Edit tour

Linux Analysis Report
Aqua.i686.elf

Overview

General Information

Sample name:	Aqua.i686.elf
Analysis ID:	1580696
MD5:	d255631d3c4baf58c938eded123dc951
SHA1:	a6db6a717726302e7b6f5f0ae1d9dbb2938e6d76
SHA256:	48b78ddbd3b8c071ec91c97dd91958dcc008cbc132b61ab2e04e719772cd5d24
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Reads system files that contain records of logged in users

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Sample tries to set the executable flag

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580696
Start date and time:	2024-12-25 17:35:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.i686.elf
Detection:	MAL
Classification:	mal76.spre.troj.evad.linELF@0/240@140/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 45.148.10.84

Runtime Messages

Command:	/tmp/Aqua.i686.elf
PID:	6219
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.i686.elf (PID: 6219, Parent: 6138, MD5: d255631d3c4baf58c938eded123dc951) Arguments: /tmp/Aqua.i686.elf

Aqua.i686.elf New Fork (PID: 6220, Parent: 6219)

Aqua.i686.elf New Fork (PID: 6221, Parent: 6220)

gnome-session-binary New Fork (PID: 6222, Parent: 1477)

sh (PID: 6222, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6222, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 6229, Parent: 1)

systemd-hostnamed (PID: 6229, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 6355, Parent: 1320)

Default (PID: 6355, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6366, Parent: 1320)

Default (PID: 6366, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6391, Parent: 1320)

Default (PID: 6391, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6394, Parent: 1860)

pulseaudio (PID: 6394, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6396, Parent: 1)

dbus-daemon (PID: 6396, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6397, Parent: 1)

rsyslogd (PID: 6397, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 6398, Parent: 2038)

fusermount (PID: 6398, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6412, Parent: 1)

systemd-logind (PID: 6412, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6463, Parent: 1)

rtkit-daemon (PID: 6463, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6473, Parent: 1)

dbus-daemon (PID: 6473, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6474, Parent: 1)

rsyslogd (PID: 6474, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6475, Parent: 1)

gpu-manager (PID: 6475, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6477, Parent: 6475)

sh (PID: 6477, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6481, Parent: 6477)

grep (PID: 6481, Parent: 6477, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6482, Parent: 6475)

sh (PID: 6482, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6483, Parent: 6482)

grep (PID: 6483, Parent: 6482, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6486, Parent: 6475)

sh (PID: 6486, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6487, Parent: 6486)

grep (PID: 6487, Parent: 6486, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6488, Parent: 6475)

sh (PID: 6488, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6489, Parent: 6488)

grep (PID: 6489, Parent: 6488, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6492, Parent: 6475)

sh (PID: 6492, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6493, Parent: 6492)

grep (PID: 6493, Parent: 6492, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6495, Parent: 6475)

sh (PID: 6495, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6496, Parent: 6495)

grep (PID: 6496, Parent: 6495, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6498, Parent: 6475)

sh (PID: 6498, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6500, Parent: 6498)

grep (PID: 6500, Parent: 6498, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6501, Parent: 6475)

sh (PID: 6501, Parent: 6475, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6502, Parent: 6501)

grep (PID: 6502, Parent: 6501, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6490, Parent: 1)

agetty (PID: 6490, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6503, Parent: 1)

generate-config (PID: 6503, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6504, Parent: 6503)

pkill (PID: 6504, Parent: 6503, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6507, Parent: 1)

gdm-wait-for-drm (PID: 6507, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6512, Parent: 1)

dbus-daemon (PID: 6512, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6513, Parent: 1)

rsyslogd (PID: 6513, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6522, Parent: 1)

systemd-logind (PID: 6522, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6580, Parent: 1)

journalctl (PID: 6580, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6581, Parent: 1)

systemd-journald (PID: 6581, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6585, Parent: 1)

dbus-daemon (PID: 6585, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6586, Parent: 1)

rsyslogd (PID: 6586, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6587, Parent: 1)

agetty (PID: 6587, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6590, Parent: 1)

systemd-logind (PID: 6590, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6647, Parent: 1)

systemd-journald (PID: 6647, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6648, Parent: 1)

gpu-manager (PID: 6648, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6650, Parent: 6648)

sh (PID: 6650, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6654, Parent: 6650)

grep (PID: 6654, Parent: 6650, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6655, Parent: 6648)

sh (PID: 6655, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6656, Parent: 6655)

grep (PID: 6656, Parent: 6655, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6657, Parent: 6648)

sh (PID: 6657, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6658, Parent: 6657)

grep (PID: 6658, Parent: 6657, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6659, Parent: 6648)

sh (PID: 6659, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6661, Parent: 6659)

grep (PID: 6661, Parent: 6659, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6662, Parent: 6648)

sh (PID: 6662, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6663, Parent: 6662)

grep (PID: 6663, Parent: 6662, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6665, Parent: 6648)

sh (PID: 6665, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6666, Parent: 6665)

grep (PID: 6666, Parent: 6665, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6669, Parent: 6648)

sh (PID: 6669, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6670, Parent: 6669)

grep (PID: 6670, Parent: 6669, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6671, Parent: 6648)

sh (PID: 6671, Parent: 6648, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6672, Parent: 6671)

grep (PID: 6672, Parent: 6671, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6674, Parent: 1)

dbus-daemon (PID: 6674, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6675, Parent: 1)

agetty (PID: 6675, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6676, Parent: 1)

rsyslogd (PID: 6676, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6677, Parent: 1)

generate-config (PID: 6677, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6678, Parent: 6677)

pkill (PID: 6678, Parent: 6677, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6679, Parent: 1)

dbus-daemon (PID: 6679, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6683, Parent: 1)

rsyslogd (PID: 6683, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6691, Parent: 1)

systemd-logind (PID: 6691, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6752, Parent: 1)

gdm-wait-for-drm (PID: 6752, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6757, Parent: 1)

rsyslogd (PID: 6757, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6762, Parent: 1)

systemd-journald (PID: 6762, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6765, Parent: 1)

systemd-logind (PID: 6765, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6822, Parent: 1)

agetty (PID: 6822, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6825, Parent: 1)

dbus-daemon (PID: 6825, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6826, Parent: 1)

rsyslogd (PID: 6826, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6831, Parent: 1)

gpu-manager (PID: 6831, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6832, Parent: 6831)

sh (PID: 6832, Parent: 6831, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6834, Parent: 6832)

grep (PID: 6834, Parent: 6832, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6833, Parent: 1)

dbus-daemon (PID: 6833, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6836, Parent: 1)

rsyslogd (PID: 6836, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6838, Parent: 1)

generate-config (PID: 6838, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6839, Parent: 6838)

pkill (PID: 6839, Parent: 6838, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6840, Parent: 1)

dbus-daemon (PID: 6840, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6841, Parent: 1)

rsyslogd (PID: 6841, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6850, Parent: 1)

gdm-wait-for-drm (PID: 6850, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6855, Parent: 1)

dbus-daemon (PID: 6855, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6856, Parent: 1)

rsyslogd (PID: 6856, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6862, Parent: 1)

systemd-journald (PID: 6862, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6865, Parent: 1)

systemd-logind (PID: 6865, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6923, Parent: 1)

dbus-daemon (PID: 6923, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6924, Parent: 1)

rsyslogd (PID: 6924, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6925, Parent: 1)

agetty (PID: 6925, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6926, Parent: 1)

systemd-journald (PID: 6926, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6929, Parent: 1)

systemd-logind (PID: 6929, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6988, Parent: 1)

gpu-manager (PID: 6988, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6992, Parent: 6988)

sh (PID: 6992, Parent: 6988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6993, Parent: 6992)

grep (PID: 6993, Parent: 6992, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6994, Parent: 6988)

sh (PID: 6994, Parent: 6988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6995, Parent: 6994)

grep (PID: 6995, Parent: 6994, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6990, Parent: 1)

dbus-daemon (PID: 6990, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6997, Parent: 1)

rsyslogd (PID: 6997, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6998, Parent: 1)

generate-config (PID: 6998, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7001, Parent: 6998)

pkill (PID: 7001, Parent: 6998, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7002, Parent: 1)

dbus-daemon (PID: 7002, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7004, Parent: 1)

rsyslogd (PID: 7004, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7005, Parent: 1)

dbus-daemon (PID: 7005, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7010, Parent: 1)

gpu-manager (PID: 7010, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7011, Parent: 7010)

sh (PID: 7011, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7012, Parent: 7011)

grep (PID: 7012, Parent: 7011, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7013, Parent: 7010)

sh (PID: 7013, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7014, Parent: 7013)

grep (PID: 7014, Parent: 7013, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7015, Parent: 7010)

sh (PID: 7015, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7016, Parent: 7015)

grep (PID: 7016, Parent: 7015, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7018, Parent: 7010)

sh (PID: 7018, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7020, Parent: 7018)

grep (PID: 7020, Parent: 7018, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7021, Parent: 7010)

sh (PID: 7021, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7023, Parent: 7021)

grep (PID: 7023, Parent: 7021, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7024, Parent: 7010)

sh (PID: 7024, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7025, Parent: 7024)

grep (PID: 7025, Parent: 7024, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7026, Parent: 7010)

sh (PID: 7026, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7027, Parent: 7026)

grep (PID: 7027, Parent: 7026, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7028, Parent: 7010)

sh (PID: 7028, Parent: 7010, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7029, Parent: 7028)

grep (PID: 7029, Parent: 7028, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7030, Parent: 1)

generate-config (PID: 7030, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7031, Parent: 7030)

pkill (PID: 7031, Parent: 7030, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7034, Parent: 1)

gdm-wait-for-drm (PID: 7034, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7037, Parent: 1)

rsyslogd (PID: 7037, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7038, Parent: 1)

dbus-daemon (PID: 7038, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7042, Parent: 1)

systemd-journald (PID: 7042, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7045, Parent: 1)

systemd-logind (PID: 7045, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7104, Parent: 1)

rsyslogd (PID: 7104, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7105, Parent: 1)

dbus-daemon (PID: 7105, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7106, Parent: 1)

systemd-journald (PID: 7106, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7109, Parent: 1)

systemd-logind (PID: 7109, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7166, Parent: 1)

agetty (PID: 7166, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7167, Parent: 1)

gpu-manager (PID: 7167, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7172, Parent: 7167)

sh (PID: 7172, Parent: 7167, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7173, Parent: 7172)

grep (PID: 7173, Parent: 7172, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7174, Parent: 7167)

sh (PID: 7174, Parent: 7167, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7175, Parent: 7174)

grep (PID: 7175, Parent: 7174, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7178, Parent: 7167)

sh (PID: 7178, Parent: 7167, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7176, Parent: 1)

dbus-daemon (PID: 7176, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7177, Parent: 1)

rsyslogd (PID: 7177, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7180, Parent: 1)

generate-config (PID: 7180, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7181, Parent: 7180)

pkill (PID: 7181, Parent: 7180, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7182, Parent: 1)

dbus-daemon (PID: 7182, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7184, Parent: 1)

rsyslogd (PID: 7184, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7191, Parent: 1)

gpu-manager (PID: 7191, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7192, Parent: 7191)

sh (PID: 7192, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7194, Parent: 7192)

grep (PID: 7194, Parent: 7192, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7196, Parent: 7191)

sh (PID: 7196, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7197, Parent: 7196)

grep (PID: 7197, Parent: 7196, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7198, Parent: 7191)

sh (PID: 7198, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7199, Parent: 7198)

grep (PID: 7199, Parent: 7198, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7200, Parent: 7191)

sh (PID: 7200, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7201, Parent: 7200)

grep (PID: 7201, Parent: 7200, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7202, Parent: 7191)

sh (PID: 7202, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7203, Parent: 7202)

grep (PID: 7203, Parent: 7202, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7204, Parent: 7191)

sh (PID: 7204, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7205, Parent: 7204)

grep (PID: 7205, Parent: 7204, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7206, Parent: 7191)

sh (PID: 7206, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7207, Parent: 7206)

grep (PID: 7207, Parent: 7206, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7208, Parent: 7191)

sh (PID: 7208, Parent: 7191, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7209, Parent: 7208)

grep (PID: 7209, Parent: 7208, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7210, Parent: 1)

generate-config (PID: 7210, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7211, Parent: 7210)

pkill (PID: 7211, Parent: 7210, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7214, Parent: 1)

gdm-wait-for-drm (PID: 7214, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7218, Parent: 1)

dbus-daemon (PID: 7218, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7219, Parent: 1)

rsyslogd (PID: 7219, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7220, Parent: 1)

systemd-journald (PID: 7220, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7223, Parent: 1)

systemd-logind (PID: 7223, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7281, Parent: 1)

dbus-daemon (PID: 7281, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7285, Parent: 1)

rsyslogd (PID: 7285, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7286, Parent: 1)

systemd-journald (PID: 7286, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7289, Parent: 1)

systemd-logind (PID: 7289, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7346, Parent: 1)

agetty (PID: 7346, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7347, Parent: 1)

gpu-manager (PID: 7347, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7348, Parent: 7347)

sh (PID: 7348, Parent: 7347, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7353, Parent: 7348)

grep (PID: 7353, Parent: 7348, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7354, Parent: 7347)

sh (PID: 7354, Parent: 7347, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7355, Parent: 7354)

grep (PID: 7355, Parent: 7354, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7357, Parent: 7347)

sh (PID: 7357, Parent: 7347, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7358, Parent: 7357)

grep (PID: 7358, Parent: 7357, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7356, Parent: 1)

dbus-daemon (PID: 7356, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7360, Parent: 1)

rsyslogd (PID: 7360, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7361, Parent: 1)

generate-config (PID: 7361, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7362, Parent: 7361)

pkill (PID: 7362, Parent: 7361, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7363, Parent: 1)

dbus-daemon (PID: 7363, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7374, Parent: 1)

gdm-wait-for-drm (PID: 7374, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7378, Parent: 1)

rsyslogd (PID: 7378, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7379, Parent: 1)

dbus-daemon (PID: 7379, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7385, Parent: 1)

systemd-journald (PID: 7385, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7388, Parent: 1)

systemd-logind (PID: 7388, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7446, Parent: 1860)

dbus-daemon (PID: 7446, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7447, Parent: 1)

rsyslogd (PID: 7447, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7448, Parent: 1)

dbus-daemon (PID: 7448, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7449, Parent: 1860)

pulseaudio (PID: 7449, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7451, Parent: 1)

systemd-journald (PID: 7451, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7458, Parent: 1)

systemd-logind (PID: 7458, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7515, Parent: 1)

gpu-manager (PID: 7515, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7518, Parent: 7515)

sh (PID: 7518, Parent: 7515, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7520, Parent: 7518)

grep (PID: 7520, Parent: 7518, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7522, Parent: 7515)

sh (PID: 7522, Parent: 7515, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7525, Parent: 7522)

grep (PID: 7525, Parent: 7522, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7527, Parent: 7515)

sh (PID: 7527, Parent: 7515, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7528, Parent: 7527)

grep (PID: 7528, Parent: 7527, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7529, Parent: 7515)

sh (PID: 7529, Parent: 7515, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7530, Parent: 7529)

grep (PID: 7530, Parent: 7529, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7516, Parent: 1)

rsyslogd (PID: 7516, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7517, Parent: 1)

dbus-daemon (PID: 7517, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7519, Parent: 1)

agetty (PID: 7519, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7534, Parent: 1)

generate-config (PID: 7534, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7535, Parent: 7534)

pkill (PID: 7535, Parent: 7534, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7536, Parent: 1)

dbus-daemon (PID: 7536, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7537, Parent: 1)

rsyslogd (PID: 7537, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7545, Parent: 1)

gdm-wait-for-drm (PID: 7545, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7550, Parent: 1)

dbus-daemon (PID: 7550, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7551, Parent: 1)

rsyslogd (PID: 7551, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7555, Parent: 1)

systemd-journald (PID: 7555, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7558, Parent: 1)

systemd-logind (PID: 7558, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7615, Parent: 1)

agetty (PID: 7615, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7617, Parent: 1)

dbus-daemon (PID: 7617, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7618, Parent: 1)

rsyslogd (PID: 7618, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7620, Parent: 1)

gpu-manager (PID: 7620, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7624, Parent: 7620)

sh (PID: 7624, Parent: 7620, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7625, Parent: 7624)

grep (PID: 7625, Parent: 7624, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7626, Parent: 7620)

sh (PID: 7626, Parent: 7620, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7627, Parent: 7626)

grep (PID: 7627, Parent: 7626, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7630, Parent: 7620)

sh (PID: 7630, Parent: 7620, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7631, Parent: 7630)

grep (PID: 7631, Parent: 7630, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7628, Parent: 1)

dbus-daemon (PID: 7628, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7632, Parent: 1)

rsyslogd (PID: 7632, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7633, Parent: 1)

generate-config (PID: 7633, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7634, Parent: 7633)

pkill (PID: 7634, Parent: 7633, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7643, Parent: 1)

gdm-wait-for-drm (PID: 7643, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7649, Parent: 1)

dbus-daemon (PID: 7649, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7650, Parent: 1)

rsyslogd (PID: 7650, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7651, Parent: 1)

systemd-journald (PID: 7651, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7654, Parent: 1)

systemd-logind (PID: 7654, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7711, Parent: 1)

agetty (PID: 7711, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7712, Parent: 1)

dbus-daemon (PID: 7712, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7714, Parent: 1)

rsyslogd (PID: 7714, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7715, Parent: 1)

gpu-manager (PID: 7715, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7719, Parent: 7715)

sh (PID: 7719, Parent: 7715, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7721, Parent: 7719)

grep (PID: 7721, Parent: 7719, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7723, Parent: 7715)

sh (PID: 7723, Parent: 7715, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7726, Parent: 7723)

grep (PID: 7726, Parent: 7723, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7728, Parent: 7715)

sh (PID: 7728, Parent: 7715, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7722, Parent: 1)

dbus-daemon (PID: 7722, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7729, Parent: 1)

rsyslogd (PID: 7729, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7730, Parent: 1)

generate-config (PID: 7730, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7731, Parent: 7730)

pkill (PID: 7731, Parent: 7730, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7739, Parent: 1)

gdm-wait-for-drm (PID: 7739, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7744, Parent: 1)

agetty (PID: 7744, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7747, Parent: 1)

dbus-daemon (PID: 7747, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7751, Parent: 1)

systemd-logind (PID: 7751, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7809, Parent: 1)

rsyslogd (PID: 7809, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7813, Parent: 1)

gdm3 (PID: 7813, Parent: 1, MD5: 2492e2d8d34f9377e3e530a61a15674f) Arguments: /usr/sbin/gdm3

gdm3 New Fork (PID: 7816, Parent: 7813)

plymouth (PID: 7816, Parent: 7813, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: plymouth --ping

systemd New Fork (PID: 7817, Parent: 1)

accounts-daemon (PID: 7817, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

systemd New Fork (PID: 7820, Parent: 1)

systemd-journald (PID: 7820, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7823, Parent: 1)

dbus-daemon (PID: 7823, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7827, Parent: 1)

systemd-logind (PID: 7827, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7886, Parent: 1)

gpu-manager (PID: 7886, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7887, Parent: 7886)

sh (PID: 7887, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7888, Parent: 7887)

grep (PID: 7888, Parent: 7887, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7889, Parent: 7886)

sh (PID: 7889, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7890, Parent: 7889)

grep (PID: 7890, Parent: 7889, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7891, Parent: 7886)

sh (PID: 7891, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7892, Parent: 7891)

grep (PID: 7892, Parent: 7891, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7893, Parent: 7886)

sh (PID: 7893, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7894, Parent: 7893)

grep (PID: 7894, Parent: 7893, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7895, Parent: 7886)

sh (PID: 7895, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7896, Parent: 7895)

grep (PID: 7896, Parent: 7895, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7897, Parent: 7886)

sh (PID: 7897, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7898, Parent: 7897)

grep (PID: 7898, Parent: 7897, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7901, Parent: 7886)

sh (PID: 7901, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7902, Parent: 7901)

grep (PID: 7902, Parent: 7901, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7903, Parent: 7886)

sh (PID: 7903, Parent: 7886, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7904, Parent: 7903)

grep (PID: 7904, Parent: 7903, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7905, Parent: 1)

rsyslogd (PID: 7905, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7909, Parent: 1)

generate-config (PID: 7909, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7910, Parent: 7909)

pkill (PID: 7910, Parent: 7909, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7911, Parent: 1)

gdm-wait-for-drm (PID: 7911, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7912, Parent: 1)

agetty (PID: 7912, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7914, Parent: 1)

dbus-daemon (PID: 7914, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7915, Parent: 1)

rsyslogd (PID: 7915, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7923, Parent: 1)

systemd-logind (PID: 7923, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7985, Parent: 1)

gdm3 (PID: 7985, Parent: 1, MD5: 2492e2d8d34f9377e3e530a61a15674f) Arguments: /usr/sbin/gdm3

gdm3 New Fork (PID: 7988, Parent: 7985)

plymouth (PID: 7988, Parent: 7985, MD5: 87003efd8dad470042f5e75360a8f49f) Arguments: plymouth --ping

systemd New Fork (PID: 7989, Parent: 1)

accounts-daemon (PID: 7989, Parent: 1, MD5: 01a899e3fb5e7e434bea1290255a1f30) Arguments: /usr/lib/accountsservice/accounts-daemon

accounts-daemon New Fork (PID: 7993, Parent: 7989)

language-validate (PID: 7993, Parent: 7989, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/language-tools/language-validate en_US.UTF-8

language-validate New Fork (PID: 7994, Parent: 7993)

language-options (PID: 7994, Parent: 7993, MD5: 16a21f464119ea7fad1d3660de963637) Arguments: /usr/share/language-tools/language-options

language-options New Fork (PID: 7995, Parent: 7994)

sh (PID: 7995, Parent: 7994, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "locale -a | grep -F .utf8 "

sh New Fork (PID: 7996, Parent: 7995)

locale (PID: 7996, Parent: 7995, MD5: c72a78792469db86d91369c9057f20d2) Arguments: locale -a

sh New Fork (PID: 7997, Parent: 7995)

grep (PID: 7997, Parent: 7995, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -F .utf8

systemd New Fork (PID: 7998, Parent: 1)

polkitd (PID: 7998, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.i686.elf	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x4d3f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
Aqua.i686.elf	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x4cf2:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
Aqua.i686.elf	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x74fd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x759d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
Aqua.i686.elf	Linux_Trojan_Mirai_3a85a418	unknown	unknown	0x47b7:$a: 01 D8 66 C1 C8 08 C1 C8 10 66 C1 C8 08 66 83 7C 24 2C FF 89
Aqua.i686.elf	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x522:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
Aqua.i686.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7a32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
Aqua.i686.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x99c3:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6219.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x4d3f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
6219.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x4cf2:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
6219.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x74fd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x759d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
6219.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_3a85a418	unknown	unknown	0x47b7:$a: 01 D8 66 C1 C8 08 C1 C8 10 66 C1 C8 08 66 83 7C 24 2C FF 89
6219.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x522:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
6219.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7a32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6219.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x99c3:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Click to see the 2 entries

String: EOF/proc//proc/%s/cmdlinerwgetcurlftpechokillbashrebootshutdownhaltpoweroff/fdsocket/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Source: global traffic

TCP traffic: 192.168.2.23:50012 -> 89.190.156.145:7733

Source: global traffic

HTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue

Source: /usr/sbin/rsyslogd (PID: 6397)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6474)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6513)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6586)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6676)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6683)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6757)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6826)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6836)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6841)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6856)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6924)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6997)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 7004)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7037)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7104)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7177)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7184)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7285)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7360)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7378)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7447)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7516)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7537)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7618)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7632)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7714)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7729)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7809)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7905)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7915)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 6581)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6862)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 7042)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7106)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7220)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7286)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7385)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7451)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7555)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7651)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7820)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: 45.148.10.84
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Source: syslog.253.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37650
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37650 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6222, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6198, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6200, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6392, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6394, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6396, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6470, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6474, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6490, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6049, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6231, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6507, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6511, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6512, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6513, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6514, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6522, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6584, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6585, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6586, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6587, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6648, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6673, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6674, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6676, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6679, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6683, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6755, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6755, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6647, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6691, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6756, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6757, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6758, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6825, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6827, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6831, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6833, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6836, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6822, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6837, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6841, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6853, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6853, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6762, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6765, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6854, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6855, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6856, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6857, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6862, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6865, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6922, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6923, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6924, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6988, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6990, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6991, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6997, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6998, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7002, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6925, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7003, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7004, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7005, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6926, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6929, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7034, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7035, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7036, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7037, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7038, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7042, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7045, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7102, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7103, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7104, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7105, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7167, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7171, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7176, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7177, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7180, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7166, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7182, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7184, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7106, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7109, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7214, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7215, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7216, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7218, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7219, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7220, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7223, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7280, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7281, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7282, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7285, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7347, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7356, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7359, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7346, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7360, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7363, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7377, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7377, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7286, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7289, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7374, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7378, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7379, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7380, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7381, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7385, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7388, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7446, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7447, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7448, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7450, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7449, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7452, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7515, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7516, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7517, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7519, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7533, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7536, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7537, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7451, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7458, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7545, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7548, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7549, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7550, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7551, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7616, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7617, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7618, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7620, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7615, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7628, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7632, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7555, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7558, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7643, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7646, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7647, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7649, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7650, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7712, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7713, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7714, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7715, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7711, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7722, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7729, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7651, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7745, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7747, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7751, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7809, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7817, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7910, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7744, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7821, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7823, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7905, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6222, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6198, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6200, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6392, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6394, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6396, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6470, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6474, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6490, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6049, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6231, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6507, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6511, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6512, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6513, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6514, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6522, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6584, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6585, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6586, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6587, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6648, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6673, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6674, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6676, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6679, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6683, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6755, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6755, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6647, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6691, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6756, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6757, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6758, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6825, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6827, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6831, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6833, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6836, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6822, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6837, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6841, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6853, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6853, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6762, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6765, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6850, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6854, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6855, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6856, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6857, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6862, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6865, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6922, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6923, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6924, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6988, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6990, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6991, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6997, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6998, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7002, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6925, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7003, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7004, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7005, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6926, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 6929, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7034, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7035, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7036, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7037, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7038, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7042, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7045, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7102, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7103, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7104, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7105, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7167, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7171, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7176, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7177, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7180, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7166, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7182, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7184, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7106, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7109, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7214, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7215, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7216, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7218, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7219, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7220, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7223, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7280, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7281, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7282, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7285, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7347, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7356, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7359, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7346, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7360, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7363, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7377, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7377, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7286, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7289, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7374, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7378, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7379, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7380, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7381, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7385, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7388, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7446, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7447, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7448, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7450, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7449, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7452, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7515, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7516, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7517, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7519, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7533, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7536, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7537, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7451, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7458, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7545, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7548, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7549, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7550, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7551, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7616, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7617, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7618, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7620, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7615, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7628, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7632, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7555, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7558, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7643, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7646, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7647, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7649, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7650, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7712, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7713, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7714, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7715, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7711, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7722, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7729, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7651, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7745, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7747, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7751, result: no such process	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7809, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7817, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7910, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7744, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7821, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7823, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 6221)	SIGKILL sent: pid: 7905, result: successful	Jump to behavior

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6219.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26

Source: classification engine

Classification label: mal76.spre.troj.evad.linELF@0/240@140/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6396)	File: /proc/6396/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6398)	File: /proc/6398/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6473)	File: /proc/6473/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6512)	File: /proc/6512/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6585)	File: /proc/6585/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6674)	File: /proc/6674/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6679)	File: /proc/6679/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6825)	File: /proc/6825/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6833)	File: /proc/6833/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6840)	File: /proc/6840/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6855)	File: /proc/6855/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6923)	File: /proc/6923/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6990)	File: /proc/6990/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 7002)	File: /proc/7002/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 7005)	File: /proc/7005/mounts
Source: /usr/bin/dbus-daemon (PID: 7038)	File: /proc/7038/mounts
Source: /usr/bin/dbus-daemon (PID: 7105)	File: /proc/7105/mounts
Source: /usr/bin/dbus-daemon (PID: 7176)	File: /proc/7176/mounts
Source: /usr/bin/dbus-daemon (PID: 7182)	File: /proc/7182/mounts
Source: /usr/bin/dbus-daemon (PID: 7281)	File: /proc/7281/mounts
Source: /usr/bin/dbus-daemon (PID: 7356)	File: /proc/7356/mounts
Source: /usr/bin/dbus-daemon (PID: 7363)	File: /proc/7363/mounts
Source: /usr/bin/dbus-daemon (PID: 7379)	File: /proc/7379/mounts
Source: /usr/bin/dbus-daemon (PID: 7446)	File: /proc/7446/mounts
Source: /usr/bin/dbus-daemon (PID: 7448)	File: /proc/7448/mounts
Source: /usr/bin/dbus-daemon (PID: 7517)	File: /proc/7517/mounts
Source: /usr/bin/dbus-daemon (PID: 7536)	File: /proc/7536/mounts
Source: /usr/bin/dbus-daemon (PID: 7550)	File: /proc/7550/mounts
Source: /usr/bin/dbus-daemon (PID: 7617)	File: /proc/7617/mounts
Source: /usr/bin/dbus-daemon (PID: 7628)	File: /proc/7628/mounts
Source: /usr/bin/dbus-daemon (PID: 7712)	File: /proc/7712/mounts
Source: /usr/bin/dbus-daemon (PID: 7722)	File: /proc/7722/mounts
Source: /usr/bin/dbus-daemon (PID: 7747)	File: /proc/7747/mounts
Source: /usr/bin/dbus-daemon (PID: 7823)	File: /proc/7823/mounts
Source: /usr/bin/dbus-daemon (PID: 7914)	File: /proc/7914/mounts

Source: /usr/libexec/gsd-rfkill (PID: 6222)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 6222)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6229)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6412)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6412)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6412)	File: /run/systemd/seats/.#seat0Legls4	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6522)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6522)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6590)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6590)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6590)	File: /run/systemd/seats/.#seat0Ws8sXv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79836Ng7lzP	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79838glUXrP	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79839p39S5N	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79840yYBKrM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79841flWJaQ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:798421GLBQQ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79852fEGVyQ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79853P1ckBO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79854IVZeDM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79855wUfqMO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79861583RMO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79870VXVgXN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:79878mKz10N	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	File: /run/systemd/journal/streams/.#9:80018vO8sKM	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6691)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6691)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6691)	File: /run/systemd/seats/.#seat0SuqBZ8	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:80827HjFvWu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:808297TDUcu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:80830Vss6Pv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:80831Ow9Yox	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:8083728i2Dw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:80839D57mFt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:80840qjLGJv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:80853AnvWmw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:80854sECr4v	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:81489jC30xt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	File: /run/systemd/journal/streams/.#9:81987ZY3Kxx	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6765)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6765)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6765)	File: /run/systemd/seats/.#seat06XjQoK	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6865)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6865)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83677aNhvBV	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83678AOEopT	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83679gtwFIW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83680nUm0DW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:836814nP32U	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83682j912wU	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83683mYYGbV	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83684CcJS7S	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83693eKN5gW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83694yAAWGW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83703UfvNIU	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83710JJYdaV	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:837900xLhvT	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:83803fEfkcT	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	File: /run/systemd/journal/streams/.#9:838934AipIU	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6929)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6929)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6929)	File: /run/systemd/seats/.#seat0INlbm7	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 7045)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7045)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84938zkSZHv
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:849405RXpQu
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84941bR9MGx
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84943xue2Vu
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84944FAaIFv
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84953jifoDy
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:849544BFsNv
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84955M4fpex
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84957TPlK9t
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84964b132ly
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84974HlFc4w
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:84987nN0Kiu
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:86105F5SCgx
Source: /lib/systemd/systemd-journald (PID: 7106)	File: /run/systemd/journal/streams/.#9:86269pz63Hy
Source: /lib/systemd/systemd-logind (PID: 7109)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7109)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7109)	File: /run/systemd/seats/.#seat0JxvEwM
Source: /lib/systemd/systemd-logind (PID: 7223)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7223)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:86997vWw8v8
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:86998jyd329
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:86999aFUSqa
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87000ezQSA8
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87002INsnT6
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87009GhG0k9
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87010XfqHD6
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87011VC0JO9
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87017tjkut8
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87018rOIZu8
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:87027CluG67
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:88180UWpQD8
Source: /lib/systemd/systemd-journald (PID: 7286)	File: /run/systemd/journal/streams/.#9:88197XtNVoa
Source: /lib/systemd/systemd-logind (PID: 7289)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7289)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7289)	File: /run/systemd/seats/.#seat0x1RM5k
Source: /lib/systemd/systemd-logind (PID: 7388)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7388)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:89989GJW5NB
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:89990Tfov9A
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:89991NOFKyD
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:89992jN67TB
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:89993yTOMCz
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:899944ux0aE
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:89995uuazHD
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:89996xJ2qbD
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:90003bV85uA
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:900046wRnfC
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:9001789cifD
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:90018Ki2uHD
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:900988qADaA
Source: /lib/systemd/systemd-journald (PID: 7451)	File: /run/systemd/journal/streams/.#9:901427KJmJA
Source: /lib/systemd/systemd-logind (PID: 7458)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7458)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7458)	File: /run/systemd/seats/.#seat0BLM1v9
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:91773lopOFt
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:91774ns28Hu
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:91780j2LDAu
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:91781RK7Duu
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:91788Bln0hu
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:91794ZiGb8r
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:917950VEABt
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:91803HAZwzr
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:918769vb3es
Source: /lib/systemd/systemd-journald (PID: 7555)	File: /run/systemd/journal/streams/.#9:92037Mv5hRr
Source: /lib/systemd/systemd-logind (PID: 7558)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7558)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7558)	File: /run/systemd/seats/.#seat0ZNqVBI
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93309L6v0cL
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93313OMfgRH
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93321fqnRBL
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93322PwpwyI
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93323Or8O1I
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93336BHIGRH
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93337eYaJJL
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:933454fAGwL
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93411Z7sTtL
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93426iLzxMI
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:93457XowRJH
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:94377zqVaxI
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:934926WDPtL
Source: /lib/systemd/systemd-journald (PID: 7651)	File: /run/systemd/journal/streams/.#9:9349729hiZH
Source: /lib/systemd/systemd-logind (PID: 7654)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7654)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7654)	File: /run/systemd/seats/.#seat0hqy0kZ
Source: /lib/systemd/systemd-logind (PID: 7751)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7751)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7751)	File: /run/systemd/seats/.#seat0HNU5si
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:93684QrupXv
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:94626c1sHdw
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:94758TwZD2t
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:95031THWSev
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:95112cAbpuv
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:95196HV7HGv
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:95197CihVJt
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:95398YNXuQv
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:939275FxjGu
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:955784mgk5u
Source: /lib/systemd/systemd-journald (PID: 7820)	File: /run/systemd/journal/streams/.#9:95660ZqdBGx
Source: /lib/systemd/systemd-logind (PID: 7827)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7827)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7827)	File: /run/systemd/seats/.#seat09Mbyv4
Source: /lib/systemd/systemd-logind (PID: 7923)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7923)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7923)	File: /run/systemd/seats/.#seat02Nsl0k
Source: /usr/lib/accountsservice/accounts-daemon (PID: 7989)	Directory: /root/.cache

Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7286/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7286/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7286/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7286/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7286/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7286/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7363/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7285/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7285/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7285/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7285/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7285/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7285/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7285/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7364/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7364/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7364/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7364/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7364/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7364/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7364/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7378/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7378/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7378/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7378/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7378/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7378/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7378/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7223/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7223/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7223/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7223/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7223/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7223/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7223/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7289/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7289/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7289/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7289/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7289/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7289/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7289/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7282/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7282/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7282/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7282/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7282/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7282/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7282/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7360/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7360/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7360/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7360/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7360/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7360/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/7360/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/environ
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/sched
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/cgroup
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/status
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/comm
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/cmdline
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/attr/current
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/sessionid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/loginuid
Source: /lib/systemd/systemd-journald (PID: 7286)	File opened: /proc/658/cgroup

Source: /usr/bin/gpu-manager (PID: 6477)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6482)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6486)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6488)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6492)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6495)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6498)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6501)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6650)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6655)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6657)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6659)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6662)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6665)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6669)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6671)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6832)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6992)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6994)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7011)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7013)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7015)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7018)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7021)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7024)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7026)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7028)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7172)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7174)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7178)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7192)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7196)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7198)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7200)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7202)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7204)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7206)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7208)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7348)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7354)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7357)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7518)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7522)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7527)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7529)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7624)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7626)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7630)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7719)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7723)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7728)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7887)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7889)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7891)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7893)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7895)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7897)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7901)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7903)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/share/language-tools/language-options (PID: 7995)	Shell command executed: sh -c "locale -a \| grep -F .utf8 "

Source: /bin/sh (PID: 6481)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6483)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6487)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6489)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6493)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6496)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6500)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6502)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6654)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6656)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6658)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6661)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6663)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6666)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6670)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6672)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6834)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6993)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6995)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 7012)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7014)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7016)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7020)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7023)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7025)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7027)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7029)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7173)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7175)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7194)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7197)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7199)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7201)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7203)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7205)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7207)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7209)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7353)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7355)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7358)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7520)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7525)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7528)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7530)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7625)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7627)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7631)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7721)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7726)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7888)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7890)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7892)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7894)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7896)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7898)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7902)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7904)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7997)	Grep executable: /usr/bin/grep -> grep -F .utf8

Source: /usr/share/gdm/generate-config (PID: 6504)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6678)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6839)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 7001)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 7031)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7181)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7211)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7362)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7535)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7634)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7731)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7910)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 6581)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6862)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 7042)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7106)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7220)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7286)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7385)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7451)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7555)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7651)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7820)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 6490)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6675)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6822)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6925)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 7166)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7346)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7519)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7615)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7711)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7744)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7912)	Reads version info: /etc/issue

Source: /usr/sbin/gdm3 (PID: 7813)	File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/sbin/gdm3 (PID: 7813)	File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/sbin/gdm3 (PID: 7985)	File: /var/run/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/sbin/gdm3 (PID: 7985)	File: /var/log/gdm3 (bits: - usr: -x grp: x all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 7989)	File: /var/lib/AccountsService/icons (bits: - usr: rx grp: rwx all: rwx)
Source: /usr/lib/accountsservice/accounts-daemon (PID: 7989)	File: /var/lib/AccountsService/users (bits: - usr: - grp: - all: rwx)

Source: /usr/sbin/rsyslogd (PID: 6397)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6474)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6474)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6475)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6513)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6513)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6586)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6683)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6683)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6757)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6826)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6841)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6841)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6924)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7004)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7004)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7010)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7104)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7184)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7184)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7191)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7285)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7360)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7360)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7378)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7447)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7516)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7537)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7537)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7618)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7632)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7632)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7714)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7729)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7729)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7809)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 7886)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7905)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7905)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7915)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7915)	Log file created: /var/log/auth.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.i686.elf (PID: 6220)

File: /tmp/Aqua.i686.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6475)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6648)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6831)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6988)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7010)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7167)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7191)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7347)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7515)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7620)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7715)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7886)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 6504)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6678)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6839)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 7001)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 7031)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7181)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7211)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7362)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7535)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7634)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7731)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7910)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 6229)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6397)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6474)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6475)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6490)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6513)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6581)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6586)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6647)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6648)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6675)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6676)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6683)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6757)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6762)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6822)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6826)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6836)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6841)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6856)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6862)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6924)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6925)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6926)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6997)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 7004)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7010)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7037)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7042)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7104)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7106)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7166)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7177)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7184)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7191)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7219)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7220)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7285)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7286)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7346)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7360)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7378)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7385)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7447)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7451)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7516)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7519)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7537)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7551)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7555)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7615)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7618)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7632)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7651)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7711)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7714)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7729)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7744)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7809)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7820)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7886)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7905)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7912)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7915)	Queries kernel information via 'uname':

Source: syslog.32.dr	Binary or memory string: Dec 25 10:36:10 galassia kernel: [ 411.556955] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel drm parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi vmxnet3 scsi_transport_spi mptscsih libahci mptbase
Source: syslog.32.dr	Binary or memory string: Dec 25 10:36:10 galassia kernel: [ 411.556992] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018

Language, Device and Operating System Detection

Reads system files that contain records of logged in users

Source: /usr/lib/accountsservice/accounts-daemon (PID: 7989)

Logged in records file read: /var/log/wtmp

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 File and Directory Permissions Modification	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	1 System Owner/User Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	11 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Indicator Removal	NTDS	3 System Information Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.i686.elf	37%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.i686.elf	31%	Virustotal		Browse
Aqua.i686.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high
45.148.10.84	unknown	unknown	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.253.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.213.35.24	unknown	United States	41231	CANONICAL-ASGB	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.213.35.24	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	qkehusl.elf	Get hash	malicious	Mirai	Browse
	wheiuwa4.elf	Get hash	malicious	Mirai	Browse
	iwir64.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.ppc.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	vqsjh4.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	wiewa64.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	wlw68k.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse
	xd.x86_64.elf	Get hash	malicious	Mirai	Browse
	159.100.14.33-boatnet.arm-2024-12-25T14_31_19.elf	Get hash	malicious	Mirai	Browse
	armv4eb.elf	Get hash	malicious	Mirai	Browse
	m68k.elf	Get hash	malicious	Mirai, Moobot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	Aqua.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	Aqua.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.24

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	ngwa5.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	kqibeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fnkea7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wiewa64.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wkb86.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	njvwa4.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wlw68k.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
CANONICAL-ASGB	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	xd.x86_64.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	159.100.14.33-boatnet.arm-2024-12-25T14_31_19.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	159.100.14.33-boatnet.arm7-2024-12-25T14_32_39.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
CANONICAL-ASGB	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	xd.x86_64.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	159.100.14.33-boatnet.arm-2024-12-25T14_31_19.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	159.100.14.33-boatnet.arm7-2024-12-25T14_32_39.elf	Get hash	malicious	Mirai	Browse	185.125.190.26
INIT7CH	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	xd.x86_64.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	159.100.14.33-boatnet.arm-2024-12-25T14_31_19.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	armv4eb.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

Process:	/usr/sbin/gdm3
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:vc:U
MD5:	03A45D7A237C16E006CBC6B56DB5EC23
SHA1:	8B6F066886599A167DE6B7B8E63A20F199B8D627
SHA-256:	C8C23C039566A130DED06CFBED72ABE533458A4C581DF3D52C6A29039C4C0CA9
SHA-512:	874FA45031727CAB2332A6C7EC0F54F588F9D00D67044F356E49131125E75672DB6D4A0B07E0427CC72AEFF49467D4EB2230C03EABC8A4B9E1AA6FF5C8689B13
Malicious:	false
Reputation:	low
Preview:	7985.

/run/systemd/journal/streams/.#9:79836Ng7lzP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.508756975959029
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6jRRZSuSD4IXVJxs+:SbFuFyLVIg1BG+f+M69RA+Iuji4s
MD5:	B3C5C90C1E72065064ACFAB80D0132FC
SHA1:	4FACCE8910BF01335001BAB7F6D605B225BFD27C
SHA-256:	EC3A4ECC458D46DB7F2C2CE0104FC425A628FD5D447CB6B5D0A2D6A8F69517F4
SHA-512:	EC2EE18E975EDD751E3A14A68282FF22C75C029C2F7A71D8F9EBFE055930DDC56E2C332C3B66BDB83140524EF57942B91B0F44F3D793B8B5EDD1CDFD78E66250
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=002da702d6b1454682740a7fc28f1202.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:79838glUXrP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.399153823113925
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/cGYp9GknATjsmNzi:SbFuFyLVIg1BG+f+M0G2kmATjdCLKzK
MD5:	B4E530C46ECF305F103D206174E81FF7
SHA1:	54FB5FA12F8C39D2B55E2099950AF5C4627450DC
SHA-256:	0F97954115F233BC4D34826AFE7B2AFA7039678463CFA33DD88A69762EDC44C2
SHA-512:	3994AD23BD5443835636C987963AA51CF45BB905DF62307774293ECF181F0D8E78457C35DDEEBEA5D09EB8CF7DF4E6DA04DB52CA725A39EB25DBB3F4EF95E01D
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=58182c55149e48d79f75dc57542e16fd.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79839p39S5N

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.376752353065071
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4EAgQ+BmEERXVE88d:SbFuFyLVIg1BG+f+M4EFBoRXqnjosQu
MD5:	C46CCFAA44D214FF9C0D789EE20D4DD3
SHA1:	55AB45D3F2C20F2D0243B477E7A1AAC19DDE6792
SHA-256:	2A1B4B89357A9EF42D1BDFBA3069660C92032562910CFD55CF14FA0EA874BACC
SHA-512:	D2E8ADCAF59B56E8606E09DF4BA86F301E7D336600AA4A59C465839DE85A9C8E69DA270FFFC48E1EDD82D49D804E2B7B69172EA6FC7A79B262A33F823BA0727F
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=28cedc0560ed4eaa94fcd2d03caacfb7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79840yYBKrM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.494396715286657
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MGAdiNqKmjZcHcljX+:qgFq6g10+f+MG1NUmAu
MD5:	5A57A77C48C66C43BD42B529777AE174
SHA1:	FEBB81CC394156E90C364495E4A5949FFB7783F7
SHA-256:	16AE6ED0CB4CA903C7C9A3B8218BFBE3C389E263C01B5FEC17BEC76285C90EAE
SHA-512:	56BAD5593C2A5E8C9F585D6DCF339BE498BBEBCBED28659A951041CAD80D88FD5201F457F27029791EE66C6514B7506ADFB843F9BBCD8BD4AD424DAF1ABBE028
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=91837f1b6f834da68967909284818770.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79841flWJaQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.381722799530077
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvo3WPyrG/EzRvsZje:SbFuFyLVIg1BG+f+MIfmEzJ8jdCLKzK
MD5:	6F28B913BF80C0D7122796A40111BD98
SHA1:	0491A9C506F1D4ED60995F52C09ADE938C52AB8D
SHA-256:	FB506CF322B1545A8527B470971C8A0651FBB8AD453007BFA19CA5B6DF66F6FD
SHA-512:	FC24E14B21025D9A713420188479F38E6A837E639CA3A6C1D754B4371F8ECE066623C6A44C79AA7D791C37E32EFC1BC92E66DB27989161C1D181E8D16DCE1BE3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e8f969c30e6741d59cc59baa6ea26934.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:798421GLBQQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417723960025444
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+CVEUQDBKDIjs1Ha7:SbFuFyLVIg1BG+f+M+SQDBKMjosQu
MD5:	01EFF3713574AA6CF6F5C30869E56C95
SHA1:	3AA8BE45EC2753E3E549071F182AC15FDC46058B
SHA-256:	8FFFE16F07D0D107EDD19D8E94EF502931A5F6DB8B1AB925A088B66AEF8F6B0F
SHA-512:	4558568CA1C31E5B2086448618D8A67E1327A081EF84AA180705B0BE52B001E5BCA87DEA0253DC14F8C85307FAA571B4CEB0219806A6AA1E835CD8EDFDB853F3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4d0353d8d8ca478794abdcfd842d98f6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79852fEGVyQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.357667330406758
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MukcXjItqtGKjLkGq:qgFq6g10+f+MXmjaZ7T
MD5:	63F8BDCD4409DDA88BEFA0FD28963FD7
SHA1:	6B629D44D437A9537C97C53227C98C6C27285E91
SHA-256:	170092D85786E29050D074ADC8E30EBB5E38D3B0E3E6C22311F25526CA79B29F
SHA-512:	D8FCE81DA662AB0D4DEEF7DA39B8220810DE278ADC0CC575A3101E794EA4AA579F090087FB549DA3093267B837668F4578F65BFCA0F48862C5048C33D065A1CA
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d0b39210b3c34ac7aada97aa3581ca8b.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:79853P1ckBO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.438029474912328
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+NtQMRhtGLhESYTjs2o:SbFuFyLVIg1BAf+M+YCG9EjTjNALyAZD
MD5:	300D5D2E32AF6982B80B263FB4A573BE
SHA1:	7C8DB8E98E9181AA4E70577F01EA84125D7387BA
SHA-256:	6ECB5C51E04443FAA3846894E2EBCDD3F271BC688ED085EE16A0D7294E9D5A3F
SHA-512:	A08A0977E7FD8A21DA51D795F694E385C722B0607BE364A0C38DC8591B8E7C48BE10D6095BA08FB2F1C7559AFF347AD9FFBEE2AD028DDFB9DE340A335C59E4D6
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=46d8b28707d44b47b5757549f017eaa7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79854IVZeDM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4346793948289545
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsBDYAGx8XRLDRRNQj:SbFuFyLVIg1BG+f+MsBMArwZjosQu
MD5:	D9AC06DC27EB3243263F869E27D5381A
SHA1:	6E1A891BE465BF1B10AFA2699C1E39B4CFFB1DF7
SHA-256:	83F0C0692362D35A8957E2936E25FFC581F06BA5ECE98ADC6CC332FFD2CF29C5
SHA-512:	312EEF398EA3529856F6CFC1846E71855E93F62740F28B6F455417E346A78244577ECBEF3494908B9F12104A7715456D96266A3A8E5731535E0532EE88C42718
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fdf6f2ec2c4b4658824f2f44b59ec1c6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79855wUfqMO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3556234441075805
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsEDTQn0AWdR14OCgn:SbFuFyLVIg1BG+f+MsoHeO6jdCLKzK
MD5:	29F274CC5731ACA8F9B95AD41034B945
SHA1:	3C980B34AE712B0954D916BB976BEB628053624F
SHA-256:	075176EE0A8766C1B58E82704EC9B5CE6E01F7107A1B2E741B27EEC7E6ED06A1
SHA-512:	8FE724CF568A7F2AC05B8EB6D119AC31545D4784FE441CDA768A7CFEA29CFE45121B7EB27062EDD78DB1BB3EEBDA5A9C1ACCE5E7C085E93C1D1253EA83F3BFA7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fad3cb40593e4344b3841d984a66ac34.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:79861583RMO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.448402979542237
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MHpgbd90hg2jZcHcljX+:qgFq6g10+f+MHpklYmAu
MD5:	18E616C97693949A0738204F158CF850
SHA1:	F71C38BA927E46DC79F66517CF3D319126880F70
SHA-256:	04D7D92D832C852F37D5DC237F66DEA5EED6B9D4738FE562F811E92BCD8BB65B
SHA-512:	9C08A4BF198C1DFFA12EA5EF1F2F0525F73CD1A0864778C6CBE98B421904940DE7A61AA738218AC833EED088778D8FA6A92DCBBA44479072B25A91C47DE04E06
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c26054ed38a84e49926d0faeae420701.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79870VXVgXN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.461296923443666
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MyAHLZH50dshuqjNdQIeXD:qgFq6g1af+Mr9H5LF2D
MD5:	70D5D61591ECB773769A4337D5F5F588
SHA1:	B85246CBD519D708607D219DCFC0CCF0A3902FB0
SHA-256:	86C7D9B9099AC96C43646E71E92115174E1954D090A2A61F1445A3AFADD483B3
SHA-512:	5AE7C1B5875947ABED920C43B743E30DF63C7B33A2D14995C7DE7BAD53F82DC9152AB9358FCAFFAFFC7BF46FAD800D87C96123473FB170AF9253F8F4E54EEFE9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8bd24e802b494ea78bb60531524e8eba.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79878mKz10N

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.44595833029426
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4BwHkyDNHe4BHQZxN:SbFuFyLVIg1BG+f+M4BwJDVe4xHjLkGq
MD5:	65157B7A33C5C779B35E481B4290F164
SHA1:	D82213A386611FA19DCF8C5D81B9254441236791
SHA-256:	8A96DDDD46F8BC647CCA65B897DFA737775BAFAE561EDB06E0A3988EFB10715F
SHA-512:	BB475D4A926A09218D8A1E50832743AA7EBBB830DD7755465F832CCF78E107773F5BA47692FD5F116FA38C5A89845AF15C0BA37C3FA0732E90ED921AC26BA1CA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2ddcc5729fff4b89bad8c9136d77db5b.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:80018vO8sKM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.42381360482894
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/SsGa1PGnYVRSaXb8:SbFuFyLVIg1BG+f+MEa1PimXVjdCLKzK
MD5:	1E94DEE8CA5B1D8E05CB3F4D7C74CFDF
SHA1:	71DE6EDEE4085935477804D95CB50590C667F569
SHA-256:	42DC09D9C38563578A101F82EB6A64947D25B3575F75FF38AF756465EC6DAFC6
SHA-512:	4EA2AFBB147591C119036AECF749EB6E1712B5F94B816D42A0C21A611AC4C5264B36A1E22D178C09494AEFB6C69FEFD478B5A373BB5D39B89ED3739111F2F349
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5bb5b98c631548df9a6c931d047382ed.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:80827HjFvWu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.47798925858467
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm++QBcM/BNSksjsicN:SbFuFyLVIg1BG+f+M+jcM/UjZcHcljX+
MD5:	7E539FD9437E012CE08C63E705DB808B
SHA1:	3AF4D8093BE8F8C1F747D2F9CF23421B72B31340
SHA-256:	388438519E11853DBC79BBEAEB1713580A53EF0646EFEB119956604EC4DD3A24
SHA-512:	01038E56055DEEB54F78D793F50C83C1508B04E196F9C7F975C6FFA0CA5C18D04CCE42287A6D0D3FB3F39BD4236637756533221CCF040970C2E2383E814DA82F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4a40669ddc40429b87119d61574a7c51.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:808297TDUcu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.448358937756341
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7BoGGHsNTxijs1Ha7:SbFuFyLVIg1BG+f+M9GQ4josQu
MD5:	83EF59EC7930BEC775FB8516F3344EA5
SHA1:	67F9EF7297BD5C904BF97B49619F3105E50A58AC
SHA-256:	6BF05AB7BA420024107312B56CCFE18013CFF37BFB1BECA22663FF21A36B3C2F
SHA-512:	D03F26C4105EA4FF9E10E9FE9318B86DCD96D0A268ABB47C4CD4A68BC4A7DFEC15A6A965195974FCC9CA7376A361C1368B7692576B56128226F8D264961E538E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=13c7b4c093364b98bd8952f327443b2e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:80830Vss6Pv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.414678342666006
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MeQVRryJc+8jdCLKzK:qgFq6g10+f+Mw8CLAK
MD5:	70FA8F02BDC4074E311786868B8BA99D
SHA1:	E8EA0548BF251A2DC381A4DAC1A1F7C1042A786C
SHA-256:	8DC966026FCA53B11FEDEE004F3B1A07AD64A373481084BAF43BE5255BB7F30C
SHA-512:	E3D3BC5B90F7635C51FD1EE89A0A252ACFBD34A3C173EABC6FE78706F6599B0F154B1DC9FDB15AFA699ADF743E5B48B1CF2BB5B1FB00A5909B4D800DDEE6FA3E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ab75f62ad63f4fc2bd960357b415913a.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:80831Ow9Yox

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.414917254175653
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmse5bGvFrxsjs1Had9:SbFuFyLVIg1BG+f+MsWivFrqjosQu
MD5:	6BFA78F8963A776C3A2BBB3A8595CE79
SHA1:	EAE49A929E41FDC09D7EF498C0863D864462B5BC
SHA-256:	69B785D1BA288BAA748C64520AFFAB1C5ADB7CFED8CEDB354276C1570859C398
SHA-512:	399682A074DB6B3A5A9C10CFADE27ED4C7521EAA1FAFAA6B6BFF46FE4BF54A6EABB912832CA3B599FC1EFEB8FA8F37B1A43DA85318F6FCD950D2333D2C174C32
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f86142222b4e4d89a29da0d458016afc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:8083728i2Dw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.375145561288487
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8BQ+DnHxM6TjdCLKzK:qgFq6g10+f+M8BQkHxZCLAK
MD5:	236911CA853BAA08E7F8EDC6FA8B648C
SHA1:	6EE01C8C60D10A90E8A7B4CED15F4BFAB3364003
SHA-256:	2A6677A088C38B624A7C1716E6DF2154B18C9D6599F693FF53283E3E0E40EA6F
SHA-512:	790E5F2AE2456DF7E35F479819D389D0D0FA46CA5018A2771FDF605C551C0AF83E375E9F1C13B9B8D52CC094C744A0E2CF445A180E8EDCF785E27041CBBD5692
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d55ff2c0eb24534b0c5571eab6b76e2.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:80839D57mFt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.443848641157721
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmv5EUzTWJCTNGd9Psjsx:SbFuFyLVIg1BAf+M3zTWyNtjNALyAZD
MD5:	C8A5875A2C7770F187AB17211F22197C
SHA1:	45B549E1536B38EE3EA84C179FCC1AE882204254
SHA-256:	1294E3F5AF5E0A360E4FD0E72786F3F45F8F3D92AC6E0C5DF1ED38E131800C5D
SHA-512:	3FFFBB452B7D3EA62A694341C4C1826A64B80A73531E46935B2C95E798166D4B3DC8DC12B517AC4B271137E91B15DCFBFB3E55140D538B72F5AE8F7DFF4F119E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ea520de1b664481cb9276a3d8dcfd02b.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:80840qjLGJv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.467075377277729
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/njRxMiTxQtHRSzjx:SbFuFyLVIg1BG+f+MvjRxMidKxujosQu
MD5:	35D6EBB5591E838FE738DC1548881AFA
SHA1:	65E6F72DF5B44154B9F18DB7BCD06E6772372382
SHA-256:	EF60FB1B12D0C354511B6D0C3C631DCB4C561606B8C95DB56C9DCECD240E747D
SHA-512:	5F0ED85C92589D2CFC117057B30465B66A6E78C24334858BC5C6FBAE8987A458EBE425731492BE10927728252973207C6E5D7FFF1FC5546E2DACB649E6BE87DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5fbf754862294a848d93859100b47256.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:80853AnvWmw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4335059722856895
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/ITOGZqHMVmBjRqj+:SbFuFyLVIg1BG+f+MwTq0m18jLkGq
MD5:	C83E0116C8F9B3997378EF7C5294F20B
SHA1:	FB6C4C0ECDFACA1C778065F60904CA7B9C4B5D28
SHA-256:	78AF6993096A7759702B4699626AB4A764A746E3429607807C505337BDD3DD60
SHA-512:	79A4D42D1AD9F5E83C40CC8923EE4D5C513A9620A71B3AC2761E026169A7915E05377F451ED28AF19A8EFC2B2327CE724ACF5F696FE439A863FF9B7D477B1952
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5586578fdf304cc29b82eb6e0245c436.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:80854sECr4v

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.452566529890363
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm81GogiEy6KGPjs2BbQL:SbFuFyLVIg1BAf+M81Rgny0PjNdQIeXD
MD5:	035D48A144D6829D239FBF9D878AB7A9
SHA1:	643DF043C9094C1EC6000037C3199D76EF20AAA2
SHA-256:	0746D49DF7DC023820BB7A14D5FC3B70E9166431C5EBE748504BEF3FAD2E43C9
SHA-512:	AE6981A04AE0E2383558976B71A68A59EE9453F3F6E83DC57F989FEF89715EA5DD60B5A506E9475C3C5C816311E01EFDE065C22BBBBD1314A57B52C8C99854A9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=624cec119b764d74ab4833c0c7cecdfe.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81489jC30xt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4175485375790355
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MXB1WudxYTjdCLKzK:qgFq6g10+f+MXB1WSxYVCLAK
MD5:	E3D0FC40FC66F01E3F57E3754D21431F
SHA1:	791A95C4971A5195B7962EBA9879B234D3A07CCD
SHA-256:	83718D62C1EF48B23E08462C3EA318589FAB8888930DC78EAE94C3E7DA3C195F
SHA-512:	B585D2F50EA1E6B625DBBE4588EA9C0F490677B9C2358CF5F6EB8AB79F5DADDBCF54FE29C80C8F237013D383AC160B15F49E7FDF01AD8F90782A4B8AD5040DA2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7d07c425cdf64146af48b954d58c1c31.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81987ZY3Kxx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.425186321900641
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+qTBBRc/Bnbsjs1Ha:SbFuFyLVIg1BG+f+M+ynUIjosQu
MD5:	48C431822DA1285A21818CACFBD3004B
SHA1:	18DBC55FE2FFB8B76CC5743FD9C821B09177AE73
SHA-256:	144A53C2B33245D15A65F8D096E75F8EA245F4DDEBB4375FFFFE1E9FE2FDB7D1
SHA-512:	8F4931DCABCBB009A3F8FCAF435B789C06C9AA43EA03DDF0478E0C776CCE2F58EB6A475356E32FC45EBEF67C3847CDB28221DA10E010E48998431F752F60239F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4183ae95cd2449e285c7236be9becb6a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83677aNhvBV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.498281956069717
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MwdF4HR3xQTjZcHcljX+:qgFq6g10+f+MoF4x3MmAu
MD5:	87DFF17A4407187FB7B23EEAC8A8A3E3
SHA1:	9AF53D5238162A5848B39F79C858DE9EC7CF8EF2
SHA-256:	37EF07A35FDB2F037FB7FF0E372DE2DAB525DA525F21C04FE2E68DF9D3F292E3
SHA-512:	DDE25F4B0888141D88F92FB4FB693A8EA3D0ED0B6CF43E3DDDBCF5A3C69EDC6FA7EEA41B3B87A4B62444F8BA2C7DF68219F18E318D16C024DF31EB944F4342E9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3c885587e7b4483ab6daf6b58f84c9e9.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:83678AOEopT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.359655056906121
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6bS3fiTV6ygxsjsmM:SbFuFyLVIg1BG+f+M6bEiTVDVjdCLKzK
MD5:	0D223B8C7E625F7A99AAA7D7D120DAD7
SHA1:	CC4E1E3600C62E95090B135701FEB532AEB1B18B
SHA-256:	6595385CEF1D3DC363D0FE720365C6A47DC3CF43959E09CE4E00B02C40E0C970
SHA-512:	34F18EBDDA69259A76A99203A98C5316D0C1D7DF4F3381F5E950148E762AB47C5497E8C175A49F859B1B0F73EBDEDB887D5F8F2FAF021FD16B76613B70EA70A6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=06f3c07cb07d400296ca0b2edfd49f72.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83679gtwFIW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.412079831455245
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm60eW03cHVGB3i2lsd:SbFuFyLVIg1BG+f+M60elR36josQu
MD5:	A4B2D8B8DD9844FB5A79D7E2A5BE243D
SHA1:	7E70594EAD6A944E5C6610FF898D8E8088D08271
SHA-256:	D871F1948F4982C40A199D92358A0C0557C9D5ED92C09CD11B09F97ED6C535D8
SHA-512:	D62DDB4308CB79B5E540F0CC7D68EB15AA140B19E5BA521EA712B72AC864B967C4F88F40EC22A1A56894B9D4A529B2FFD2C8C2D328BE7DD92CE231A2FBB947FE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0dcddef2335546598f69b13b8c3cddcc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83680nUm0DW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.461496545547856
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6TlLTB3SAD5qjZcHcljX+:qgFq6g10+f+MwNNSlmAu
MD5:	3ABB5013BCFAB419489B635522E61137
SHA1:	5703DF4A0193D87F25E6DEA7FFA2871ED3F24F8F
SHA-256:	5DA23032BA47D3C00C1BBB6A7EE3EC6574154FF01CB2B9D4C06AD8D7044F3659
SHA-512:	E8B048AA120DEA5CD58273FF8DCB71BA7E6E5807B394A7E228ADE05B4DDFCA81E9601CFDEBE664B6A187AFA8946CFB1BC5D6CD237209E44F2545D91B5CE1C1E6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=011dd7805f78416d9ec773bd3b0cb5d1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:836814nP32U

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.395927695887687
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+My0A6QpVk0jdCLKzK:qgFq6g10+f+MXT4VTCLAK
MD5:	A144F7875C89ECE3D621E28A084FA2B0
SHA1:	C98459DC58AB1858797350823F6F8D8063B34EC3
SHA-256:	9C6B30A983F197D2E32B3D68A781BB6D663407BA38C79E650E9AA94A7B8EF8E8
SHA-512:	A1280ADA02ECA300D22F907D08738CC3A470934063CABE66D4EED477BB6BEEBA569BCEFCBF29274F779A365EF2D92B792F7D2E66ADE0E8FF9E7CCB027AD10984
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f0cccb8e9204138b5752eb33e169072.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83682j912wU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.423816350986023
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5LbccTzZiKUz5js16:SbFuFyLVIg1BG+f+M1tTVTUdjosQu
MD5:	F7AD7306B5E2406A8517C83554D57F1C
SHA1:	837F62CA2ABB31C0A548DD7D89E0298C6DCE0315
SHA-256:	857751502F2FE229C7CE2FE02FC861297ED697766BFA01F1626729B945FC30F3
SHA-512:	4C67FD5B0D73722E934D129E23D477A8FF630B6DD90D33127F21BE844D277CB3762F8C35162711CD3E3B825EAD76A33C5C64AF08A2DD7017CE3B7D5DE7AB9A71
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3c93499968f246e4b43e9d48bcf31e35.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83683mYYGbV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.430859634920104
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6gEIwjjZARsZjNALyAZD:qgFq6g1af+MVKnIZD
MD5:	8CA20014ABBE53E7A002D4DAA785B091
SHA1:	53A948383CB0696A51D8A671D91C5DAD4BFEBC1B
SHA-256:	90A1D3C36194CA64A9F3090535035E5B137CF8203F9451F68EA046A21B596E94
SHA-512:	DB2346DF38A246F9751481C48A5008E1B19B86E5DC837AC4524BE9DE3ACE51BBCF6C05F6604B8F1DA11F45E8366D7C88C20F81BF9564A174D4FF7C115FEADDB7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5c0bbf4d54a140e68642e76433d39e1e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83684CcJS7S

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.413156249457778
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmugG8BcDnL4Tqjs1Ha:SbFuFyLVIg1BG+f+MugGNnPjosQu
MD5:	9484549CFDA1F4F78F7941B5CFB0A4B0
SHA1:	301114E8F01E398934C314B0C866C6040359C579
SHA-256:	7667C2CC2048A75424E720E0248F6FE6FD51F19B99D6E0D95398F0643126E5F5
SHA-512:	95145D5170CEBEAF3B2FD14855A506E13C860F5B8EBD1217469D86AF03B68253A3D2B67B5DE30F0EB6166D714C72B2978C784FF536C94B0ABCC32A393D42C54E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d085c03d9f954221a8d4189f84418428.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83693eKN5gW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.357187207954306
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8sDRWHTAbVWA0jsmM:SbFuFyLVIg1BG+f+M8tA0jdCLKzK
MD5:	16CB90F7019CEE8D70BE7935253979F1
SHA1:	98657D0BA70217468382D748D598F77A72C0C6F6
SHA-256:	797F4644CF1FF8444EA9BB8577D1BDA18C4B602D492E73EBC35CA215FF5A9FB0
SHA-512:	7DE5DE274E5A53080007A9ADF76EA312622AC38CAFBC0FA9FC705158AF4C5E909D50C52A57BD32022EF2D24D6C18EEC4CE4CA81BE9AEA554723D1E605A24637E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=686ce3f000e74d81b6ef367a464903f9.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:83694yAAWGW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.413638691342365
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8HCgDhOy1HTjosQu:qgFq6g10+f+M8igbQu
MD5:	9B697CA1ABE31C332EB985B0D4151A41
SHA1:	5C548D5832AD18B57604FD2F90DE28F8F1799FDB
SHA-256:	A13D1C815F982AC02D5BD2DF57D54941215033BC12C7E69C07B74C56F0ABC40A
SHA-512:	ECE73F56B86CE08EE4C5AE9304292363B83D3BB40CA9BE976162AB2637E3E2132FA20576987670C7831B268C4A1B767F2E1945354BE492B741548D9E724FF246
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6b2053d9b4f844cfbac061609f9a0b1d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83703UfvNIU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4299877034594415
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmypLlTcIRWR9Wd22j+:SbFuFyLVIg1BG+f+MyBlyWHjLkGq
MD5:	8455B4BE946E47318EE11C6FB2EFB019
SHA1:	1FB84CBB20D9425F367B9C913CFA2CE62A1EFFDA
SHA-256:	0C24FE03C70960C5E5B52F02F521DC1C4DE20F845083F695E27AEA2A72BC1913
SHA-512:	10E55649E77AAC4918EE9B9CE18F3E78233F64AB42F64FE224B4E88F813E3F904962AADD41563C99066F7B5A34EDF66A132E4B7B20FA54A90A07A1939BE9AFF7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=82cbda53ad6d4e4a9fd576914434b837.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:83710JJYdaV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4487036411989305
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvk1ATDBfRhUjlsjs2Ax:SbFuFyLVIg1BAf+MvDFRCj2jNALyAZD
MD5:	75A5BD548CBD2DD682735D406AF6A3F8
SHA1:	5F06B5C49FBF8328CBAE1DC0949EE198A9A90179
SHA-256:	8C65558C8134B419D2523B6AD1EE985A1CEE29FB81A727D5674B954BA0567F37
SHA-512:	87A6040A0F3241D949A0F4A4D2335D9A69C3F3FA10CEA23B1EBD2F4E38C90635A5BCA3F8D92CB700750B81CABBDB4938509F5402FBF65955CF2AE2D2DDD20F9B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ed1b599c56284fd594141f13b7a41bdb.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:837900xLhvT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.455088183803347
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M7gDmcp8vsZjNdQIeXD:qgFq6g1af+MQ++2D
MD5:	07F3014A7ADA57A7657BF5ABC75F0A3F
SHA1:	05D0E1CF5B3DF8BB09DB51E1BBD45490F5F1ADA0
SHA-256:	6C848A46456873E1F6894D08E26463B2584B79AAEB74992FD423373BF60AD191
SHA-512:	72A0ADF4ED66E70C29AD4120EF51E0F58D009ABCA875E06F4C06582618354AA6F5A8D5650B2AABE2BDC97A1D0745F75A5235C0836B5B4A1FFE02B3A556633537
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cb5a4c8d89084974911aeb6bda92bad8.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83803fEfkcT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.376293787045832
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9G2GxqfdAg2jsmNzi:SbFuFyLVIg1BG+f+MQHxKd8jdCLKzK
MD5:	7D5C31A91A236DA815A5B35DBA52503A
SHA1:	CCA4B8179995E2D77739198E5AE5C064441490B9
SHA-256:	7DAE13046AB3B238CBCE627DBADE1C59A636EB472795627D35FAAF46F3ACEBCF
SHA-512:	B2EA30A0700BB9180156EBBF3442BA8114A08B30A090F0DEE962BB494423BD8473C3B36260E0E019DDA704ED203B265E4016261F6CF8B6DBBFFF47F3D682F3EE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7775516e8e3c406c9d03874c9cc45299.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:838934AipIU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.357384708838617
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MutHB77xphNqjosQu:qgFq6g10+f+MEJ8Qu
MD5:	06DBC4D5FD091FA1C80DB303F3180E15
SHA1:	556003D4F08FDED4AC5551D61957D2313AD4F1F9
SHA-256:	B6656C4AAA5748A1931C2544336F832502DD2F4A5C8FB60EC576654B632B7B0E
SHA-512:	652ABC7E7B727982D30BE4677E138157A64BEA1F10DA7DA5590A52B93DE0478791B26C1811686962E66181426E9404B03EA50E90AAE97DB854CED8830F247B49
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dd6eea33dcea4db39489e2259bd610ed.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84938zkSZHv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.51109931547169
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsNAbcl+E3e8jsicWg:SbFuFyLVIg1BG+f+MsftNjZcHcljX+
MD5:	B068E128C8508212F77E11D8ECAB74DE
SHA1:	084E1892FB7C6DD4D98D1CA88ECBD89E5938F653
SHA-256:	2B1B18B0AF5C0402D442746C9CC05C63327ACBEB2C875C76667655D6B210CE89
SHA-512:	5B55BB76B00EF40D423C2289038AB43327AF2EA6667C12ACB73AC689F6E688BCBC84DA62CBFD688C74658A4E2CADCB4E82DA696CC662493032FC58A50E409EA6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f831d4ebdd744b659fb6378c29eabb29.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:849405RXpQu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4159507585625954
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvNWnK8KJsMqjsmNzi:SbFuFyLVIg1BG+f+MMKLsMqjdCLKzK
MD5:	B1B6D5EE2791BCA3C142F0040AC405B4
SHA1:	3953072B8AED06665FCAED2CA298B32139433A63
SHA-256:	CDF4F1052D4836D73157141934D1F18EA7332C1F9C6E40791CE9222F4EE572A9
SHA-512:	716FB6B526612C8AF057CABEB2F44F0E4D793BE7AB3EE0D27BF859857F194B41DA7CD40BAA510942525184708AB77C0C8462FEC478FB6C3C4F76096C591318B7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e6ac458a152c4d77971799fb161f3d55.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84941bR9MGx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.388299983623349
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr3bzSTIXsjs1Hadme:SbFuFyLVIg1BG+f+MTp8josQu
MD5:	CF9773A37AE9E7CA5D0EF19878783FF1
SHA1:	DCC28FEB24F2D7C5507873D9365A7C7C16E10873
SHA-256:	B450CBC604B2FE85E83C195924476230A77B8E540C19DDE8724AACC3564918F2
SHA-512:	BBB662963C5F43F7F56AF049419D97CF855A03969BF971D8136BEA62CB3A3E78D38764E0DB0CAC7B361DE9D05B3C9FD885605F78B66ABBF98260086DD83C7624
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a08207d7a7ec4f05a07dbfd8b954703c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84943xue2Vu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.473532667714915
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+rArg2nguqjZcHcljX+:qgFq6g10+f+M/KmAu
MD5:	0848FBEAEF2E27E2CABA3715366ECCF1
SHA1:	4B031928B8EAFFF84F29FEB498256E314CE06E10
SHA-256:	4D45167A7F67EE20DA1D3B9057FA179C4E8B4FF1F43FFD19DBBB21DD170C3FCA
SHA-512:	9B4AF754CB93CABD2328FE70F945C16C5ADEF21C6A9E496A1968D41B912A2F6D0393D41AB1522E8BF3C1A880119EB55D93FFC9AF3150CD85A24C54D1E2DA5B5D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48a755e117e544cb997f0a4378d8c71c.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:84944FAaIFv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4156718090907505
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy2fCxS/BQnsjsmNzi:SbFuFyLVIg1BG+f+My2qMQsjdCLKzK
MD5:	E9FD63D88F489795C9FB9FABB898B394
SHA1:	D1F119361F4BD28BB0E5B09540A86417BD00BCCA
SHA-256:	8666FDC459DE7FF95D78613BDDAF88FE5D74E7B09B18FD6885F67390CAFC6FFC
SHA-512:	06307C77418168CCC85E70D279046FA352E57B2E5ED5051A6792B655E48F50CDA6728BA8AD29A7881D340054D329816070F2C0399306810AEC39EF647903B277
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=87109846f5fb4f35b6816bb632187ffb.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84953jifoDy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.441659314819565
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9BPKlIA1dChh0Zjsc:SbFuFyLVIg1BG+f+M/S/Xs0ZjosQu
MD5:	0FC995BDFBCFDAF687DF4FB2292AA25A
SHA1:	F2739388803F29B3B1A674F5A75A2D805D7328CC
SHA-256:	995E401A31F6751E90CE8EE4742F6C1001C2FB863150BCE12EE5685D21228E57
SHA-512:	57ECB1A01E290AADD5DE4D0F0927C893BE57BDD6C77CF39048E8DFBE56552FE5BFC3A1F9CC1F15D5DE581215F41901FB08E141FC1D9F3BFD734D7678D0491613
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7a61e306f3d14437b914e0c185277857.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:849544BFsNv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.446183045899022
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MaEGD/HHGTjNALyAZD:qgFq6g1af+MaEGDCIZD
MD5:	33D53CB06E9842378B19828EC10D3CE0
SHA1:	D4F49E0ABF28877866F942E612DC6A371FD00006
SHA-256:	0DF89F48D481FDF05CFBBFEC608271E7DCDD42697E5628CBF0559FCC79D25B72
SHA-512:	CC911B4AC9ABE85284595FBB57F2B0EED63A30497F1FB73310037CFDB84DE145E9983D3A7A63D55E843D6D146FB426944B6339F9A38E1836929AEA609140F9DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7eb6ab5f78b348b79ddbbec52fa16cd8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:84955M4fpex

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.382279904823891
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4ZygUVHT3Bk2iN2je:SbFuFyLVIg1BG+f+M4ZygABdXjdCLKzK
MD5:	61097FB08FBBE2FB8A41EDF5B6A10D87
SHA1:	27D88A89E2B554D8347C8889083947524BDA6BFB
SHA-256:	8C0674F7E49EED4ADA5996A949D8F031EEEEF4C90DF792748B107E8050584E6E
SHA-512:	DAC357F04C116C7ED672861D6754A09291CBCFBFBE8D62BE466C413B530BEBB06AFECD1244E69484B66E7107963859BE31B924796AAE01214A4A3F3E5FA87ED1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=291b3e7c08194c289410b67ad22ae674.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:84957TPlK9t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4608581962255425
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrvwlOdwZPEm/Rqjsc:SbFuFyLVIg1BG+f+MDHwLRqjosQu
MD5:	E4F99549EEB1D05E5EEFFA298B366FFD
SHA1:	5598729A381DCD80BB353C0B19620F4EE1E020F1
SHA-256:	F111B25837E42B6E125B00B8A027B17AC82175FF09ADE5709C8C902834B1F9D0
SHA-512:	A8655C58016FD32F497B5A750E4B12B6169CB6CDFCAE0395495B62FCB2BA2CB5F727AABD867965EDF109A5F570F2D67D8FD56DF193A98A7CF7A7FD7ED65E021B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aff934305375441b87f1ac5bf6c692ce.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:84964b132ly

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.43881079463069
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp9bGIzHYZHcN2jswK:SbFuFyLVIg1BG+f+M/btccN2jLkGq
MD5:	46C0D1F5B08BAAFBDC666267008EEDB5
SHA1:	6134C19E20EBA34A6DB5BB016135B0F135372755
SHA-256:	747539400898B3279C9C907F857E9431ADBE0CC0CA18692CE44F1F87785C1C5F
SHA-512:	D6284EF935533282DDD75B14FA80259C9D8596EF261D08C619A8A7C7189D37D08AE5E285DE6643ED3FA1A6FC51DEEBB188B258DBE405125FCBC9FB3950CE9595
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cfd522cf164e4dc581b3f99bfa7b9fb9.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:84974HlFc4w

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.419599977888674
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5pHJAS2E9kl7v8js2Ax:SbFuFyLVIg1BAf+MTHJAVzAjNALyAZD
MD5:	8DD31D13E1F0DE0DB8FC67A3E36D46FB
SHA1:	CC4494A6FE933030602419877E30A9C26F1E054F
SHA-256:	B7971BCF403F17E9DFBBEFB2B642AF4206077A3AA903A565A61FC756C3B8BD16
SHA-512:	EB63CBCD2A37436D8D1F3660194D32D8A0F1791B73B7B8CE26A9B12F6EFD7A69D5D0349C4D4E31C74021B9BAB737B39EEAD92B000B67927AC7F8E69EB0C8D696
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3dffecb59e744c21a1ee271d8c45d748.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:84987nN0Kiu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4599201743656876
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmupAdQhYnBdxzTB+sjsd:SbFuFyLVIg1BAf+MuXGdrjNdQIeXD
MD5:	F86D8877D643D07FCA1D9FCBA7209C7D
SHA1:	4412BE42C9F36406CC897BAB25113069268D7214
SHA-256:	1CA8A9A2E6D78BAC3B069669414326DB3D04B8E326FA6A9475B114774E3F70E0
SHA-512:	AF4C0BE66D70C8B12668A3D72A28F1715B377ADCA5F06BE27C23F10443B620599F9F136741669F9DCFB2B3A6F22DF8A846D5292886F677EDD26BAE784DFBD267
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d0c5c09e8cba445fa3922bd8422d06d3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:86105F5SCgx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.386144359811538
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuQQAlnMtrxsjsmNzi:SbFuFyLVIg1BG+f+MuhAi2jdCLKzK
MD5:	0483601FDEF03F1F78888BC8B99D4ED3
SHA1:	BAB98F6DAA69620947E4DECBEF21364FB638B733
SHA-256:	8C501DA76FD0C55BB1C5BDE4C84368F8743DF946365B484487FAAD2A2B31E4FB
SHA-512:	D0306140076EF9C155C35F02E35B612A5B9CD77C3F9DEE0E6B9C3406DBC5AD17DDB46CE8158DBFE0F6AAC9A85A0935FF4549A837D23FF8A3B77025FC9F35BE28
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d145ede2171d4562abf86a47d9abb10b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:86269pz63Hy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.457055889735956
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/lRDvxT/BDG5Cglsd:SbFuFyLVIg1BG+f+MNI5CTjosQu
MD5:	C9BD331A5953050FF1A94CF5B6B7D985
SHA1:	407EA73CEE197532F6E8CECBF4B94E439727B4E5
SHA-256:	4AA6E9A9BC4AC4BBF1920995267C033CF0B037CE21E119EFFAB10D31DDFE3AEA
SHA-512:	CD12FEF0C78318CC135888E894BBE550AAC8EB8358C84AA493EA483233F2F3DFA7685EB0C1335A159878D91A32C4E60A4ECA475CA970AC2DCD8C58427604238B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5736894c240645369058fdfc4bb3b9cc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:86997vWw8v8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.432534713130124
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu5K7tLRltB/sh+sje:SbFuFyLVIg1BG+f+Mu58lzkjZcHcljX+
MD5:	880952EEFED4686B1F282C8F391E8C75
SHA1:	C3143FF1C0D2EB6AA676531539F5FAF449ABE747
SHA-256:	4D01EAC4C1FD400A345873E4AAAC1F1512F20F5E7417468F02997B6FEFECE601
SHA-512:	F58230EDE6FFA21C03381388AB94B982C90B3AF5B2DF1E5763A3CB40BE3664349464AF10AECC972CE03F530CA909C5189C88DC29FD8C44F533E180AE1CF18116
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3233036ccd7461ea4c442b681da1ed2.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:86998jyd329

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.387692751647151
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDBXQsWJFCg2js1Ha:SbFuFyLVIg1BG+f+MoDKJ8g2josQu
MD5:	47ED0537B14CA5B66B781735284A70A3
SHA1:	332358A8E9DA4185A61A71B527FE5DFA56F511D6
SHA-256:	CFEBDEDA5AF61E4EF7CEBE5C49FF069F83E82CE63D7C9B8F8EF921524C7E26CA
SHA-512:	04A52E56741242F2D926BBE01DDF895D3276F24A9759DFE8CC6EB863631AC706826FA853F9E07CDB48B9D98B128A86F7D6B071DAA7D71B57AE3D6932160A25A4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bfdd306e697141bdb00283b1a402fdb4.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:86999aFUSqa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.397804424375973
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuRorcgeXU8jdCLKzK:qgFq6g10+f+MwUuCLAK
MD5:	C952CFE72D8EC44A0E865F6AE2D4C177
SHA1:	4946BDE2BD15A19C7625C1304DED58878C294122
SHA-256:	CDC0C376231BA45F2B135947C5874EA045C0EC0733FE0010583834DDF6C30218
SHA-512:	A37A0B085D7E715649E61F01A0040AAA4CCA3EFBDB1F27B86E61094B06195873899DE8BDAF666FF55B1C126DFBC8B86E81C76CA05D06F80FF1CBC29ACBBC887C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1d1cc7cea9464cc3a976f5f820f65d53.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87000ezQSA8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.501671888557385
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4S3NXw0jZcHcljX+:qgFq6g10+f+M4SdXwimAu
MD5:	C14D0BB7E8391E8A2F7CA9A6FF6927C3
SHA1:	0536294F81DBA941091C2C11BDCCB07EA60CEE49
SHA-256:	313E48D5636562969C60A495BB3AE3BA9D46780DDE2C8388AFDA1C5B44DB2BBC
SHA-512:	FDE0BD3963C42FB5A696BC0753D9B81CFD5003EEAA0A24D2553EF162440D7956506801CF0C6E6C7CBF276752EF51ABE66B82697758EEB37B51DF86CDED2333A9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27c25b2e18b54c068a9ce95244c97523.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87002INsnT6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.362478834019743
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuZNEwdxu22js1Had9:SbFuFyLVIg1BG+f+MuEwdV2josQu
MD5:	5658B7850ED65C2C0ADEE670EC21903F
SHA1:	E958C96A48BFCF2D28009479580326C5F7456544
SHA-256:	9F3B46E4AF4E6C11F386D8390AF6AF1A281212AEFAF5EE8D29413C667CE3D42F
SHA-512:	3CABC1358317810AA72815B9D9F25F74B750ABC4FDCAAE01D5D19E96BCE7EDFA9F435D9A5171D295B830C44DC7B0906DB73177304627EF950E976A8DCEAEB394
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d77ac6732ab6476aa72ad619a69eabd8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87009GhG0k9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3577915205460025
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MaIyGRdql8uqjdCLKzK:qgFq6g10+f+Ma7iugCLAK
MD5:	453CE4C10FDEA8636EF3273FD0D2E3F2
SHA1:	98F07A292F83B9157C4A04EC851B6423FBCF5E96
SHA-256:	ECBAAD12A859CB8460CEF3EF2FA3823A96829E360F6F18064CA0C1B5338ED232
SHA-512:	F79550BDBBEB5444E22C76315B9DCC1A1B719AE389874A781A25BEEC99267AA2550B85B49F6FA46D8B346F4E1AB71266AC55580710141B287161D3B4A097FDBC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ea71b14e11dc4e89806fbfcbdf4ddcd7.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87010XfqHD6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.437264291910325
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm53vbKn1TS4Aglsjs2Ax:SbFuFyLVIg1BAf+MqTlAg2jNALyAZD
MD5:	C8930D41F7ABEA5FF872E7E41761BD39
SHA1:	E064FA049DF104AD88EA52ECB55E9DD3FE6B36E4
SHA-256:	33DBFBCDD88CF73B397FA30ABE0FD95087F841611AFCC60E38F5FAFDC4A87B56
SHA-512:	80F271499A4299D28C6496EAAA515CC1F47FE67FF87E5EA08111419FB419BBBA91883B9858612C5861516D139FDB63E61BB8DF4B901CA15EF404AE577DF77DC8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3e7392e3ffe5416bb9a501d5f089be2c.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87011VC0JO9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.394315019844782
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrxQLSgZvuxsjs1Ha7:SbFuFyLVIg1BG+f+M2BuqjosQu
MD5:	632993893484D5E7A164243ECCDAD5C7
SHA1:	FF76CE49621F812EBAA06B464FBFC181D6B2D1A1
SHA-256:	CF396FA0EDDAF50469E3A560301744363705418BC69BC44FE8539DBD8A2A72CA
SHA-512:	92D16B9BDAA141053A978C711C33323F921EC863B3F389392503C28564618D048D9CF911D9A2D85F8152EFAB4BF218BF8605874B3DAAF63CFFE901A7BDC190FF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=adb54cc22c074fa492ee750ef190a9a3.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87017tjkut8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.382202921982528
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuuU1RzV7EB2rqjsmM:SbFuFyLVIg1BG+f+MubVABMqjdCLKzK
MD5:	619344BA2560B88A1F741B1C7D87E0A9
SHA1:	287E6EB386EC0A43A5687898C3BC44C9D0C1C976
SHA-256:	0705F0D08D548A948839B57528E0043784505FAF0E97A8FC020B3F46884AF2ED
SHA-512:	6A644D7CC8D7EBD26FF1FCB8D02351415045AA1D7F4A15C13A7CC481DC88C22FB9E995F14A7FAC06EB17D999F513D3DAB41D8A49FA08E14C4B823C341C2D6291
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d9f8d668419a42aaac0b4640bd4ae275.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87018rOIZu8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.399195487198356
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8EcBm/760huqjNdQIeXD:qgFq6g1af+M8ohF2D
MD5:	272514C91C8C1AD9F67444CBC5721E2D
SHA1:	4658D01B70BA9FBCA497D8B694DF02E185F65AB5
SHA-256:	E25A864365B74EA5A65E3068B4FB60B9ACF7EC242CCD7AD853445514C62F4CAA
SHA-512:	FB07B7771D0C3CBA22716CF807048595122BBC232647C4F4DEC301B1AAA3A80E369BB2FCBAB3033BAE154020DA15408873E0F1CA802FB154BDD9E0BC556AEFEE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a4ca9da1ec47492ca730f2dcdad61e33.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87027CluG67

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.404458645458926
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrsuWdNMi6UswsjswK:SbFuFyLVIg1BG+f+Mwuvij8jLkGq
MD5:	0FEB5540166253C437ED7D9B58B38318
SHA1:	AAB08EECEC44C4184F0528E5E61562C76B5223B1
SHA-256:	02911DA4CAF74B7A95076EBA6D685D08CB7312EAC2BAB9EED9AE148A1368FF6C
SHA-512:	3A546639962F1260413D02D3649895B960E74017D541368FA196A02D7C65B9C9DC75A6500DB2B8E2429AAFBD0E1A03950FC7A786BCF7F6079D3F6EF0EA34A1F5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a0cffc2c8b75453ba4a093879d0cc5f3.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:88180UWpQD8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.414761747213427
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm74PcRzmfRdZjs1Ha7:SbFuFyLVIg1BG+f+M0PcFmNjosQu
MD5:	298B66DB393D027BAEA1595F8BDE351B
SHA1:	8D8250A8C10E87A3488CD2E3CE20A8C8F01FBBA8
SHA-256:	753F608A2EBECFC8644DFBFEB73C6F60F7E2BC00387866B2A0651A10C13B40B5
SHA-512:	99F6B1D6FDEFF2E629D3A637D12E258F85FA5751672831D257478DD3C6918341869A435D45CED350C2C248D638FE3819C0E7120E8AC43D80436859DD799179C3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1077120fecdf40629440f87083ccc807.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:88197XtNVoa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3160566475603455
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/YnJ+bkQEGXL8jsmM:SbFuFyLVIg1BG+f+MwJmkRy8jdCLKzK
MD5:	C3F94E27DAA1AEEA41E0A5C6015AF933
SHA1:	903F38057EF7E63EA3AC66AC2FB83E5AED58ECC4
SHA-256:	D9785809CC449BFF514023F4241FDC8F7EE3678373332ECAD9345E7E40EA44E4
SHA-512:	53F9689C34E93D6139B1F6824DE24A51D428EE6D87E1BE5C6AD66F1C1BAE9BF0E9EC4325D57371EAA73FC2A50400EE3437B87F73DADA2B57A0E984C5049F5108
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=51dd4f00aecd4f5ea94e5ac2f1abdd15.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89989GJW5NB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.463270907027689
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6wcf/GMjZcHcljX+:qgFq6g10+f+MO/BmAu
MD5:	9E3C221E785E8ACBB6AC2011570CDD57
SHA1:	5F9CEF510221CD6D69033932DE0AF08E7B52D8F9
SHA-256:	E6679B376A90B41FBA449CB38B255B7CD2EA686EF4E2B1AFE37628AD8204D7C7
SHA-512:	1DC02DE7651E892A59C2B74ADC82BDAF7B231E13D14C29B09EA2E6EFFEAB30344FC3570FECE2AFB8C2A8F152CEC330674B68E316912655BB964BCDCEDF0932C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0e0f191c19fb475f891c88c0fb9c19f4.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:89990Tfov9A

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.321728548599487
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuOU6SbRHHP7LuShgC:SbFuFyLVIg1BG+f+MuOuv37joa
MD5:	B651768F0AE28D2CC322A79C6A3F0C62
SHA1:	78F1E34F361B84FD45D3F2EC9205F29C4C066AD1
SHA-256:	7F13E5435309C4B7DBE91F30AFAE91796721896D374F19F5DCED2B4FB5DCEA97
SHA-512:	36555C1C223D904AAF7DC8CDBD863470BAF6ED91BE6DB26B0AAA05142A934F9EDDD76551C2D9615B8FC4FD7FE432CCE87CD7647AE2FC6F88F574037E0DDF1742
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dda82aa65b624bb699d29adf2d52491d.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:89991NOFKyD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398555795490083
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/7YU0Q2m8hEkc0jsc:SbFuFyLVIg1BG+f+MTj8imjosQu
MD5:	308569C362190BAE5D58A5F6DC13645B
SHA1:	459943EAE480D7B0F8E473AFBFADFDDECB4FA737
SHA-256:	555816E35F4DBCA5A2885B07562148A1BBF101799F47E4212F156EC92A486196
SHA-512:	B0A6CCD83C2DDDD28474D60BB506A7A62FEA6D4385A2BAA9393A923A6B2D6637B7D87990301601D54A35BD3A88F05A91DEA1ED2C3A548DEA759C1CA0F4BE4084
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=54b6de57dbb34475b338e797e7721d79.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89992jN67TB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.345795977424351
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrI7VkdTfHIQQHBW0h:SbFuFyLVIg1BG+f+Mc7aBvKHBW0jtWL0
MD5:	A4BD2A334D96A9DBBD7B93362CA7FEF6
SHA1:	01218D796C87BEB9A43A06BA2CBF5EE1631115F3
SHA-256:	DDBD41DBCE6FCDBBF6739656811ED7FC08FAF2FAFDC187EA850390B6821B0112
SHA-512:	BE51B5540290A0B6D23EFEEF754DABDC23D2CB730319D7F05C6CE40C3A25C6E73A113F827A963961122C53B90F74B10D0BF18383A09B99D9FD82FB0029D48A01
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a90dd0b0728d464dba3b58569ce2d946.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:89993yTOMCz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.302254890813823
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvFu2QGQN0V5UsrxsS:SbFuFyLVIg1BG+f+ME3GeslrqjdCLKzK
MD5:	5D707259395BD0FB2BF4A5E43F2B5D29
SHA1:	DDFA7AF030798604277D62FAD0BB12F46A8A4659
SHA-256:	30872A52C850191CE8B3F93634F5FC4AD2AE5308AB67FE1CF9857D0054A91353
SHA-512:	DFC3C0C2DFDAF3BFFBCED2470A8ACE184B4B98A9B73A79AE49608F984A09E00DDA528CF23B889E31DA3B7482795EFC537C6DB267861D8BC00A9D82B19CD205F2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e550aa734057440585323eb7b0e3014a.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:899944ux0aE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.51491177247746
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M82WR+XRWOLZjZcHcljX+:qgFq6g10+f+M82Wc5nmAu
MD5:	3716E32440B3538E571DAB9C9A1E6A18
SHA1:	246D61E1385E1C42ABDBF48600552C036E800717
SHA-256:	6DBC5CCA7CB2FC5F6FDEBFF79AFCDB636F5E6CB6922BC16B963B62E993CB3D0B
SHA-512:	AA9E913CCD490D78F87B5F78DB68BE57CD432ED585AFB37B34F51F31AAC1CB483541993B631322ABC10AA93F1F4EEE22E3B7AA4B43A350FFD1A1C51DBCD8365E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=69b34b6b5bbf49cea7143382549a51c1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:89995uuazHD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.420820756163732
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/13yCRZGdyPVcbqjx:SbFuFyLVIg1BG+f+MBdKlbqjosQu
MD5:	9B26E6C5EFF031A9E2E0813A2BA7D740
SHA1:	2A903809885DB17588632DB5E548F724FA69BE54
SHA-256:	4BF291C8FBEF6F2535034DA0CF8BA265FAF48B9DB9CF88A3671E05255CF61F80
SHA-512:	DD9ABC5D44919D2FE3FBD3532C3673CAA8DE0DF5E089574260668CC816644796B86329793761C05C004B891BB1A2CDAC1C80655AAA1F12C02174E280EED11A54
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5e5ff79dad3b41ec80be5169834609e5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89996xJ2qbD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.375256559299565
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrSLW9TrxsjsmNz0L7:SbFuFyLVIg1BG+f+MlcjdCLKzK
MD5:	FB948207653C588A67EA9145D9B87838
SHA1:	0E2217148E93C66ED09CA8192703941E98EEE55A
SHA-256:	1BF07BE051A04616263C21FF1BA2FC9EB7FEAC3E5E5A042C131C114A0BAF6419
SHA-512:	9360C45151928DF234E94B098B2CF40A543115242FCC465813DFE59EA20121ED7EA1AD2469AF9F6340536B97AA1A2FE144DF6709FBC66281F76793496A6BEABA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aee42047b6f24bee863d17ac6a6c8572.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:90003bV85uA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.442298984208708
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MJB9y0B5BSg2jNALyAZD:qgFq6g1af+MJe0v4gMIZD
MD5:	E8DEBF66141C749DEB9AD17BA120552B
SHA1:	917647ECE7EB9BF9A62591EF92908502DDB9C622
SHA-256:	FBA36A68B4CE197CC1C612A9FFB803CED488472F82A73BFF1B3BA4FE34862229
SHA-512:	56806E41D74D4114E2428B6618820EB295B686AC84BDA8C9491E6B9D4E80D48E06401DEEB558E5716ABEEA9324AAECB7024A13141E99D2383DC92FC045CFEABA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3d42de799daf48bfb2225d4314f06d24.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:900046wRnfC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.390779754550776
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyEAuSAdHYsB/n+sjx:SbFuFyLVIg1BG+f+MyEbd4gLjosQu
MD5:	AEF61D3038559D17AF8E0FFB34A5D055
SHA1:	91C8DC3088322678010E55CD1D54A12CD64E03D0
SHA-256:	FA35C310094F88B1D91F362F008E6A4490D75FFD2CFC4DD9B5394B0E0089220A
SHA-512:	176C9876434F22332D0D0E90B4B1269A863383C1478D22468D8434B1085D6E12EFA3F903C51E3F82A5195CB4C6773B6648D7D6C1A1E30ABF8FA324DC56808856
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=835cfe0a7507435b9b3cfa550cdd7473.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:9001789cifD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.473847217073648
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6WA84AQjZ1jNdQIeXD:qgFq6g1af+M/sh2D
MD5:	B34C8176FA58D31597A2110CF05F3E30
SHA1:	D46DB208CF1A1B1CF0A821DF47F3619485EC6089
SHA-256:	D17AE6B9A3E802DC2828C9829A5303E67CF0E668D3FA8BCDC0DC44AA685239FF
SHA-512:	6EBE248BAB8B3F62908D21F68CB0CEFB161D9BA05CAC76256AF6EDC4F91D5BA7D1F521E16DDF804B9502158947EDB44E2BF8E27E8CDBD885A1EE35AF0A46A82F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0d7689ec67334dc5a42e5006bbecf51a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:90018Ki2uHD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.377009097648607
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+Ix4TcQWGVH2jLkGq:qgFq6g10+f+Mp2QDInT
MD5:	DFF8A3EF0433E2C5567C138DE24887EF
SHA1:	268C708D97CE7FD314AD3F06A32B363414C533E2
SHA-256:	41DA451A3FAF49225709C742DA17637A47D07BF632A2DEB988382C4DE758504B
SHA-512:	B0D48210278CCCF4C4A27ABA7F3522D19EDAECF96134A50BEF3CD833AC6F3733A937EBA979CF73B314B74DE86D4C4E81029B7709708334F75A7D62E42FE3D576
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=419f36ae6874469693878c63ca9ec906.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:900988qADaA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.381319659918989
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5RUCxphDphuqjsmNm:SbFuFyLVIg1BG+f+MrpHhTjdCLKzK
MD5:	913F5330657312FDE982A74D42F5189A
SHA1:	229D760A0C5050691E6778CE74EC40FD5F2F2259
SHA-256:	48BDE5BB2F6A512CCAA9D68B5403239D4F355D9AD51E484AF996247C9D71DF4E
SHA-512:	9842FAEFFC85ECEFBBAFD00688DE961BFE7F0168E210BEDCBF71693526EC8D74530017E82F1F97B6226EEAD1C7469F78949574D3ABCD19920FE55A2250FA9ED1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=32df8ee18e574af3a655fbb368cbef78.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:901427KJmJA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.400643735130323
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuzEBQW/RGldeXsjsc:SbFuFyLVIg1BG+f+MucLRE9josQu
MD5:	EE145E45A1A5F2B4540598E3B289D0D4
SHA1:	A59F7F1C172020989835D1313B532CD171BE6697
SHA-256:	9464536E6D837E70326CB669823868F4001D9B93A3008F7093A4EE8C8875112F
SHA-512:	97D89E890D02B41BD28CE418E5018B16596062E12FB95A79C61B52506611EF1143475797FC79636156281D0C7455909FB6334B93A7183708C382123773703BDB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=db2fad692c4749fdbe924da04d68d1cc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91773lopOFt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.489867340639612
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9DP/dGPlcRxsjsicN:SbFuFyLVIg1BG+f+MjaHjZcHcljX+
MD5:	96D535930B9375275C4E988BF73A77BB
SHA1:	D76A50DF9ECB4DDAABA877A865D5B1AB8CD05A7C
SHA-256:	95CA7AB76573652BF512663834682234395D98048A0ABC534CE443C6203F6C37
SHA-512:	79FBDC47D5C4639B59240680AE88106D88EFF5C4AEFC96C92ACF32AE121B746C024033296CCD83E16C5A6994685258CFB9C909ED4EB6B1A69B4BD59478C1DC27
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7323a135990043789b0bc17056d8d65b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:91774ns28Hu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.351792210639775
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrKiBTM9TZMxsjsmNm:SbFuFyLVIg1BG+f+MGeMxZZjdCLKzK
MD5:	12053EA4699482D4C9653F4DAAA74968
SHA1:	2FD937C944A8564F2E7507E4CF3B439B3EB164E6
SHA-256:	0C23FE6A32F32981E306BB7A95C7BA2C00EFE64361D5DD454A02669F1EAAB261
SHA-512:	D1684DE265877E54EC0500DFCC420D23A889912BA2460350324534D1B2151A42FC854EAFA0101D41916C9D0BCBFA0A1D7F31F0F06631F55F3E7DEF3E154DCF3E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=af3a00e6e51641868b8418416984905b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91780j2LDAu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.442422053757986
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpOW727M9FXL3+sjsc:SbFuFyLVIg1BG+f+Mg97MDXjosQu
MD5:	A3AD356BDCB8A045D9006A0A47136DA0
SHA1:	1CC8B7118F0B48D3BFB661220406CE451AF71C5E
SHA-256:	CC0DFD227644DE1F25677E6A21E94370B358D76F70403C278AFEC78B81C852B2
SHA-512:	F902FABC4B2DFCF568277E01F3EC2104DF6B151B662A8586F93A4EEFBC135DCE3542A646E5CE0A969C8CA53004F0E6AC91B7D6788CC17A815B27B00409643270
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c0458553a7084907ab396e9485552f2c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91781RK7Duu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.432479920955362
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmphPkDmcEuCZjs1Ha7:SbFuFyLVIg1BG+f+M4JajosQu
MD5:	BECB9717F20EBAD3EDDB82DE4444921E
SHA1:	E9A8E8BFF7782722F8D5478D21F421DF1369A4FF
SHA-256:	7ADFFB09DCCE04FD37ABE2489156882369AD566DA52FDA57689750C0D37727F4
SHA-512:	E44D02D46580B17072176BE68A0DBD8E6C014E332F0CA15F1BA96B341F1581EBEBAE04F1608E7C62F306242EBC9B4266BA8B2B220AB0EFAA16CF15DABDC8ED2F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c3c29c202b0d41a7a5ff8f59213b429e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91788Bln0hu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.367873835485671
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoRzCUwAAPvsjsmNzi:SbFuFyLVIg1BG+f+MolhwAo0jdCLKzK
MD5:	CE9A5E72842B5F129B0FA64E58A4EDC8
SHA1:	07601B559DDD057326FD948455E374FEE1278BF5
SHA-256:	306F73A63E55F64AE7037947AFD78C72C8932D4BB8B5170D0C2813D056BC8FA7
SHA-512:	DF5EE79BFBAF7B2E726664AF6DD6DE8389C2EABB397CED99D0B54A4BC43D42FE00F143F837E26F5C9A1BDD4B55D03790BC01DA6B5117A3222AF4016315529F1B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b86c23e2963c4022b4c3bec4aca1576a.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:91794ZiGb8r

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4381057245837745
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8mxUEEEGAW0SZRYTjsx:SbFuFyLVIg1BAf+M8m6kW0SsjNALyAZD
MD5:	D0E679A803FD08A8E7FF5F9A9C2B4CA1
SHA1:	30A9E7472F14947E08381E496F4E7FF62ADD8A11
SHA-256:	51E29DC2C6A14EE64F1124075930636560B8E8BEE0FC5C0FEA8D9599682D16D4
SHA-512:	360AD7860730C7D08C6C3AB611184454EE93B7208D83BC0F696C705A1B53E53C983EB31641AA6CED043FC49BC1519BF14BF5CC4D629BEB1DDAC636D88E4B92B6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=692b4e1754aa4102873430b30f6adc04.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:917950VEABt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.430592016051139
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrHHjAgCDSAuqjswkT:SbFuFyLVIg1BG+f+MzH1CtjLkGq
MD5:	E4BC3940AFF055B8F647B6B4ECE9CE48
SHA1:	91EA36C213C8AE11EBB33820CE1C9280F21299DB
SHA-256:	D537AA3DB69817DE9B36C4514AAA4406E0A6ADF0C0688BCA93D8895815C668FE
SHA-512:	BD76DCBCEC888531FCFE55AF15B91D355CA660664D76ABDE1FA17665F99AB4C4FEEA47FD2858EDDF6933E8AE1132D508776AD8C8683F207738D8BB79E043BC19
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aff06dd2698d4b61bfe51317c4f1396f.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:91803HAZwzr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.464215985124924
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/kxv8W8HKDSRUcBWPsA:SbFuFyLVIg1BAf+MbgDiFUUjNdQIeXD
MD5:	20E861FED02811C726514DF9E00DD838
SHA1:	A18A3FF6801D33DBA06A61F1DAC934CE1E1A011F
SHA-256:	00160133C697D0E225BA39581021A0D683569359C2620BC8866F328827781D3D
SHA-512:	529E5B07A0640855E7AAF20B0C1F3EBD98DACCCF5B8EDB972D7D4ADDF5681CD0F85422768EE6B16D8F27415643AF4CB5B17EAB1DE4FAF175EC2CBDA514447D2B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5defe1ec6033488a8b16f741903bc34b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:918769vb3es

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3669135905807694
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoLyGKxu22jdCLKzK:qgFq6g10+f+MoLypA2cCLAK
MD5:	36F8B0899665E46C78F9C8DF7A19C4D5
SHA1:	3BE4257B955E462CD4CDAE28A3FDF0E98071D64D
SHA-256:	6F546B1D407A44A3DFFA516CB3CE3CADC0B15634A01B4755E72CCAE8AC316A26
SHA-512:	A39BD41F14F8D870368937925187EA7DF4D6FD56840EDFB8AEF334F79FDE83F04F64179935B2D13CC86B477E8429412E037CA74CC3EE4B8298C9CDD6B3D89832
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bc859fc9bfea4b9f9bbc73c9e73fbd2b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:92037Mv5hRr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3944265540781355
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvTXAHDGtfVmWFwTvE:SbFuFyLVIg1BG+f+Mj+I9DFmYTjosQu
MD5:	5062DDA0CD1482585F8CAC78C610EE7B
SHA1:	745DB7D2C164C0D6EA62E6A5CCC99C8915E10FA6
SHA-256:	4D7B233B050D858EE58B393E2B5EDE1505922036DD3C6FD5BC6E7AD2F07097EB
SHA-512:	76830EE5E83227013A85C2372595F10BAE1BF363BD0597FD0D8D56C43C4761F8CAFDC89D3883C734CD76795A372C5EEE96F9C0D40C320E153C377BD32593C5D3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e233462eb8dc4aa880d55f8b64a2d486.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93309L6v0cL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4244566155234155
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5LQwAumg2jsicWmIo:SbFuFyLVIg1BG+f+Muzg2jZcHcljX+
MD5:	841E86ED9ACA76044B851D0BC6469F03
SHA1:	D6DD0A9488A823B33FFDDCEC5B1D4C9AEDE64BE1
SHA-256:	C8135097131D67C0845852AC757822552415D1F410E03E4A22B817E0C7D2E301
SHA-512:	EFBB1D106A3D7DC226F3F65A6CA77920DB57A0F8F90008866D98644598BCD2351F589C062A4C41DCB8A70CF6A7809A0EC4FE87B32639C1B6344040570678516D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3cd6a9c7ce0049068abb5cdba40b0ed9.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:93313OMfgRH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.438572311915941
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu+3aDyWkKljs1Had9:SbFuFyLVIg1BG+f+Mu+4hkwjosQu
MD5:	950FB06A24A857D73D3B0B5EAC0CEA04
SHA1:	726AA6E531581D41B8794DCC7170E81DF1E85CC3
SHA-256:	8EA0A88612A47C111488997F4E1B951294BC22321B3383926E0C8A26A471486D
SHA-512:	95AFA8BEAA354E01241BA38B7F2CA71DE0D46E275AB93DB23B6BFE590D709AAE73BC5B9867D70E770A954D0B216B99E2C64F58075FBD4987CFF267E8D2FE1864
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d0f59cfcf8444ec787fdd12a6856c90d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93321fqnRBL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3333337054614685
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuWSGcUddUIjsmNz0/:SbFuFyLVIg1BG+f+MuW1cvIjdCLKzK
MD5:	FDEC8C6C680F105B70E4F7B522541194
SHA1:	E342909F49079ECF913E1C467224652112A06E19
SHA-256:	E3B3EF865BD58CD60F520AD3F5CF53698B40916101AA3A8E1E62DBF3246C1CFB
SHA-512:	91F0E73BDDF9218F08E276A2528D9F8E04C2CE1B41E0666F923C890AFE1DA2A8C5DD39D98437D1D477E098D052D6BB99242AE087987F5FE6AAB5FF7ED12AAEA4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d2c7c98a49a04ed8a6a46a2660c61896.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93322PwpwyI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.406331836429392
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuPpKsUuTVc0sZjs16:SbFuFyLVIg1BG+f+MuPpKeWVZjosQu
MD5:	73FBF0890BAF5AA070ED61076260619D
SHA1:	F511C59F01AFFDD51FF46C9428A4C679B9B4716A
SHA-256:	CA75068BAA83F9C84D0F92C237ED8D14BB9DBC121C38A14CD9BA073D1CB3649C
SHA-512:	36E207B5867E2B9EB3F4ADE262A10C933370B57CDCDD00E413461AF6E2EEA4FBC2A906F53B20A5815A920243307AE2D563DD83ACAED3626D1CA68375EAE77B02
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d0be56d6f26c40e1858609c1a5ec21fd.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93323Or8O1I

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.333521686313909
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+zGnRwLxA2jdCLKzK:qgFq6g10+f+MAicCLAK
MD5:	64A9DF6725951B77CBBD9B85455B1B12
SHA1:	FFCBE9321486BF1FD15C3B232347F9254B2654D4
SHA-256:	2BF3C16D75A119EDC697794368DA7174F6E1692A3A558394AE3319A5FA85053C
SHA-512:	6A198616DFBCB0D27F429B1525D54D82032CDC11A97936AB61CE922537B16EE83241263826937CFB66B2F2B1892C6FB1BBB3F1945ACB2D7CB20785B69B8914E5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=445144be1a404d46ba33b8aab07977de.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93336BHIGRH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.427135426851401
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4AUEmkB2F0F0Zjs2ALl:SbFuFyLVIg1BAf+M4tdVFfjNALyAZD
MD5:	4E65C8A5D41F3AFE8184C6ABB4E71D54
SHA1:	D23188F8AF2D6B830E6D15417F7B28AB3E0BEEA9
SHA-256:	E5DDFFB085FE6A85CD6D91E6C238040EA81512626CA2D141CA220EEDC394F549
SHA-512:	CB6F3051BE2E78E86F2B2C6F1EE0D9AA65DB2039166999643CEF0FFC5AD65B55A395E2B262BD06B4E6D79C3D2B446B7D6301161D6AAB8EAD05FB39FB730B7BD2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2ea5970877634e649290d30ac6d247c7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:93337eYaJJL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.449660472771467
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/D3d7ydiEKjs2BbQIeT:SbFuFyLVIg1BAf+MMMEKjNdQIeXD
MD5:	789736288E5F3BDB29657DEDDBA0D1AF
SHA1:	653DAA230D0E45ACE6DD3E4CC2F8FB084EC0714E
SHA-256:	80C485B47A44D1B9BFA0050861EA97A1F6BF6C0256777B9FDB59342FE60C1337
SHA-512:	C12ABCBEB74D8E1B699044E14FB623AF5BBF6FBBAB7F34C2C573103ADCD977C29E3DCF9E0FE11EC695BEC987C0766C5ADD5565B9371D236970F7F90329E42AFE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5270a2d4dd0b48e2820f2b5fd2ae8496.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:933454fAGwL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.386033361800461
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+W2ZRSdHcIdKyYglN:SbFuFyLVIg1BG+f+M+WwSdTKyYTjLkGq
MD5:	246EC4F45C2FD3FB623C11991AA7624F
SHA1:	381D9C47858298A0BBDDB5B871C9E5C3AE131C95
SHA-256:	2A8E7756EB9E8FB54732A8A6EA4252BF605DB8F3E2E4C185ACCD06BB41B76850
SHA-512:	4823B01DA657BC2102DE37FBAB3482F18C598FB637791F7239938A6BA8EFAB02F37FB20537331104E1C12DCC3D436885CA9A58B1B6A5F9B6DE4CA0D82CE9485C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=429b4dde6bd647849e69800058238de0.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:93411Z7sTtL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.394363138391089
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MysWVULZRqjdCLKzK:qgFq6g10+f+MvdRgCLAK
MD5:	2B3B0850C5C31C6AE5DC6F6124FD3A91
SHA1:	EEF24B58EC3B56F240EC8F7C2D2201B589008F6F
SHA-256:	3B3FEE84A384A47CC20772FD7666AEF9027266E0AD17B9CA7A26B7AEEA4B0621
SHA-512:	96CF635BF9204C94F29D2519EAA680BD49B119116E4F6FC451FC45BDC1D75D04E979304E74C6081BD12E0F4F684A502A02355E65CC2708673D833467FA93B4B9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=86f13dd092e54f23a9f2cbf0270636ce.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93426iLzxMI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.39796181937214
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpzgCRdPVpwQPhuxsd:SbFuFyLVIg1BG+f+MWydXwQZuqjosQu
MD5:	9259525303552C110E079B6AC5C35505
SHA1:	E0E9A4A91D3DB7C6636A6EE23B01E3D8372F6D21
SHA-256:	739308B2947B7D6F3F501E345CDB2BF46DFAFC13DF33D7365A9EAC2A03AED924
SHA-512:	71235E6127F9D33CD8D704CDF9D686054A43EE044C85A5234B4185BC711EE202E15A55D9A61E409A7F26A1EC820073DF5F4196C692CD827667AC79493F636483
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c5a0d38f2c2d4ca880b825eae7f5f7c3.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93457XowRJH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.488546913114824
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8hO0qG1RqjZcHcljX+:qgFq6g10+f+M8hO0q6RkmAu
MD5:	BF29FD3EB26C058F7F2C564668C7EACB
SHA1:	EC99AB8AA5D8BBF9EE8F5F0AC59FD1546466416F
SHA-256:	0D52662742918FCAF6C28D4E4063CEF8E5845A6A39D932C87648AC8F608875B6
SHA-512:	77499A0D62401BB1F2FAD12F31D1DF9687C930C0625742A55C152DC157AE70574BC8800B697B40BFBD9F216F829E9298EFCC1608D7DB7FD8262249FF76A84EA4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ad32a70c84a54f8c92593966681802ee.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:934926WDPtL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.367011119985274
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/xNARxBXpNlsjswkT:SbFuFyLVIg1BG+f+MJi3ijLkGq
MD5:	03937FA2162DFD8777E2E8A7392B8269
SHA1:	54198A5CD7B48DF814F0B62C27861534E25A7831
SHA-256:	AD18AA1FEA60E36875EC70527E3BA49B9AA16D8B4F033D7070B764A84E95C35D
SHA-512:	01B238F4CBE483339B482ADC8E783FFC7F83139A59B98AA43DBC74B76BA7094E2C29D47EBBFC041961A4FC6BFAD38A79DDDE9184FE657F152CF87702AF95F2F4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5fa0467c0e4e432e8bddb6f0eb0ed61a.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:9349729hiZH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.431646974497507
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8aJ2ImtNjLTTIWTIL:qgFq6g10+f+M8aIJEWEL
MD5:	5AF4B9B4478F5FCD786D4DF29912EB90
SHA1:	DE71FBE11D9309B2C07BE2534CF0E534CBC5B1FA
SHA-256:	E7B0D144A2EAB9CF1EBFEE631BA50FDC413C206E3B3A1085A0E50F458C7A0723
SHA-512:	66D0C8924E46A9A933E39CA8C828874799ADE69DB70C57C331441104CE6A0D04BFB837280FC9EFC2C5305B27910602090B6F2E6A744B7AE1FBC7CE76463DE447
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=61f5268651104de0a23146cb255ec7b0.IDENTIFIER=accounts-daemon.UNIT=accounts-daemon.service.

/run/systemd/journal/streams/.#9:93684QrupXv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.32815307325571
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6zXRKB4UbPBE7Zjst:SbFuFyLVIg1BG+f+M6PCPG7ZjdCLKzK
MD5:	31AEA37674183FCE24464408835D44A6
SHA1:	1C6AE27F7935DE7878FA9E902E9812A8D2650D66
SHA-256:	E90A00CA32D4B72F9EB7E33ADF9716E3D6B391C9B2C0BB92E6919C47DCEB175F
SHA-512:	9C2AFF1BF47BE70003DA6872EA1E9ABF41BB85C2D98990C92D0C72DFDE730D20D4444FF4A14A150762452E8CF7DBB9A523C7939C5DFD70A3711879FAF06447CF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=07a3a286c8da483ab5ece2ed8d8a60d5.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:939275FxjGu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4189757128082245
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5XEcdRckQ+UU1ZRqS:SbFuFyLVIg1BG+f+Mb6kQg1qjLkGq
MD5:	56FA0FD99622D6D4DC8438199C5129D5
SHA1:	EA2177D0430B1EF2AC8314A424F76439423946CB
SHA-256:	96C9DA78FE31B16B83325926EAFFEA032697F65074473C0D51CCB559064A93D5
SHA-512:	EE3012624B6D6193087B491719DA12995B995DA5CCADB8B815F5F9FF20CD86F78BA57D2809947949FADCF18E70F765EE1DF08AFD50321EC445AE46223B99F056
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=32ba79478cde4295ba15a191c958f2dd.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:94377zqVaxI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	199
Entropy (8bit):	5.399767316146569
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6WEomIkiXrWNFzZjs2R:SbFuFyLVIg1BAf+M6WEJIpXre9jNTZD
MD5:	77C29A2CC252615E34DEAC72DC7C7B93
SHA1:	F8C66F00BEAC72D6EABC7D478FB5891BA6769BE8
SHA-256:	A0DF90023EF8C7284BA9E92E7FEC3640AD1F7B6CE257B162C616D1735D313D79
SHA-512:	E340EAC7E75081A7377CBDA2FF89547FCE07B8F993378DC3C47E16A331FC8AF7B0773323E424F2B33168A25882C9B39AB665010317C1573FB99DEC0F968ABD92
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=034a9d8848e14724a21e02b929aff559.IDENTIFIER=gdm3.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:94626c1sHdw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.401048822275765
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsrXd6nDHUYglsjs16:SbFuFyLVIg1BG+f+MsrwHK2josQu
MD5:	9E7E8DFFDDE9615140F28D7B5EF79FC0
SHA1:	B146068A11C44872AF0D703AF747F82E08175FBB
SHA-256:	3FCDC92D88A6952992D97A02FE15938EA180729E0CCFC15BCA67191115A4345F
SHA-512:	DFDA3ABA87340D158512ACA3551A66E6C8D7F866E4472C1EED00CDBC7C84B7C053191C169FF4D5BCE66F7203AB8B30DB6000AA0A061943AA31EEB6DD61AF6818
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f7b71e47d91a4eca90af51bb2362abb1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:94758TwZD2t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.492168419851779
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MqvFvC022jZcHcljX+:qgFq6g10+f+MqvFVzmAu
MD5:	E1C42323005E64CF7F3803ED7BFC7B2D
SHA1:	45A619FB80A649628D77FA4F59AC89F25969B722
SHA-256:	0BB347CA8508DB05B5961B9CAB1EAE7DF2281ED478D8C8BD397E71A2F0BA96D3
SHA-512:	DBE037B812360C829A79C2246A87CA7F7E4D6959DFBB863DEA19FB1D2278E86AA475CE7C4635B6A251B853E6D3E7DBD0EAAD3B2ABA8D65595352D3AA5B0520E3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=74c07f99aabc4703acc8f5811abc8285.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:95031THWSev

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.417265573147374
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzRPnn8tSQdGLjZjs2Ax:SbFuFyLVIg1BAf+MxEdYjNALyAZD
MD5:	EBE5B285B39DB76AE855281D8032FA9D
SHA1:	90D70D5D1DC3362AF0B86781A2A6E19377AD3674
SHA-256:	BFC838FC55A9A50A35653EFA4F61C508525240733A891A8C57DEBB4ACF48E2EB
SHA-512:	B5337B537770F0E0A0223CB52BF339AF751EA6D9A71B155DA531501659C1C4268584C7E634D356885D806530CB9436B989726D882AA578EA5F12F6C987F4EBE7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9df35b133ebd4b999b0be5826daee429.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:95112cAbpuv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.46814452267616
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6QcxOcU0vN8jNdQIeXD:qgFq6g1af+MWxz/N+2D
MD5:	6FD06109D140ACB0A22F602EB1F9A0AF
SHA1:	C97C8E7E760CE144D47673612CD828BC541E3FBF
SHA-256:	D04E43D04D1F2816C71928C0EFC4C25B388024470721D86C638EBA6328E77103
SHA-512:	84DE10217CD1FC0D68173BC3BD63CA304DAB66930ECB757FF4F5DB856690E91FAE8398C7B6E9A529AC0C1406EAFBB57F6F31D07162540F485F0072FEE4711AE9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0329107f123b49c991ee8187bb35081f.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:95196HV7HGv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.391929304608992
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsHSQqcQ100jdCLKzK:qgFq6g10+f+MsyHc60mCLAK
MD5:	FD43C688AF1A643DB4BCB6AADB187F91
SHA1:	3C1C2FE300E399118DB6C63A2948597E2F1F451F
SHA-256:	FCBA16FA8673FAD35821B10525C788F200AA8117D9797FBC1CBC0E22E9A9F9FC
SHA-512:	EDEB9CEC09E5FDDEADAE4196BB458467B01D49053874F51FC2BC3DC7BC3CF3811491D22460716B56FABA29CD14948E34326825DC545827F047F024195A221F70
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fb7bc19394f94798ab65e549333bd335.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:95197CihVJt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422008708399617
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8WBhGduWUqv9gxsjx:SbFuFyLVIg1BG+f+M8WBhGd/WqjosQu
MD5:	77179DE7E5D43477054123298BF89464
SHA1:	4F6DE296136BCE2FB8CC3F983CE2BCED9AFD8372
SHA-256:	4F1A9B4EDFA1EFB15DF4A5C4A60765388C8123D398CA16880E98D36538F3FA63
SHA-512:	A27FB0EACDAE4F059388D2CF0DC4B0CF20FD8B6E7B3B80990BE4EF196E29580FA4B9B9B2ED6838EB131208712A443797E5EB479F6061A2EA36134970BC90B938
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6284d1dea3d8472888918b5ace66f3ba.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:95398YNXuQv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.452827410615171
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuWTcP6WZjZcHcljX+:qgFq6g10+f+MPc7zmAu
MD5:	9A09B49FBAF1F628179000A38681268A
SHA1:	37E8E5A5CD65D04C3DD5C35CDB51DC70BD732FB5
SHA-256:	C4221785EDF87ADD60B51A5EC53D9F5FFD731AC2FFE69F78DDBDDF9590884269
SHA-512:	B74317F6621F92183B988251796B611B95C3DBBD2D0878D0758F6458597CB365EB12020225AB0E712939F614138A53FAEE43E8AB1737D38FD86FA5456382840D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d1edec78487444dfae223f866f3811a2.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:955784mgk5u

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	199
Entropy (8bit):	5.3537308364544565
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmunQaGcaUpT2js2BZZGu:SbFuFyLVIg1BAf+MuraqqjNTZD
MD5:	B6952D997232F2BCFEAF7A9973A97832
SHA1:	9928256410891739AC3B4F8CD02285A48A0B3CC4
SHA-256:	21211A4A396365F7D17A4D32843239572E37D84E678D81BDE5789B24C3B7B955
SHA-512:	142CA1457AA5692C9E71BD6317BB05E8CE70E7B7019B7723098889141A030B9DB89D776349AF7DF69051EE5D94468E31B94F8AFB3F0224E151C4C4FCAFBB2E6C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d033b53ac1a14d16b568ca6b0cf90d1d.IDENTIFIER=gdm3.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:95660ZqdBGx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.453515231129371
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuaNWHQTQg6bUajswq:SbFuFyLVIg1BG+f+MuXhbUajLTTIWTIL
MD5:	471509FCE58DA1279FAA2D13B6CC8DC2
SHA1:	4226F0F8BC67B82669208424CD594495D4042CC3
SHA-256:	96C78D853EA6AB413D1F22295B3F21E503B9E0EDC542A1F08F81427CEC760DE5
SHA-512:	0F6A18930DA478B1FFAF1E326CE6E0ACD6592524A1FF84B227596EE1852257EEB3305C2B8A645879C8CD2BF3C736D8894A4BBA115B8A9BE06944D9DAF5A8C536
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d52ec6d3b5654972b740357b0628308d.IDENTIFIER=accounts-daemon.UNIT=accounts-daemon.service.

/run/systemd/seats/.#seat02Nsl0k

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat06XjQoK

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat09Mbyv4

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0BLM1v9

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0HNU5si

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0INlbm7

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0JxvEwM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Legls4

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0SuqBZ8

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Ws8sXv

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ZNqVBI

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0hqy0kZ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0x1RM5k

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6722951801018081
Encrypted:	false
SSDEEP:	3:B8lsXlXEWtl/zcU+l/l:mA+ylw1X
MD5:	76A30C8422C38898B19D22A4B020C597
SHA1:	C8A55CAFC3A4C28D3377A70EDDE4466C4CEBE791
SHA-256:	4E134C5477755F7F8981EDEB3644ACDBCE3A6172C310BCD2C1E4DC84BE41D721
SHA-512:	4147C3CC407070655D7AC326A58E8DEA615C81D6B0390743AA8B929B122977FB5B0DEBC484CF6BAC7717A00A3405C06BBB603AA6D7EE1B3DE9868D9C74115100
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................5lg.Y......................................

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	859
Entropy (8bit):	4.90407629079681
Encrypted:	false
SSDEEP:	12:HFTTZPaV5pMDFTTZPgKMDFdGDFpTFprFSMjFOAvm2FOA2+VhFbL:1TZeaZTZ4B3GL7kLAvkA2+VjL
MD5:	098EA50BE530FB9F51821A7048CA6133
SHA1:	E57010B0F1C27D9DAEA4349498E5E526061BCE33
SHA-256:	2B7B3BD1401C387A3C21FC62A58DD15C91D874BD0D78D57EE5EEC2FBB2C7E958
SHA-512:	9FB1D7D424036ED9F60D2C6104556058449395DC7A7E2A1A66D29512042E2258D22CEAF2C14F210F15234090931F204ECF802B26F697363DC7131D64AD15B08D
Malicious:	false
Preview:	Dec 25 10:38:31 galassia systemd-logind[7923]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 25 10:38:31 galassia systemd-logind[7923]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 25 10:38:31 galassia systemd-logind[7923]: User enumeration failed: Invalid argument.Dec 25 10:38:31 galassia systemd-logind[7923]: User of session 2 not known..Dec 25 10:38:31 galassia systemd-logind[7923]: User of session c1 not known..Dec 25 10:38:31 galassia systemd-logind[7923]: Session enumeration failed: No such file or directory.Dec 25 10:38:31 galassia systemd-logind[7923]: Watching system buttons on /dev/input/event0 (Power Button).Dec 25 10:38:31 galassia systemd-logind[7923]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 25 10:38:31 galassia systemd-logind[7923]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.3719702688194273
Encrypted:	false
SSDEEP:	3:F31Hlxt8dcvb/lPt8dcvbn/:F3P8Wvb/n8Wvb
MD5:	CA20439DF76417EB1FFFDA57C0D0C518
SHA1:	F6D5711C641DDD34F1065234D9C80B4310CA0905
SHA-256:	B3B71973FC5D5E9D60F97B60639E148113255063EC9D4AC8084E07B0B46B0261
SHA-512:	2083617E99538E48DA886635A9C3A6D4545A6EC6B85C3BEE85934FE5BA5B26287723D1907C99F4E2E6F9A542190BB8C38E02E740C1C2765B5199686A98786E45
Malicious:	false
Preview:	LPKSHHRH................ ..H...(.a................................... ..H...(.a...........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4111525174736723
Encrypted:	false
SSDEEP:	3:F31Hlx/4tu2bH/5/4tu2bHPX:F32tFmtF
MD5:	72D4A9C9A08F2DF4A7CF6333DDF20613
SHA1:	81CD74AC25A5ED73E9223D5735160F396862E9B9
SHA-256:	480ACAC3FDBCAA602EF35C196D841E8D0363CE401D297E0D14C3D772600A24E1
SHA-512:	1F7F04EF9D3AF0667C99D14A441B8BDC20189A579A91A8C0649E107169BC0C462E038413F45B7E58BA905C7B10C981DC732E9B604C263449AAB7BA093B6F31BD
Malicious:	false
Preview:	LPKSHHRH....................HG....S.&......................................HG....S.&..........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	3468
Entropy (8bit):	4.781449507483388
Encrypted:	false
SSDEEP:	48:3DlrN12vlwVNpp3p4vXrGvuGv19jvocKhOK9ZFPU3smAm+2x+gO8rEZyuWbyKebV:xgYXAQF1pyV4DuDuU7i73Xk
MD5:	530A8FFFA85E980D1DA5CD0DE316A753
SHA1:	0A1254B5DE6A91FF18D640A1220A2C05D380ABB4
SHA-256:	AF4EE87CCB91D23F0616D4A26C1334E8C00EDBB801046EB859FA8E1D5BE23DF8
SHA-512:	B5E15A31553712C12BDD8CC9637EE3412E3D957B1689AB2FFE4D241F1C60C5DFBD6A4FAB60FE90E96F98FAD839A333F1E98DE3FE6E5E635D36CC8F2005E00CD1
Malicious:	false
Preview:	Dec 25 10:38:30 galassia kernel: [ 550.353607] blocking signal 9: 6221 -> 2048.Dec 25 10:38:30 galassia kernel: [ 551.037862] blocking signal 9: 6221 -> 658.Dec 25 10:38:30 galassia kernel: [ 551.166463] blocking signal 9: 6221 -> 720.Dec 25 10:38:30 galassia kernel: [ 551.241735] New task spawned: old: (tgid 7913, tid 7913), new (tgid: 7913, tid: 7916).Dec 25 10:38:30 galassia kernel: [ 551.268454] New task spawned: old: (tgid 7915, tid 7915), new (tgid: 7915, tid: 7917).Dec 25 10:38:30 galassia kernel: [ 551.268825] New task spawned: old: (tgid 7915, tid 7915), new (tgid: 7915, tid: 7918).Dec 25 10:38:30 galassia kernel: [ 551.270756] New task spawned: old: (tgid 7915, tid 7917), new (tgid: 7915, tid: 7919).Dec 25 10:38:30 galassia kernel: [ 551.463250] New task spawned: old: (tgid 7913, tid 7913), new (tgid: 7913, tid: 7920).Dec 25 10:38:31 galassia kernel: [ 551.644545] New task spawned: old: (tgid 7913, tid 7913), new (tgid: 7913, tid: 7980).Dec 25 10:38:32 galassia kerne

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	6694
Entropy (8bit):	5.066601121709027
Encrypted:	false
SSDEEP:	96:WlRqgYXXTX6pBWgIhg1D1DRDHDLp+cYWebQHSDuDuU7i73XEhm:Mzeg6iJtjccYWQ
MD5:	084D514C16ECC240F28F87615E2B5E7E
SHA1:	7B5A1EF47528189BC22CCB97FABA27C8877CFBC8
SHA-256:	672CD5BD8E61877CACC455C8CA075AEBE0C26053C428A167A369175C40E5DF8A
SHA-512:	1706C833353831CB09CC7D85E9E0078B93E2D89D5D8BAD5CA1F25656ABD3BC77AA53E35CBC10FD3C139573DE6D5546BD62C0CB4A0A494ADBBEC6B96EB2C11725
Malicious:	false
Preview:	Dec 25 10:38:30 galassia systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 25 10:38:30 galassia systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 25 10:38:30 galassia systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 34..Dec 25 10:38:30 galassia systemd[1]: Stopped System Logging Service..Dec 25 10:38:30 galassia systemd[1]: Starting System Logging Service....Dec 25 10:38:30 galassia whoopsie[7913]: [10:38:30] Using lock path: /var/lock/whoopsie/lock.Dec 25 10:38:30 galassia kernel: [ 550.353607] blocking signal 9: 6221 -> 2048.Dec 25 10:38:30 galassia kernel: [ 551.037862] blocking signal 9: 6221 -> 658.Dec 25 10:38:30 galassia kernel: [ 551.166463] blocking signal 9: 6221 -> 720.Dec 25 10:38:30 galassia kernel: [ 551.241735] New task spawned: old: (tgid 7913, tid 7913), new (tgid: 7913, tid: 7916).Dec 25 10:38:30 galassia kernel: [ 551.268454] New task spawned: old: (tgid 7915, tid 7915), new (tgid: 7915, tid: 79

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6722951801018081
Encrypted:	false
SSDEEP:	3:B8lsXlXEWtl/zcU+l/l:mA+ylw1X
MD5:	76A30C8422C38898B19D22A4B020C597
SHA1:	C8A55CAFC3A4C28D3377A70EDDE4466C4CEBE791
SHA-256:	4E134C5477755F7F8981EDEB3644ACDBCE3A6172C310BCD2C1E4DC84BE41D721
SHA-512:	4147C3CC407070655D7AC326A58E8DEA615C81D6B0390743AA8B929B122977FB5B0DEBC484CF6BAC7717A00A3405C06BBB603AA6D7EE1B3DE9868D9C74115100
Malicious:	true
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................5lg.Y......................................

Source: Aqua.i686.elf	ReversingLabs: Detection: 36%
Source: Aqua.i686.elf	Virustotal: Detection: 31%			Perma Link

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.382871560696873
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	Aqua.i686.elf
File size:	67'028 bytes
MD5:	d255631d3c4baf58c938eded123dc951
SHA1:	a6db6a717726302e7b6f5f0ae1d9dbb2938e6d76
SHA256:	48b78ddbd3b8c071ec91c97dd91958dcc008cbc132b61ab2e04e719772cd5d24
SHA512:	5d3529c9ec1ccfee3a43841b5b9876573d6ed506715ae0b569238bfc6456e2d7fb7360cdefc7d23f687473fd3534c591ef4bcc90eb1549dc0b49be1174bf5337
SSDEEP:	1536:R+XkIsiWIGc8k1KDVmUx6wPqHOCjWh8GNRaCrZqfCxCEEPR:R+XvsidGyKDVmUx6wPeOVKGNRaCl+h
TLSH:	1C632A81FA87C0F5D81B09304077F33FCA32E5294171DA6EEF69EF36DA63541A216299
File Content Preview:	.ELF....................h...4...D.......4. ...(.....................................................x....(..........Q.td............................U..S............h....3...[]...$.............U......= ....t..1...................u........t...$........... .

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048168
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	66628
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xe561	0x0	0x6	AX	16
.fini	PROGBITS	0x8056611	0xe611	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8056640	0xe640	0x1a45	0x0	0x2	A	32
.ctors	PROGBITS	0x805908c	0x1008c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8059094	0x10094	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x80590c0	0x100c0	0x344	0x0	0x3	WA	32
.bss	NOBITS	0x8059420	0x10404	0x2560	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x10404	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x10085	0x10085	6.4096	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x1008c	0x805908c	0x805908c	0x378	0x28f4	4.1911	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 25, 2024 17:36:18.152329922 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Dec 25, 2024 17:37:38.163947105 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 25, 2024 17:36:08.192733049 CET	192.168.2.23	8.8.8.8	0x1353	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.327460051 CET	192.168.2.23	8.8.8.8	0x1353	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.462034941 CET	192.168.2.23	8.8.8.8	0x1353	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.596683025 CET	192.168.2.23	8.8.8.8	0x1353	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.739708900 CET	192.168.2.23	8.8.8.8	0x1353	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.873610973 CET	192.168.2.23	8.8.8.8	0x59bd	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.007889032 CET	192.168.2.23	8.8.8.8	0x59bd	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.150294065 CET	192.168.2.23	8.8.8.8	0x59bd	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.289717913 CET	192.168.2.23	8.8.8.8	0x59bd	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.423922062 CET	192.168.2.23	8.8.8.8	0x59bd	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.198863983 CET	192.168.2.23	8.8.8.8	0x5c53	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.333153963 CET	192.168.2.23	8.8.8.8	0x5c53	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.467406988 CET	192.168.2.23	8.8.8.8	0x5c53	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.601933002 CET	192.168.2.23	8.8.8.8	0x5c53	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.737495899 CET	192.168.2.23	8.8.8.8	0x5c53	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:15.212307930 CET	192.168.2.23	8.8.8.8	0xa7eb	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:15.212397099 CET	192.168.2.23	8.8.8.8	0x5de6	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:36:15.859030008 CET	192.168.2.23	8.8.8.8	0x8342	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:36:22.491782904 CET	192.168.2.23	8.8.8.8	0xef56	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:22.625747919 CET	192.168.2.23	8.8.8.8	0xef56	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:22.760699987 CET	192.168.2.23	8.8.8.8	0xef56	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:22.894891977 CET	192.168.2.23	8.8.8.8	0xef56	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:23.030077934 CET	192.168.2.23	8.8.8.8	0xef56	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:24.780242920 CET	192.168.2.23	8.8.8.8	0xd52f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:24.914455891 CET	192.168.2.23	8.8.8.8	0xd52f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:25.048722982 CET	192.168.2.23	8.8.8.8	0xd52f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:25.183221102 CET	192.168.2.23	8.8.8.8	0xd52f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:25.317255020 CET	192.168.2.23	8.8.8.8	0xd52f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:26.445034027 CET	192.168.2.23	8.8.8.8	0x9e9	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:36:32.817924023 CET	192.168.2.23	8.8.8.8	0xc4ec	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:36:36.081176043 CET	192.168.2.23	8.8.8.8	0x1d0b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.215739965 CET	192.168.2.23	8.8.8.8	0x1d0b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.355036974 CET	192.168.2.23	8.8.8.8	0x1d0b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.489135981 CET	192.168.2.23	8.8.8.8	0x1d0b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.623240948 CET	192.168.2.23	8.8.8.8	0x1d0b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:38.532316923 CET	192.168.2.23	8.8.8.8	0x6475	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:38.532361031 CET	192.168.2.23	8.8.8.8	0x62f1	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:36:41.403014898 CET	192.168.2.23	8.8.8.8	0x1c50	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.543065071 CET	192.168.2.23	8.8.8.8	0x1c50	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.684814930 CET	192.168.2.23	8.8.8.8	0x1c50	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.818717003 CET	192.168.2.23	8.8.8.8	0x1c50	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.957843065 CET	192.168.2.23	8.8.8.8	0x1c50	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:49.729695082 CET	192.168.2.23	8.8.8.8	0x92cf	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:49.869343042 CET	192.168.2.23	8.8.8.8	0x92cf	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:50.003150940 CET	192.168.2.23	8.8.8.8	0x92cf	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:50.137342930 CET	192.168.2.23	8.8.8.8	0x92cf	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:50.271648884 CET	192.168.2.23	8.8.8.8	0x92cf	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.048286915 CET	192.168.2.23	8.8.8.8	0xf316	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.182573080 CET	192.168.2.23	8.8.8.8	0xf316	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.317069054 CET	192.168.2.23	8.8.8.8	0xf316	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.451720953 CET	192.168.2.23	8.8.8.8	0xf316	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.586502075 CET	192.168.2.23	8.8.8.8	0xf316	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:53.584829092 CET	192.168.2.23	8.8.8.8	0x58a0	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:37:00.347171068 CET	192.168.2.23	8.8.8.8	0xe29e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.481729984 CET	192.168.2.23	8.8.8.8	0xe29e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.615777016 CET	192.168.2.23	8.8.8.8	0xe29e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.751400948 CET	192.168.2.23	8.8.8.8	0xe29e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.885399103 CET	192.168.2.23	8.8.8.8	0xe29e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:04.657216072 CET	192.168.2.23	8.8.8.8	0xa486	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:04.799168110 CET	192.168.2.23	8.8.8.8	0xa486	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:04.933731079 CET	192.168.2.23	8.8.8.8	0xa486	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:05.068226099 CET	192.168.2.23	8.8.8.8	0xa486	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:05.201951027 CET	192.168.2.23	8.8.8.8	0xa486	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:06.412125111 CET	192.168.2.23	8.8.8.8	0xe6c2	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:37:12.966540098 CET	192.168.2.23	8.8.8.8	0x2d25	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.109426022 CET	192.168.2.23	8.8.8.8	0x2d25	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.244164944 CET	192.168.2.23	8.8.8.8	0x2d25	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.386447906 CET	192.168.2.23	8.8.8.8	0x2d25	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.520292997 CET	192.168.2.23	8.8.8.8	0x2d25	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.276498079 CET	192.168.2.23	8.8.8.8	0xfbaa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.410710096 CET	192.168.2.23	8.8.8.8	0xfbaa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.544450998 CET	192.168.2.23	8.8.8.8	0xfbaa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.678569078 CET	192.168.2.23	8.8.8.8	0xfbaa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.820843935 CET	192.168.2.23	8.8.8.8	0xfbaa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:19.686444044 CET	192.168.2.23	8.8.8.8	0xcc50	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:37:26.578388929 CET	192.168.2.23	8.8.8.8	0x7545	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:26.720272064 CET	192.168.2.23	8.8.8.8	0x7545	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:26.855132103 CET	192.168.2.23	8.8.8.8	0x7545	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:26.989496946 CET	192.168.2.23	8.8.8.8	0x7545	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:27.124495029 CET	192.168.2.23	8.8.8.8	0x7545	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:32.895953894 CET	192.168.2.23	8.8.8.8	0xfb57	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:32.896008968 CET	192.168.2.23	8.8.8.8	0x9e85	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:37:35.879612923 CET	192.168.2.23	8.8.8.8	0x50f3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.013578892 CET	192.168.2.23	8.8.8.8	0x50f3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.147867918 CET	192.168.2.23	8.8.8.8	0x50f3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.289925098 CET	192.168.2.23	8.8.8.8	0x50f3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.424329042 CET	192.168.2.23	8.8.8.8	0x50f3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:46.094814062 CET	192.168.2.23	8.8.8.8	0x468d	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:46.094882011 CET	192.168.2.23	8.8.8.8	0xe808	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:37:47.190572977 CET	192.168.2.23	8.8.8.8	0x4bcb	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.333709002 CET	192.168.2.23	8.8.8.8	0x4bcb	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.467664003 CET	192.168.2.23	8.8.8.8	0x4bcb	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.602967024 CET	192.168.2.23	8.8.8.8	0x4bcb	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.737102032 CET	192.168.2.23	8.8.8.8	0x4bcb	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:51.516125917 CET	192.168.2.23	8.8.8.8	0xc2e5	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:51.650281906 CET	192.168.2.23	8.8.8.8	0xc2e5	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:51.784228086 CET	192.168.2.23	8.8.8.8	0xc2e5	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:51.918113947 CET	192.168.2.23	8.8.8.8	0xc2e5	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:52.499207973 CET	192.168.2.23	8.8.8.8	0xc2e5	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.264246941 CET	192.168.2.23	8.8.8.8	0xf9e4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.398864985 CET	192.168.2.23	8.8.8.8	0xf9e4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.532651901 CET	192.168.2.23	8.8.8.8	0xf9e4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.666991949 CET	192.168.2.23	8.8.8.8	0xf9e4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.800904036 CET	192.168.2.23	8.8.8.8	0xf9e4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:58.561534882 CET	192.168.2.23	8.8.8.8	0x20d9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:58.695933104 CET	192.168.2.23	8.8.8.8	0x20d9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:58.830790997 CET	192.168.2.23	8.8.8.8	0x20d9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:58.967673063 CET	192.168.2.23	8.8.8.8	0x20d9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:59.101331949 CET	192.168.2.23	8.8.8.8	0x20d9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:59.114427090 CET	192.168.2.23	8.8.8.8	0x3849	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:38:03.866221905 CET	192.168.2.23	8.8.8.8	0xd8ff	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.000380993 CET	192.168.2.23	8.8.8.8	0xd8ff	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.139724016 CET	192.168.2.23	8.8.8.8	0xd8ff	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.273739100 CET	192.168.2.23	8.8.8.8	0xd8ff	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.415673971 CET	192.168.2.23	8.8.8.8	0xd8ff	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:10.843632936 CET	192.168.2.23	8.8.8.8	0x50b5	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:38:13.204101086 CET	192.168.2.23	8.8.8.8	0xecd3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.343194008 CET	192.168.2.23	8.8.8.8	0xecd3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.477714062 CET	192.168.2.23	8.8.8.8	0xecd3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.611936092 CET	192.168.2.23	8.8.8.8	0xecd3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.751576900 CET	192.168.2.23	8.8.8.8	0xecd3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.529455900 CET	192.168.2.23	8.8.8.8	0x74aa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.663213968 CET	192.168.2.23	8.8.8.8	0x74aa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.797771931 CET	192.168.2.23	8.8.8.8	0x74aa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.940061092 CET	192.168.2.23	8.8.8.8	0x74aa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.951982021 CET	192.168.2.23	8.8.8.8	0xeb21	Standard query (0)	daisy.ubuntu.com	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.952054977 CET	192.168.2.23	8.8.8.8	0x917c	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:38:21.082132101 CET	192.168.2.23	8.8.8.8	0x74aa	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:27.217247963 CET	192.168.2.23	8.8.8.8	0x2800	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:38:31.844697952 CET	192.168.2.23	8.8.8.8	0x53e9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:31.913527012 CET	192.168.2.23	8.8.8.8	0x1fdc	Standard query (0)	daisy.ubuntu.com	28	IN (0x0001)	false
Dec 25, 2024 17:38:31.979418039 CET	192.168.2.23	8.8.8.8	0x53e9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:32.113415956 CET	192.168.2.23	8.8.8.8	0x53e9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:32.255605936 CET	192.168.2.23	8.8.8.8	0x53e9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:32.390465975 CET	192.168.2.23	8.8.8.8	0x53e9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.179733992 CET	192.168.2.23	8.8.8.8	0x60a	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.314853907 CET	192.168.2.23	8.8.8.8	0x60a	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.448956966 CET	192.168.2.23	8.8.8.8	0x60a	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.582791090 CET	192.168.2.23	8.8.8.8	0x60a	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.724567890 CET	192.168.2.23	8.8.8.8	0x60a	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 25, 2024 17:36:08.327333927 CET	8.8.8.8	192.168.2.23	0x1353	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.461894989 CET	8.8.8.8	192.168.2.23	0x1353	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.596568108 CET	8.8.8.8	192.168.2.23	0x1353	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.739579916 CET	8.8.8.8	192.168.2.23	0x1353	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:08.873505116 CET	8.8.8.8	192.168.2.23	0x1353	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.007735014 CET	8.8.8.8	192.168.2.23	0x59bd	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.150132895 CET	8.8.8.8	192.168.2.23	0x59bd	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.289580107 CET	8.8.8.8	192.168.2.23	0x59bd	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.423742056 CET	8.8.8.8	192.168.2.23	0x59bd	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:09.558495045 CET	8.8.8.8	192.168.2.23	0x59bd	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.333007097 CET	8.8.8.8	192.168.2.23	0x5c53	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.467253923 CET	8.8.8.8	192.168.2.23	0x5c53	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.601805925 CET	8.8.8.8	192.168.2.23	0x5c53	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.737365007 CET	8.8.8.8	192.168.2.23	0x5c53	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:13.871714115 CET	8.8.8.8	192.168.2.23	0x5c53	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:15.335374117 CET	8.8.8.8	192.168.2.23	0xa7eb	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:15.335374117 CET	8.8.8.8	192.168.2.23	0xa7eb	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:22.625595093 CET	8.8.8.8	192.168.2.23	0xef56	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:22.760535955 CET	8.8.8.8	192.168.2.23	0xef56	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:22.894732952 CET	8.8.8.8	192.168.2.23	0xef56	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:23.029931068 CET	8.8.8.8	192.168.2.23	0xef56	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:23.163657904 CET	8.8.8.8	192.168.2.23	0xef56	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:24.914267063 CET	8.8.8.8	192.168.2.23	0xd52f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:25.048553944 CET	8.8.8.8	192.168.2.23	0xd52f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:25.183048010 CET	8.8.8.8	192.168.2.23	0xd52f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:25.317102909 CET	8.8.8.8	192.168.2.23	0xd52f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:25.451792002 CET	8.8.8.8	192.168.2.23	0xd52f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.215589046 CET	8.8.8.8	192.168.2.23	0x1d0b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.354927063 CET	8.8.8.8	192.168.2.23	0x1d0b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.489025116 CET	8.8.8.8	192.168.2.23	0x1d0b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.623133898 CET	8.8.8.8	192.168.2.23	0x1d0b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:36.757061958 CET	8.8.8.8	192.168.2.23	0x1d0b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:38.666301966 CET	8.8.8.8	192.168.2.23	0x6475	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:38.666301966 CET	8.8.8.8	192.168.2.23	0x6475	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.542741060 CET	8.8.8.8	192.168.2.23	0x1c50	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.684681892 CET	8.8.8.8	192.168.2.23	0x1c50	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.818562984 CET	8.8.8.8	192.168.2.23	0x1c50	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:41.957505941 CET	8.8.8.8	192.168.2.23	0x1c50	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:42.091871023 CET	8.8.8.8	192.168.2.23	0x1c50	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:49.869193077 CET	8.8.8.8	192.168.2.23	0x92cf	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:50.003040075 CET	8.8.8.8	192.168.2.23	0x92cf	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:50.137238026 CET	8.8.8.8	192.168.2.23	0x92cf	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:50.271490097 CET	8.8.8.8	192.168.2.23	0x92cf	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:50.405961037 CET	8.8.8.8	192.168.2.23	0x92cf	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.182430983 CET	8.8.8.8	192.168.2.23	0xf316	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.316939116 CET	8.8.8.8	192.168.2.23	0xf316	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.451596975 CET	8.8.8.8	192.168.2.23	0xf316	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.586347103 CET	8.8.8.8	192.168.2.23	0xf316	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:36:52.721045971 CET	8.8.8.8	192.168.2.23	0xf316	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.481539011 CET	8.8.8.8	192.168.2.23	0xe29e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.615634918 CET	8.8.8.8	192.168.2.23	0xe29e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.751239061 CET	8.8.8.8	192.168.2.23	0xe29e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:00.885164022 CET	8.8.8.8	192.168.2.23	0xe29e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:01.019095898 CET	8.8.8.8	192.168.2.23	0xe29e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:04.799062014 CET	8.8.8.8	192.168.2.23	0xa486	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:04.933618069 CET	8.8.8.8	192.168.2.23	0xa486	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:05.068105936 CET	8.8.8.8	192.168.2.23	0xa486	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:05.201849937 CET	8.8.8.8	192.168.2.23	0xa486	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:05.335963964 CET	8.8.8.8	192.168.2.23	0xa486	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.109194040 CET	8.8.8.8	192.168.2.23	0x2d25	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.243932962 CET	8.8.8.8	192.168.2.23	0x2d25	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.386239052 CET	8.8.8.8	192.168.2.23	0x2d25	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.520175934 CET	8.8.8.8	192.168.2.23	0x2d25	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:13.654706001 CET	8.8.8.8	192.168.2.23	0x2d25	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.410593987 CET	8.8.8.8	192.168.2.23	0xfbaa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.544358015 CET	8.8.8.8	192.168.2.23	0xfbaa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.678458929 CET	8.8.8.8	192.168.2.23	0xfbaa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.820735931 CET	8.8.8.8	192.168.2.23	0xfbaa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:16.955980062 CET	8.8.8.8	192.168.2.23	0xfbaa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:26.720179081 CET	8.8.8.8	192.168.2.23	0x7545	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:26.854904890 CET	8.8.8.8	192.168.2.23	0x7545	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:26.989207983 CET	8.8.8.8	192.168.2.23	0x7545	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:27.124305964 CET	8.8.8.8	192.168.2.23	0x7545	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:27.258745909 CET	8.8.8.8	192.168.2.23	0x7545	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:33.029798985 CET	8.8.8.8	192.168.2.23	0xfb57	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:33.029798985 CET	8.8.8.8	192.168.2.23	0xfb57	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.013480902 CET	8.8.8.8	192.168.2.23	0x50f3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.147689104 CET	8.8.8.8	192.168.2.23	0x50f3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.289793015 CET	8.8.8.8	192.168.2.23	0x50f3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.424118996 CET	8.8.8.8	192.168.2.23	0x50f3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:36.558226109 CET	8.8.8.8	192.168.2.23	0x50f3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:46.220010042 CET	8.8.8.8	192.168.2.23	0x468d	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:46.220010042 CET	8.8.8.8	192.168.2.23	0x468d	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.333625078 CET	8.8.8.8	192.168.2.23	0x4bcb	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.467575073 CET	8.8.8.8	192.168.2.23	0x4bcb	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.602864981 CET	8.8.8.8	192.168.2.23	0x4bcb	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.736979961 CET	8.8.8.8	192.168.2.23	0x4bcb	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:47.876641989 CET	8.8.8.8	192.168.2.23	0x4bcb	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:51.650144100 CET	8.8.8.8	192.168.2.23	0xc2e5	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:51.784111023 CET	8.8.8.8	192.168.2.23	0xc2e5	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:51.918019056 CET	8.8.8.8	192.168.2.23	0xc2e5	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:52.499087095 CET	8.8.8.8	192.168.2.23	0xc2e5	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:52.633620024 CET	8.8.8.8	192.168.2.23	0xc2e5	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.398567915 CET	8.8.8.8	192.168.2.23	0xf9e4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.532562017 CET	8.8.8.8	192.168.2.23	0xf9e4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.666908026 CET	8.8.8.8	192.168.2.23	0xf9e4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.800818920 CET	8.8.8.8	192.168.2.23	0xf9e4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:54.935245037 CET	8.8.8.8	192.168.2.23	0xf9e4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:58.695831060 CET	8.8.8.8	192.168.2.23	0x20d9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:58.830693007 CET	8.8.8.8	192.168.2.23	0x20d9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:58.967583895 CET	8.8.8.8	192.168.2.23	0x20d9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:59.101254940 CET	8.8.8.8	192.168.2.23	0x20d9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:37:59.243473053 CET	8.8.8.8	192.168.2.23	0x20d9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.000189066 CET	8.8.8.8	192.168.2.23	0xd8ff	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.139497042 CET	8.8.8.8	192.168.2.23	0xd8ff	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.273533106 CET	8.8.8.8	192.168.2.23	0xd8ff	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.415477037 CET	8.8.8.8	192.168.2.23	0xd8ff	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:04.555495024 CET	8.8.8.8	192.168.2.23	0xd8ff	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.343108892 CET	8.8.8.8	192.168.2.23	0xecd3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.477619886 CET	8.8.8.8	192.168.2.23	0xecd3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.611838102 CET	8.8.8.8	192.168.2.23	0xecd3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.751477957 CET	8.8.8.8	192.168.2.23	0xecd3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:13.885835886 CET	8.8.8.8	192.168.2.23	0xecd3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.663110971 CET	8.8.8.8	192.168.2.23	0x74aa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.797677040 CET	8.8.8.8	192.168.2.23	0x74aa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:20.939973116 CET	8.8.8.8	192.168.2.23	0x74aa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:21.082053900 CET	8.8.8.8	192.168.2.23	0x74aa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:21.209245920 CET	8.8.8.8	192.168.2.23	0xeb21	No error (0)	daisy.ubuntu.com		162.213.35.24	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:21.209245920 CET	8.8.8.8	192.168.2.23	0xeb21	No error (0)	daisy.ubuntu.com		162.213.35.25	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:21.216025114 CET	8.8.8.8	192.168.2.23	0x74aa	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:31.979331970 CET	8.8.8.8	192.168.2.23	0x53e9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:32.113323927 CET	8.8.8.8	192.168.2.23	0x53e9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:32.255292892 CET	8.8.8.8	192.168.2.23	0x53e9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:32.390213966 CET	8.8.8.8	192.168.2.23	0x53e9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:32.529823065 CET	8.8.8.8	192.168.2.23	0x53e9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.314681053 CET	8.8.8.8	192.168.2.23	0x60a	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.448843956 CET	8.8.8.8	192.168.2.23	0x60a	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.582660913 CET	8.8.8.8	192.168.2.23	0x60a	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.724361897 CET	8.8.8.8	192.168.2.23	0x60a	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:38:36.858664989 CET	8.8.8.8	192.168.2.23	0x60a	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-12-25 16:36:20 UTC	307	OUT	POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1 Host: daisy.ubuntu.com Accept: / Content-Type: application/octet-stream X-Whoopsie-Version: 0.2.69ubuntu0.3 Content-Length: 164887 Expect: 100-continue
2024-12-25 16:36:20 UTC	25	IN	HTTP/1.1 100 Continue
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61 Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20 Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67 Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37 Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73 Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
2024-12-25 16:36:20 UTC	16384	OUT	Data Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "_source" "server/udev"Aug 17 20:25
2024-12-25 16:36:21 UTC	279	IN	HTTP/1.1 400 Bad Request Date: Wed, 25 Dec 2024 16:36:21 GMT Server: gunicorn/19.7.1 X-Daisy-Revision-Number: 979 X-Oops-Repository-Version: 0.0.0 Strict-Transport-Security: max-age=2592000 Connection: close Transfer-Encoding: chunked 17 Crash already reported. 0

Start time (UTC):	16:36:07
Start date (UTC):	25/12/2024
Path:	/tmp/Aqua.i686.elf
Arguments:	/tmp/Aqua.i686.elf
File size:	67028 bytes
MD5 hash:	d255631d3c4baf58c938eded123dc951

Start time (UTC):	16:36:09
Start date (UTC):	25/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	16:36:10
Start date (UTC):	25/12/2024
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Start time (UTC):	16:36:11
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:12
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:13
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:14
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:15
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:18
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:16
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:19
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.i686.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/gdm3.pid

/run/systemd/journal/streams/.#9:79836Ng7lzP

/run/systemd/journal/streams/.#9:79838glUXrP

/run/systemd/journal/streams/.#9:79839p39S5N

/run/systemd/journal/streams/.#9:79840yYBKrM

/run/systemd/journal/streams/.#9:79841flWJaQ

/run/systemd/journal/streams/.#9:798421GLBQQ

/run/systemd/journal/streams/.#9:79852fEGVyQ

/run/systemd/journal/streams/.#9:79853P1ckBO

/run/systemd/journal/streams/.#9:79854IVZeDM

/run/systemd/journal/streams/.#9:79855wUfqMO

/run/systemd/journal/streams/.#9:79861583RMO

/run/systemd/journal/streams/.#9:79870VXVgXN

/run/systemd/journal/streams/.#9:79878mKz10N

/run/systemd/journal/streams/.#9:80018vO8sKM

/run/systemd/journal/streams/.#9:80827HjFvWu

/run/systemd/journal/streams/.#9:808297TDUcu

/run/systemd/journal/streams/.#9:80830Vss6Pv

/run/systemd/journal/streams/.#9:80831Ow9Yox

/run/systemd/journal/streams/.#9:8083728i2Dw

/run/systemd/journal/streams/.#9:80839D57mFt

/run/systemd/journal/streams/.#9:80840qjLGJv

/run/systemd/journal/streams/.#9:80853AnvWmw

/run/systemd/journal/streams/.#9:80854sECr4v

/run/systemd/journal/streams/.#9:81489jC30xt

/run/systemd/journal/streams/.#9:81987ZY3Kxx

/run/systemd/journal/streams/.#9:83677aNhvBV

/run/systemd/journal/streams/.#9:83678AOEopT

Linux Analysis Report
Aqua.i686.elf

Start time (UTC):	16:36:23
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:24
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:26
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:28
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:33
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:36:29
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:30
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:31
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:32
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:36:38
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75