Edit tour

Linux Analysis Report
Aqua.x86_64.elf

Overview

General Information

Sample name:	Aqua.x86_64.elf
Analysis ID:	1570383
MD5:	cd6bbd73b40235580ac39ee7187b7330
SHA1:	c1cbe4c2076e915a7582e0669d7904f8a53060e9
SHA256:	45d6cbe1c9259d86d563c5e76d70383747ee8c613ef15af8d7ab27cc1ee28c3c
Tags:	elfuser-abuse_ch
Infos:

Detection

Mirai

Score:	92
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Mirai

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Creates hidden files without content (potentially used as a mutex)

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1570383
Start date and time:	2024-12-06 22:26:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.x86_64.elf
Detection:	MAL
Classification:	mal92.spre.troj.evad.linELF@0/265@248/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Aqua.x86_64.elf

Runtime Messages

Command:	/tmp/Aqua.x86_64.elf
PID:	6239
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.x86_64.elf (PID: 6239, Parent: 6157, MD5: cd6bbd73b40235580ac39ee7187b7330) Arguments: /tmp/Aqua.x86_64.elf

Aqua.x86_64.elf New Fork (PID: 6240, Parent: 6239)

Aqua.x86_64.elf New Fork (PID: 6241, Parent: 6240)

gnome-session-binary New Fork (PID: 6242, Parent: 1477)

sh (PID: 6242, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6242, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 6247, Parent: 1)

systemd-hostnamed (PID: 6247, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 6394, Parent: 1320)

Default (PID: 6394, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6395, Parent: 1320)

Default (PID: 6395, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6406, Parent: 1)

dbus-daemon (PID: 6406, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 6413, Parent: 1320)

Default (PID: 6413, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6417, Parent: 1860)

pulseaudio (PID: 6417, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6418, Parent: 1)

rsyslogd (PID: 6418, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 6423, Parent: 2038)

fusermount (PID: 6423, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6432, Parent: 1)

rtkit-daemon (PID: 6432, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6435, Parent: 1)

systemd-logind (PID: 6435, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6495, Parent: 1)

polkitd (PID: 6495, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6497, Parent: 1)

dbus-daemon (PID: 6497, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6501, Parent: 1)

gpu-manager (PID: 6501, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6503, Parent: 6501)

sh (PID: 6503, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6504, Parent: 6503)

grep (PID: 6504, Parent: 6503, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6505, Parent: 6501)

sh (PID: 6505, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6509, Parent: 6505)

grep (PID: 6509, Parent: 6505, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6511, Parent: 6501)

sh (PID: 6511, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6512, Parent: 6511)

grep (PID: 6512, Parent: 6511, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6514, Parent: 6501)

sh (PID: 6514, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6517, Parent: 6514)

grep (PID: 6517, Parent: 6514, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6519, Parent: 6501)

sh (PID: 6519, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6520, Parent: 6519)

grep (PID: 6520, Parent: 6519, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6521, Parent: 6501)

sh (PID: 6521, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6522, Parent: 6521)

grep (PID: 6522, Parent: 6521, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6524, Parent: 6501)

sh (PID: 6524, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6525, Parent: 6524)

grep (PID: 6525, Parent: 6524, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6526, Parent: 6501)

sh (PID: 6526, Parent: 6501, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6527, Parent: 6526)

grep (PID: 6527, Parent: 6526, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6502, Parent: 1)

rsyslogd (PID: 6502, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6516, Parent: 1)

agetty (PID: 6516, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6530, Parent: 1)

generate-config (PID: 6530, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6531, Parent: 6530)

pkill (PID: 6531, Parent: 6530, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6532, Parent: 1)

gdm-wait-for-drm (PID: 6532, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6537, Parent: 1)

rsyslogd (PID: 6537, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6543, Parent: 1)

dbus-daemon (PID: 6543, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6544, Parent: 1)

journalctl (PID: 6544, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6545, Parent: 1)

systemd-journald (PID: 6545, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6550, Parent: 1)

systemd-logind (PID: 6550, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6607, Parent: 1)

agetty (PID: 6607, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6608, Parent: 1)

journalctl (PID: 6608, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --flush

systemd New Fork (PID: 6609, Parent: 1)

rsyslogd (PID: 6609, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6610, Parent: 1)

dbus-daemon (PID: 6610, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6613, Parent: 1)

systemd-journald (PID: 6613, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6617, Parent: 1)

gpu-manager (PID: 6617, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6618, Parent: 6617)

sh (PID: 6618, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6619, Parent: 6618)

grep (PID: 6619, Parent: 6618, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6621, Parent: 6617)

sh (PID: 6621, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6622, Parent: 6621)

grep (PID: 6622, Parent: 6621, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6623, Parent: 6617)

sh (PID: 6623, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6624, Parent: 6623)

grep (PID: 6624, Parent: 6623, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6625, Parent: 6617)

sh (PID: 6625, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6626, Parent: 6625)

grep (PID: 6626, Parent: 6625, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6627, Parent: 6617)

sh (PID: 6627, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6628, Parent: 6627)

grep (PID: 6628, Parent: 6627, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6630, Parent: 6617)

sh (PID: 6630, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6631, Parent: 6630)

grep (PID: 6631, Parent: 6630, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6634, Parent: 6617)

sh (PID: 6634, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6635, Parent: 6634)

grep (PID: 6635, Parent: 6634, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6636, Parent: 6617)

sh (PID: 6636, Parent: 6617, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6637, Parent: 6636)

grep (PID: 6637, Parent: 6636, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6640, Parent: 1)

rsyslogd (PID: 6640, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6641, Parent: 1)

dbus-daemon (PID: 6641, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6642, Parent: 1)

generate-config (PID: 6642, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6643, Parent: 6642)

pkill (PID: 6643, Parent: 6642, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6645, Parent: 1)

rsyslogd (PID: 6645, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6646, Parent: 1)

dbus-daemon (PID: 6646, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6651, Parent: 1)

gpu-manager (PID: 6651, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6652, Parent: 6651)

sh (PID: 6652, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6653, Parent: 6652)

grep (PID: 6653, Parent: 6652, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6654, Parent: 6651)

sh (PID: 6654, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6655, Parent: 6654)

grep (PID: 6655, Parent: 6654, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6716, Parent: 6651)

sh (PID: 6716, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6717, Parent: 6716)

grep (PID: 6717, Parent: 6716, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6719, Parent: 6651)

sh (PID: 6719, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6720, Parent: 6719)

grep (PID: 6720, Parent: 6719, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6721, Parent: 6651)

sh (PID: 6721, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6722, Parent: 6721)

grep (PID: 6722, Parent: 6721, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6723, Parent: 6651)

sh (PID: 6723, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6724, Parent: 6723)

grep (PID: 6724, Parent: 6723, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6725, Parent: 6651)

sh (PID: 6725, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6726, Parent: 6725)

grep (PID: 6726, Parent: 6725, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6727, Parent: 6651)

sh (PID: 6727, Parent: 6651, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6728, Parent: 6727)

grep (PID: 6728, Parent: 6727, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6659, Parent: 1)

systemd-logind (PID: 6659, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6731, Parent: 1)

generate-config (PID: 6731, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6732, Parent: 6731)

pkill (PID: 6732, Parent: 6731, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6733, Parent: 1)

gdm-wait-for-drm (PID: 6733, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6738, Parent: 1)

rsyslogd (PID: 6738, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6739, Parent: 1)

dbus-daemon (PID: 6739, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6746, Parent: 1)

dbus-daemon (PID: 6746, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6747, Parent: 1)

rsyslogd (PID: 6747, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6748, Parent: 1)

systemd-journald (PID: 6748, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6751, Parent: 1)

systemd-logind (PID: 6751, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6808, Parent: 1)

agetty (PID: 6808, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6810, Parent: 1)

dbus-daemon (PID: 6810, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6811, Parent: 1)

rsyslogd (PID: 6811, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6812, Parent: 1)

gpu-manager (PID: 6812, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6819, Parent: 6812)

sh (PID: 6819, Parent: 6812, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6820, Parent: 6819)

grep (PID: 6820, Parent: 6819, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6821, Parent: 6812)

sh (PID: 6821, Parent: 6812, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6822, Parent: 6821)

grep (PID: 6822, Parent: 6821, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6825, Parent: 6812)

sh (PID: 6825, Parent: 6812, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 6823, Parent: 1)

dbus-daemon (PID: 6823, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6826, Parent: 1)

rsyslogd (PID: 6826, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6827, Parent: 1)

generate-config (PID: 6827, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6828, Parent: 6827)

pkill (PID: 6828, Parent: 6827, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6835, Parent: 1)

gdm-wait-for-drm (PID: 6835, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6841, Parent: 1)

rsyslogd (PID: 6841, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6843, Parent: 1)

dbus-daemon (PID: 6843, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6850, Parent: 1)

systemd-journald (PID: 6850, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6853, Parent: 1)

systemd-logind (PID: 6853, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6910, Parent: 1)

agetty (PID: 6910, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6911, Parent: 1)

rsyslogd (PID: 6911, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6912, Parent: 1)

dbus-daemon (PID: 6912, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6917, Parent: 1)

gpu-manager (PID: 6917, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6918, Parent: 6917)

sh (PID: 6918, Parent: 6917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6919, Parent: 6918)

grep (PID: 6919, Parent: 6918, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6921, Parent: 6917)

sh (PID: 6921, Parent: 6917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6922, Parent: 6921)

grep (PID: 6922, Parent: 6921, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6925, Parent: 6917)

sh (PID: 6925, Parent: 6917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6926, Parent: 6925)

grep (PID: 6926, Parent: 6925, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6923, Parent: 1)

dbus-daemon (PID: 6923, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6924, Parent: 1)

rsyslogd (PID: 6924, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6928, Parent: 1)

generate-config (PID: 6928, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6929, Parent: 6928)

pkill (PID: 6929, Parent: 6928, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6939, Parent: 1)

gdm-wait-for-drm (PID: 6939, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6944, Parent: 1)

rsyslogd (PID: 6944, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6947, Parent: 1)

dbus-daemon (PID: 6947, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6952, Parent: 1)

rsyslogd (PID: 6952, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6953, Parent: 1)

systemd-journald (PID: 6953, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6956, Parent: 1)

systemd-logind (PID: 6956, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7013, Parent: 1)

agetty (PID: 7013, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7014, Parent: 1)

dbus-daemon (PID: 7014, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7018, Parent: 1)

rsyslogd (PID: 7018, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7019, Parent: 1)

gpu-manager (PID: 7019, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7020, Parent: 7019)

sh (PID: 7020, Parent: 7019, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7024, Parent: 7020)

grep (PID: 7024, Parent: 7020, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7027, Parent: 7019)

sh (PID: 7027, Parent: 7019, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7028, Parent: 7027)

grep (PID: 7028, Parent: 7027, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7026, Parent: 1)

dbus-daemon (PID: 7026, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7030, Parent: 1)

rsyslogd (PID: 7030, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7031, Parent: 1)

generate-config (PID: 7031, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7032, Parent: 7031)

pkill (PID: 7032, Parent: 7031, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7039, Parent: 1)

gdm-wait-for-drm (PID: 7039, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7045, Parent: 1)

rsyslogd (PID: 7045, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7047, Parent: 1)

dbus-daemon (PID: 7047, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7054, Parent: 1)

systemd-journald (PID: 7054, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7057, Parent: 1)

systemd-logind (PID: 7057, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7114, Parent: 1)

agetty (PID: 7114, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7115, Parent: 1)

dbus-daemon (PID: 7115, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7116, Parent: 1)

rsyslogd (PID: 7116, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7121, Parent: 1)

gpu-manager (PID: 7121, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7122, Parent: 7121)

sh (PID: 7122, Parent: 7121, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7123, Parent: 7122)

grep (PID: 7123, Parent: 7122, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7126, Parent: 7121)

sh (PID: 7126, Parent: 7121, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7127, Parent: 7126)

grep (PID: 7127, Parent: 7126, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7129, Parent: 7121)

sh (PID: 7129, Parent: 7121, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7125, Parent: 1)

dbus-daemon (PID: 7125, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7128, Parent: 1)

rsyslogd (PID: 7128, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7131, Parent: 1)

generate-config (PID: 7131, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7132, Parent: 7131)

pkill (PID: 7132, Parent: 7131, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7142, Parent: 1)

gdm-wait-for-drm (PID: 7142, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7148, Parent: 1)

rsyslogd (PID: 7148, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7154, Parent: 1)

dbus-daemon (PID: 7154, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7158, Parent: 1)

systemd-logind (PID: 7158, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7216, Parent: 1)

systemd-journald (PID: 7216, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7217, Parent: 1)

agetty (PID: 7217, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7220, Parent: 1)

rsyslogd (PID: 7220, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7224, Parent: 1)

gpu-manager (PID: 7224, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7225, Parent: 7224)

sh (PID: 7225, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7226, Parent: 7225)

grep (PID: 7226, Parent: 7225, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7229, Parent: 7224)

sh (PID: 7229, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7230, Parent: 7229)

grep (PID: 7230, Parent: 7229, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7232, Parent: 7224)

sh (PID: 7232, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7233, Parent: 7232)

grep (PID: 7233, Parent: 7232, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7238, Parent: 7224)

sh (PID: 7238, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7239, Parent: 7238)

grep (PID: 7239, Parent: 7238, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7240, Parent: 7224)

sh (PID: 7240, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7241, Parent: 7240)

grep (PID: 7241, Parent: 7240, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7242, Parent: 7224)

sh (PID: 7242, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7243, Parent: 7242)

grep (PID: 7243, Parent: 7242, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7244, Parent: 7224)

sh (PID: 7244, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7245, Parent: 7244)

grep (PID: 7245, Parent: 7244, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7306, Parent: 7224)

sh (PID: 7306, Parent: 7224, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7307, Parent: 7306)

grep (PID: 7307, Parent: 7306, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7228, Parent: 1)

dbus-daemon (PID: 7228, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7231, Parent: 1)

rsyslogd (PID: 7231, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7249, Parent: 1)

systemd-logind (PID: 7249, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7309, Parent: 1)

generate-config (PID: 7309, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7310, Parent: 7309)

pkill (PID: 7310, Parent: 7309, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7314, Parent: 1860)

dbus-daemon (PID: 7314, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7315, Parent: 1860)

pulseaudio (PID: 7315, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7316, Parent: 1)

rtkit-daemon (PID: 7316, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7319, Parent: 1)

polkitd (PID: 7319, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7323, Parent: 1)

gdm-wait-for-drm (PID: 7323, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7328, Parent: 1)

dbus-daemon (PID: 7328, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7331, Parent: 1)

rsyslogd (PID: 7331, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7337, Parent: 1860)

pulseaudio (PID: 7337, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7341, Parent: 1)

systemd-logind (PID: 7341, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7379, Parent: 1)

dbus-daemon (PID: 7379, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7399, Parent: 1)

rsyslogd (PID: 7399, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7400, Parent: 1)

systemd-journald (PID: 7400, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7401, Parent: 1)

agetty (PID: 7401, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7402, Parent: 1860)

pulseaudio (PID: 7402, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7405, Parent: 1)

systemd-logind (PID: 7405, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7463, Parent: 1)

dbus-daemon (PID: 7463, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7464, Parent: 1)

rsyslogd (PID: 7464, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7465, Parent: 1)

gpu-manager (PID: 7465, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7467, Parent: 7465)

sh (PID: 7467, Parent: 7465, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7468, Parent: 7467)

grep (PID: 7468, Parent: 7467, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7472, Parent: 7465)

sh (PID: 7472, Parent: 7465, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7473, Parent: 7472)

grep (PID: 7473, Parent: 7472, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7474, Parent: 7465)

sh (PID: 7474, Parent: 7465, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7475, Parent: 7474)

grep (PID: 7475, Parent: 7474, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7481, Parent: 7465)

sh (PID: 7481, Parent: 7465, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

systemd New Fork (PID: 7476, Parent: 1860)

pulseaudio (PID: 7476, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7477, Parent: 1)

dbus-daemon (PID: 7477, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7482, Parent: 1)

rsyslogd (PID: 7482, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7483, Parent: 1)

generate-config (PID: 7483, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7484, Parent: 7483)

pkill (PID: 7484, Parent: 7483, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7490, Parent: 1)

rtkit-daemon (PID: 7490, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7494, Parent: 1)

polkitd (PID: 7494, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7499, Parent: 1)

gdm-wait-for-drm (PID: 7499, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7502, Parent: 1860)

dbus-daemon (PID: 7502, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7506, Parent: 1860)

pulseaudio (PID: 7506, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7507, Parent: 1)

dbus-daemon (PID: 7507, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7509, Parent: 1)

rsyslogd (PID: 7509, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7512, Parent: 1)

systemd-journald (PID: 7512, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7515, Parent: 1)

systemd-logind (PID: 7515, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7572, Parent: 1)

agetty (PID: 7572, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7573, Parent: 1)

dbus-daemon (PID: 7573, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7574, Parent: 1860)

pulseaudio (PID: 7574, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7576, Parent: 1)

rsyslogd (PID: 7576, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7577, Parent: 1)

gpu-manager (PID: 7577, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7578, Parent: 7577)

sh (PID: 7578, Parent: 7577, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7579, Parent: 7578)

grep (PID: 7579, Parent: 7578, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7583, Parent: 7577)

sh (PID: 7583, Parent: 7577, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7585, Parent: 7583)

grep (PID: 7585, Parent: 7583, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7587, Parent: 7577)

sh (PID: 7587, Parent: 7577, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7588, Parent: 7587)

grep (PID: 7588, Parent: 7587, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7591, Parent: 7577)

sh (PID: 7591, Parent: 7577, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

systemd New Fork (PID: 7586, Parent: 1)

dbus-daemon (PID: 7586, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7589, Parent: 1860)

pulseaudio (PID: 7589, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7592, Parent: 1)

rsyslogd (PID: 7592, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7593, Parent: 1)

generate-config (PID: 7593, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7594, Parent: 7593)

pkill (PID: 7594, Parent: 7593, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7600, Parent: 1)

rtkit-daemon (PID: 7600, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7606, Parent: 1)

polkitd (PID: 7606, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7611, Parent: 1)

gdm-wait-for-drm (PID: 7611, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7614, Parent: 1860)

dbus-daemon (PID: 7614, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7619, Parent: 1860)

pulseaudio (PID: 7619, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7620, Parent: 1)

rsyslogd (PID: 7620, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7622, Parent: 1)

dbus-daemon (PID: 7622, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7625, Parent: 1)

systemd-logind (PID: 7625, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7682, Parent: 1)

systemd-journald (PID: 7682, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7683, Parent: 1)

agetty (PID: 7683, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7687, Parent: 1860)

pulseaudio (PID: 7687, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7688, Parent: 1)

rsyslogd (PID: 7688, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7689, Parent: 1)

dbus-daemon (PID: 7689, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7692, Parent: 1)

systemd-logind (PID: 7692, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7749, Parent: 1)

gpu-manager (PID: 7749, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7750, Parent: 7749)

sh (PID: 7750, Parent: 7749, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7754, Parent: 7750)

grep (PID: 7754, Parent: 7750, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7756, Parent: 7749)

sh (PID: 7756, Parent: 7749, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7757, Parent: 7756)

grep (PID: 7757, Parent: 7756, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7762, Parent: 7749)

sh (PID: 7762, Parent: 7749, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7759, Parent: 1860)

pulseaudio (PID: 7759, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7760, Parent: 1)

dbus-daemon (PID: 7760, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7761, Parent: 1)

rsyslogd (PID: 7761, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7763, Parent: 1)

generate-config (PID: 7763, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7764, Parent: 7763)

pkill (PID: 7764, Parent: 7763, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7770, Parent: 1)

rtkit-daemon (PID: 7770, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7774, Parent: 1)

polkitd (PID: 7774, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7781, Parent: 1)

gdm-wait-for-drm (PID: 7781, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7784, Parent: 1860)

dbus-daemon (PID: 7784, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7789, Parent: 1860)

pulseaudio (PID: 7789, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7791, Parent: 1)

dbus-daemon (PID: 7791, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7792, Parent: 1)

rsyslogd (PID: 7792, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7793, Parent: 1)

systemd-journald (PID: 7793, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7796, Parent: 1)

systemd-logind (PID: 7796, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7855, Parent: 1)

dbus-daemon (PID: 7855, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7856, Parent: 1860)

pulseaudio (PID: 7856, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7857, Parent: 1)

rsyslogd (PID: 7857, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7858, Parent: 1)

gpu-manager (PID: 7858, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7862, Parent: 7858)

sh (PID: 7862, Parent: 7858, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7863, Parent: 7862)

grep (PID: 7863, Parent: 7862, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7867, Parent: 7858)

gpu-manager New Fork (PID: 7869, Parent: 7858)

gpu-manager New Fork (PID: 7871, Parent: 7858)

gpu-manager New Fork (PID: 7873, Parent: 7858)

gpu-manager New Fork (PID: 7875, Parent: 7858)

gpu-manager New Fork (PID: 7890, Parent: 7858)

gpu-manager New Fork (PID: 7892, Parent: 7858)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.x86_64.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1e0f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e10c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e15c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e24c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x13d84:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x145fb:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x10716:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x16540:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x1828e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x1d112:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x141bb:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x130f2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x14486:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
Aqua.x86_64.elf	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x132eb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
Aqua.x86_64.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x233a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
Aqua.x86_64.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x243d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
Aqua.x86_64.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x8972:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 9 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6239.1.0000000000400000.0000000000422000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x1e0f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e10c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e120:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e134:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e148:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e15c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e170:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e184:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e198:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1ac:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1c0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1d4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1e8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e1fc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e210:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e224:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e238:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e24c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e260:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e274:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1e288:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0x13d84:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0x145fb:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x10716:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0x16540:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0x1828e:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_d0c57a2e	unknown	unknown	0x1d112:$a: 07 0F B6 57 01 C1 E0 08 09 D0 89 06 0F BE 47 02 C1 E8 1F 89
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0x141bb:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_0cd591cd	unknown	unknown	0x130f2:$a: 4E F8 48 8D 4E D8 49 8D 42 E0 48 83 C7 03 EB 6B 4C 8B 46 F8 48 8D
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0x14486:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Gafgyt_a33a8363	unknown	unknown	0x132eb:$a: 41 88 02 48 85 D2 75 ED 5A 5B 5D 41 5C 41 5D 4C 89 F0 41 5E
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x233a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x243d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
6239.1.0000000000400000.0000000000422000.r-x.sdmp	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x8972:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Process Memory Space: Aqua.x86_64.elf PID: 6239	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: Aqua.x86_64.elf PID: 6239	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x15f1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1605:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1619:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x162d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1641:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1655:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1669:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x167d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1691:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16a5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16b9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16cd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16e1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x16f5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1709:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x171d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1731:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1745:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1759:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x176d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x1781:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 11 entries

String: AEOF/proc//proc/%s/cmdlinewgetcurlftpechokillbash/fd/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: server.eye-network.ru. [malformed]

Source: global traffic

TCP traffic: 192.168.2.23:50016 -> 89.190.156.145:7733

Source: global traffic

HTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue

Source: /usr/sbin/rsyslogd (PID: 6418)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6502)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6537)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6609)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6645)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6738)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6747)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6811)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6826)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6841)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6911)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6924)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6944)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7018)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7030)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7045)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7116)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7128)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7148)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7220)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7231)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7331)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7464)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7482)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7576)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7592)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7688)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7761)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7857)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 6545)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6850)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6953)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7054)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7216)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7400)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7512)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7682)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7793)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: server.eye-network.ru
Source: global traffic	DNS traffic detected: DNS query: server.eye-network.ru. [malformed]
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Source: syslog.284.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53118
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53118 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown
Source: Process Memory Space: Aqua.x86_64.elf PID: 6239, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6242, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6223, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6224, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6406, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6414, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6417, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6418, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6497, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6502, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6516, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6068, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6249, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6435, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6537, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6538, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6543, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6545, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6609, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6610, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6617, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6640, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6641, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6642, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6607, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6644, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6645, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6646, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6736, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6736, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6737, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6738, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6739, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6613, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6659, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6733, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6740, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6745, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6746, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6810, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6811, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6812, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6823, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6838, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6838, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6839, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6748, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6751, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6835, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6841, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6843, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6911, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6912, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6913, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6917, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6910, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6923, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6924, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6942, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6942, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6943, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6944, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6853, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6939, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6945, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6951, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6952, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7014, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7015, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7018, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7019, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7013, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7026, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7030, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7042, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7042, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7043, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6953, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6956, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7039, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7044, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7045, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7047, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7053, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7115, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7116, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7117, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7121, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7114, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7125, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7128, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7145, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7145, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7146, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7054, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7142, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7147, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7148, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7152, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7154, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7220, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7217, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7227, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7228, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7231, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7314, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7315, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7326, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7326, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7327, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7328, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7331, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7216, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7323, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7336, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7337, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7338, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7341, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7379, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7399, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7402, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7406, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7463, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7464, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7465, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7401, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7476, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7477, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7482, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7405, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7499, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7502, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7505, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7506, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7507, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7508, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7509, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7573, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7574, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7575, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7576, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7577, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7572, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7586, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7589, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7592, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7512, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7614, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7617, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7618, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7619, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7620, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7622, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7625, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7684, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7687, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7688, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7689, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7749, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7683, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7758, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7759, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7760, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7761, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7682, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7692, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7781, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7784, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7787, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7788, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7789, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7791, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7792, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7854, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7855, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7856, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7857, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7858, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6242, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6223, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6224, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6406, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6414, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6417, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6418, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6497, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6502, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6516, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6068, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6249, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6435, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6532, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6537, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6538, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6543, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6545, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6609, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6610, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6617, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6640, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6641, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6642, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6607, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6644, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6645, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6646, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6736, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6736, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6737, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6738, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6739, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6613, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6659, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6733, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6740, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6745, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6746, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6810, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6811, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6812, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6823, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6838, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6838, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6839, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6748, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6751, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6835, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6841, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6843, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6911, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6912, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6913, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6917, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6910, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6923, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6924, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6942, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6942, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6943, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6944, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6853, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6939, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6945, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6951, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6952, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7014, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7015, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7018, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7019, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7013, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7026, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7030, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7042, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7042, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7043, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6953, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 6956, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7039, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7044, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7045, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7047, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7053, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7115, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7116, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7117, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7121, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7114, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7125, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7128, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7145, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7145, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7146, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7054, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7142, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7147, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7148, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7152, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7154, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7220, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7217, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7227, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7228, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7231, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7314, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7315, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7326, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7326, result: no such process	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7327, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7328, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7331, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7216, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7323, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7336, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7337, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7338, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7341, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7379, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7399, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7402, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7406, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7463, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7464, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7465, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7401, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7476, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7477, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7482, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7405, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7499, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7502, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7505, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7506, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7507, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7508, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7509, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7573, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7574, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7575, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7576, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7577, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7572, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7586, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7589, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7592, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7512, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7614, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7617, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7618, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7619, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7620, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7622, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7625, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7684, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7687, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7688, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7689, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7749, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7683, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7758, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7759, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7760, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7761, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7682, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7692, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7781, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7784, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7787, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7788, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7789, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7791, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7792, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7854, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7855, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7856, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7857, result: successful	Jump to behavior
Source: /tmp/Aqua.x86_64.elf (PID: 6241)	SIGKILL sent: pid: 7858, result: successful	Jump to behavior

Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: Aqua.x86_64.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_d0c57a2e os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 3ee7d3a33575ed3aa7431489a8fb18bf30cfd5d6c776066ab2a27f93303124b6, id = d0c57a2e-c10c-436c-be13-50a269326cf2, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_0cd591cd os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 96c4ff70729ddb981adafd8c8277649a88a87e380d2f321dff53f0741675fb1b, id = 0cd591cd-c348-4c3a-a895-2063cf892cda, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_a33a8363 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 74f964eaadbf8f30d40cdec40b603c5141135d2e658e7ce217d0d6c62e18dd08, id = a33a8363-5511-4fe1-a0d8-75156b9ccfc7, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16
Source: Process Memory Space: Aqua.x86_64.elf PID: 6239, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal92.spre.troj.evad.linELF@0/265@248/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6406)	File: /proc/6406/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6423)	File: /proc/6423/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6497)	File: /proc/6497/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6543)	File: /proc/6543/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6610)	File: /proc/6610/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6641)	File: /proc/6641/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6646)	File: /proc/6646/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6739)	File: /proc/6739/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6746)	File: /proc/6746/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6810)	File: /proc/6810/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6823)	File: /proc/6823/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6843)	File: /proc/6843/mounts
Source: /usr/bin/dbus-daemon (PID: 6912)	File: /proc/6912/mounts
Source: /usr/bin/dbus-daemon (PID: 6923)	File: /proc/6923/mounts
Source: /usr/bin/dbus-daemon (PID: 6947)	File: /proc/6947/mounts
Source: /usr/bin/dbus-daemon (PID: 7014)	File: /proc/7014/mounts
Source: /usr/bin/dbus-daemon (PID: 7026)	File: /proc/7026/mounts
Source: /usr/bin/dbus-daemon (PID: 7047)	File: /proc/7047/mounts
Source: /usr/bin/dbus-daemon (PID: 7115)	File: /proc/7115/mounts
Source: /usr/bin/dbus-daemon (PID: 7125)	File: /proc/7125/mounts
Source: /usr/bin/dbus-daemon (PID: 7154)	File: /proc/7154/mounts
Source: /usr/bin/dbus-daemon (PID: 7228)	File: /proc/7228/mounts
Source: /usr/bin/dbus-daemon (PID: 7314)	File: /proc/7314/mounts
Source: /usr/bin/dbus-daemon (PID: 7328)	File: /proc/7328/mounts
Source: /usr/bin/dbus-daemon (PID: 7379)	File: /proc/7379/mounts
Source: /usr/bin/dbus-daemon (PID: 7463)	File: /proc/7463/mounts
Source: /usr/bin/dbus-daemon (PID: 7477)	File: /proc/7477/mounts
Source: /usr/bin/dbus-daemon (PID: 7502)	File: /proc/7502/mounts
Source: /usr/bin/dbus-daemon (PID: 7507)	File: /proc/7507/mounts
Source: /usr/bin/dbus-daemon (PID: 7573)	File: /proc/7573/mounts
Source: /usr/bin/dbus-daemon (PID: 7586)	File: /proc/7586/mounts
Source: /usr/bin/dbus-daemon (PID: 7614)	File: /proc/7614/mounts
Source: /usr/bin/dbus-daemon (PID: 7622)	File: /proc/7622/mounts
Source: /usr/bin/dbus-daemon (PID: 7689)	File: /proc/7689/mounts
Source: /usr/bin/dbus-daemon (PID: 7760)	File: /proc/7760/mounts
Source: /usr/bin/dbus-daemon (PID: 7784)	File: /proc/7784/mounts
Source: /usr/bin/dbus-daemon (PID: 7791)	File: /proc/7791/mounts
Source: /usr/bin/dbus-daemon (PID: 7855)	File: /proc/7855/mounts

Source: /usr/libexec/gsd-rfkill (PID: 6242)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 6242)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6247)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6435)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6435)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6435)	File: /run/systemd/seats/.#seat0cBU0qO	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 6495)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6545)	File: /run/systemd/journal/streams/.#9:78345sNwXt7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6545)	File: /run/systemd/journal/streams/.#9:78347p8ZHV7	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6545)	File: /run/systemd/journal/streams/.#9:78349avkyG5	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6545)	File: /run/systemd/journal/streams/.#9:78426SGzkF4	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6545)	File: /run/systemd/journal/streams/.#9:78427VrJhf8	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6550)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6550)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6550)	File: /run/systemd/seats/.#seat00O5Sou	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79920jSVRzg	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79923Ok9RPe	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:799243vHaYd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79925tfbBOd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79941RqbAXd	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79942x1iWKg	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:799528ySmIf	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79983i4hWWe	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:796178y0sNg	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79625TF5lJe	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79740I7lCBe	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	File: /run/systemd/journal/streams/.#9:79753GTRdsd	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6659)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6659)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6659)	File: /run/systemd/seats/.#seat0nT1vEJ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81343jDyoau	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81344Oa7kxt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81350oPlU4p	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81351AKLFHt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81358RxECjq	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81371Bk6vCq	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81372RDZecr	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:81373mEQlEt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:82148uo3ens	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:82307VhDWsu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	File: /run/systemd/journal/streams/.#9:82392qMUd4p	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6751)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6751)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6751)	File: /run/systemd/seats/.#seat0GpZO9F	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:828978MhAe8
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:82898kvsMI8
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:82904xO8R5a
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:82905O9Yz5b
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:82918nFNPHa
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:82919f8liM9
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:82927kmv2g9
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:82928p1asw8
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:84004viUaZb
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:84163NQC9u9
Source: /lib/systemd/systemd-journald (PID: 6850)	File: /run/systemd/journal/streams/.#9:84184ruID5b
Source: /lib/systemd/systemd-logind (PID: 6853)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6853)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6853)	File: /run/systemd/seats/.#seat0lzHh8p
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85140TuviaV
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:851418RJ7yW
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85142DAQTVU
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85148JzFPPW
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85161mVfRKV
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85162jpmPCW
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85172f84r6V
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85173CvPAdX
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:85221byOU7W
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:83915lMaMFW
Source: /lib/systemd/systemd-journald (PID: 6953)	File: /run/systemd/journal/streams/.#9:83942wNP8XY
Source: /lib/systemd/systemd-logind (PID: 6956)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6956)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6956)	File: /run/systemd/seats/.#seat0SPdTea
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:87293J0EcEC
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:87294i6HtPC
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:87300zvVBKC
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:87301dXGYPz
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:87313GEtCqB
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:87314zOcl0A
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:873225xGHoB
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:87323WVzjny
Source: /lib/systemd/systemd-journald (PID: 7054)	File: /run/systemd/journal/streams/.#9:873969Rf7rz
Source: /lib/systemd/systemd-logind (PID: 7057)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7057)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7057)	File: /run/systemd/seats/.#seat0uY9LCP
Source: /lib/systemd/systemd-logind (PID: 7158)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7158)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7158)	File: /run/systemd/seats/.#seat0rbqXYr
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88015KQsWTP
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88016GVHAlR
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88017NoZXTQ
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88020sdKEzR
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88025LLs3iS
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88037b7a8dR
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88052eHngeR
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88053r0Q31O
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88062YWeKwR
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:88063GYPPiR
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89202p1n9yP
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89299q5vs4Q
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89313Ek3W1Q
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89413tEHvZR
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89414ncaLiS
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89445h1NUOO
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89455YnrKSP
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89531uHamsS
Source: /lib/systemd/systemd-journald (PID: 7216)	File: /run/systemd/journal/streams/.#9:89610gKjemR
Source: /lib/systemd/systemd-logind (PID: 7249)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7249)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7249)	File: /run/systemd/seats/.#seat037svRl
Source: /usr/lib/policykit-1/polkitd (PID: 7319)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91415FRysHJ
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91417xcoJ1L
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91421rKP9XJ
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91422haQSjM
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91429TzpTmK
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91430axI0rM
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91431PoqELJ
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:914386eADxM
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91452GXoZZK
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91453a8rlhM
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91455kczhjJ
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91456lDeD2I
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91499oInJWL
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91550JZLP4J
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91627CpTSGM
Source: /lib/systemd/systemd-journald (PID: 7400)	File: /run/systemd/journal/streams/.#9:91628MGinQJ
Source: /lib/systemd/systemd-logind (PID: 7405)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7405)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7405)	File: /run/systemd/seats/.#seat0Ol97G8
Source: /usr/lib/policykit-1/polkitd (PID: 7494)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93453xAZrGe
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:9345686MUkc
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93459AiGe3b
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93460lpEwMe
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93461F4nSJf
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93474KhuX7b
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:934801QRSZd
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93486Z1MMoe
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93497folAaf
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93498MRllre
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93499roeR1e
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93500a0rcPb
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93525LJmRhd
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93577tnLLnc
Source: /lib/systemd/systemd-journald (PID: 7512)	File: /run/systemd/journal/streams/.#9:93665nxkref
Source: /lib/systemd/systemd-logind (PID: 7515)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7515)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7515)	File: /run/systemd/seats/.#seat0lG21qq
Source: /usr/lib/policykit-1/polkitd (PID: 7606)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7625)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7625)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7625)	File: /run/systemd/seats/.#seat0nsHjnJ
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:949649Gc7Y5
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94966052tn3
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94967TPgSN2
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94972DXlZo5
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94973Mdwdf6
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94980kPr6z4
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:949817rCcN3
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94982RN1ZF3
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94990q79xa6
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94996cyjj84
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94997eusZE5
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94998hMgwp6
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:94999HmRkV5
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:95010NkiWM3
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:950768BchX3
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:95099iACoh3
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:95610cmK562
Source: /lib/systemd/systemd-journald (PID: 7682)	File: /run/systemd/journal/streams/.#9:95706oGLu43
Source: /lib/systemd/systemd-logind (PID: 7692)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7692)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7692)	File: /run/systemd/seats/.#seat0JYSbVP
Source: /usr/lib/policykit-1/polkitd (PID: 7774)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97326BHfh2q
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97327dWsnNu
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97328aC5Zir
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97329cYH3Au
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97335u6ndKs
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97341lgPOst
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97342PC4WMt
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97350iqnrCt
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:973588WowUr
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97359ZMSWTu
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97360NU8kht
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97361IXQNYt
Source: /lib/systemd/systemd-journald (PID: 7793)	File: /run/systemd/journal/streams/.#9:97385UGoUku
Source: /lib/systemd/systemd-logind (PID: 7796)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7796)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7796)	File: /run/systemd/seats/.#seat0Et5icF

Source: /lib/systemd/systemd-journald (PID: 7512)

Empty hidden file: /run/systemd/journal/streams/.#9:93665nxkref

Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/3088/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/3088/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/230/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/230/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/110/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/110/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/231/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/231/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/111/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/111/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/232/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/232/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/112/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/112/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/233/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/233/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/113/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/113/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/234/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/234/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/1335/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/1335/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/114/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/114/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/235/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/235/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/1334/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/1334/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/115/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/115/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/236/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/236/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/116/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/116/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/237/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/237/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/117/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/117/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/910/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/910/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/118/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/118/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/119/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/119/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/10/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/10/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/11/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/11/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/6241/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/6241/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/12/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/12/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/6240/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/6240/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/13/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/13/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/14/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/14/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/15/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/15/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/16/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/16/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/17/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/17/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/18/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/18/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/120/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/120/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/121/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/121/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/1/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/122/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/122/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/243/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/243/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/123/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/123/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/2/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/2/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/124/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/124/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/3/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/3/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/125/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/125/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/4/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/4/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/126/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/126/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/248/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/248/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/6/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/6/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/127/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/127/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/128/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/128/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/249/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/249/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/9/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/9/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/20/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/20/cmdline
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/21/status
Source: /usr/bin/pkill (PID: 7484)	File opened: /proc/21/cmdline

Source: /usr/bin/gpu-manager (PID: 6503)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6505)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6511)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6514)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6519)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6521)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6524)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6526)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6618)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6621)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6623)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6625)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6627)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6630)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6634)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6636)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6652)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6654)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6716)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6719)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6721)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6723)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6725)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6727)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6819)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6821)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6825)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6918)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6921)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6925)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7020)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7027)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7122)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7126)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7129)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7225)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7229)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7232)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7238)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7240)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7242)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7244)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7306)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7467)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7472)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7474)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7481)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7578)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7583)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7587)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7591)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7750)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7756)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7762)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7862)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"

Source: /bin/sh (PID: 6504)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6509)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6512)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6517)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6520)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6522)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6525)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6527)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6619)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6622)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6624)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6626)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6628)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6631)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6635)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6637)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6653)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6655)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6717)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6720)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6722)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6724)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6726)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6728)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6820)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6822)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6919)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6922)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6926)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7024)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7028)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7123)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7127)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7226)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7230)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7233)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7239)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7241)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7243)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7245)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7307)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7468)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7473)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7475)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7579)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7585)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7588)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7754)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7757)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7863)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

Source: /usr/share/gdm/generate-config (PID: 6531)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6643)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6732)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6828)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6929)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7032)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7132)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7310)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7484)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7594)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7764)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 6545)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6850)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6953)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7054)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7216)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7400)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7512)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7682)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7793)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 6516)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6607)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6808)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6910)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7013)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7114)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7217)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7401)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7572)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7683)	Reads version info: /etc/issue

Source: /usr/sbin/rsyslogd (PID: 6418)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6418)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6501)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6502)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6502)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6537)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6609)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6645)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6645)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6651)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6738)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6811)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6826)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6826)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6841)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6911)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6924)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6924)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6944)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7018)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7030)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7030)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7045)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7116)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7128)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7128)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7148)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7220)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 7224)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7231)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7231)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7331)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7464)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7482)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7482)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7576)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7592)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7592)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7688)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7761)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7761)	Log file created: /var/log/auth.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.x86_64.elf (PID: 6240)

File: /tmp/Aqua.x86_64.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6501)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6617)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6651)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6812)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6917)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7019)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7121)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7224)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7465)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7577)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7749)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7858)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 6531)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6643)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6732)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6828)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6929)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7032)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7132)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7310)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7315)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7476)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7484)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7589)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7594)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7759)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7764)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7856)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 6247)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6418)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6501)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6502)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6516)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6537)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6545)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6607)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6609)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6613)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6617)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6640)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6645)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6651)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6738)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6747)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6748)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6808)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6811)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6826)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6841)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6850)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 6910)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6911)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6924)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6944)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6953)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7013)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7018)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7030)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7045)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7054)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7114)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7116)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7128)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7148)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7216)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7217)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7220)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7224)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7231)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7315)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7331)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7399)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7400)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7401)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7464)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7476)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7482)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7512)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7572)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7576)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7589)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7592)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7682)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7683)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7688)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7759)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7761)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7792)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7793)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7856)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7857)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7858)	Queries kernel information via 'uname':

Source: syslog.49.dr	Binary or memory string: Dec 6 15:26:50 galassia kernel: [ 415.982749] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel drm parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi vmxnet3 scsi_transport_spi mptscsih libahci mptbase
Source: syslog.49.dr	Binary or memory string: Dec 6 15:26:50 galassia kernel: [ 415.983473] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: Aqua.x86_64.elf, type: SAMPLE
Source: Yara match	File source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.x86_64.elf PID: 6239, type: MEMORYSTR

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: Aqua.x86_64.elf, type: SAMPLE
Source: Yara match	File source: 6239.1.0000000000400000.0000000000422000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Aqua.x86_64.elf PID: 6239, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Hide Artifacts	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Indicator Removal	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
Aqua.x86_64.elf	42%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.x86_64.elf	100%	Avira	EXP/ELF.Mirai.Z.A
Aqua.x86_64.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
daisy.ubuntu.com	162.213.35.24	true	false	high
server.eye-network.ru	unknown	unknown	false	high
server.eye-network.ru. [malformed]	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.284.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.213.35.25	unknown	United States	41231	CANONICAL-ASGB	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.213.35.25	Aqua.arm5.elf	Get hash	malicious	Mirai	Browse
	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse
	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	iwir64.elf	Get hash	malicious	Mirai	Browse
	vsbeps.elf	Get hash	malicious	Mirai	Browse
	qkehusl.elf	Get hash	malicious	Mirai	Browse
	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	jwwofba5.elf	Get hash	malicious	Mirai	Browse
	dvwkja7.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	Aqua.arm5.elf	Get hash	malicious	Mirai	Browse
	Aqua.mips.elf	Get hash	malicious	Mirai	Browse
	Aqua.i686.elf	Get hash	malicious	Mirai	Browse
	Aqua.x86.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.ppc.elf	Get hash	malicious	Mirai	Browse
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm4.elf	Get hash	malicious	Mirai	Browse
	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse
	dwhdbg.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	la.bot.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	na.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.25
	powerpc.elf	Get hash	malicious	Gafgyt	Browse	162.213.35.24
	i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	162.213.35.25
	i586.elf	Get hash	malicious	Mirai, Gafgyt	Browse	162.213.35.25
	linux_amd64.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	.i.elf	Get hash	malicious	Unknown	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.arm5.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.x86.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.ppc.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.mpsl.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.arm4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	dwhdbg.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
INIT7CH	sshd.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.arc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.arm5.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	mipsel.elf	Get hash	malicious	Gafgyt	Browse	109.202.202.202
	i586.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
CANONICAL-ASGB	sshd.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.arm5.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.powerpc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	la.bot.arm.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
	la.bot.m68k.elf	Get hash	malicious	Mirai	Browse	185.125.190.26

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.510942989559991
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+y+4QTJ65lATdF2jq:SbFuFyLVIg1BG+f+M+yAsl2d8ji4s
MD5:	992E9E638213F0966EB8F37A6DA957A6
SHA1:	242093F34612D12F70AA5F3B73F419A795DE8A1C
SHA-256:	ECBE5CA257A49140C8779721BC54486E82DC6A5E9B499322627C9798547F94DB
SHA-512:	B235CBBD40E1BE6F15CF47394D1B6A2897BE6422657F4BF931A4E99EE44F4BA4B6979F1CB11F3746DF391CE4EB68645CCA4B1167292AE6BCEA6C918C057618C2
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=40f9e1fa07584594906a9d4c99866376.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:78347p8ZHV7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.469003293067871
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+Y687dSF0jZcHcljX+:qgFq6g10+f+M1sFimAu
MD5:	13CDF5A5D464A10AD3AAA30320960BD6
SHA1:	71078A572C79EF14E346AF8DFF2328BFD117AF7C
SHA-256:	ECB930DA59EA9ED6D728C7E3D15A504C23C7616F6DD043DF3B91DC6B083DD1D5
SHA-512:	7F3388E168B50E9AD140F2A7E8CD3255D26A3988B168E274B42575C111D8CB14A9CCC9B6825610AFC6577D9EDEDF5298BDEC798B5ACAC4E61DB52A587EB4A9DE
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4fa26a891ed84ebdac5e0ea788525fcf.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78349avkyG5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.496954579341319
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6mTEGRSNkREXdL2jq:SbFuFyLVIg1BG+f+M6kEFOEX0ji4s
MD5:	B8DF77BC521791341A8EABF136CACBA1
SHA1:	9F1D93E19ED7F14A7956DF8DC65B4A61770A253D
SHA-256:	C72804C585460985CAE77C5747DE4C0104D1BCEA858C23E87E6B9CB640B7DA37
SHA-512:	080F0AC0D4F97685F0210517C1FEE55F32A7F86598D292C0DE5FA7B275505D08EC7186006A4D282DF7FEB04DC33E6C2E7E15056269677BAD543C524E481BB89F
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00a1166abaf847a09d74a3de8dab9bc5.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:78426SGzkF4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.399253638063683
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyGiDl9iTVFlsjs1Ha:SbFuFyLVIg1BG+f+MyGixITWjosQu
MD5:	49A301B0374AF1329FE4656D86D35A50
SHA1:	5B1710209FD476B66CC729CB3A8C03470C72BDEC
SHA-256:	DA38DA23C20BD7698FD8DD9B4304A778E8B722A4FD3B70900FA2B412D6D84798
SHA-512:	44E8646489E24D9F2B176C0EB798D019320D9B3E6BE58D17124F5A939232851DF08E12E78CB91CADFF92681861A014857E083D059BC337664810DFE4768EDA61
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=88a4f7f8c1094d77a8a14bc0d6b7a99b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78427VrJhf8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.319517962936906
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4DrLX1dPG2CsMqjst:SbFuFyLVIg1BG+f+M4/LXMsZjdCLKzK
MD5:	F48DEA7EBD4E08B9E898DED116E03E04
SHA1:	515EEDD8BF37F6C7664EFCDBB0F5EFE94EAFC9C7
SHA-256:	2CDD8C7E25728DD4BD3E64578C706E08E7BCC3BFB714C9943DFDF83E3DE4F35F
SHA-512:	85A63FA45080E070CC2436C4E7650ECBFF22AD192376A151F843E4BEC30AA36852E7A329FFBBFE55A64CFEC13BB66C2A061EF5FC655DB1B3419B7ED0A08D5FD0
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=226a3e302f8248268813c0103a0e8df4.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:796178y0sNg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.36739371303322
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuoYWEZRNTTjdCLKzK:qgFq6g10+f+M9YlZFCLAK
MD5:	053ABDE6D0268810BD67C2A97824AED3
SHA1:	763AE76E563F0E5DF69821AEA052D27F4B6A95C4
SHA-256:	6CE329AAEBCB48714FD92FE81E94A33E78A27F2AFB14CA578FAB42F9AD396E1E
SHA-512:	1C9194DA1F4C4F5505BA5340DACE296883C0066DB1541900BA099ED72AB54A9F52082610870F586C9DDE55DBBB0FF9A2467ADC27EC40CB2B34AE4A5F72E2F9C0
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=de64037cfdcd43f9bfe25a2c3cd09d1d.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79625TF5lJe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.419842616536299
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoC42nXXBUQDN2js16:SbFuFyLVIg1BG+f+MoC42XXBUQ4josQu
MD5:	592F8947965BC2DB8B2D1CCA20DDED7F
SHA1:	C6C56C10DDDBFBAE6054F0FDC25E1D65431A370D
SHA-256:	61AA4C0DAFEBA349B2CFBBEEF08DBBA7C94A8B11008FE43DF910B22812441AFE
SHA-512:	B642A6688170F72DD8567E2F8F93FE479E2F927824003AB5062923159D7607ED362C940F335D8DC381E4F69A29E538426DAC949BD83D9B9A255282C3A54143C4
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b8ea6df7659d42f7bde36c5e2da02f5f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79740I7lCBe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.379442931430704
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9JJBV9HdGk2l0qV08:SbFuFyLVIg1BG+f+M1BV9HR2GjdCLKzK
MD5:	FF51E5198ADA8F650D46DB66E216943A
SHA1:	B2654E2BE4A7D80DC3010BA8BA9CACBB68D4DAEB
SHA-256:	6CC6C4A0CA3C39D1AE88A4653B9A66A11C41D14855B52A60CAA79FE44E07958B
SHA-512:	A398C0CE8EE612F4B6972517F7EC93FAC7197123A33576F756FA1CC3CCA68E733B2177BD2B45BF2CD18A0B14DCF239089E3C3577ADA8F05EA3DB95C312E8C20F
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=736559d002b846dab0926de73b1e57b0.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79753GTRdsd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.418564053703013
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuZUROnPSc4Nlsjs16:SbFuFyLVIg1BG+f+MuZ/N40josQu
MD5:	2AC3EEBEE792A1D4072A07E8EB5110AA
SHA1:	ED2A6EC31004E9E90B9291BFB769C0A9EB7CB878
SHA-256:	8A04780DFC28F5F0E1F60E84E8BC660B33EB03093398D309896AD15532F8F3F2
SHA-512:	F5B272226550C460C0AB673CB96E72B7D5F2541D3F5537F6953F25177FB419131E62F19B0A21F87FFE732C98BD47ACB25BDF0EEC78B49459346ABF4206025365
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d774cb452a2f461b974de94db1fee453.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79920jSVRzg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.368918805724585
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5ed0ddABR2lsjs1Ha:SbFuFyLVIg1BG+f+MQfRZjosQu
MD5:	1665CBA1F50F0A490952785361B6BEA7
SHA1:	CAD687AC18A43E28A13110F05A19EFC02A2DB7D6
SHA-256:	5CF8259EF1136D57D5C99B7C80447FA3128A9543AE2CE9FD378B4A3897335B97
SHA-512:	FBE7A8D6622E4D5DBE70E5AF1FCAE84DEEF8EE4FDD7D06BD2884F594C1602843B48187894704DDD07B217F550E5DE692C72807624FEE99DB9C3E58C9B0A577BB
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=30f8ac73daa44cb8a9bb8a1a88069d9b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79923Ok9RPe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.448118150454101
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M7GhMXr+u+/8jNALyAZD:qgFq6g1af+M7Gluy+IZD
MD5:	9B20C0B3A60E72F66ADC72358E051F73
SHA1:	BDF3B319778AE71DE52A0D178B4FF8C7DCAC7B78
SHA-256:	FA7F919A45F0B27C905321F1896CF5CEDD82B48CB8D50878BA09530BDF438027
SHA-512:	798A169721AE69F20250D0B838B81CC5747DA651BF3474D136CD57384E7CFE6A02264DDBAB4EC6C662BCD2BCBBD4013B2C16853669A71290D483A26C1D32FC6D
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5622b707710245a2bb5ff2e8e3b19652.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:799243vHaYd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.359419868755797
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmruM3do7EJjsmNz0L7:SbFuFyLVIg1BG+f+MyodJjdCLKzK
MD5:	51FB0CCA59F6F63E45E3C1141751E340
SHA1:	55A7BDC8DD265AE8C2EB01E80D34150E059AB62E
SHA-256:	AC41349292C430F1AE95A31F228CB3A61677898ACFF1E58FBBCF02BB520E1EAE
SHA-512:	36AB268E817FB103B97E22963956939814102F276BE7497012FB7DF82E4B576D62FCDADE7DCDB9D2E53F81F133EFD6669373CD05D155149C3D8A6404CB4C6EB0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a0a6ee76019840adb28a2dfd4e4f0815.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79925tfbBOd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.396076024562656
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm93tEYRQ7bGwshuqjx:SbFuFyLVIg1BG+f+M0YR3wsMqjosQu
MD5:	0B8CC8C374327C7F1CB1085BB4FAB20E
SHA1:	BA0E16A1B0D31B8C2007B743790F506412335F57
SHA-256:	697827CD794E874B3D82B9372C160305E208B6F2AE107089F0E61FD823F96811
SHA-512:	9EC3AF35D5F6AF8B919FF0C56227CE57062BBA9EC3D28C3B9DB6D63131C46157FAF1C61873CD8A604C700DA301181941EFD3319F6B92B194C3FC19EF177AD133
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7087836215dd4504b5d5daecedcf2b0e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79941RqbAXd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.395336575424159
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm57Q0AWUJBWvsjswkT:SbFuFyLVIg1BG+f+MzUJBW0jLkGq
MD5:	B0669547BC5E79BDD2E8E0D8512D620D
SHA1:	26831CF97276C5330718ABE2FBF88835215E02D5
SHA-256:	3402DBF23D79EF95F202199DFCB5804E7B3C6697DC8C3BAD1A18A79953658499
SHA-512:	EBFC15CF3914F9E158F9CB572DAD5A32279DAEDF3650E478B708FE8D5666C55B1824D16FB24739E91FAB514C381804299D3976F360B42C5D2F5BC141705B2CCC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=311f849261ee41d8b6cd18ea7fdc2dd3.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:79942x1iWKg

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.501935622603492
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7+GsKxvA+sjsicWmt:SbFuFyLVIg1BG+f+MRTx0jZcHcljX+
MD5:	0923EAAEFDE228B4DB0E9F682142B07E
SHA1:	7966ABC7E6451A0E933CD24B356D7ED8125791B3
SHA-256:	8532405164D74C07149FEC3AF3572229D8585FF8235F2B59C9F90720108433F8
SHA-512:	0ACCFEE714677963CE92660A0F788E3D7306F75969505983BED508F670C889EEEE3F92AD30363B60F5CEB0A0D00938893B1DBADD244AB3A2A88EBB0CAF2E5F33
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1ecf567da64e41668c8582d07b194f51.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:799528ySmIf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.406737407902231
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6lHibHWOqjNALyAZD:qgFq6g1af+MeCxwIZD
MD5:	BD881C6E5619D9DCAC19DBC9D833A71A
SHA1:	2108FA86147FA8C9A264DC0BE95BA2AA5AC2FF3C
SHA-256:	1AEBE18B4BFF0D7CC7CB533973480F00D19BA28F890BB26CDAA26B36E748EF00
SHA-512:	4549CCC4A1964BF402563DC083473AC0C76E54F45224A1055A32872DE8780CF65E1565AE07A0177989C188D62A89F9BD2B435299493621A7FE7BC24EE8F05DD1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0aca61e5ea474c8eb3aa87cfb2a697a9.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79983i4hWWe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.411272484761467
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MyVVRGIk8qjNdQIeXD:qgFq6g1af+MYRGB8w2D
MD5:	D4A48D383D0A64C214E42C92E0064BA3
SHA1:	7FAB903D813482F67C88E73FDF6F3F988DA146F5
SHA-256:	D9EA304CE30718E9AAB4961D5C901778CAD8F720FA3FE863489BEA53A67AE152
SHA-512:	D264F1017E3B026E29B478D89AD251E8AA12016AB7179AC24CE204D2F0B75C6CE23074A14D684685C82F5C736E51BE62179C90217CC180534511227B5B1BF229
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=83e191d721cd48d08e32228dd114175e.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81343jDyoau

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4567572837525935
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MskeCrMvsMqjZcHcljX+:qgFq6g10+f+Ms1CrMvsMkmAu
MD5:	E429E3DE945DD4657C2484C48A49F5F7
SHA1:	B8D0523ADC51F03A4A3C7FB58E7F9F1650EA66A4
SHA-256:	238985B34927CFE8A32F157DBADED68CD3C733C26F5E51475752FDDF53613403
SHA-512:	81A8A429E554F9612D55CBEC6F8435ED543FDB9811225A28DD576BCB52CE8177F0C09EDBA05FD22970A8E94142BF263CC643F5F0E5A3D6A298964A4643C50559
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f7279cd63aaf48a69ed05d9e2d833c3e.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:81344Oa7kxt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.410180780787506
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuWsXSH641n1Mgsjsc:SbFuFyLVIg1BG+f+MuW2En2pjosQu
MD5:	6D6D090C864739C120F8CFAC5B214560
SHA1:	07325123BE126819AA7F44354D6786B65F85B31C
SHA-256:	CA64D3CE9C61342E93D0BC08BE81910888AEFC64C7657057A2EEDB66ED86DA42
SHA-512:	FE494EF272CC6897888E979962271ABBE2C5306AAA418E1CD0737DAB0803387244105CFA355C43029317059D1EFB0F0FBDF12ABF56315F962DFE9C5B343E4563
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d2cd7c12bdab49e8a93fc667c7ea43d2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81350oPlU4p

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4005504291497575
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy87RHOxDSQB2yWQNn:SbFuFyLVIg1BG+f+My87UFQQ0jdCLKzK
MD5:	3AD973D195CD83E8A40DE3DB626B3BA0
SHA1:	DC2D034435FA626851641D9620AF93880AB94945
SHA-256:	AB742715E86A0BC892CD189456B462DB1E71ADDC35432E4D7CE41DC6AFAC1BAF
SHA-512:	489560426C6FD2387C26DC246FC1816219F97E8D44DA2B399BD531DF4D3F3CE14FED35C9A4B79345C920DFAEBC62F9D475CAD60C319EAC0F4883383B5766C838
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8b9d9e5ab12042129c3f75d2ce817d35.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81351AKLFHt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.350519794743187
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MB9kMBXH1T2jdCLKzK:qgFq6g10+f+MB9HHRcCLAK
MD5:	7BDE15BA6A195D592E2EF5EF674E9DD1
SHA1:	3DC2922D3C1E3E9A8B4F87A31975A8A5F89B3CF8
SHA-256:	C0248FD7ACC7F567D27153A586231792A15FA1EB7CC142D07C391DCA944BECF8
SHA-512:	E62E12AC548A570F4A3C719D2E788C4564652BE8B1B9BC417F8E88748350B15CCFB3CF72A2503E9DCDB191F0513F84F8CC73BAAB0564C0041774A165A23AD347
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a028c7ebe3c14687a2cae10e2bbf714d.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81358RxECjq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.413952370406475
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7hWvcCRGDAoh8OhTd:SbFuFyLVIg1BG+f+MVWvhGVhBTjosQu
MD5:	75E2EFB31F2BE4F840A5828025A619F5
SHA1:	708E8DB6B65290CDAA8F226600C1C71466122598
SHA-256:	EC22DC7AA561F16C5CE3DFF4A6E5AF7112C1348000CAFE8F616858211C675BAE
SHA-512:	67676C63CA3E7C9D0252F7869C33C0C933965E714EAC56098172D3EAEEE3A98B5237EF38EF3AF79ECC1829A66322C649D842C615E799FE806CDD510B8B4700E6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1fe533fa89e24cccb6fe7b4ea03ec026.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81371Bk6vCq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.410455117669499
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MiiAgSbd22jNALyAZD:qgFq6g1af+Mi5Hd2MIZD
MD5:	233E07679E0028871A29A278BDFD8082
SHA1:	A0E02D751B082ED6FD6C4CBC4DA36F05E83EA9A7
SHA-256:	BF51028CE14EBD7B1272A89168C1CCDD962199030F5E06299CCE40FA2BCCEFB7
SHA-512:	12D552241EAFC612F6BE3F0D66CF1445560CF93B5B3920B15BD68F59F56F7E520D4BF91D814B7568C0F5C8203B0CAB26A1A06F6D18236514A1C050339E3DC5D2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=53136e5ada7d492eabeba70ad459f4b7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81372RDZecr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.468849662986003
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9gGXRvxL8T0xN2js2BI:SbFuFyLVIg1BAf+MqGtxL8s2jNdQIeXD
MD5:	E74AD27F65C484742073AFAA008241A4
SHA1:	091B0C1EC615E6538C15D304B07A6AD966D41C05
SHA-256:	105FCE397473854A8C92FC8DB21CE693EFD6C990BDB10400D5CA50A0BDF1995F
SHA-512:	1AE93372AF62E3536AD1819966F3E014A7EF72CB7D55894470CC86974E0EC63EB4164D4D846A401312D36E03155A127D1052CF42CCEB1D87CBAA533A8996222C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=74cc24b4128e4c9d82412852bfe6e4b4.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81373mEQlEt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.388390212741197
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrUXL4cSiGrluqjswK:SbFuFyLVIg1BG+f+MY8cUTjLkGq
MD5:	7A4073BCF223C9058CB49648B3AE8C31
SHA1:	8A6FEBD8D7AF7764A2C193BFF2472FD46FC60D7D
SHA-256:	93215E7FB40449DDB512A01CDBEDF328E1ABA4AB2BFA74211D91EEF93D99DDE5
SHA-512:	4F01B1E5194762D5871FC1B07D7AAD4BF492598898346670F465418170BA7A8F6DBC8447679776BC2DC0E038747F20A81BD5621746D29DAAF81A0B818FD5E66D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a832c989b0974a13a717cac669272dc6.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:82148uo3ens

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.315096402655444
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyN4jWQESAUPjdCLKzK:qgFq6g10+f+MZGSAUhCLAK
MD5:	EBB37576916BA24BE4BDDF4639ECA730
SHA1:	19E28F6152F9F8FED135BD59FABC824D7675499D
SHA-256:	35B3FFC3B3103CB8C288CA77AD6ADC8ACADBAECF2B67381B2DE85CCE6AA958EF
SHA-512:	D267B3803CB8CA447F4533D0D781CEF13D081FF4CDB328731873FE66EE6A8EB82D18494C49529C3AD59623AA5761AA83A7918DD4F1FB62DDE4A65F443C26E1D0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8e91eeefe800483698c9981521e83a51.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82307VhDWsu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.418361908872257
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8BQVQsLRWY+sjs1Ha:SbFuFyLVIg1BG+f+M8BQVnTjosQu
MD5:	78F21513FB10C745EAF69857D6808187
SHA1:	114EAC46629709EA9B60A74B1C4D3968D8967523
SHA-256:	7561E8480C3DA2D6AE4AFEC30FA795936D12D41F3ED80DA50D20B10D78F38331
SHA-512:	B97288DD003483951914EF1C296C7C462A203707F11DDF712B2A9E0F004FDDBFA8560176DA2656ADA85D8C35D31137D0D8E26029BE79FD30C2938CF0E5655E93
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d5051ca931b4c1eb7f43dacfd86f5f0.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82392qMUd4p

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.402225984657435
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5CJKRQhhU8ZjsmNzi:SbFuFyLVIg1BG+f+MkMQ7vZjdCLKzK
MD5:	0B3DD154EEE855D30881589D5E24C4A5
SHA1:	0AFABD44CCA7FCA91924F91D9753BED025FE7178
SHA-256:	75861433725177469A5EFEBFF074CCE57B367935225C8C23BCCB6E8D9CC3644E
SHA-512:	B53293BB643977B4FE10847CFAEF8C167134B370BE84DB19106121FBBBA5EAE30F6BEA151AAD862A73C7DBF02E5CCDF8D3C3A95B601FEE4A089BFA0E62AE417E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=37a41d591b3a462486e40b6b6c9bd1f6.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:828978MhAe8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.476129640770008
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoMUrqN2jZcHcljX+:qgFq6g10+f+MouNYmAu
MD5:	510F0C5B584BE5A65CFB8CC11D9BCBDB
SHA1:	B273A32BE049CD41983B564004C580914965528B
SHA-256:	C27CB984771DF7D5984BDBEF54F6F7BB0CB266646FCF6D6F4199B4292AFEF35E
SHA-512:	B2E60C9E9FEFD48AEA2AD38D9B2A7536E91A12684628EDB48D90A1B886D201B544BACC1A39B5BDB8783750FC67F8649D6AAF3A277B827719052165789FF3619E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bc8453d545b6454383a6e16bba1567d2.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:82898kvsMI8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422210853230372
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp40zk7HSkLy2js1Ha:SbFuFyLVIg1BG+f+MuAk7y2y2josQu
MD5:	6F7A8DAF55FF75FA6D3578A2CFB1CC25
SHA1:	4A478B8C889D5F70BA2512ED76F92E2CD052003E
SHA-256:	BAE17A5FCA0CD37B80DA43380BC8B637335575A38CEC7984651092BB0073F2FA
SHA-512:	A3CE7B0BD2C2B471F1DD48591306014606DF56701B3AE22A14AB031B15CF2D6725F051822217289A52EC871C737E581CCFDB3CF8B07B0E1AE92488FE11BE4A84
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c7d568d98c804a5a990567db74abc129.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82904xO8R5a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.393291895475108
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu1BEVYOB70hglsjst:SbFuFyLVIg1BG+f+Mugh0hTjdCLKzK
MD5:	C610B471416BDC2BDC9D368AB8D85C61
SHA1:	53A19E73F70D74A28675FC94900371D399D48AAC
SHA-256:	43F3EB85B3F7F9FCCC52780BCBD765904070D2C4DBC67E6C939E60F4055B66EC
SHA-512:	B35794CBE33416D64714DD3494BD75F822D7D51D924E7263569E1917CF7035AE73D53454B17E8F7D98D70547F6366D0D028A178C52CB58FF9249DB8AF8BFA55B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dd3d9db9059745f2ad0d8bc66c9d921b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82905O9Yz5b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.410663222672096
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mo2A1bKrQNrqjosQu:qgFq6g10+f+Mo1WrWEQu
MD5:	A8A1FF5628FBC471514E6E46DAE48A44
SHA1:	71FC54C61A12813E4BC49D7494587C1986C7B2D6
SHA-256:	516C86BEFF204704D06C5A0A49E90DDACF5A69A7334A45A5179A9B947EDE21A3
SHA-512:	CD900AF7A1786F81C7CA75AA9B10E86E67104EAB930829B178AEB525F67DCB2E61A789B5F5D42584ED5EFFAC0A912A3F2553C615F04B2FEEAD9E17C2CE237FAE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b4d69aad0e0f4fdea77c7538f34fdb25.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82918nFNPHa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.399667960736091
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8Iy00S+kdqjdCLKzK:qgFq6g10+f+M8d/xkSCLAK
MD5:	BB1AFDD775C623479A3F776F7B8E28C8
SHA1:	CE0AF118C11D317D34F6DFCBAC18030FC6CA9CC5
SHA-256:	1A668467C0A3EE89F5A7E079E76013E01C876585B6C336864F4B62B8187D01A3
SHA-512:	82F4040E4837779B1242C97399F79D4B8653F0F479D100248A413D995F70753F7BE95AD5ADB36D9007BEE2FA7A4E3E5CB83B3DAB29E57D18DB51EB74582CBAF7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6140402d73014efa8796888ba1b59241.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82919f8liM9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.425309477092183
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/t+iRMxy12Wwsjs2ALl:SbFuFyLVIg1BAf+MQiik1JjNALyAZD
MD5:	37030729121E1E7A44854CADC9620AF1
SHA1:	0F4C59E8AD7417A0AE62A1418DD67601F3441A3E
SHA-256:	896FA8D0125C518DFEEBAC69BEBC42F8C920CE9EECD073E9408C6A83D511DF3A
SHA-512:	EDED5BEF18860237B5656E3B66525713E0A86462FFED7C3F8B5035C0A6E2AA9B53AD60E655088C57D77706BA5A6643A0F6AE4B5ECDA7F0CFEA54B5E10E9F9BFD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5aa47b62c4414e52b6c6efb7a9decd43.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82927kmv2g9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.466492790232573
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Me/WrTdhgrqjNdQIeXD:qgFq6g1af+MBdhuw2D
MD5:	596ED136F984CCC0460C7E39B8924C1D
SHA1:	CC27903A19FE0512DDF913771EBB0634E8593CBC
SHA-256:	171872F1A01D6176BEFC7B06F4A13374DB3110A24C16C752BB7C30DFAFF7B61A
SHA-512:	1FCCFF778BED9C0187CD39ABB0ED13F69724EDF671335571ECF8EDBB1ABC21FDBC970A3FEC12BB58C21B75863391288089FE6055C1E9E6C611AC5EF5BCEB8480
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=717172f1dc784405b0c53d79a917b767.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82928p1asw8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.393214912633748
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsEfThRXYRH+h1HusS:SbFuFyLVIg1BG+f+MsoRXYRezDjLkGq
MD5:	0CC208336BE9B39DC1B5D2F41F43C178
SHA1:	20DF5DBC60AA4E52714D923C6C522D6696A5C663
SHA-256:	142C68D7D2305F65392FF09422F06C14180638C7A6AC5E5E0FF6B0E63F068571
SHA-512:	B9B82F080C76C64E847E0726ED984D98846D9CA9849151EC4CEEA6587393AA90AD6B7A97E6AA9CFE4F77A6D1DD5FAB6B1AD775F6A769AECE3FAB86DAD22EDD85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=faffca86b4284140ae49f76afbd46bbc.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:83915lMaMFW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.42113443522784
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4ATGjNEAB1DyI02lU:SbFuFyLVIg1BG+f+M4TZEATDz0josQu
MD5:	A0CB447899DEF47445841764AB60E376
SHA1:	967E86B130897BC9871386782D56438EA6C71BD3
SHA-256:	01696206BF5DF3F4ADF5FB87D1B2E702CC6CFEE6BA87F5B18C093366A0B3669F
SHA-512:	AE4754218DF9C02E068E749CA93928BB4C450ADBD0344175A36C207DBE83181F1B6CF814858072890AE7FBD54FAC7413ACF00568C5A6CB5685976DCE26A43123
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2e2fc9b234cc4aedb0fe6645085c4653.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83942wNP8XY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3892602826765685
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5acKg0EqSR022jsmM:SbFuFyLVIg1BG+f+MocKjE/0ZjdCLKzK
MD5:	61CF743FB10A685100B9D7CB56C89234
SHA1:	5C8FCA1BF811A74E6C302B23E3CCB142ED272A5E
SHA-256:	8F4DCC9D822B86D5EC8C38ABD79BFD7B6F4ED9B8AE1D09DBF7EC45B4E928E1BC
SHA-512:	3D0F642E53C2A697A70446110BB9B73CAAEA57B1F42074B0CEB607E940B5699F1CDAFE46DDA0B792F0462588CA82478D23C18C849CFA80168181539FD8D5D14C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=386b5bdf91fd439a8ad554a33f3b3974.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84004viUaZb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.417347364598428
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+McW9QQC0qN2jdCLKzK:qgFq6g10+f+Mcp+qmCLAK
MD5:	886CBECC0DF01D016F2656CC74148C6F
SHA1:	D6DFE63D07221B572DF9A54B7D1240CD6294C7BB
SHA-256:	B3B5DA1797A02514A21A2767B271AFB978D602090B293A540253ED29C69A5C9C
SHA-512:	31E71D29CD78D59B89E03ACCB083E339D848645EC3E00E48C7FAF6B21EF91284A388CDAF1253B88B060321C351AD031B1019F62DD198B44578A98E26736A804A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3f615e36463c4940872757bb1cac1f81.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84163NQC9u9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4005322008969685
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8WdtuDDmgrqjs1Ha7:SbFuFyLVIg1BG+f+M8WdtuLqjosQu
MD5:	17536135D83049AD9DF9285ECA48A761
SHA1:	A198C547A02A43DFE9CDA79E3F8A17830BB4AD42
SHA-256:	F11266E80BCEAC50EECFDD596033EDE7D1B97E94B60B8FA366AAF03764F75B92
SHA-512:	F3801ECB515227C3A15BEAF1D87DEA5B2E7082FDA5544BF6D86E20AF598699FCBB649913ACB4238939FE82ED60FAC683B4F1DBB8F8763EFDE7434479212CF212
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=66de808564ef447a976a6f1a86ab785e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84184ruID5b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.396239866879374
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8ijUjqBM+0jdCLKzK:qgFq6g10+f+M8ijsN+mCLAK
MD5:	85B6AE262C11445F04E0AEBA48F65F02
SHA1:	CCC300B4A2D5D26EBD819BE234636795D24A2E01
SHA-256:	C39933C8E0F42EA82098D77CBB5C46AF77381144764338C139811D3467D70EB3
SHA-512:	EAD6CB4ED7C4526CD2F54287C7D10E0C750E2D8B7DFDC4DD46CCAF7D90A0180844A65C3C0A37717649C68C55350316135F8D22F3E0EE1D15E6E40B5C465CC9F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=64479744115b4b5f96d5116d0d06e3f2.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85140TuviaV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.447272751926388
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MVVoHpg2jZcHcljX+:qgFq6g10+f+MMHpgYmAu
MD5:	B8B487970161846163E6FF68359FC422
SHA1:	1A54A720FFAF425856764C716CD9DE997CE2329D
SHA-256:	7AE01E29BFCCAFCA0E440D5A64ADB76AB7B607623A524D426FF01F71A15DDF74
SHA-512:	719BFFFDBDA414084841045A28C69070214BA12555ED10EA714ACA1A762874926825B27A9C03C985D32B09D077FD3D7A5E329B63E121A5673CC6DBF3D88EDCDA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3fb4d0fc5bc044ddb1e118bfe74b3507.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:851418RJ7yW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.410507715709871
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/ylWRAwcpIHGxsjsc:SbFuFyLVIg1BG+f+MaUAwcpI7josQu
MD5:	F2FDC6EBDA9A789AA6F828628D177113
SHA1:	4A495C739E4734102E7A4ED7B873275542225EAF
SHA-256:	2A3C559F0151197AF7092B1678292949C907B15998E700EE56622356224A06DB
SHA-512:	F6642680B8084DFC6766559C00CAF95C30281F4BE4FADA91E9B8F0DA26309AED7C7459F35CD941E13F1AD4E1E9937EAEAE2558692C725805EAAF51897F162D9E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=59fd655161b14e9d90f95e198b2c1be2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85142DAQTVU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.40633537394721
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy2ziwQI0mmvsZjsmM:SbFuFyLVIg1BG+f+My2+T8jdCLKzK
MD5:	FF3FBFF9ED3AD98D835B6A0AFA6EC421
SHA1:	556C48402D0AAA25BF04FD969CCDC9C74683D57D
SHA-256:	B3851EC3CC3C819889A19A44FF7089AF1B7088E592189FC533B1E1CF80912C7E
SHA-512:	B5ED0CE9C9B3F2CC9B1FB877F93E40F40F0C31E6122A3AA2740C916B89110D2F97F8F634138945A0C27C0A7EB095A9EDACC287024553C6B5011DCDB655DFB86D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=845b3b75641747f5af8ab9a8d51b09c4.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85148JzFPPW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.420449848512496
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6ccXrLh7huqjosQu:qgFq6g10+f+MbOfdhu4Qu
MD5:	E2CD2343348398834B12D3FA0E19DC1F
SHA1:	34DACA49E4BF4FF5FCF1D45B8DEE2F4AB014D83E
SHA-256:	3F1F55FA3E955B73C3792607704BE3EA819B06935670C2CCBCA35E2C40ECE6F0
SHA-512:	7B1F96205DCFDF189543FB87F3C0391BAEEA40B1D382405615EFFCB021E22711212AC061C8132A08264921DCA29C55F52AEE8642F006EA11E1023D64E7766B12
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0df394c753424c528ddcf0a785c8a77a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85161mVfRKV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.356986034973699
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7G51VTtnB2kFjsmNm:SbFuFyLVIg1BG+f+MSfFjdCLKzK
MD5:	40C5DE8B5E9BD4140AEB7948D1A632A6
SHA1:	D508FEBA1D42862D5294CD30C95047F502EA750C
SHA-256:	E7C2EE771115815FADB413AA50DEA007956E6673F56D684207D080570E6E0F2C
SHA-512:	46869BF7E219EF1125A89CE7C5006522FEC1745AAA5983E4719C7B89D114BCFA622D842DA7E33E233C72F6800126E2BAD6A800331AEA92B9E81116CD1E31D2E7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=16eb185220084dfb806b6dea365b2d8e.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85162jpmPCW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.423141424273926
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9Z49YOcAqBcNhuqjs2o:SbFuFyLVIg1BAf+MLGYOyqzTjNALyAZD
MD5:	97D54B4999BF2B144AF64BACB70501F7
SHA1:	B91A122ECF7C381CBABA3A3666251D45B722D153
SHA-256:	4B3C35108FC12CA4E2109FCC34BB6F87571D67DD4EA057DE07B89605F23EF33C
SHA-512:	2ED8C842DFCDA283C19545E8F9FA54F155B7655686720BF1E326B34D470FD5E1848FAEC9583F042EF86C9D56FA846FA9D883982D8918FF4DEDD4B32788C507E9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7f025909b8fa4e7caa9d4250ed9f58f4.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:85172f84r6V

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4476578686636765
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm74/XZW/p830js2BbQIa:SbFuFyLVIg1BAf+M0/JKpPjNdQIeXD
MD5:	A0657AFDE9E016D1364C16035B626B64
SHA1:	2346EA2E70D1EBD7DD0C4FB6AEEA925639D151FF
SHA-256:	BF99EE008799536B7608A737C1A99D5E1319DC31936781798DDC8C2EED52AF6A
SHA-512:	F166190AFF1E3C5F0018570F8B5FB22A0D9A4BED33EEF58BABA520BCC4507F68284111B40558C8AD9901D0412FD4C013E0762C2C542B3E345C0EAF48DE371871
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1075aac3fb324b29a43a3ae734070626.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:85173CvPAdX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.398485719809033
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7JwbRUUn1TjswkClK:SbFuFyLVIg1BG+f+Mqhn1TjLkGq
MD5:	0D3584C0B4DCC8EB3CB95F9C8151A51F
SHA1:	92494A7125D9F25FC3532EA7DD63E02B2DBF40CE
SHA-256:	5E6C38FBD05D8B046E7566FD1C33D259091589D079089C7B50FDC21403E012B0
SHA-512:	9EBA784BEF7FE341E28FAE8BA2ACDA67F88CBF9BD40B25F995AD8A8EBE850E3861CF9FE0FABAC1263C9E607B03FB6FE66BE12386325F9BB9090CC696B9D27E4F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1ac4dc1b22a648af933327a807d0863d.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:85221byOU7W

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.382794042446058
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoxKiaFd0BYTjdCLKzK:qgFq6g10+f+Mo9an4YVCLAK
MD5:	F94E69E4DC9EC6174531A8659F419BE7
SHA1:	69A849E1ED6831D4B70D47FBAB2FE453193088F8
SHA-256:	9A3A76E2C7EEC2BD0623912A07B330824C6A5C4C140F0FB9A616CF3BECCB565F
SHA-512:	7A617276C2372B8D0B381C6A1AFE95EDE8DA858DAB8A494C9ECA364B765120B63A836DD1DF88C0AB14E7856811B79569D66D4EB662A10BB12D08511E796E1940
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b90febc4234d468b974ab08a78f4083d.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87293J0EcEC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.519441147124506
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmshk5rKAyYglsjsicN:SbFuFyLVIg1BG+f+MsPA82jZcHcljX+
MD5:	C25E76266BFD261E780D464DB10233DE
SHA1:	FAFDF2E70C9F3A607D1D48B35A9822888AE9A77E
SHA-256:	65601CC0D669EFA682CA6417198AA4649D5459905BBC8D99EC22D75B40F760CC
SHA-512:	DAFE0CC6DD18EEF9203FB0AD0AE70486F4464B3B1007BCB3CFC2C85BEE66D03FCACB107F18C56C833E6A4098772930FCF1B218897971A2D5A3088F234A668D5D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f77cbcb583a24953bc2b4883627f8d8a.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87294i6HtPC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422818085206568
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+FGFgDYKUshuqjs16:SbFuFyLVIg1BG+f+M+FJjUshuqjosQu
MD5:	DBC65835D6912A694DB2D3BF134F69A6
SHA1:	C97429D80F54CB1A605B635A8B7073ADFAE62D83
SHA-256:	423FE9BDF1B9F472DDE9756C42AFECA6CD8DAD2A05500B44BD5C0A8D5A977F6D
SHA-512:	602CFA04A2EF293C404A44B484D8A19E75F4BB3E73B998CB1A4F50F1ACDD8316C3ABFB3BCBCD25CE5EE7ACCC6A46D5E17D26D904BBD0B82E9132C45407BF8B02
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=44cc6202cc7243f284734947cb77050e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87300zvVBKC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.387910090288744
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6hJBTYEM2jdCLKzK:qgFq6g10+f+M1EMcCLAK
MD5:	2827880089CD5EC0D9C2DB0294BC297B
SHA1:	F62FE252935CFE98DB807CFEB13DDDB36071E814
SHA-256:	3E291EF8D6711B3DCAF82339864798C50E61586DC053BBB26A8A13B61BA5B6F3
SHA-512:	ED23D31646204EBB7A838BE6FD3C71C612397BBF625BCB0910257E32131F0C2B595BD9559FBE6BB0794B0C8F768B85BE940604E0990031AD0691049BCC1E76C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=086211155dfc4bb49c26d2f0a24dad21.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87301dXGYPz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.419248640418357
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy4WLUXCDQdAPd6Xdw:SbFuFyLVIg1BG+f+My4eUXfiy6josQu
MD5:	0D6A9086E1CE7DC8F32E08D9F562FB0F
SHA1:	E0D20307DC1152EC53C42B3F0988B7D856EFD5B1
SHA-256:	8063B831FD1F613B7D2E940AFE5C75CACEA0BF53950562B29AAD99965DFFA2BC
SHA-512:	9F5312F43CC14AEE9D0A6FF2317204C54A67556D5804817E8792C5AED617DC0F9034EEB9AA1589332CB0ABFA364D72811F80FCBC2ECB4064394BE484711BD9DC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8073172a26234f878ea5272cfd60a286.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87313GEtCqB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.349046205865991
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4AXr3zFYH0ZjsmNzi:SbFuFyLVIg1BG+f+M4AXrrZjdCLKzK
MD5:	BB32EFEE9B2EC2973392B0BEF57B69FD
SHA1:	6C8AAA2531D220DF724205A52D81433140C23617
SHA-256:	230807F55F9370D9A1C85A5AA5F19CD7D35F061383A47C64929700A2F990A084
SHA-512:	B2225B02E76B3071ACC28A9E77F0546C88F125DD3AE442736F068AA8026FE05660E0190BCB2170AA7DEE3F6F776FE15FCF03E50D9ADEA237DA480E1AD1582A3C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2342619231f644e396a04da5c433f309.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87314zOcl0A

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.461545860303787
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6UIL6RSROrS0jNALyAZD:qgFq6g1af+MDS6RS0IZD
MD5:	37036855E22F9D8BBDC914AC5D1653E6
SHA1:	9E3EB7B1622CF9DC6E46B0B269F6D0F93D28DC08
SHA-256:	8D517D8F1AADAA6A892DAED4AB5E78E34FA4EE93F6C1E96D170BD4E70966CE7B
SHA-512:	9A13858EC8CB2055EE1863ED0F2BD2291346933B419687BB9C9E9D218C85763EE7663FDAD17C61B9BB68B17121CA13A520B4A804AC5237C329F2027B943D3E0E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0db76ae5d19e48e29874377f992c65b7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:873225xGHoB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.464566856789128
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MLTGypnTWKrqjNdQIeXD:qgFq6g1af+MnNdWKM2D
MD5:	5945CF7743FBEDCFE85347ACBAE04B60
SHA1:	EC4B3E805AAE81274DF1A2EB21FCC329267ECB07
SHA-256:	6777B1E52753C39891E7C4D5F9BAC3B34C55A6611E77EBEEF61C167987CF9DE2
SHA-512:	14C2BFBE2AC8BA3EA7144DCC1668F79525B7AEF2AAF9EF6B0D0C1E81E055D1AD3E02ABF5276655D61549AAA16BF21CECB21BD40746B93AE41F20DB28F67C238C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7b5d19946cd3421ab00c40739d484341.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87323WVzjny

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3663224701172405
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm72kWoSXclHBPsjswK:SbFuFyLVIg1BG+f+M6fXgBUjLkGq
MD5:	86DB431F1C49F2E8F4D7DD02A1364C58
SHA1:	11DDFCE8C65732940370F9CBD510FEC23F291B61
SHA-256:	4471923B7F390BD3D472103373308730CE5D8637C69D9BE5F75A9DD64E19046C
SHA-512:	EDADD918972A31028D09000D256D3114859A3C50C287409BCFCF4A1EE128A9B682BCB69988E7F1E66AFFD8F4552F6573DAC61398B64C65C577B713CEE41F7A15
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1deed3e1735d472895e2183ee3b5ccdb.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:873969Rf7rz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.410645936217594
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyIXViWAd5jdCLKzK:qgFq6g10+f+MhwWiCLAK
MD5:	F68B164868FF23AF12B04056EE3FE339
SHA1:	24D2D4A3514605D87CE25389C29EA4E07BF6D322
SHA-256:	48EA14F4AAE5C0D144FE0F946160644A7A21BE510708BF167E85685E9258DA7E
SHA-512:	6DCDC2AAAE800EBA9199B4A8C88E474B77D7E0A2ECACD96FDE0E57C73275B38A44E83B0B6D24946F3D1DE0690A3A7D18AD92EA4DA37B0299B989F2D6EB5FC84D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f1232e82b534bbfb0d4c075698b1edd.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:88015KQsWTP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.353245770125296
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoEC8N03XEvRxsjsmM:SbFuFyLVIg1BG+f+MoNt3XCRqjdCLKzK
MD5:	406DA233C80F5C62AAD3068ED9BF12D7
SHA1:	46CEBB27C324DE2FC078B2D3FA69561CAF5E87CA
SHA-256:	A896E7E62B95F2F9CDB1F6E987C54525B04D12766D5094C5D48128AC34889882
SHA-512:	F3B294F18DF8A0D091C7CB7A24376D7ED0DC1786B38F5F221A3748D6E2C18C8084037036336DFCA907E005C6F2E3769F2643E719FBBF58CA959614D1D42D2564
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bac0be65e5ca4d019ca7412aafe9d133.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:88016GVHAlR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.399240382205428
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsaeEKRcizZ9js1Ha7:SbFuFyLVIg1BG+f+MsaeEKtzXjosQu
MD5:	1C285C78CA3ABB90D426A55865314EAC
SHA1:	DDF52253FE83F99D041D741A189C1845ECA676FB
SHA-256:	0E6367B5B043FB519CD4443DEC9EF12708B95D878B60D0D45017FA6A8FB26D35
SHA-512:	AB3791A12B2BD3491D9CFB7AED8C94EE85DBCAFCC7BEA1E254A73163D2326A0F7F2D4EE7B98B9A8C0C8FB74DB2B95DC4172AE5A16C1C0FC745FBD974B9AAF4AB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f1ff2baf375c45ddb0e449abb557e1e9.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:88017NoZXTQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.441540365886206
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuvefnSV7BWRYg2jsV:SbFuFyLVIg1BG+f+MuvvrjZcHcljX+
MD5:	043626FC5DAE52031F980438B73812D3
SHA1:	8A8B7ED05CEC286F9E4D16117561BA3853FEC4E0
SHA-256:	D35B74FCD233FB4E0432C36C2D4C460D315DEDA65B96DF79C32C3E4EA32A9B4A
SHA-512:	9456C757252595EB26A4B8384779FD10C36AE4D99703BDC9D3FFD541C337D0D716C800CBD8AC90DAEEE2E5DD82804962F05B166E84065884C5E71CA1BAA080CB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d44d3e151846460bb737d1ab0a05c334.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:88020sdKEzR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.340313289664273
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6iCPgGDuN2jdCLKzK:qgFq6g10+f+MTCIPmCLAK
MD5:	E95821CEDFEF9A61AC70085F06FB4FCA
SHA1:	BFA569C37EF61D5F1E9A30999B4310BC19431D52
SHA-256:	C30CEE8BC6C714892CDC908391FB309387B84DB575AAA264419CC9F360ECF242
SHA-512:	D6CDDC1E66EC8ADD5991F590541FD852123F27278DF5FF65D738FA7467E5CF3BD851CCD9354D8F228CFBE6D703AEF836521A0F43FFDA1D42802AA3DC9BCB29A1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0eb3ce43afb4472cbe23f0a586eb0600.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:88025LLs3iS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.353312696013793
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6DQFRY33MpN2js1Ha:SbFuFyLVIg1BG+f+M6Dmp0josQu
MD5:	EAD000D2E71FDF1CFAF6F2ECD3B4A552
SHA1:	BAB8FDDC54F41D623D29EDD69E382A262BA00AE1
SHA-256:	A41FE7F9EBECDBFD7684048999F820D1AF55FADED48B96A7E1B9FA2C0691B4EF
SHA-512:	A4A49C83A701288A712B13388A5FEF2A7A70482F070CA04E4B024D2B41A040DCDEB82F909FB83BED14038905E2AB02351FD417592F0209849462E8A609245720
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00da38e6ea574a06ae832809d86410ae.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:88037b7a8dR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4458060064871425
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4DH1TDOApGI22jsig:SbFuFyLVIg1BG+f+M4DVWQjZcHcljX+
MD5:	D8C72C64E0F57A5FBD173484E0475AC2
SHA1:	20F1CAC7B4BD6F96992AB4E81A0CB1B9C95A3B8A
SHA-256:	C384B0180BECFA52DA7C012E746E922A41CE6CE1E36336A93769D710794CD0AF
SHA-512:	E0CA82B87100C05C93C1C1049423CB0193DB872DD92F68E8D2B5E88F542A22EB0DEE6FA837C30380561C9CAD17B3BEE1F3EB614AB86571B199704D0182C00ED2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2fb466fddeea4c1e9606a22af7ce84ad.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:88052eHngeR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.424325472252436
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M4AzSCGcRdKsZjNALyAZD:qgFq6g1af+Mjz9Gd+IZD
MD5:	3E416EA8F1F95505A592D1202DC7DDEE
SHA1:	EA9043D38545F91D7AB9573CDEA83A3ABDD00A02
SHA-256:	6C9D6F35817886D093D1FAB6F5C789EEA086A3102BE1B180A601C7CF53C98FF4
SHA-512:	F938941D0D16906B6049B4053847D0447F1CEBF4A0EB98FF105A06B2B8C3FAEA7C96F576DFF2BFF02F43D7D44300DD6634D05C06EC2F0A2A00F01B53368609E2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=caf3b576901e4771ac015d88b7c8048e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:88053r0Q31O

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390935044534373
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoBUbSctT5YC0REc2S:SbFuFyLVIg1BG+f+MoBMSUTRNjLkGq
MD5:	5B3615F9D6D5953591744DCDA40FEF68
SHA1:	D6A8E616550D9C3C6CEE99AFBC2CF98429FDC4AF
SHA-256:	FBB65AD5CEB52D2D173345B5C011E938A7AB34C42AA4539B420A4FCBB0E295CE
SHA-512:	85664D8A0414F82D59D4720D406EAA0992DA2708F7E574FB67938C7D925E355775078AD3990BD4FF5E60E8C02597E974B9FDAF64FBF2B293C2621CBBF73FE9D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bdc7d5fb79d048449b70ab2cb24a24a7.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:88062YWeKwR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.375510543500971
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmym/nwOlsjs1Han:SbFuFyLVIg1BG+f+Mymx2joa
MD5:	5C144E8401AC71CBEF382C8D2680F9A3
SHA1:	83A0C2BB77833453AE14D22139B2C143DE01A226
SHA-256:	8AEE8C111155CB15A0EC0215AA5952726D7906B243736289E82391EA7E76562A
SHA-512:	4248709FFA44E3646E6E0770616CEE72C38A6F93FF6671E343F5ADEF0054E9D09761B5DBA54C4444DA8A53AC4E8DD4AE95C68DB751EA71F6335675D84BB4BB1B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=879b2b124d0f4a79b99d5edc938b9142.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:88063GYPPiR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.395639830816561
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6QSc2yMSQH0dBEvAF:SbFuFyLVIg1BG+f+M6QS9jHxYTjtWL0
MD5:	5E95998E842476030D7846BEE60A26AD
SHA1:	CCB591730F90580E059F9E1B9F62066C1E2AC8F1
SHA-256:	5364B8680E8CBF98EF666C4BC584ABC4536CA71E486B84D7BDF6DAC31746BD30
SHA-512:	DD42FA130CBDA03DC9835B649EDA200DF57A2B433BA98D5869DC53DBEEA7D058AF00CBB88EBBE118BDE99B0088D8FE6A6C34CDE3687BBD2E3FEB5F1FDD24D5CC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0db35b978c7b413fbf75b479268f33ca.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:89202p1n9yP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.42076636320663
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDWmzYHS3QHRMUA2O:SbFuFyLVIg1BG+f+MoDWmzqSgzA2jNE
MD5:	955E1E562C3F1CF347529C0300E8DD96
SHA1:	C8BBE929492CB96460E6D7D4B337FAC12E83E3AA
SHA-256:	CA0FB796258F78D862670452894CA3B2947DAF52484621801D63667C09146E4D
SHA-512:	52314480298EF4905F38AD87BB8E68BACD95271480472E34DBACF5334269D3CA984173E9D5F91B1B175DC575CAE308E6FA8E28054E475D839282692B691E9A0A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bf2cefdfdbed4b77a5bab6da2295f645.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:89299q5vs4Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.394953011822859
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8BdG4WE98eWgBNrq4:SbFuFyLVIg1BG+f+M8BIbS8evN2jbVC
MD5:	A1CAAAF7CD0729BB864585FC85739253
SHA1:	56D79CC6F0425EA89258EBA0CC2CFC4C7C2B4340
SHA-256:	FEC06D70018DCDD6F68DC0E4D6854F66B31B0879E6AD534B3D1983E546033C87
SHA-512:	0E8634D0835B3114F7720C0AF662535BD3C1426A5992F79BF58D82EF82744EDDD48C94AC774A37B6111E10F1F55E25F88F81CA14975A256AAFD675E6C012F0B9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d85f4da433c4ab8a621b2281e34634d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:89313Ek3W1Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.46071420753649
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmodTr6bQzEHmzUsjs2BI:SbFuFyLVIg1BAf+MopOQzEHMjNdQIeXD
MD5:	7E739CF6C6EC95DD5330630DC6CFAB39
SHA1:	FFA0F679698811165BDB9ED5922B708384F19DE9
SHA-256:	57E18D96443096E11B1FC3B3072FB06A2B7516421568FA6085DC8BAE35E6351A
SHA-512:	8F9E91524DB9F09D8BFF2119C8A38ECCDD02B652C18DD4E6E7C0FA5F6C6C2A0359225AACC6C4AB92ED3F65DC0E4696039C5FA42F31368C35402FA61BD90AF18F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b642f0d11bf1494cb5659da57ef69a0a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89413tEHvZR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.40565407851415
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MurE9RWn4hTjdCLKzK:qgFq6g10+f+MdwsVCLAK
MD5:	8C8D8D93FD245594940282919A012196
SHA1:	F08B293845DDF3E1822F11744B04B0044993E781
SHA-256:	6B9CC580714DD16C10561F0A940A60E527374A920F148D3C47B693A8E3AB6C65
SHA-512:	6CE963C68EC28A2E7E3243ED9F010761AE4EEAAE146DF52E7AFCF0AE8A5AA8D93BBBEA0CB710DE7B3DCCA9B3B312C88B4D9DED5F71ACD2C3D2FAB7BF6FD8BD59
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dcfe73420254495b9fb3d863b2d2d0f0.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89414ncaLiS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.431670544148409
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrX3YlSBhYc9sqjs16:SbFuFyLVIg1BG+f+MwyhYc2qjosQu
MD5:	004348FA6C8FB8B74E738FACEBEDE02C
SHA1:	76B0CE655279A116992026B7C7ED285DBD834AB7
SHA-256:	60FE1BA5E0D4891FE349649BFF647A8BEC0E6128FE9E5BA2868372A9DFB3413D
SHA-512:	9B8BFAFF869EF3E18A466C3712DBD446090D2DEB2F161765016F9BA525D7A456E67C79F0965A2CEFD388FFCA8688FAAFCC0A9C82295BF9BF2F13642F67B41C1E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ace086125e7d4f40ad75ba27f9b89905.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89445h1NUOO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3642561365086365
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoAJQJHV5AEWXRGD9E:SbFuFyLVIg1BG+f+MoEQV0XREqjtWL0
MD5:	D3CBE2CD95796CCCEE248539C0179AD1
SHA1:	9788F6C56109E614A0C61C1A31A3160FFCA18D51
SHA-256:	71277519B09E2E788D369A11DC493DFC479CD76673E19E3F763057EA6C91D2F3
SHA-512:	7126B0AF6B3F9EFCDDDAD58A498186E3A2D82CA7BED5E1C619CCDB9026108849E0060B059165496A9B681CEB97BE733D4708DAA9BE68254039DB2AE74ABE22E6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bead1515b0114e96b973b64c3424cfce.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:89455YnrKSP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.398193578209022
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8nVXnalPFVtsMqjst:SbFuFyLVIg1BG+f+M8VXnkvt8jdCLKzK
MD5:	C1A5FCCBF7CF9528B29E70CEED2862C7
SHA1:	0849640E9A5A7C1B7AC8E61F1CCED5548F5CD8A5
SHA-256:	46FB856CCFD0911A9E3DCCB36A9BC4445850BD0C5BE425165F1C05A417E8BBE3
SHA-512:	381C03BB5B982F170C16B741B8BF5921206D2377858A8704E9A56E9653F8016FC9FDCB73E49308C0590B674CDD6BD39CE961089E1E193B91C879D5C6BC602DEB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=67102b93634f435681451fa1c6dee408.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89531uHamsS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.497078944676578
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M80eRDHThvshTjZcHcljX+:qgFq6g10+f+M80O/5shRmAu
MD5:	4FF152BDC9FE4F2DB8FE5BF635C194F8
SHA1:	6A0CE8C2272E0E0B327C10DE9D243E0902876A2C
SHA-256:	B32935C4B1CDA745EEA1603BA90AC3FDF26ACB428B8C9B6276F37067CE4A5FF1
SHA-512:	CF7C85C694EE0A566B5CF50D0193BDDE172EC4853C1E7B0313BFD0E5F87DF404A12101BC7716C5F53DC984764789BD4D81BBD6C1CDE894E2B0E4545B455E1104
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=62545d2926784ff484a5bd0ca3d301d5.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:89610gKjemR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.362367299786388
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8oLrHtkHwFrqjosQu:qgFq6g10+f+M84HqoEQu
MD5:	DFE7BDC2B90C50C2F1A2BE9C10688417
SHA1:	06204DF015063B7F48367A3A39ACC83C23C66C5E
SHA-256:	202C400B765F8FA6A7E85720AF6EAAD3D2F61F4F182A767FAC0A2BDC9D1865E8
SHA-512:	B4B8083707EB3C3AEFBAB1C434437CB645A4534706F5CF4A957446FD3A5AC94FC9E59A97B50B72AF45D62917D68D302A39FED150CA3B549688D70B7208A84F5C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=633849a1ef874fdd8a1bbaaaa3b60fba.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91415FRysHJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.357101998381261
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsLqftXSgBSPExjshQ:SbFuFyLVIg1BG+f+MswSZ8xjtWL0
MD5:	B46F79FC5B1AE9B928ADF6EE297C6CC8
SHA1:	BACF65C4A0CC9BBC6EBF2EF1882C47B4BEBCEB1C
SHA-256:	704F95A9EC739DEAFC2438AA9E4E70B5C9017ECD6AD2AC377E8B48B461EA18FA
SHA-512:	05263D068A676390AA9B712B110F3EE05175614C8C81BA2F7E8FD20E01F0DE5D24B645636F1D3A0620205E6A726F4A51D5867389C716E365D65FF921DF525ECA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f4f4e5fbf69045f199285bed5bb79a1d.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91417xcoJ1L

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.489308463110457
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M5wWaRn+TjZcHcljX+:qgFq6g10+f+MQtGmAu
MD5:	32473A0D6D3135DE5BFDA9507DBC29C9
SHA1:	1B9F3BB4D30A6D3F85469C2CA564F97B0B6B1353
SHA-256:	F666664F49BAE367238C2EA4233CD4016E4E2FC7A5EF2D0B74C3A07AC9A29F8A
SHA-512:	25D9E981758DE0651885208C136B38FD3620DFA371E735702DFE2E219884FF9B6A6E2C47B03FD47D126DAC34D5463D28B00A3643D3050D1891A3AFB0D72E1652
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c3f4cebdc06b41f3b0547118ebb5ce92.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:91421rKP9XJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.344533676965127
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuEVBSodx4TUsjsmNm:SbFuFyLVIg1BG+f+MukS+x4T1jdCLKzK
MD5:	3DD1EE55BFFF848A3313B02AAA92EDB4
SHA1:	044DE77A86EF09A516699C4E2FA892C19E345F4E
SHA-256:	24C28D8BD0FE0CAAA048F4AA0D98FCFFAC68214EBBD5B24A396FF4A804D2D482
SHA-512:	8AEDFE6E715A47BB6AC3D47025023F6C32CC52DAAB354A9CDB40CF17BC00721D6E626E88DC61DB45240D06BE18FDDF2BD08B648C34221970B4F16E89252D4E51
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3009f10354740879764e11d0760ac3a.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91422haQSjM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.405457563257615
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6GJaS9JWSbXEWQoFC:SbFuFyLVIg1BG+f+M6GNVbPQoF2josQu
MD5:	21809F6E9ECED3B89BB93E609756EB90
SHA1:	C344C7636F8883BB9F6CE1B9A770E6B401DBB6AD
SHA-256:	BC6459C52DD0E8759AE6C241864375F3B6D614359DFF5C81A877E8227509645A
SHA-512:	524552D0B8A19EBE965F8BF4932175475628267FD9CB04872F0BEFF3C2813F7C5C637D20DA48088847FD15D7B65707FC93067FC363B0B7DF2F4DC59DD0D7C895
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00afbf073e85404099f037461a2a3323.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91429TzpTmK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.359349601927771
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/fhUAUFhkAbWuqjsO:SbFuFyLVIg1BG+f+MmAsbWTjtWL0
MD5:	79A79B85FA9D94BFDAF3E1D5F71F9980
SHA1:	E30A34350D51A5430D697D7193D03407FA4783B0
SHA-256:	D5AD10916B0ABC2AAAB3F6E6FB718731C7347337D04CC46E461666FEB44FB038
SHA-512:	C18E7C3E5297FA63ECC4EF8C49293E0E62527169EF7BC1770D9D4A3DED0870190C4D1A48367E50BDBC3CA61C2BA7BF4094880185E58F76B2ECB70F825B86A0CD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=51c4b711ea0347209ba5ea88e3706f86.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91430axI0rM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.37265729114733
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrWhGyWB4DSREAITAc:SbFuFyLVIg1BG+f+MIjfD4pIM0josQu
MD5:	2F9AD4AEAB631B9410654A988C18B878
SHA1:	0E95D200404B099D0A126BDEAA7AC9CA3D0A1CB7
SHA-256:	24388C322514EE0FB13A52A4269FB2E6E2F56A613F6C3E17D1EDBA1000310528
SHA-512:	ACB7FCE0331914FE4DF27F00C3C4241A02BF553F8F9B71BBC3DA8175D75225B6C7DFF5F83F30AAA7586626866788C66E70E8B0E80765C4E036299D24A3CBE86E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=abb3bdca0fd34dca908655075aae586e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91431PoqELJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.385227876228155
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuUESHTUHSarqjsmNm:SbFuFyLVIg1BG+f+MuU7zSSgqjdCLKzK
MD5:	1564F52A39A187AA7175354908319425
SHA1:	2CF5975A64307D556F5B236E9F27B56AFFFED535
SHA-256:	9C27F4D0A9CF8AD3669B7820003E9F38263B87122B2D9980603BBC5844A782BC
SHA-512:	81994742D0FA1B31DE775310F1B978639247E91F2C097E6B3F7664A1E8801491A32465D6CD8F7BAA8D12B55E136F9CF37419D864F36F50550B027CA1D6C70021
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d2aa7b682dc64f39ad36dad50073d819.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:914386eADxM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.440286843890882
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm40oPVHTRkAH4js2ALAQ:SbFuFyLVIg1BAf+M40oPtyAYjNALyAZD
MD5:	C982300BE70847EBC235264074324756
SHA1:	50E8B8A7C6BF946124B2AF8B2F4EB21EDFAB752E
SHA-256:	02C20DDC795873BA6E2874E1501B08FBBEA95AF7F2AAE3697710987E9E9CE9E5
SHA-512:	AF67B3B9D8B71B6102B0C44409753988424E7836828874220CCD9A9539B995B5D9C5B964404455E121888A9DDE3CD9809D44E0EE3B01A993657EC2482ECFAE0D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27b25442b21e47dcb6452e9de7739bbf.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91452GXoZZK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.412745096860097
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4PUDAhAjD3GNlsjsx:SbFuFyLVIg1BG+f+M4iA43DjNE
MD5:	786E7F7A060051941618A91A6699A313
SHA1:	AFA8BB805D40C95592EC47D53A49EA5E36CEDF9D
SHA-256:	58041BA643060AE2F8AE3D1E93B37C518F9CB602F79ADC277CA7B7E6EB79E80D
SHA-512:	DFDFCC5AD28A37C62414D567E998305CE0DDBCB69A0CAFF1798063C24DE177BFD6A5540E5DB38F13A79B4E22E893ADE77CE109A388A3D5E64DE92D9CD925DD1D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=22ff1f4debde448491d8848ef985ff5c.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:91453a8rlhM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.394714381894728
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsU7AqVRUGliYuxsj0:SbFuFyLVIg1BG+f+MsU7hVmGw5qjbVC
MD5:	0732B68B5010794A5323FEE7C7F9F2C2
SHA1:	8F8C624F342913DEB418F91E69E307662B83F711
SHA-256:	E25A2BAF53D669FCE4BB888B849F4A2008E2DFCEE5719755AF90165153FAD8C5
SHA-512:	EE0FE1BEC02FC15434BF929731B8F4CAF4D27A7AEA217875F99D12AB6E7564AB3FAC62CFA9BAE20E10346151EBF2D7E2F4339ACC1A594B65316E589B7ACFDF9E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f8e29b9ebf1b41af800ccc86866c4f4a.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:91455kczhjJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.393681842958032
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7ZQRBVdiWUE+ICnsA:SbFuFyLVIg1BG+f+MWYWUEvCnsZjLkGq
MD5:	CBA903D008D9C5429B06044830C673FE
SHA1:	522CDFD612464DB356EC64177370B9185494129E
SHA-256:	4BB67B71A4748C075FFEEF3C378DB556FAF5B220186B86F9C185DD2AA7C17506
SHA-512:	E3FCC87EEF38EEAE7F98497D1A309E9B5F6833D4538870505131BF79E1B9506A4BDF74E46C314D05F04E6FABEDB12096D48B1614B36488F45E1C8E50720AB42F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=160cb48f82874336a58fad03e82c4200.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:91456lDeD2I

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.469885147980705
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8LlWanHv8jNdQIeXD:qgFq6g1af+M8wIv+2D
MD5:	75BA96351C765ED76BF795295507A25F
SHA1:	BF70B773F50B1EB10137EB90DCE99D7925FE6788
SHA-256:	412EC063BD48B6AE119EF7552055C3439968D21A730F7B8D81B84FEF550FFCA5
SHA-512:	6C7084DCBEAFA64DAC3D80A073954C7C143FDF7AE32BE2AD9DBC4AE3658EBC27D801F048F8D0AFFE4D9B4D95D98A138127140D1779A434BBCFED6C46ACCA89E9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=67c47a5a72044e65af320fa9be931f92.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91499oInJWL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.371417189554802
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrZuYQ3BBQAHMDYZjx:SbFuFyLVIg1BG+f+MeNCgjoa
MD5:	F94947205D9370D305DBAE516190BF3D
SHA1:	3BEDA6F24C71D460A8CF0174EE2649CF2FE753B7
SHA-256:	93C83D809680380F84E5A01FC15257E14F182DF05FB137B91FCC258061C8AA6C
SHA-512:	D7422EB01652AE06CEED969DD0FC95B4A8ECA3647E417781A3199B0837BAAF42FCD073243BC16156BBFDAC31C83D729D7C980D65C966B5A8F395ACCC66465587
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa780fefc6544dd690246eb6eff75806.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:91550JZLP4J

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.347648905437239
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmszeEWVDAG2jshQJWQ:SbFuFyLVIg1BG+f+MsPWupjtWL0
MD5:	E977CA783A48227AB245DE519EEB9831
SHA1:	A97BC8CE6D20725445175D17250ECB871B12BF90
SHA-256:	6E380ACDD5168051A4E6D30996F4028185ED512A6B5D79BD20670804ACB62A72
SHA-512:	5BE5331CB1E1D6CCD414493DEE57B8BC6964B0A813289BACC64D4A4EBC08912997719A4AB3A45C9F6D2585D1B93A8093FD685C87D6A34486A7A67812F914AA68
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f0c94b88d8c64ae0a27bd07df210ff9e.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91627CpTSGM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.437685580369841
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoGNG+5MQeRCuqjs16:SbFuFyLVIg1BG+f+Mol+hRTjosQu
MD5:	534F73FC87AE306EEA216C3BF22816BA
SHA1:	FD071BE9409228A00683071D65928C74143E49C6
SHA-256:	F444562088ADDA53661465F3EDD76E8FF80DDAFEAB28984169A9E04C3F2C6749
SHA-512:	8FEC68096BD88A038033C7A99F456FFC99464B78F57A26A8DF345574438E34FE80DC0D6F01854C6C4E742FEA81302B4832F6034AFF290CE0B88625A230753432
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bc283d61fde2487e9a57e3bac17d4486.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91628MGinQJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.402783089951249
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoAx3PyYid0hTjsmNm:SbFuFyLVIg1BG+f+MoE/5O0jdCLKzK
MD5:	CDBC361C2A2C538B9A6F0C7D293A4474
SHA1:	9B4738A8F264B31EA81DDCF70E950B9EEF541557
SHA-256:	188A976B4454EF6AA7799CE7861982AC9E7BF7347678DA1F8E98E8DE131C1661
SHA-512:	DDD42A3BF5DE05C60F91E21A481839A4AC632E687954CA1D3E6151C7D6F37C1B796ACE290F4D376AC1EA7B57E14D7EF203A29AE21DF5792A1439D6D1903FD72A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=be747c5fc85d4895af3e278b124d8ca4.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93453xAZrGe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4726983339419935
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6XKAi8SmY+sjsicWg:SbFuFyLVIg1BG+f+M66N870jZcHcljX+
MD5:	AFE2837BE2E7522A5642ECACAA3127F9
SHA1:	46C4C4A0BB51BB125977864F9CD1A08D2A3FDD2B
SHA-256:	12CCBC0736C9AD8DDD5380B5F9023B88F39C11F2DE09D5327EAD5446673ACEC3
SHA-512:	F2EEED99A70EB5F329DB52F00184E969DED96A4889A4A8D32D35C5720A97BF0F8187496B0C7A0822CC17CB3E9C51AD877BD3BE21977652C50CC583892EC98967
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00d0b4ec97fc43d2969acac7510937f2.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:9345686MUkc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.402293205614845
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp8QcpAdBOGj2js1Ha:SbFuFyLVIg1BG+f+MLAU6josQu
MD5:	80493F436AE48437D21206D59707F625
SHA1:	45500B4000FABA374C9A3F8B22F735ED1F240960
SHA-256:	8BA07002A592BFA9E3272ECE84C75B7FF92B58AAD27EF0A2B7D61F1724803786
SHA-512:	DC89251E997296D12137E6F4470FFBCB583D264B414DB8C1CFB646FB7F68FDC28D49E7686D17B250010AC425AE8A61F5F0CE8F3CDFDD3D7FFD1236196D999B86
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cf0cd832aa9e45c29a2d1275a51df53d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93459AiGe3b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3251871047642405
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+uP/Eq2d4MwUw42Xm:SbFuFyLVIg1BG+f+M+u/Eq22Iw4FjtWQ
MD5:	F335B7F7FE2B3AB620226C0DA01801D9
SHA1:	1137200C250E87078F310C3B0C89E7BACFC3D344
SHA-256:	B90DEB04901F20FA249C8C5E100421565F232D786B294023B74A930618681256
SHA-512:	63EAB3A830AD2B7299688A19932A811495F2BE347926780E6D4E31406AC46145B911BDC0A9A84545CD1F7D679D339E08FA9D1AF62BCCFB4A49E478F598D2EE25
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=420503fd700546f7b38056f54317f071.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:93460lpEwMe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.358480170414035
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6LEABazAcNBXeYglV:SbFuFyLVIg1BG+f+M6wuW5TbjdCLKzK
MD5:	3A15570764F3EE50B753C45FED634C08
SHA1:	E67854916087E7A17E250B15FDCC703D8B05D7C0
SHA-256:	47FB4351A3D94FE65C7C7B5A74468E06DA5B76385D1A377B1BEC018808A3A471
SHA-512:	ED9EDEB743C9B8E719FD3A0550943E2379BE04168E6C37E07E1E2FBF076B6DA39ABDDE982C1BEB243ECEAD4766716F13AD1C8BEB28E577CDA6F5A601AD9BC490
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0f72caee6ed34861a8e995e1c3d2a950.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93461F4nSJf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.341616948456936
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MHAp7nH/BuFR0josQu:qgFq6g10+f+MgVnGiQu
MD5:	926089EC0D468BE7CB1F96B05BC387CE
SHA1:	4E2115C8749079DC61E028F44A3B1832C9BB6FFE
SHA-256:	1307064CDD69E80B2FCAF2AE790546A0E54EF71A281A78316A76A1C12AFCABA3
SHA-512:	B1F3E0C1E92E19347B65FF2A6A1753115D7F6F1C50292799BC1E8E4C32E7802CDB1E366872469D2DDD99896FEA72B314A35C6C29448C9E2452E39975F2FB9671
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=999c5e38e3fe484aab00dab5ae0a1ab4.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93474KhuX7b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.334948822655832
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6oVHXMEaOvXsjshQJ:SbFuFyLVIg1BG+f+M6oVH1aOv8jtWL0
MD5:	58C2170E2EE5B86725B4E117CDD4C947
SHA1:	619CD2299C4A03AE6EFE0F4D0EE6383432646E3F
SHA-256:	4D62639684476F1BE563FE3F9CE118966F0A3E7794A699A50DBDFA8023951B08
SHA-512:	2576AF19F3E915D0529FCC117A214E10C852DB719446DE129CC23C98B00D3AE34DE96BC75B7229892AE6ED6564E0A2993CA47411FC53780213624EF6A96A26BE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=063739e317c3422bb7b2fcba2f310bf2.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:934801QRSZd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.394252140380011
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoGTbWgVAprqjsmNzi:SbFuFyLVIg1BG+f+MoayEQrqjdCLKzK
MD5:	D2CEF77FFBA415CAA35F38F902B726AF
SHA1:	44BE38F3DC0914AE5D53AB21C3FD16DA19A158C3
SHA-256:	F85255D8D00AEFE9BFA34A53D142A13B2CD7AB841A88595474036272A37C30F8
SHA-512:	A8F200985508751EE2BC1EC9DF7496795A2D8A008A6E348012BE2A877C9402DFE94A9273F7CF61EF3750DEE27ED6DD8003437A56C64812B20A0F27336EF0DFE2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bcf7361001c14a93949b6c8b65497a47.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93486Z1MMoe

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.358167260567851
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpAEVVE62JEiZjs2ALAQ:SbFuFyLVIg1BAf+MCtA6jNALyAZD
MD5:	50162076354618B0E68BE6F140FF7D30
SHA1:	CCDCFE48AFC5AA4CEE5AE87B409C10314CB803C6
SHA-256:	7220246F841B5981C8678394D2C298D3D70514D691B01F289F521EC263F93BBD
SHA-512:	A93CB88EC056A212F9588FF6C950EAD6006B0585BFE17F859178AEA0EF16E33D083B6FF304122B67507AC4EC7DFC51D8909F2B9FA98B36C01DF74DAB3B1D04D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cdec3a00a61247d6a006fe15a39e0ac5.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:93497folAaf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.417002895649653
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+N3E6GEKJsZjsjOdy:SbFuFyLVIg1BG+f+M+W6Gx8jNE
MD5:	83CC02B627C632A0691E78B526A892B7
SHA1:	8B6F19837C2241108CDC57C37B6209F20054163B
SHA-256:	602576C998D8227778F44D5581CC5ED1177E04A1DCE14B09C44091901C864F38
SHA-512:	19EDB2009DC1B5DF440BBF087C8CFD63381CBFCF7A1A4F322EEE4F45FB2F88729E670C973385F16A19835813AAE6A2AE2F063D97B201FCF8FBB374D52422C443
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4051614ad5e542ca84c79ec8ca3815b4.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:93498MRllre

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.390340738225265
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsjdm00SRH2RuqjshP:SbFuFyLVIg1BG+f+MsE0pRW8qjbVC
MD5:	F53A2B0F8665F0DEEB25ED04856EA9BD
SHA1:	BDE60B248405B480545E5938B89B29963D5B7075
SHA-256:	E3B3216005E799D8508EA6B7AE849A69EF991F71AD38379FF22DC42438258606
SHA-512:	97127BBB31B07AF71AFB6B88C49B558FAA90F89764FFE75BB5C0DB115CE865FD253BA8CD3A176032CC9C6638C7D495E8CC2B1573AB75978740326426C822DAFF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f0cb18ef0afd4b15b47e30e8d6b242ee.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:93499roeR1e

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.346903720034031
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+iKghWSDGBnJxsjsV:SbFuFyLVIg1BG+f+M+ChVaBkjLkGq
MD5:	28AAD0D8412A17DA5ECF6BC2728F3C1F
SHA1:	B577766FD0F171B60D0FDA32ED05B20BB1B74DB2
SHA-256:	220CF455153D2EE63D2A0EC74623A6D5B668491A3D798DAB5CE4157ECD460D36
SHA-512:	4E8D4B76E1B40F8D4F3A38C34F06DE519CC9C97FC7569EB8CCD3AD022974803D7495F09D6FA9D2B0431C6325E2AA259EB83853B65427592487C107C4F3C2FB43
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4e02d000ed2c473d80411437fc24ef52.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:93500a0rcPb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.445136214750693
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MgzwVfGAlN2jNdQIeXD:qgFq6g1af+MgEV02D
MD5:	98C425608ACC3FC28F9198F02A39D1FB
SHA1:	8A11ED2A3C3550EBEE4258A5A06A942FA72307A4
SHA-256:	D1073DAD143E13FF2055CB5C801EB1EFCAE36B1325A0300447BCBC783A07E7A0
SHA-512:	0068B165BF6CC353BCE5D8F03F0DC843310CA04BB3BFB5BAE4A3BBC195B408C0418AEF558712A3F2846C210D74D5CA97BDE019EC05CD91AF5DC4DD354A9608C3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5b3a1e3b50594ceca03f432c408f1d48.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:93525LJmRhd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.380904987991203
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8RcRZ/ZfXZwhTjs16:SbFuFyLVIg1BG+f+M8QxfXyhTjoa
MD5:	8C6F98BC7EF20986F58000D28E9D9438
SHA1:	07D57134676263135B329D89502B7BB2DCFEEFD2
SHA-256:	F19EDF36D7D782151195C0780F9D4798F86FBC29A9252027DAB72CF8B871EDE5
SHA-512:	3A0AC170CADFBCA197BDDC5DD961284117EF3E21FB9ADE3B8FDA178B9D5DAE0CB73FBA4B0C8155B5CBD5AC6FADCDE4663A5DC3D6C28BC7C7CD3A139494D19B23
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6422910560cb4329bfe53fa02120717e.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:93577tnLLnc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4063353739472095
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpixad4jQrRRdjTjst:SbFuFyLVIg1BG+f+MIE3hjTjdCLKzK
MD5:	848E08D96CFEB106174C95E8E72C78BE
SHA1:	C2096C46C40DC62C083DCD734E479824E37A72F8
SHA-256:	940E935EF1E238319529E08E70C2D947D41E2D6771D0F9E03B0EF36ED88D45B7
SHA-512:	16D6A9F36DDF6E3C5893685F8163311935B316B080CE8FEB04CE1F8627CB0561241C20B5CF1DB1D6650F22CFE5EF5F91F62DD87CBF71952E02677CEC51A42126
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ceb425df891244348f0589bc80bd3387.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:949649Gc7Y5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422895439945717
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/Rdp4DVUEAmaZjs16:SbFuFyLVIg1BG+f+MuDqEAmaZjosQu
MD5:	D215CD1E683688B96317134121045CB6
SHA1:	D97790863C679FA5E83548EDE2D63DB498A6D0A6
SHA-256:	C75462D52577E068EEC2920CA0B6FB794E7EB346686558F230E269BF164082D5
SHA-512:	889CBB58E4FBDB7E3F73448650FEFC800D6A214B67774FB1C5B68B2790B8838ED812C39711CFC0A99B95DCE3110440B2D9ADA28202AF436C84D97C83C93C58D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5338aea1b8ed4f0290a14f9e2257cb59.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94966052tn3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.459604767936374
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrEKBjWTTwqjsicWmt:SbFuFyLVIg1BG+f+MpVWTUqjZcHcljX+
MD5:	1D340C8B90828CD2A6D5D0EC4A28A712
SHA1:	F29917129A2EAE6B2E04A587E22F0A0268EB9BBB
SHA-256:	308994509014EAEF2B2C8351E9CF81D6A730F5EA707AF89F19841CA341E85078
SHA-512:	0CB108F61E22D5955A0182A5D37EF01BE4A22E9C161504D50362B7E6938222302C93D7AB77737FCCA2DF1B1102B9154C9AEFCD0C2ED9AA711F3B4E963042CE64
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a50a7e176d0b4366aa926b6462fdc65d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:94967TPgSN2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.405264131031229
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8edDLKHHR6QNrxsje:SbFuFyLVIg1BG+f+M8edDLbQ0jdCLKzK
MD5:	E59B763ACA78C3896E9ED2CA37510DAE
SHA1:	7B09513AFA6F3F5947D06EBD1B847889D7D4CED6
SHA-256:	E9EE5D801E6BD64A4154AFCA8354F7C1ED993928A1BC9A33579E5A4343960313
SHA-512:	5AB95CBA1BD125A1061D85EC2E5E621AD32DBABF900E61306DF1EB26BA41F779ADBB0ED1A8C86C74FA3A42D282A334381BA4A47EF2924F83AC9F59D199EFB4BE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6278fd770c9042cbb5adf86b786e4e72.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:94972DXlZo5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.281757333294132
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmypAs/xECxsjshQJWQ:SbFuFyLVIg1BG+f+MypA+ECqjtWL0
MD5:	9E58A8E4C9B95C37CE96C34D0346D7A1
SHA1:	0DBF181EF0DA26AB34B0E28D81EFFB048985CEEB
SHA-256:	B5A13026E4568863CBDACA02B5704FEC1E398EA305ADBCA318B1C2018202BE27
SHA-512:	C76B682248BB6FBB8B8D3EC28F084271ECD44A2650F9CBA2CC224CAE5499DA6BD7B8B4B4181ADFF3B3BBC9EB51D3036A026223E4EE81332C62287810C7E5B797
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=81bdda2a74ee40eb9778347ba1884b7a.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:94973Mdwdf6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.445181324255317
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvQmU5PFDmz6Rqjs16:SbFuFyLVIg1BG+f+M4/asqjosQu
MD5:	E89E15C6C299B5DD5E722B719F88B40B
SHA1:	91B2CDA6557682AC43BC9B0E9F51928A5ACC8406
SHA-256:	7D225065B851D320B0CC166E485B17FFDA210A8504DDC8AE713E4132288919FE
SHA-512:	0AE6D4E7C1107D27EF6998FF75EAB881B8BD820B0653994874906AC31660E44969D54203837922BDC1373AA98C21A6292C205C38831580ED8FAE9FB3C733FE90
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e326b85714134cbc9f6e3215fd5cabb5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94980kPr6z4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.494882809038522
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+BBBwsLRqjZcHcljX+:qgFq6g10+f+MSHzqmAu
MD5:	CF469111F580A49EE7E14D16B0D6AA57
SHA1:	3C648881B20981CA52149250654B10F5CA28B768
SHA-256:	3FE138FC7D2EF2193ED3F9BAD12AA35F462BFA346F90BAD47A0A830ADC069FB7
SHA-512:	7B1D18D21478A893E4D9C3C67AFB4A43BC132D87A74747ECB78725C3F0D948732CFDD37F8721B9E0E9E8495BB9C14AA378D7B5CFFF43323E9FE47C320DD72E3D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=476add62686340769f8b072eb2767fb5.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:949817rCcN3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.401544689224375
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5EWGG3sW5xsjsmNzi:SbFuFyLVIg1BG+f+Mr8W5qjdCLKzK
MD5:	D24546C151222E78AD45F2A2F228CA7F
SHA1:	5F8602EE6DF857E531FB3E31B0F036B3B5BC0433
SHA-256:	AA0F2BFC693838140C2DEF60B8E8DD0CE9768DEEB7AD3DAB125C7FC8D027D910
SHA-512:	1BCF8594176C8BB5C40D9ECDE7DE65227180203005E085DC764B82266C47029BBCFE2BC69DEF4D1521C9C95B21F9E4B1E51E207EE0220567EA7943602A76622F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3b7225e641bc4ca6bc04bcf18aa73983.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:94982RN1ZF3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.350033910839935
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoE633d/qGHB95shTh:SbFuFyLVIg1BG+f+MoD3dFhchTjtWL0
MD5:	A97A9424B0DAE4A88C298C655927CE4E
SHA1:	4C1C494589A520511F920964423655DEDAE6BD61
SHA-256:	93365F48DFEB491CC19BFF03CAA8F30C5A4E61E353DA48468A28DD1BF104415B
SHA-512:	A5118C8D5BB266EB88F2352BCA7169390F7EF22C9D939794FC04913A72E9750DD5D817697B6129A57E48FCD7AC09FAF34E7B45C83105CC2A0D83D6A7FF6501B2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ba3be109d6e4483f8c8e2e1c44bda195.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:94990q79xa6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.437810370461449
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MxHm0HEc71DqjosQu:qgFq6g10+f+MB3x1cQu
MD5:	6EE61CAEC9B814AA775878E9AA1BB024
SHA1:	9AD41F919F745B6436469BB3E0FF1CAEF2C2018C
SHA-256:	6F89BBC08ED567BB721AE12C6E69F37775F4282F64CCA54C67AE8DB63CF89CA0
SHA-512:	98C23BCBE4A61F7D875E5CEB7E9BD5A692A4B9B7A37FBEF8F8B9F6B9752D19145EF36FB2519EAFF6993EBDB76BEEDEF416D93EB03F6E4A4647AFA26EDB4470DA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7f44bd688ac24c5a9d2dfc3582cb0fc3.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94996cyjj84

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.42518646971617
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6uD0FHWvVjNALyAZD:qgFq6g1af+M/Do2IZD
MD5:	F8668E46B6A747802A7BC3C423DE0C4A
SHA1:	A0D11AA57351B501A322494C66BDDBA28BD9B74C
SHA-256:	DA5E8C27FA62F241BCFBB3E81ABCF529A1D7C1022AEC0A45CBC002E66CC59410
SHA-512:	D387DD42F3F5397184D582320AF3AB52C4958B4A92B26139724607B514647441A453096FD678F10BE0F0D42CD793C928D4262E610799384303342754DA9E7815
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0fd8685f63ae414fa8bbc7ca84e79ebb.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:94997eusZE5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.428412124569607
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8bUdB5dByeavF2jsx:SbFuFyLVIg1BG+f+M8bWBrCN2jNE
MD5:	0C914EE7C608C1563F1517683FEA2406
SHA1:	0EEF0ABC03549C47764CBB07D6F6841E888CFB25
SHA-256:	51FCA34BDBE08C49457D822B84C12A14CD5875FA0F7B6E7C531A0C9F20C7EA04
SHA-512:	B9EF2EFE75EE45BE1AD2DF89FE49C9EB419DF216CAACFC62D9D7850AA73EA6372A80BD4C52E48AD765BC250166FFC39FFAAFF8D1AAE7D8591BD9483DDC026513
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=60b893611ad14a859f95d1b1cf058ff5.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:94998hMgwp6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.423778557602209
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsRd1x0i8DWE8UZjs1:SbFuFyLVIg1BG+f+MsL1Ze8EjbVC
MD5:	0C1EA3831BCC5870E816E295D59C61CE
SHA1:	AFF5AF106F55EE95A96B77B4BD7637628CF24714
SHA-256:	78DD9AAB57D4BCA0C0B28D2A8CD0E5C9D5E4EE74AC35B8638AE4769A9CF4F70B
SHA-512:	7C78B0B3B8B8D5E23FB721690A9774DFF07B9FADDA71697554F8D6E7326439BE58CF7A37459ED0129E2B8360E3F2AC1949C71DCEB155C818615BFED63B84C4CA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f5a50eb981224e4c8ecd03f3a1265d7f.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:94999HmRkV5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.380268963566149
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuI4R1dZRcms2lsjsV:SbFuFyLVIg1BG+f+MuI4RXLVsZjLkGq
MD5:	79007B6DB6E4EEEFA1F14C6EE8D4723D
SHA1:	EBA7AA1E5369A68FA6FE65A90EB9771D8C16688A
SHA-256:	4DCA91DC9047DF5FB2FF7AA01323D47B5CD91BA052A6FE69719B20B4D27434CB
SHA-512:	7A69A07328115D35964BF5C7C812257F2258CC4FC7458BD36E4E9FF26EA58DA3DD4D8FFB1FBCC2FD05CB19E26258C92D1D251803AD33D4BA70CF573A578F95E7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d6a693cc2a9a44689012045a939aad7b.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:95010NkiWM3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.452182126684449
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M0DPQITMXU22jNdQIeXD:qgFq6g1af+M6TiUn2D
MD5:	B71A3F67B0614AC59D479C82FBB39A7C
SHA1:	2C4ECDCB117100BA2DC34DB8F7E6CEFECAB9E0DA
SHA-256:	E4847DC61736D2411140F2089CE44AB6D6257EA7327CA07882808FFBBCB35B0D
SHA-512:	27384D28E02B3DD666CE320574BF9BA02BEE3BA7AE16C3B79BA6F128A215B8C3D8F268FF61FC083B2213189C453C55DACFB64CB0D80A107BB5A576C4694FEEA1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=30d7d0fedcf5400082e6d39b43b9d92b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:950768BchX3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.366107466921733
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+RzXSRHQASg2js1Ha:SbFuFyLVIg1BG+f+M+hNa2joa
MD5:	AEF4B5D885ECF03051A2825B4986E851
SHA1:	346229686DF2F94DD0ED2E692312924A19AB7C5A
SHA-256:	F07C5BB981CE0ADC3C40243EA2C5D3DF21B762A5EC392303FD22057756E4866B
SHA-512:	B6E36BABF8013E644A7C46C7EABA23C61332378C07B584D381B87AA9ADD9AC2CEE693DEFC85B7AE60222BEB336A41C149B6BFA2223CCAF6011B10CBE64E9DEF2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=42d74adcf41943a28c474b3c9489a50d.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:95099iACoh3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.35658289536261
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MwkE0RgjAuqjdCLKzK:qgFq6g10+f+MwmVCLAK
MD5:	852EA178559BE73880AC90FDE8665AD1
SHA1:	BE547B6FDF7D47A47F7F05CE18B59112B4FFB218
SHA-256:	E4FF27E92B8C0DFFB8F01F4B41830351082258FA7924B0A915CF14D2FC2BA915
SHA-512:	9957325D7109B83EF72E847B3953240BAE3A1D153F0D379AA1784E6FDD0F689A5D9225F9A7E9AB010411E0F7CF0338D910A2F525D3C899DA805EB80EB9EC7EDC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e85bc8f3e9af49ca8c84945c2f4cf333.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:95610cmK562

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.349465077726048
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoaEcTIKEXAaXsjshQ:SbFuFyLVIg1BG+f+MokTIPQFjtWL0
MD5:	34F31D57475787D5CF49E96F28970213
SHA1:	6B823892733EA6A73D2F3E1B0CA22234938F940C
SHA-256:	55D70B3E51B1BEB6E0F0805E0EF962AAC4B038DFFBFC2DF829E1BDB11B785914
SHA-512:	8E4102692AB7CCE1E130A8D66709D34D02A33FA7190297FC38B33CBA811187F9866C278CC1A27FD58DBC7081C98AE985021E9DB2E305D6A6A4734DF5E68D84AD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b5c3a96140074d71a23b76fff20104ab.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:95706oGLu43

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.385449305044687
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8m30zTDc622js1Ha7:SbFuFyLVIg1BG+f+M8muC2josQu
MD5:	2453B8243F52D95C86DAEA1D54823BD4
SHA1:	51C70881AA5B3827510D1D32B43F5C595D69E47B
SHA-256:	7CA76232AA8D7862F712434305F03D4E59F18C067AA813057E8E762BA82475B1
SHA-512:	6BFCF7A52F9F73D14CEB47CE6B0427B44849FBFA08FF180593429336D849234A298C4AFE1017C71A6E3CE5077A3FABAB6CB7D0016CFC68542A22FA24F9F2F58D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=692ddd9798954406b82aaea649e29d66.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:97326BHfh2q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.509442370123506
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4f0UjcJ8jZcHcljX+:qgFq6g10+f+M4fBjcJqmAu
MD5:	E84CE475BA34C1E168EA413EF4A6B55D
SHA1:	7242594EA0FD7391C09F0C87039E0514FD7461FB
SHA-256:	5411451DA513235C58FCD5299354AF5BA4BA1AE3058527B7E89A7FD21325B5A9
SHA-512:	77EDC0D3979E4B5B4B6FED658FB86B7DFD1DE53362ED61790991808DF62C30E1B011AC06BA8DE5496B8F71A8A394D44F13D34DCE9DC712DDDFECEBA9C6B17EDE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=254b5860043547628c535a32fee18b94.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:97327dWsnNu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.416632053995654
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo5fKbcNcTULRxsjst:SbFuFyLVIg1BG+f+Mo5nN3LRqjdCLKzK
MD5:	10A5208BAFC51BF249AF9A189061E5D9
SHA1:	11DB2EAEED59E8CA07A3559EBB6F9B1909F77B52
SHA-256:	36657AE4317BA52BACC9CB034EB881A4262A4D225E7F367A54324452DE1FC1F9
SHA-512:	34BE55EA90DED6EFEE0E6F528CD297CCF20DE160BAEC45BC23C9BDD72234CBC159BB7543339F4AD91039F29237498CEAB2D873DB14662DB6641DD650C504AE8F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b14a66bc6f624e8585fe7822961df6c3.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:97328aC5Zir

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.388893959741292
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsxVnPRBYav8josQu:qgFq6g10+f+MsXvBaQu
MD5:	7BD742853B81CC962BD5F48A9B0712AB
SHA1:	E47B076CA28A98680DE022764CF83D862DB9F627
SHA-256:	C6DE82077C72D591A8A00EFCF1AA14B5D22D24B865987495EF24465365E9CF96
SHA-512:	E269FEDA8A821A7AD9AFF12DFEBD91632A7CF85D6DDD6FC50BD673333108F57BA3D435A5E13B9DCF4662F3EC435380E4FD79588EB8B100032FB8ADFC86FB12C6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fa44e6cdb124483cb24dafd8e1a6c863.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:97329cYH3Au

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3493653096746545
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/rAkEWXYWXtrmzFlm:SbFuFyLVIg1BG+f+MzKWXYcCz8jtWL0
MD5:	EEF97FBDADFA77EAED885DDB6DB22ADE
SHA1:	2C089EA04B65F7F1E8A4686F026E1A1721B844C1
SHA-256:	60494482FCD957C96533A3FD8A2A0F4A578E98759A8405DA0352F371EC639E95
SHA-512:	03400DCB597DEB5ADFE09F05B65690D305AFB3C96E2EEF7D49CFD00771BB796942E9869D55B76EC278C80B1DC0BEE3DBFA6961FC320094D948FCDDDD74052E45
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5806c1fe65664a32a5c3800b8f8f9f53.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:97335u6ndKs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.306014908575492
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrPqqhCEAlVgGvsjst:SbFuFyLVIg1BG+f+MLyVN0jdCLKzK
MD5:	E232BDB403BE0AEB88A5F69F5957D91C
SHA1:	4162A4D0B9989608FFAF3617D96E6FAF85C12751
SHA-256:	AF7D64B41F107AF8690015B18B2323D3E614AD6DCBAE977EEBA3039DFED0499E
SHA-512:	3EF1A5E7FCE42F2281EA65231D12D035D21E6FE1BDC7F2F67B9D59BAEE48E3490E5B3D528369E120B5CFD9484C838D5013BAA7E96CBB6F7EC7BF7AB206C2DACE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a72a81e1aea44427aed6379499a428ea.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:97341lgPOst

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.465314372559854
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmplqEUjnRSSWanuxsd:SbFuFyLVIg1BG+f+MfSRhWanuqjosQu
MD5:	561752D818151A64797D1E5229B56BBC
SHA1:	80E6520D6B70938E2DA913A6AD97F2711ED38E62
SHA-256:	1F346EE3BC70E88FAD39B2A3F645F95E6DCEDB16958F19AA4A7CFF7BD9BAC294
SHA-512:	056F767F40905F9B33055FDBDB50EC7A804AB091E63FD2B04ED64FC4C2C8C11D9B0DB6F2F933E342E9893A8CCAC17686BF54EB165E00DA13E11FCE8F6FAEC376
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c2739697765f431f800cc47734385583.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:97342PC4WMt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.395720485733403
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo8Qczu5QURwsjsjOA:SbFuFyLVIg1BG+f+MoBci5BRZjNE
MD5:	4C68E94DFA5933731EA7A888B3C573DB
SHA1:	A15B8DC9079DFEE5D1B38F1C85C90403153C530D
SHA-256:	9E3CB29C3CE549F1A3F0FDD73C864BEB7990A4F0871F6987970FEFE8F4C4C604
SHA-512:	19B445B8680F05C38BEF13ADFF0BA6C350D8C477E2B31F359F00B4FAFA9550D0A780C60F8E8723174EDD492515BC60D1C4018DFC73770F2E9ADFB6ACED005FAC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b180510817b146b3a0805154ef35b40a.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:97350iqnrCt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.428264823643886
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr8SAGeTtcZ/RqjshP:SbFuFyLVIg1BG+f+MQSAcZ/8jbVC
MD5:	0DBAE1AAFC10E677C7FDA5DA43A5B763
SHA1:	715AD02AE6068C2DB304F7E6E0F297D7A45CC13A
SHA-256:	37B74C40DC25EE89AF36A3483A7A3137C385ECCF6AA60FC9C115B7A48B9F7B31
SHA-512:	07A52859825CA55D2EAB6715B7B6D0A9C82F42D08E3871C6E8F46D3A14F07AB3794EC34B80E62CBB6F27DD4B55F4B4905FF705C0652E84CF2392C54CE0098156
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ab971fbdc47246c5858cf9adacbc9b7d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:973588WowUr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.309865724753268
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+3xgh9BqNM+6A4jsO:SbFuFyLVIg1BG+f+M+3aFvHjtWL0
MD5:	7DBB758CEDC839F6F83302B5BA68E3E7
SHA1:	9DE48506FE85B2CF81C197E1231E1AA351FD0DC8
SHA-256:	7B5D8A002E8DB32F5A999DD1A4C2C57D9EB769A721AE757BBB579A90A82B75F5
SHA-512:	C9863CE0A516C4D7920750F0733FB8BE7A6FFFC5572530F34B8262530FB20911DB9142E99E8623C0811FDC4AD9C897F1489DA07A3D476FB00449A8A7424D4476
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48cd95d5de394eab8dd928101ee0550f.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:97359ZMSWTu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.3692296386983625
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsUBBaGAnDvRqjs1Ha:SbFuFyLVIg1BG+f+MsUBBaXDv8joa
MD5:	90E1A542A7AD05ACFD98B364F91D5D45
SHA1:	19A2EA4FF5AF156E9924A8EECE8E5ED3A0871580
SHA-256:	EB619ED3F1A9193C12B83BFA975B3749E7C479F2CEADF9DB3D053205A3CEA506
SHA-512:	6003C7C1EB62AC92C28B5FCB1B24196B0BCEB2ECFBD03A5E5598FACCF6789546BBDA93D87BD4C01C27280472CC49983DB2B83E87C5BF565295F5CA883622A5F6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f3b5d1b655824d9ebeeece9c7a4d6e9d.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:97360NU8kht

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.42618432713607
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+Hyo/SDQzW0wsjs2ALl:SbFuFyLVIg1BAf+M+SoSDQ60jNALyAZD
MD5:	3FA383902A7987E1287BD116C6594B85
SHA1:	9238D4E6DCB4BE9E2D720A0343EE8E745DD0AA94
SHA-256:	3711524EDB2A2EBD52A81EE149D2527CAC80DD507CE6B3938A32EE53BDBAB375
SHA-512:	F6082E8353388720309BBB80BC3BB6D5B1BE939863AB4CD9BFEFCC859B60F0977D80F19F18D9B1BEF432E136621D6529D56CBA84851C52C46D63A63238726023
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=47416f20127b41ada37f305a8775a223.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:97361IXQNYt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.487773477415858
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmy5Wc6XqOjs2BbQIeXGu:SbFuFyLVIg1BAf+Myh6tjNdQIeXD
MD5:	6369C513F5086B83E5E04CEA0DBD322F
SHA1:	2CCBD0FEAB7AB0301CF6EC35CD2226EED978C5DC
SHA-256:	6E9F070069F61BD7795379948F6962CF3DFC2D44FD3CDFB7EF923079C0F923B4
SHA-512:	BBDDC4CD73D653AB38B4982259D17EECAC80A656E410559F2EEDDEE9A3170E080BCDCF286DAA72BD4A0292157F8D0E697A35AC3820F19BC38CFA1B1A6A6CC667
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8bf4fc93954f44d0b1e7a2b0c6b5506d.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:97385UGoUku

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.382313919993608
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsgdRaRpte8jswkClK:SbFuFyLVIg1BG+f+Msg27bjLkGq
MD5:	0D964DC575ABCB2E1676C8EDCD03D4C7
SHA1:	AFE0AE53FA08701FF935C99018C161E862E522F8
SHA-256:	945A62FFBB57A4897CEE47F7E8695F6BC37AA1E90530DCBAA5696CBADADCC019
SHA-512:	3246690520B6144F8CF09336727808B0C97AFCAA695EFD0D75A506B35BE438C620173C049DC9709B5705953065B05FC952F3F5F089C9FBD7F9D59D1866D786A0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f4451d1bdc254b548f441944008081e9.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/seats/.#seat00O5Sou

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat037svRl

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Et5icF

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0GpZO9F

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0JYSbVP

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Ol97G8

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0SPdTea

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0cBU0qO

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0lG21qq

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0lzHh8p

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0nT1vEJ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0nsHjnJ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0rbqXYr

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0uY9LCP

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:uQjn:uQj
MD5:	73515C58531229676B3B18AE630C50E7
SHA1:	063D10ACF3196E31562B0048510640317BFD0423
SHA-256:	64C30B33879697E1F3801DA30F9509A659A27435AD87E0611FA04FC80781E5AA
SHA-512:	5B31C2918336F1ED2199F3CE903256F98557BD3B6ADA494656D436071679EA0EB608E9FD4AFB45B48E5FD235B81CED37866F47D8E34A665786B61D9C64CA0EE9
Malicious:	false
Preview:	7856.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:qGXlsXlXEWtl/5v:jXA+ylB
MD5:	4CE63542A6BFA2BF74EC3CF5EBEDC91B
SHA1:	EC3A6EE47B414B4CEC582E5115EEE37D774BB087
SHA-256:	195C2CFA15CC2E75C2A675AC3398ADDE6E3A688624B71C420CE31B417ED3D246
SHA-512:	63C5BB448559934D432EE3743EF4DC312CC6B98582EBF9E7B2D23273C0342B3ECE095368A014B73AFBABB911202FBEEFF1489A3BC2283907BA9A8C32278B2E5C
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................lSg........................................

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1718
Entropy (8bit):	4.861093696193879
Encrypted:	false
SSDEEP:	24:gRZea8RZ4B8vG8DMDU0rkAvEkA2+VmGZeaMZ4BeG2GfuAvlA2+Vm:4vQfVNvafVm
MD5:	D4D388CDC1F4ABCACDC7D68737978E04
SHA1:	CB2A10615006F86AEEDB61789EECD4162601CA0F
SHA-256:	3E1D0CF5F9802DCEA9356A51115861512C85D01E3B47EFC46B3B9C90B2074DF4
SHA-512:	96E286CF430A87407E44886C438561FCA517B9FFBB074437258C6B12EB06D00217D49EFC385172ACD23D8EFC50CD25E106F13EA694B7A4EA7E97ABA08E5B5A57
Malicious:	false
Preview:	Dec 6 15:29:00 galassia systemd-logind[7625]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 6 15:29:00 galassia systemd-logind[7625]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 6 15:29:00 galassia systemd-logind[7625]: User enumeration failed: Invalid argument.Dec 6 15:29:00 galassia systemd-logind[7625]: User of session 2 not known..Dec 6 15:29:00 galassia systemd-logind[7625]: User of session c1 not known..Dec 6 15:29:00 galassia systemd-logind[7625]: Session enumeration failed: No such file or directory.Dec 6 15:29:00 galassia systemd-logind[7625]: Watching system buttons on /dev/input/event0 (Power Button).Dec 6 15:29:00 galassia systemd-logind[7625]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 6 15:29:00 galassia systemd-logind[7625]: New seat seat0..Dec 6 15:29:00 galassia systemd-logind[7692]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 6 15:29:00 galassia syst

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4392978820660198
Encrypted:	false
SSDEEP:	3:F31HlPqVr//lFqVrP/l:F3/qVbqV
MD5:	AF2726D160D3046BF30B324F9FDDFBB5
SHA1:	13B3C1BC982231972A80402636A59B6CB331E684
SHA-256:	4652D9D80BAF14BD2290786F588511EAD5383ACAA6FDA7C2E2181AE066912E41
SHA-512:	2C65333D1FEB1E98ECFA9C151FFC6365BFAEE6ACA10E197641AE190386E7C1CBD04BC062BB79452B178252EF1B61674E67AEFFFE3E11786A52052D8FBA0C8491
Malicious:	false
Preview:	LPKSHHRH.................t.E..J;..H......................................t.E..J;..H.............................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4428593527838256
Encrypted:	false
SSDEEP:	3:F31HlYZqRhgZqRRX:F3Z1
MD5:	BBAB21AFFA45BD9C4DAFF46B01DB264F
SHA1:	90F079893EA75189F9983B3F9891740FDC5CB40A
SHA-256:	4BB97E8EFD8DB0A356829D6CA2EFE771F2999E75F8BB92FA9B378DC098BB6953
SHA-512:	6A00DC20BB17BA6D50DD5BDB47B148645B3DD53488E17A579AA5154A0F6FF38572A9E4843A03E6E4B34E7C308464D0DA0C6B9F72BDEDA53072D474EA209B00E0
Malicious:	false
Preview:	LPKSHHRH................;..>.OO..T.k..e3................................;..>.OO..T.k..e3........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	6996
Entropy (8bit):	4.7410953278934045
Encrypted:	false
SSDEEP:	96:/j5tcpSHzu52duvz747iF7rfqn3P7CjesIRTfNdhEdQgnM:7JJN
MD5:	9427304ED4603157C7F432A03332647A
SHA1:	C4D3CE11705C1B9D5AB4236D7937384B8F598DB7
SHA-256:	0F538BFB3669BA3762D448F93D1E601C037A6E8C2E962EC3AE31F011416B4CD4
SHA-512:	3CB74D2B4D4F2CE821AC84A2757241CEAEC7C2E68F24AB06E6DB6FAD02FC9202BDC759A0F2FCE72B7F83EA06C34FD185A1EB7BE4B8AFA55D86FDA6C2DB4BD9EA
Malicious:	false
Preview:	Dec 6 15:28:56 galassia kernel: [ 541.128974] New task spawned: old: (tgid 7749, tid 7749), new (tgid: 7762, tid: 7762).Dec 6 15:28:56 galassia kernel: [ 541.318023] New task spawned: old: (tgid 7763, tid 7763), new (tgid: 7764, tid: 7764).Dec 6 15:28:56 galassia kernel: [ 541.435307] blocking signal 9: 6241 -> 658.Dec 6 15:28:56 galassia kernel: [ 541.579302] blocking signal 9: 6241 -> 720.Dec 6 15:28:56 galassia kernel: [ 541.722888] blocking signal 9: 6241 -> 772.Dec 6 15:28:56 galassia kernel: [ 541.802496] New task spawned: old: (tgid 7761, tid 7761), new (tgid: 7761, tid: 7765).Dec 6 15:28:56 galassia kernel: [ 541.804185] New task spawned: old: (tgid 7761, tid 7761), new (tgid: 7761, tid: 7766).Dec 6 15:28:56 galassia kernel: [ 541.820032] New task spawned: old: (tgid 7761, tid 7766), new (tgid: 7761, tid: 7767).Dec 6 15:28:56 galassia kernel: [ 541.871326] blocking signal 9: 6241 -> 936.Dec 6 15:28:57 galassia kernel: [ 541.885896] New task spawned: old: (tg

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	18550
Entropy (8bit):	5.05536702633984
Encrypted:	false
SSDEEP:	384:2iufDpVfDpFQHSYCQKvwULjMcr/mIELhpVBrw:2pfDpVfDpFYFCQKvwULjM6/pqhpVBrw
MD5:	8F91DD5383732AD31F7BEAB1AAA659D0
SHA1:	E617700FCD0BE12D9DF6431BC9D5C3241E62F4C0
SHA-256:	D1F7B73F293F4BCD13330DA9DCE0724B0D3F71D595D2827FAA8423644A47289E
SHA-512:	24239565B736CED3254DED3BBD396F6493A81A7D493082EE3D2BB782732CE54ECECCC2C8FDD0005FF5946E9615C9D56B898EDE808F02B3EA1BE37515C11EB2A6
Malicious:	false
Preview:	Dec 6 15:28:56 galassia kernel: [ 540.870867] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 6 15:28:56 galassia kernel: [ 540.871076] systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 6 15:28:56 galassia kernel: [ 541.011952] systemd[1]: dbus.service: Main process exited, code=killed, status=9/KILL.Dec 6 15:28:56 galassia kernel: [ 541.012081] systemd[1]: dbus.service: Failed with result 'signal'..Dec 6 15:28:56 galassia kernel: [ 541.013548] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 33..Dec 6 15:28:56 galassia kernel: [ 541.014694] systemd[1]: Started D-Bus System Message Bus..Dec 6 15:28:56 galassia kernel: [ 541.016850] systemd[1]: Stopped System Logging Service..Dec 6 15:28:56 galassia kernel: [ 541.017692] systemd[1]: Starting System Logging Service....Dec 6 15:28:56 galassia kernel: [ 541.128974] New task spawned: old: (tgid 7749, tid 7749), new (tgid: 7762, tid: 7762).Dec 6 15:28:56

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351416
Encrypted:	false
SSDEEP:	3:qGXlsXlXEWtl/5v:jXA+ylB
MD5:	4CE63542A6BFA2BF74EC3CF5EBEDC91B
SHA1:	EC3A6EE47B414B4CEC582E5115EEE37D774BB087
SHA-256:	195C2CFA15CC2E75C2A675AC3398ADDE6E3A688624B71C420CE31B417ED3D246
SHA-512:	63C5BB448559934D432EE3743EF4DC312CC6B98582EBF9E7B2D23273C0342B3ECE095368A014B73AFBABB911202FBEEFF1489A3BC2283907BA9A8C32278B2E5C
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................lSg........................................

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.456950000758676
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.x86_64.elf
File size:	174'536 bytes
MD5:	cd6bbd73b40235580ac39ee7187b7330
SHA1:	c1cbe4c2076e915a7582e0669d7904f8a53060e9
SHA256:	45d6cbe1c9259d86d563c5e76d70383747ee8c613ef15af8d7ab27cc1ee28c3c
SHA512:	c6348da638bc2ec66cbfe5ec5b43f5a60a582e0fb12f63201c36477ad0b3b36dfe4e0a2712972945fcc08f87bc46e634462cad92f46c84e1a397bcc850981f87
SSDEEP:	3072:N8cx757Y4zFY9Drz7xegG1k3QvjCwjgIAKQSDn7I0iMIUcBvKrli2p6dBk0qyl:N8cxd7Y4zFY9Pz7xlG1fFcMIli16dBkS
TLSH:	C7044A07B4C184FDC49AC0784BAEF53AD931F1AD1238B25B67D4AF262E4DE205F2D991
File Content Preview:	.ELF..............>.......@.....@.......H...........@.8...@.......................@.......@...............................................R.......R..... .......................Q.td....................................................H...._........H........

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	173896
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0x1d7b6	0x0	0x6	AX	16
.fini	PROGBITS	0x41d8b6	0x1d8b6	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x41d8e0	0x1d8e0	0x4000	0x0	0x2	A	32
.ctors	PROGBITS	0x5218e8	0x218e8	0x18	0x0	0x3	WA	8
.dtors	PROGBITS	0x521900	0x21900	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x521920	0x21920	0x8de8	0x0	0x3	WA	32
.bss	NOBITS	0x52a720	0x2a708	0x7280	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x2a708	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x218e0	0x218e0	6.3706	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x218e8	0x5218e8	0x5218e8	0x8e20	0x100b8	0.2380	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 6, 2024 22:26:57.330847025 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Dec 6, 2024 22:28:17.355195999 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 6, 2024 22:26:47.597470045 CET	8.8.8.8	192.168.2.23	0x68ec	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:26:47.847332001 CET	8.8.8.8	192.168.2.23	0x68ec	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:26:47.991842985 CET	8.8.8.8	192.168.2.23	0x68ec	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:26:48.156326056 CET	8.8.8.8	192.168.2.23	0x68ec	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:26:48.532902002 CET	8.8.8.8	192.168.2.23	0x68ec	Name error (3)	server.eye-network.ru	none	none	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:26:51.316528082 CET	1.1.1.1	192.168.2.23	0x2eaf	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:26:51.316528082 CET	1.1.1.1	192.168.2.23	0x2eaf	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:27:53.336199045 CET	1.1.1.1	192.168.2.23	0xa8e9	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:27:53.336199045 CET	1.1.1.1	192.168.2.23	0xa8e9	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:28:59.427603006 CET	1.1.1.1	192.168.2.23	0x625d	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 6, 2024 22:28:59.427603006 CET	1.1.1.1	192.168.2.23	0x625d	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-12-06 21:26:56 UTC	307	OUT	POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1 Host: daisy.ubuntu.com Accept: / Content-Type: application/octet-stream X-Whoopsie-Version: 0.2.69ubuntu0.3 Content-Length: 164887 Expect: 100-continue
2024-12-06 21:26:57 UTC	25	IN	HTTP/1.1 100 Continue
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61 Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20 Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67 Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37 Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73 Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
2024-12-06 21:26:57 UTC	16384	OUT	Data Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "_source" "server/udev"Aug 17 20:25
2024-12-06 21:26:58 UTC	279	IN	HTTP/1.1 400 Bad Request Date: Fri, 06 Dec 2024 21:26:58 GMT Server: gunicorn/19.7.1 X-Daisy-Revision-Number: 979 X-Oops-Repository-Version: 0.0.0 Strict-Transport-Security: max-age=2592000 Connection: close Transfer-Encoding: chunked 17 Crash already reported. 0

Start time (UTC):	21:26:46
Start date (UTC):	06/12/2024
Path:	/tmp/Aqua.x86_64.elf
Arguments:	/tmp/Aqua.x86_64.elf
File size:	174536 bytes
MD5 hash:	cd6bbd73b40235580ac39ee7187b7330

Start time (UTC):	21:26:47
Start date (UTC):	06/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	21:26:48
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:26:49
Start date (UTC):	06/12/2024
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Start time (UTC):	21:26:50
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:26:51
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	21:26:52
Start date (UTC):	06/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	21:26:56
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:26:53
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:26:55
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:27:01
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:27:02
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:27:04
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.x86_64.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/journal/streams/.#9:78345sNwXt7

/run/systemd/journal/streams/.#9:78347p8ZHV7

/run/systemd/journal/streams/.#9:78349avkyG5

/run/systemd/journal/streams/.#9:78426SGzkF4

/run/systemd/journal/streams/.#9:78427VrJhf8

/run/systemd/journal/streams/.#9:796178y0sNg

/run/systemd/journal/streams/.#9:79625TF5lJe

/run/systemd/journal/streams/.#9:79740I7lCBe

/run/systemd/journal/streams/.#9:79753GTRdsd

/run/systemd/journal/streams/.#9:79920jSVRzg

/run/systemd/journal/streams/.#9:79923Ok9RPe

/run/systemd/journal/streams/.#9:799243vHaYd

/run/systemd/journal/streams/.#9:79925tfbBOd

/run/systemd/journal/streams/.#9:79941RqbAXd

/run/systemd/journal/streams/.#9:79942x1iWKg

/run/systemd/journal/streams/.#9:799528ySmIf

/run/systemd/journal/streams/.#9:79983i4hWWe

/run/systemd/journal/streams/.#9:81343jDyoau

/run/systemd/journal/streams/.#9:81344Oa7kxt

/run/systemd/journal/streams/.#9:81350oPlU4p

/run/systemd/journal/streams/.#9:81351AKLFHt

/run/systemd/journal/streams/.#9:81358RxECjq

/run/systemd/journal/streams/.#9:81371Bk6vCq

/run/systemd/journal/streams/.#9:81372RDZecr

/run/systemd/journal/streams/.#9:81373mEQlEt

/run/systemd/journal/streams/.#9:82148uo3ens

Linux Analysis Report
Aqua.x86_64.elf

Start time (UTC):	21:27:09
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:27:05
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:27:06
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	21:27:07
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	21:27:08
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	21:27:10
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:27:11
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	21:27:12
Start date (UTC):	06/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	21:27:13
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	21:27:14
Start date (UTC):	06/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75