:47 galassia kernel: [ 555.336637] New task spawned: old: (tgid 7976, tid 7976), new (tgid: 7976, tid: 7987).Dec 6 04:34:47 galassia kernel: [ 555.726220] New task spawned: old: (tgid 7978, tid 7978), new (tgid: 7992, tid: 7992).Dec 6 04:34:47 galassia kernel: [ 555.920585] New task spawned: old: (tgid 7993, tid 7993), new (tgid: 7994, tid: 7994).Dec 6 04:34:47 galassia kernel: [ 556.030529] blocking signal 9: 6273 -> 658.Dec 6 04:34:47 galassia kernel: [ 556.182361] blocking signal 9: 6273 -> 720.Dec 6 04:34:47 galassia kernel: [ 556.253160] New task spawned: old: (tgid 7989, tid 7989), new (tgid: 7989, tid: 7995).Dec 6 04:34:47 galassia kernel: [ 556.255299] New task spawned: old: (tgid 7989, tid 7989), new (tgid: 7989, tid: 7996).Dec 6 04:34:47 galassia kernel: [ 556.274960] New task spawned: old: (tgid 7989, tid 7996), new (tgid: 7989, tid: 7997).Dec 6 04:34:47 galassia kernel: [ 556.332019] blocking signal 9: 6273 -> 772.Dec 6 04:34:47 galassia kernel

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	20061
Entropy (8bit):	5.082369976589019
Encrypted:	false
SSDEEP:	384:hcowpqebcbth/btfOZcHzvaGZkkcsNyz8ZJtbHo:hDwpPbcbth/btfOZKJkk0zWJtbHo
MD5:	2CE18D0867F0E7CFA6B4E6F1B1049B70
SHA1:	8DFA63104374A24726931B2F40B95FD51E329AF0
SHA-256:	F8C7904618E64679266E09E642431B1939AD2225AB69B9B2071355363FDFB5BC
SHA-512:	2A0BEDABDC0DDB7AD8819B7E71695920D3D1C4B162CCC1198F9053C99C175A6C541978EAF077731D6F7E0CFED7C3C1F08B7787ADC00B25F87A70EB5B2FD57B78
Malicious:	false
Preview:	Dec 6 04:34:47 galassia kernel: [ 555.336637] New task spawned: old: (tgid 7976, tid 7976), new (tgid: 7976, tid: 7987).Dec 6 04:34:47 galassia kernel: [ 555.366105] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 6 04:34:47 galassia kernel: [ 555.366208] systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 6 04:34:47 galassia kernel: [ 555.475807] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 32..Dec 6 04:34:47 galassia kernel: [ 555.475833] systemd[1]: Stopped System Logging Service..Dec 6 04:34:47 galassia kernel: [ 555.476915] systemd[1]: Starting System Logging Service....Dec 6 04:34:47 galassia kernel: [ 555.505442] systemd[1]: whoopsie.service: Main process exited, code=killed, status=9/KILL.Dec 6 04:34:47 galassia kernel: [ 555.505538] systemd[1]: whoopsie.service: Failed with result 'signal'..Dec 6 04:34:47 galassia kernel: [ 555.625537] systemd[1]: whoopsie.service: Scheduled restart job,

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:blmlsXlXEWtl/EX/:8A+yls
MD5:	3C1A100671FAB3BEFD42F61B0A086F7C
SHA1:	BA676448B06DD62AD5868F2D6BB5156C73DF1D1B
SHA-256:	384283F71B410B9E87C681379ECDDBF516E85988AE2F95F9A53A8CBC4F7A55D4
SHA-512:	5EDDEE7179F66030F55AEABEBA0D9B5DA204B60AD0B4CF8198068D6601CBCF5BAC101A650580B85BBB11ADDE44491ED883B436F7E0E725A0180F2AACB4BE4838
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN...................................................................................................................................................................................................................................................................................................;.Rg7.......................................

File type:	ELF 32-bit MSB executable, PowerPC or cisco 4500, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.809403989873793
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.ppc.elf
File size:	170'952 bytes
MD5:	433d4338f05ba7de2c09cdcb2c3a6131
SHA1:	c7136669dea59e3ed9a0052886104b97becc5710
SHA256:	1bb61516ab526b599de0916d5380ef34792f66fa40e10ab96119cd06bc2f17f6
SHA512:	8fcc5d7509d7b5a5cd939a83944ea079e9108b70fbffd4ec3ae623b35e3345e6779b8941cbdf9c74b6409fdc4f70c8b68d04a1b028cf549931867165386cc4ad
SSDEEP:	1536:sGARugQzzOGppec4q9MTx9yvp7EXe48GOQ9KtWhK0vXF9AvAKETPmC3QIAgzq4Uw:s9+fiFhTxkR0rYQaWhJDFKX9W
TLSH:	6BF33A02731C0907D1632EB43A3F27E183AFD9E121E4F644255FAB8A96B5D371589ECE
File Content Preview:	.ELF...........................4.........4. ...(......................Ml..Ml..............P...P...P...Il............dt.Q.............................!..\|......$H...H..1...$8!. \|...N.. .!..\|.......?..........p..../...@..\?.....PD.+../...A..$8...})....PDN..

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	PowerPC
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x100001f0
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	170432
Section Header Size:	40
Number of Section Headers:	13
Header String Table Index:	12

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x10000094	0x94	0x24	0x0	0x6	AX	4
.text	PROGBITS	0x100000b8	0xb8	0x21388	0x0	0x6	AX	4
.fini	PROGBITS	0x10021440	0x21440	0x20	0x0	0x6	AX	4
.rodata	PROGBITS	0x10021460	0x21460	0x390c	0x0	0x2	A	8
.ctors	PROGBITS	0x10035000	0x25000	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x1003500c	0x2500c	0x8	0x0	0x3	WA	4
.got2	PROGBITS	0x10035018	0x25018	0xc	0x0	0x3	WA	1
.data	PROGBITS	0x10035040	0x25040	0x48a0	0x0	0x3	WA	32
.sdata	PROGBITS	0x100398e0	0x298e0	0x8c	0x0	0x3	WA	4
.sbss	NOBITS	0x1003996c	0x2996c	0x104	0x0	0x3	WA	4
.bss	NOBITS	0x10039a70	0x2996c	0x45a0	0x0	0x3	WA	8
.shstrtab	STRTAB	0x0	0x2996c	0x51	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x10000000	0x10000000	0x24d6c	0x24d6c	6.2675	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x25000	0x10035000	0x10035000	0x496c	0x9010	0.4849	0x6	RW	0x10000	.ctors .dtors .got2 .data .sdata .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 6, 2024 11:32:52.612632990 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Dec 6, 2024 11:34:12.625669003 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 6, 2024 11:32:42.764095068 CET	8.8.8.8	192.168.2.23	0xf95a	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:32:42.889820099 CET	8.8.8.8	192.168.2.23	0xf95a	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:32:43.016050100 CET	8.8.8.8	192.168.2.23	0xf95a	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:32:43.140593052 CET	8.8.8.8	192.168.2.23	0xf95a	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:32:43.276742935 CET	8.8.8.8	192.168.2.23	0xf95a	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:32:51.065128088 CET	8.8.8.8	192.168.2.23	0x334d	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:32:51.065128088 CET	8.8.8.8	192.168.2.23	0x334d	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:33:27.363641977 CET	8.8.8.8	192.168.2.23	0xee2c	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:33:27.363641977 CET	8.8.8.8	192.168.2.23	0xee2c	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:34:23.342742920 CET	8.8.8.8	192.168.2.23	0x481	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:34:23.342742920 CET	8.8.8.8	192.168.2.23	0x481	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:34:51.533888102 CET	8.8.8.8	192.168.2.23	0x2db1	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 11:34:51.533888102 CET	8.8.8.8	192.168.2.23	0x2db1	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-12-06 10:32:54 UTC	307	OUT	POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1 Host: daisy.ubuntu.com Accept: / Content-Type: application/octet-stream X-Whoopsie-Version: 0.2.69ubuntu0.3 Content-Length: 164887 Expect: 100-continue
2024-12-06 10:32:54 UTC	25	IN	HTTP/1.1 100 Continue
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61 Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20 Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67 Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37 Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73 Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
2024-12-06 10:32:54 UTC	16384	OUT	Data Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "_source" "server/udev"Aug 17 20:25
2024-12-06 10:32:55 UTC	279	IN	HTTP/1.1 400 Bad Request Date: Fri, 06 Dec 2024 10:32:55 GMT Server: gunicorn/19.7.1 X-Daisy-Revision-Number: 979 X-Oops-Repository-Version: 0.0.0 Strict-Transport-Security: max-age=2592000 Connection: close Transfer-Encoding: chunked 17 Crash already reported. 0

Start time (UTC):	10:32:41
Start date (UTC):	06/12/2024
Path:	/tmp/Aqua.ppc.elf
Arguments:	/tmp/Aqua.ppc.elf
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	10:32:42
Start date (UTC):	06/12/2024
Path:	/tmp/Aqua.ppc.elf
Arguments:	-
File size:	5388968 bytes
MD5 hash:	ae65271c943d3451b7f026d1fadccea6

Start time (UTC):	10:32:43
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:44
Start date (UTC):	06/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	10:32:45
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:46
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:47
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:48
Start date (UTC):	06/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	10:32:49
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	10:32:53
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:50
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:51
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:57
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.ppc.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/journal/streams/.#9:79226flz2nF

/run/systemd/journal/streams/.#9:792282Y7H2D

/run/systemd/journal/streams/.#9:79229EdOe9F

/run/systemd/journal/streams/.#9:792303Psm7D

/run/systemd/journal/streams/.#9:79231cge42D

/run/systemd/journal/streams/.#9:79232ZnyAZH

/run/systemd/journal/streams/.#9:792404xFMPE

/run/systemd/journal/streams/.#9:792414PPCJG

/run/systemd/journal/streams/.#9:79250Csun7E

/run/systemd/journal/streams/.#9:79251sQynmH

/run/systemd/journal/streams/.#9:79259VIafZE

/run/systemd/journal/streams/.#9:793548djT3H

/run/systemd/journal/streams/.#9:79359tNNwdH

/run/systemd/journal/streams/.#9:82426FAI7J7

/run/systemd/journal/streams/.#9:82427EQgri7

/run/systemd/journal/streams/.#9:82428NqrQA7

/run/systemd/journal/streams/.#9:82429NEqEm6

/run/systemd/journal/streams/.#9:82431Oe4VE9

/run/systemd/journal/streams/.#9:82432oUOD38

/run/systemd/journal/streams/.#9:82433lSLnX6

/run/systemd/journal/streams/.#9:82434djbld8

/run/systemd/journal/streams/.#9:82435uAtY55

/run/systemd/journal/streams/.#9:82451OQdFd8

/run/systemd/journal/streams/.#9:82452ASZPK6

/run/systemd/journal/streams/.#9:824609HyT96

/run/systemd/journal/streams/.#9:82469Hul0P7

Linux Analysis Report
Aqua.ppc.elf

Start time (UTC):	10:32:58
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:32:59
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:33:01
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:33:07
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:33:02
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:33:03
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	10:33:04
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	10:33:05
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	10:33:06
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	10:33:09
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75