Edit tour

Linux Analysis Report
Aqua.dbg.elf

Overview

General Information

Sample name:	Aqua.dbg.elf
Analysis ID:	1580708
MD5:	78226180f205f37487849c994f9eb35a
SHA1:	3b98db60d97761ca1f0a8df8cbf28aab167d5751
SHA256:	3bcbbc785755e486cf45e2462fecf9c44f3665583ab53374604649ed2341fec5
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580708
Start date and time:	2024-12-25 17:46:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.dbg.elf
Detection:	MAL
Classification:	mal80.spre.troj.evad.linELF@0/253@235/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process Tree

system is lnxubuntu20

Aqua.dbg.elf (PID: 6275, Parent: 6202, MD5: 78226180f205f37487849c994f9eb35a) Arguments: /tmp/Aqua.dbg.elf

Aqua.dbg.elf New Fork (PID: 6276, Parent: 6275)

gnome-session-binary New Fork (PID: 6277, Parent: 1477)

sh (PID: 6277, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6277, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 6284, Parent: 1)

systemd-hostnamed (PID: 6284, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 6431, Parent: 1320)

Default (PID: 6431, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6436, Parent: 1320)

Default (PID: 6436, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6447, Parent: 1)

dbus-daemon (PID: 6447, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 6450, Parent: 1320)

Default (PID: 6450, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6452, Parent: 1860)

pulseaudio (PID: 6452, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6453, Parent: 1)

rsyslogd (PID: 6453, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 6458, Parent: 2038)

fusermount (PID: 6458, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6467, Parent: 1)

rtkit-daemon (PID: 6467, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6470, Parent: 1)

systemd-logind (PID: 6470, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6530, Parent: 1)

polkitd (PID: 6530, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6531, Parent: 1)

dbus-daemon (PID: 6531, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6535, Parent: 1)

gpu-manager (PID: 6535, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6537, Parent: 6535)

sh (PID: 6537, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6538, Parent: 6537)

grep (PID: 6538, Parent: 6537, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6539, Parent: 6535)

sh (PID: 6539, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6544, Parent: 6539)

grep (PID: 6544, Parent: 6539, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6547, Parent: 6535)

sh (PID: 6547, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6548, Parent: 6547)

grep (PID: 6548, Parent: 6547, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6549, Parent: 6535)

sh (PID: 6549, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6550, Parent: 6549)

grep (PID: 6550, Parent: 6549, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6551, Parent: 6535)

sh (PID: 6551, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6552, Parent: 6551)

grep (PID: 6552, Parent: 6551, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6556, Parent: 6535)

sh (PID: 6556, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6557, Parent: 6556)

grep (PID: 6557, Parent: 6556, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6560, Parent: 6535)

sh (PID: 6560, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6561, Parent: 6560)

grep (PID: 6561, Parent: 6560, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6563, Parent: 6535)

sh (PID: 6563, Parent: 6535, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6564, Parent: 6563)

grep (PID: 6564, Parent: 6563, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6536, Parent: 1)

rsyslogd (PID: 6536, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6555, Parent: 1)

agetty (PID: 6555, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6565, Parent: 1)

generate-config (PID: 6565, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6566, Parent: 6565)

pkill (PID: 6566, Parent: 6565, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6569, Parent: 1)

gdm-wait-for-drm (PID: 6569, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6575, Parent: 1)

rsyslogd (PID: 6575, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6577, Parent: 1)

dbus-daemon (PID: 6577, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6584, Parent: 1)

systemd-logind (PID: 6584, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6643, Parent: 1)

journalctl (PID: 6643, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6644, Parent: 1)

systemd-journald (PID: 6644, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6645, Parent: 1)

agetty (PID: 6645, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6649, Parent: 1)

rsyslogd (PID: 6649, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6650, Parent: 1)

dbus-daemon (PID: 6650, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6653, Parent: 1)

systemd-logind (PID: 6653, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6710, Parent: 1)

systemd-journald (PID: 6710, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6712, Parent: 1)

gpu-manager (PID: 6712, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6716, Parent: 6712)

sh (PID: 6716, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6717, Parent: 6716)

grep (PID: 6717, Parent: 6716, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6718, Parent: 6712)

sh (PID: 6718, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6719, Parent: 6718)

grep (PID: 6719, Parent: 6718, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6720, Parent: 6712)

sh (PID: 6720, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6721, Parent: 6720)

grep (PID: 6721, Parent: 6720, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6722, Parent: 6712)

sh (PID: 6722, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6723, Parent: 6722)

grep (PID: 6723, Parent: 6722, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6725, Parent: 6712)

sh (PID: 6725, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6726, Parent: 6725)

grep (PID: 6726, Parent: 6725, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6728, Parent: 6712)

sh (PID: 6728, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6729, Parent: 6728)

grep (PID: 6729, Parent: 6728, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6731, Parent: 6712)

sh (PID: 6731, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6732, Parent: 6731)

grep (PID: 6732, Parent: 6731, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6733, Parent: 6712)

sh (PID: 6733, Parent: 6712, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6734, Parent: 6733)

grep (PID: 6734, Parent: 6733, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6736, Parent: 1)

rsyslogd (PID: 6736, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6737, Parent: 1)

generate-config (PID: 6737, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6740, Parent: 6737)

pkill (PID: 6740, Parent: 6737, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6742, Parent: 1)

rsyslogd (PID: 6742, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6747, Parent: 1)

dbus-daemon (PID: 6747, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6748, Parent: 1)

gdm-wait-for-drm (PID: 6748, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6752, Parent: 1)

systemd-logind (PID: 6752, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6816, Parent: 1)

rsyslogd (PID: 6816, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6817, Parent: 1)

dbus-daemon (PID: 6817, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6823, Parent: 1)

systemd-journald (PID: 6823, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6826, Parent: 1)

systemd-logind (PID: 6826, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6884, Parent: 1)

dbus-daemon (PID: 6884, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6885, Parent: 1)

rsyslogd (PID: 6885, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6886, Parent: 1)

agetty (PID: 6886, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6887, Parent: 1)

systemd-journald (PID: 6887, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6890, Parent: 1)

systemd-logind (PID: 6890, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6947, Parent: 1)

gpu-manager (PID: 6947, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6951, Parent: 6947)

sh (PID: 6951, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6952, Parent: 6951)

grep (PID: 6952, Parent: 6951, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6954, Parent: 6947)

sh (PID: 6954, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6957, Parent: 6954)

grep (PID: 6957, Parent: 6954, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6960, Parent: 6947)

sh (PID: 6960, Parent: 6947, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6961, Parent: 6960)

grep (PID: 6961, Parent: 6960, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6959, Parent: 1)

dbus-daemon (PID: 6959, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6962, Parent: 1)

rsyslogd (PID: 6962, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6963, Parent: 1)

generate-config (PID: 6963, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6964, Parent: 6963)

pkill (PID: 6964, Parent: 6963, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6966, Parent: 1)

dbus-daemon (PID: 6966, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6974, Parent: 1)

gdm-wait-for-drm (PID: 6974, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6978, Parent: 1)

rsyslogd (PID: 6978, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6987, Parent: 1)

dbus-daemon (PID: 6987, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6988, Parent: 1)

systemd-journald (PID: 6988, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6991, Parent: 1)

systemd-logind (PID: 6991, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7048, Parent: 1)

rsyslogd (PID: 7048, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7049, Parent: 1)

agetty (PID: 7049, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7051, Parent: 1)

dbus-daemon (PID: 7051, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7052, Parent: 1)

systemd-journald (PID: 7052, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7055, Parent: 1)

systemd-logind (PID: 7055, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7112, Parent: 1)

gpu-manager (PID: 7112, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7116, Parent: 7112)

sh (PID: 7116, Parent: 7112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7117, Parent: 7116)

grep (PID: 7117, Parent: 7116, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7119, Parent: 7112)

sh (PID: 7119, Parent: 7112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7120, Parent: 7119)

grep (PID: 7120, Parent: 7119, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7124, Parent: 7112)

sh (PID: 7124, Parent: 7112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

systemd New Fork (PID: 7121, Parent: 1)

rsyslogd (PID: 7121, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7123, Parent: 1)

dbus-daemon (PID: 7123, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7125, Parent: 1)

generate-config (PID: 7125, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7126, Parent: 7125)

pkill (PID: 7126, Parent: 7125, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7127, Parent: 1)

rsyslogd (PID: 7127, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7131, Parent: 1)

dbus-daemon (PID: 7131, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7138, Parent: 1)

gdm-wait-for-drm (PID: 7138, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7143, Parent: 1)

rsyslogd (PID: 7143, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7150, Parent: 1)

dbus-daemon (PID: 7150, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7153, Parent: 1)

systemd-journald (PID: 7153, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7156, Parent: 1)

systemd-logind (PID: 7156, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7213, Parent: 1)

rsyslogd (PID: 7213, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7214, Parent: 1)

agetty (PID: 7214, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7216, Parent: 1)

dbus-daemon (PID: 7216, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7220, Parent: 1)

systemd-journald (PID: 7220, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7223, Parent: 1)

systemd-logind (PID: 7223, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7280, Parent: 1)

gpu-manager (PID: 7280, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7281, Parent: 7280)

sh (PID: 7281, Parent: 7280, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7283, Parent: 7281)

grep (PID: 7283, Parent: 7281, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7284, Parent: 7280)

sh (PID: 7284, Parent: 7280, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7285, Parent: 7284)

grep (PID: 7285, Parent: 7284, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7287, Parent: 7280)

sh (PID: 7287, Parent: 7280, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7288, Parent: 7287)

grep (PID: 7288, Parent: 7287, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7286, Parent: 1)

rsyslogd (PID: 7286, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7289, Parent: 1)

dbus-daemon (PID: 7289, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7291, Parent: 1)

generate-config (PID: 7291, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7292, Parent: 7291)

pkill (PID: 7292, Parent: 7291, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7293, Parent: 1)

dbus-daemon (PID: 7293, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7294, Parent: 1)

rsyslogd (PID: 7294, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7305, Parent: 1)

gdm-wait-for-drm (PID: 7305, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7311, Parent: 1)

rsyslogd (PID: 7311, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7313, Parent: 1)

dbus-daemon (PID: 7313, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7319, Parent: 1)

systemd-journald (PID: 7319, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7322, Parent: 1)

systemd-logind (PID: 7322, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7380, Parent: 1)

agetty (PID: 7380, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7381, Parent: 1)

dbus-daemon (PID: 7381, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7382, Parent: 1)

rsyslogd (PID: 7382, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7383, Parent: 1)

systemd-journald (PID: 7383, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7387, Parent: 1)

systemd-logind (PID: 7387, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7444, Parent: 1)

gpu-manager (PID: 7444, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7448, Parent: 7444)

sh (PID: 7448, Parent: 7444, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7449, Parent: 7448)

grep (PID: 7449, Parent: 7448, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7450, Parent: 7444)

sh (PID: 7450, Parent: 7444, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7451, Parent: 7450)

grep (PID: 7451, Parent: 7450, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7452, Parent: 7444)

sh (PID: 7452, Parent: 7444, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7455, Parent: 7452)

grep (PID: 7455, Parent: 7452, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7453, Parent: 1)

dbus-daemon (PID: 7453, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7456, Parent: 1)

rsyslogd (PID: 7456, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7457, Parent: 1)

generate-config (PID: 7457, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7458, Parent: 7457)

pkill (PID: 7458, Parent: 7457, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7459, Parent: 1)

dbus-daemon (PID: 7459, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7470, Parent: 1)

gdm-wait-for-drm (PID: 7470, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7474, Parent: 1)

rsyslogd (PID: 7474, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7475, Parent: 1)

dbus-daemon (PID: 7475, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7482, Parent: 1860)

dbus-daemon (PID: 7482, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7483, Parent: 1860)

pulseaudio (PID: 7483, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7484, Parent: 1)

systemd-journald (PID: 7484, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7487, Parent: 1)

systemd-logind (PID: 7487, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7544, Parent: 1)

dbus-daemon (PID: 7544, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7545, Parent: 1)

rsyslogd (PID: 7545, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7546, Parent: 1)

agetty (PID: 7546, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7553, Parent: 1)

gpu-manager (PID: 7553, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7554, Parent: 7553)

sh (PID: 7554, Parent: 7553, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7555, Parent: 7554)

grep (PID: 7555, Parent: 7554, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7557, Parent: 7553)

sh (PID: 7557, Parent: 7553, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7558, Parent: 7557)

grep (PID: 7558, Parent: 7557, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7560, Parent: 7553)

sh (PID: 7560, Parent: 7553, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7562, Parent: 7560)

grep (PID: 7562, Parent: 7560, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7559, Parent: 1)

dbus-daemon (PID: 7559, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7561, Parent: 1860)

pulseaudio (PID: 7561, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7563, Parent: 1)

rsyslogd (PID: 7563, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7565, Parent: 1)

generate-config (PID: 7565, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7566, Parent: 7565)

pkill (PID: 7566, Parent: 7565, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7572, Parent: 1)

rtkit-daemon (PID: 7572, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7576, Parent: 1)

polkitd (PID: 7576, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7583, Parent: 1)

gdm-wait-for-drm (PID: 7583, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7586, Parent: 1860)

dbus-daemon (PID: 7586, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7592, Parent: 1)

dbus-daemon (PID: 7592, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7593, Parent: 1)

rsyslogd (PID: 7593, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7594, Parent: 1860)

pulseaudio (PID: 7594, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7595, Parent: 1)

systemd-journald (PID: 7595, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7598, Parent: 1)

systemd-logind (PID: 7598, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7655, Parent: 1)

agetty (PID: 7655, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7657, Parent: 1)

dbus-daemon (PID: 7657, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7658, Parent: 1)

rsyslogd (PID: 7658, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7659, Parent: 1)

gpu-manager (PID: 7659, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7660, Parent: 7659)

sh (PID: 7660, Parent: 7659, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7665, Parent: 7660)

grep (PID: 7665, Parent: 7660, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7666, Parent: 7659)

sh (PID: 7666, Parent: 7659, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7667, Parent: 7666)

grep (PID: 7667, Parent: 7666, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7669, Parent: 7659)

sh (PID: 7669, Parent: 7659, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7670, Parent: 7669)

grep (PID: 7670, Parent: 7669, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7668, Parent: 1860)

pulseaudio (PID: 7668, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7671, Parent: 1)

dbus-daemon (PID: 7671, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7675, Parent: 1)

rsyslogd (PID: 7675, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7676, Parent: 1)

generate-config (PID: 7676, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7677, Parent: 7676)

pkill (PID: 7677, Parent: 7676, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7683, Parent: 1)

rtkit-daemon (PID: 7683, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7687, Parent: 1)

polkitd (PID: 7687, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7692, Parent: 1)

gdm-wait-for-drm (PID: 7692, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7697, Parent: 1860)

dbus-daemon (PID: 7697, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7699, Parent: 1860)

pulseaudio (PID: 7699, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7701, Parent: 1)

rsyslogd (PID: 7701, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7707, Parent: 1)

systemd-journald (PID: 7707, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7710, Parent: 1)

systemd-logind (PID: 7710, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7767, Parent: 1)

dbus-daemon (PID: 7767, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7768, Parent: 1)

agetty (PID: 7768, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7769, Parent: 1860)

pulseaudio (PID: 7769, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7771, Parent: 1)

gpu-manager (PID: 7771, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7772, Parent: 7771)

sh (PID: 7772, Parent: 7771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7773, Parent: 7772)

grep (PID: 7773, Parent: 7772, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7777, Parent: 7771)

sh (PID: 7777, Parent: 7771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7778, Parent: 7777)

grep (PID: 7778, Parent: 7777, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7779, Parent: 7771)

sh (PID: 7779, Parent: 7771, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7780, Parent: 7779)

systemd New Fork (PID: 7775, Parent: 1)

dbus-daemon (PID: 7775, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7776, Parent: 1)

rsyslogd (PID: 7776, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7782, Parent: 1)

generate-config (PID: 7782, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7784, Parent: 7782)

pkill (PID: 7784, Parent: 7782, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7783, Parent: 1860)

pulseaudio (PID: 7783, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7792, Parent: 1)

rtkit-daemon (PID: 7792, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7796, Parent: 1)

polkitd (PID: 7796, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7801, Parent: 1)

gdm-wait-for-drm (PID: 7801, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7806, Parent: 1860)

dbus-daemon (PID: 7806, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7808, Parent: 1)

rsyslogd (PID: 7808, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7810, Parent: 1860)

pulseaudio (PID: 7810, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7811, Parent: 1)

dbus-daemon (PID: 7811, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7812, Parent: 1)

rtkit-daemon (PID: 7812, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7815, Parent: 1)

systemd-logind (PID: 7815, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7874, Parent: 1)

polkitd (PID: 7874, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7880, Parent: 1)

systemd-journald (PID: 7880, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7881, Parent: 1)

agetty (PID: 7881, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7882, Parent: 1)

rsyslogd (PID: 7882, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7884, Parent: 1)

dbus-daemon (PID: 7884, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7887, Parent: 1)

systemd-logind (PID: 7887, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7944, Parent: 1)

gpu-manager (PID: 7944, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7945, Parent: 7944)

sh (PID: 7945, Parent: 7944, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7949, Parent: 7945)

grep (PID: 7949, Parent: 7945, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7950, Parent: 7944)

sh (PID: 7950, Parent: 7944, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7952, Parent: 7950)

grep (PID: 7952, Parent: 7950, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7955, Parent: 7944)

sh (PID: 7955, Parent: 7944, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7958, Parent: 7955)

grep (PID: 7958, Parent: 7955, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7953, Parent: 1)

rsyslogd (PID: 7953, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7954, Parent: 1860)

pulseaudio (PID: 7954, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7956, Parent: 1)

dbus-daemon (PID: 7956, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7959, Parent: 1)

generate-config (PID: 7959, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7960, Parent: 7959)

pkill (PID: 7960, Parent: 7959, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7968, Parent: 1)

rtkit-daemon (PID: 7968, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7972, Parent: 1)

polkitd (PID: 7972, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7977, Parent: 1)

gdm-wait-for-drm (PID: 7977, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7980, Parent: 1860)

dbus-daemon (PID: 7980, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7984, Parent: 1)

rsyslogd (PID: 7984, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7988, Parent: 1)

dbus-daemon (PID: 7988, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7990, Parent: 1860)

pulseaudio (PID: 7990, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7991, Parent: 1)

systemd-journald (PID: 7991, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7994, Parent: 1)

systemd-logind (PID: 7994, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 8054, Parent: 1)

dbus-daemon (PID: 8054, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 8055, Parent: 1)

rsyslogd (PID: 8055, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 8060, Parent: 1)

dbus-daemon (PID: 8060, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 8061, Parent: 1)

gpu-manager (PID: 8061, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

systemd New Fork (PID: 8062, Parent: 1)

rsyslogd (PID: 8062, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 8064, Parent: 1860)

pulseaudio (PID: 8064, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.dbg.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xaa74:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
Aqua.dbg.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xb263:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
Aqua.dbg.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x7aee:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xccfc:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
Aqua.dbg.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xebaa:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
Aqua.dbg.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xae23:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
Aqua.dbg.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xb0ee:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
Aqua.dbg.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x36a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
Aqua.dbg.elf	Linux_Trojan_Mirai_449937aa	unknown	unknown	0xff66:$a: 00 00 5B 72 65 73 6F 6C 76 5D 20 46 6F 75 6E 64 20 49 50 20
Aqua.dbg.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x46d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
Aqua.dbg.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x4762:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 5 entries

String: Could not open raw socket!Failed to create socket!ACK Stomp got SYN+ACK!Could not listen on raw socket!Couldn't connect to host for ACK Stomp in time. RetryingEOF/proc//proc/%s/cmdlinerwgetcurlftpechokillbashrebootshutdownhaltpoweroff/fdsocket/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Source: global traffic

TCP traffic: 192.168.2.23:50014 -> 89.190.156.145:7733

Source: global traffic

HTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue

Source: /usr/sbin/rsyslogd (PID: 6453)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6536)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6575)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6649)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6736)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6742)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6816)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6885)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6962)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6978)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 7048)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7121)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7127)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7143)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7213)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7286)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7294)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7311)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7382)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7456)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7474)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7545)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7563)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7658)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7675)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7701)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7776)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7808)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7882)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7953)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7984)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 8055)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 6644)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6823)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6988)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7052)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7153)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7220)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7319)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7383)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7484)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7595)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7707)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7880)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7991)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: 45.148.10.84
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Source: syslog.512.dr, syslog.32.dr, syslog.378.dr, syslog.170.dr, syslog.94.dr, syslog.220.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37648
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6277, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6259, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6260, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6447, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6451, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6452, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6453, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6531, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6555, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6113, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6286, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6569, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6574, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6575, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6577, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6584, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6644, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6646, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6649, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6712, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6735, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6736, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6645, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6742, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6814, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6814, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6710, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6748, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6815, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6816, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6817, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6823, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6883, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6884, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6885, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6958, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6959, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6886, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6962, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6965, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6966, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6977, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6977, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6887, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6890, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6974, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6978, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6979, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6985, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6987, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6988, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6991, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7048, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7050, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7051, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7112, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7121, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7122, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7123, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7049, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7127, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7130, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7131, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7142, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7142, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7052, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7055, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7138, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7143, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7147, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7148, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7150, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7153, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7156, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7213, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7215, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7216, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7280, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7286, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7289, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7290, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7214, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7293, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7294, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7308, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7308, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7220, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7223, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7305, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7309, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7310, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7311, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7313, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7319, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7322, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7379, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7381, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7382, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7444, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7453, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7454, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7380, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7456, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7459, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7473, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7473, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7383, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7387, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7470, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7474, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7475, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7476, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7477, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7482, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7483, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7544, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7545, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7549, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7553, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7546, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7559, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7561, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7563, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7484, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7487, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7583, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7586, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7589, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7590, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7592, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7593, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7594, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7656, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7657, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7658, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7659, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7655, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7668, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7671, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7675, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7595, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7598, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7692, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7697, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7698, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7699, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7700, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7701, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7767, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7769, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7770, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7771, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7768, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7775, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7776, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7783, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7707, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7801, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7806, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7807, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7808, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7809, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7811, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7815, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7810, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7882, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7883, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7884, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7944, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7881, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7953, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7954, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7956, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7880, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7887, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7977, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7980, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7983, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7984, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7988, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7989, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7990, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 8054, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 8055, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 8056, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6277, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6259, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6260, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6447, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6451, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6452, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6453, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6531, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6555, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6113, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6286, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6569, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6574, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6575, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6577, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6584, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6644, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6646, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6649, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6712, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6735, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6736, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6645, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6741, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6742, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6814, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6814, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6710, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6748, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6815, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6816, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6817, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6823, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6883, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6884, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6885, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6947, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6958, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6959, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6886, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6962, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6965, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6966, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6977, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6977, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6887, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6890, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6974, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6978, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6979, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6985, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6987, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6988, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 6991, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7048, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7050, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7051, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7112, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7121, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7122, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7123, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7049, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7127, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7130, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7131, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7142, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7142, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7052, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7055, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7138, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7143, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7147, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7148, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7150, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7153, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7156, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7213, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7215, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7216, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7280, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7286, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7289, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7290, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7214, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7293, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7294, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7308, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7308, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7220, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7223, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7305, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7309, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7310, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7311, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7313, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7319, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7322, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7379, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7381, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7382, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7444, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7453, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7454, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7380, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7456, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7459, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7473, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7473, result: no such process	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7383, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7387, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7470, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7474, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7475, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7476, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7477, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7482, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7483, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7544, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7545, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7549, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7553, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7546, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7559, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7561, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7563, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7484, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7487, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7583, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7586, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7589, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7590, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7592, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7593, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7594, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7656, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7657, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7658, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7659, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7655, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7668, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7671, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7675, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7595, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7598, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7692, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7697, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7698, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7699, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7700, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7701, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7767, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7769, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7770, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7771, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7768, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7775, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7776, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7783, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7707, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7801, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7806, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7807, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7808, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7809, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7811, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7815, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7810, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7882, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7883, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7884, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7944, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7881, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7953, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7954, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7956, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7880, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7887, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7977, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7980, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7983, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7984, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7988, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7989, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 7990, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 8054, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 8055, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 6276)	SIGKILL sent: pid: 8056, result: successful	Jump to behavior

Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa reference_sample = 6f27766534445cffb097c7c52db1fca53b2210c1b10b75594f77c34dc8b994fe, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = cf2c6b86830099f039b41aeaafbffedfb8294a1124c499e99a11f48a06cd1dfd, id = 449937aa-682a-4906-89ab-80d7127e461e, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16

Source: classification engine

Classification label: mal80.spre.troj.evad.linELF@0/253@235/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6447)	File: /proc/6447/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6458)	File: /proc/6458/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6531)	File: /proc/6531/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6577)	File: /proc/6577/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6650)	File: /proc/6650/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6747)	File: /proc/6747/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6817)	File: /proc/6817/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6884)	File: /proc/6884/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6959)	File: /proc/6959/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6966)	File: /proc/6966/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6987)	File: /proc/6987/mounts
Source: /usr/bin/dbus-daemon (PID: 7051)	File: /proc/7051/mounts
Source: /usr/bin/dbus-daemon (PID: 7123)	File: /proc/7123/mounts
Source: /usr/bin/dbus-daemon (PID: 7131)	File: /proc/7131/mounts
Source: /usr/bin/dbus-daemon (PID: 7150)	File: /proc/7150/mounts
Source: /usr/bin/dbus-daemon (PID: 7216)	File: /proc/7216/mounts
Source: /usr/bin/dbus-daemon (PID: 7289)	File: /proc/7289/mounts
Source: /usr/bin/dbus-daemon (PID: 7293)	File: /proc/7293/mounts
Source: /usr/bin/dbus-daemon (PID: 7313)	File: /proc/7313/mounts
Source: /usr/bin/dbus-daemon (PID: 7381)	File: /proc/7381/mounts
Source: /usr/bin/dbus-daemon (PID: 7453)	File: /proc/7453/mounts
Source: /usr/bin/dbus-daemon (PID: 7459)	File: /proc/7459/mounts
Source: /usr/bin/dbus-daemon (PID: 7475)	File: /proc/7475/mounts
Source: /usr/bin/dbus-daemon (PID: 7482)	File: /proc/7482/mounts
Source: /usr/bin/dbus-daemon (PID: 7544)	File: /proc/7544/mounts
Source: /usr/bin/dbus-daemon (PID: 7559)	File: /proc/7559/mounts
Source: /usr/bin/dbus-daemon (PID: 7586)	File: /proc/7586/mounts
Source: /usr/bin/dbus-daemon (PID: 7657)	File: /proc/7657/mounts
Source: /usr/bin/dbus-daemon (PID: 7671)	File: /proc/7671/mounts
Source: /usr/bin/dbus-daemon (PID: 7697)	File: /proc/7697/mounts
Source: /usr/bin/dbus-daemon (PID: 7767)	File: /proc/7767/mounts
Source: /usr/bin/dbus-daemon (PID: 7775)	File: /proc/7775/mounts
Source: /usr/bin/dbus-daemon (PID: 7806)	File: /proc/7806/mounts
Source: /usr/bin/dbus-daemon (PID: 7811)	File: /proc/7811/mounts
Source: /usr/bin/dbus-daemon (PID: 7884)	File: /proc/7884/mounts
Source: /usr/bin/dbus-daemon (PID: 7956)	File: /proc/7956/mounts
Source: /usr/bin/dbus-daemon (PID: 7980)	File: /proc/7980/mounts
Source: /usr/bin/dbus-daemon (PID: 7988)	File: /proc/7988/mounts
Source: /usr/bin/dbus-daemon (PID: 8054)	File: /proc/8054/mounts
Source: /usr/bin/dbus-daemon (PID: 8060)	File: /proc/8060/mounts

Source: /usr/libexec/gsd-rfkill (PID: 6277)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 6277)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6284)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6470)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6470)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6470)	File: /run/systemd/seats/.#seat0DWYJUs	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 6530)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6653)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6653)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6653)	File: /run/systemd/seats/.#seat0nRd3Bh	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78629EtYb6z	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78630x5oJbB	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78631tgt9GA	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:786329aZDCy	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78633URCUmB	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78634UvSG5y	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78643g09UWx	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78644tQdCSB	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78645QoaerA	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:786538CUWsz	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:786602IAdRB	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78742Gd2hdy	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	File: /run/systemd/journal/streams/.#9:78819WWBjNz	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6752)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6752)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6752)	File: /run/systemd/seats/.#seat0VnYAVM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81753AWelzY	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81754umducW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81755gGs1NW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81761c0oGVZ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81762UWZ8wW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81769lvLZeX	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81770DldQwX	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81771Rw5D3V	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:817721pXI5X	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81778mFKfrW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:817860tcOuW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81870P46MnX	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	File: /run/systemd/journal/streams/.#9:81888bbMB8V	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6890)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6890)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6890)	File: /run/systemd/seats/.#seat0ITEYJb	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82557wX14Hr
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:825589FZiet
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82564Tl081o
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82566Wzcuqr
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82573SH3e8o
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82574r201ap
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82575SDeiUs
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82576nf0awp
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82583Q1PNlr
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82584p2nM9s
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82594hKX2Lp
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82725QXyAeq
Source: /lib/systemd/systemd-journald (PID: 7052)	File: /run/systemd/journal/streams/.#9:82756VsuG9s
Source: /lib/systemd/systemd-logind (PID: 7055)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7055)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7055)	File: /run/systemd/seats/.#seat0EgAPYF
Source: /lib/systemd/systemd-logind (PID: 7156)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7156)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85303iA4MSa
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85307CSnnka
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85308PkQjn9
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85309gdWG76
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85310OIqf7a
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:853171ObKj7
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85318GDx087
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:853194Z4aF8
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85321Lw80l9
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85327t6jh16
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:85328xshWGa
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:86283HxW7K9
Source: /lib/systemd/systemd-journald (PID: 7220)	File: /run/systemd/journal/streams/.#9:86446ZX6qH6
Source: /lib/systemd/systemd-logind (PID: 7223)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7223)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7223)	File: /run/systemd/seats/.#seat0Hwzucl
Source: /lib/systemd/systemd-logind (PID: 7322)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7322)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:8726978mr5u
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87270CmZqhs
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87271PXSymt
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87272NyrYNs
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87273LjpXNu
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87274071OWq
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87275M7uPcv
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87276Mwd7Hs
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87277Ovu10s
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:8728947W75s
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:872906p5Vyt
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:873789hedgv
Source: /lib/systemd/systemd-journald (PID: 7383)	File: /run/systemd/journal/streams/.#9:87385MQqS9q
Source: /lib/systemd/systemd-logind (PID: 7387)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7387)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7387)	File: /run/systemd/seats/.#seat0F7Yq8K
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90118TbuPR7
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90119JeML77
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90120IAZrM4
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90121rxiwM8
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90123X6MOv8
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:901349KDNl5
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90142RWOEs5
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90143XWZzK6
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90144zhuF57
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90152W7A0Q6
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90154TB1DH7
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90155hvf6o4
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90156j9KrD8
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90187qPHPU5
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:89457m9Y0o6
Source: /lib/systemd/systemd-journald (PID: 7484)	File: /run/systemd/journal/streams/.#9:90396tQkmY7
Source: /lib/systemd/systemd-logind (PID: 7487)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7487)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7487)	File: /run/systemd/seats/.#seat0VLY28l
Source: /usr/lib/policykit-1/polkitd (PID: 7576)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92185HgYyLw
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92187JD2Fbu
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92188wKRYZv
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92189Ub5hlv
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:921913q08bw
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:9219817AcUt
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92199AjaHiu
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92205xWjAIt
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92218F0xX1u
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92219JccTyt
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92220K2zBgv
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:922212VwRNs
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:92256GB69av
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:91519K4AxXw
Source: /lib/systemd/systemd-journald (PID: 7595)	File: /run/systemd/journal/streams/.#9:9152010VOgt
Source: /lib/systemd/systemd-logind (PID: 7598)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7598)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7598)	File: /run/systemd/seats/.#seat0ScHJyJ
Source: /usr/lib/policykit-1/polkitd (PID: 7687)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93108pDcbVZ
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93110tUMBMW
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93112ZNDMJY
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93115LsYy9Y
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93116NKET5X
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93128DuRNjX
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93132avIBwX
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93140xbbw3X
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93141GVfSMY
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93152RdP1hX
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93153k2PmwX
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:93154TtbYLZ
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:933177CwH9W
Source: /lib/systemd/systemd-journald (PID: 7707)	File: /run/systemd/journal/streams/.#9:94332XZNAIX
Source: /lib/systemd/systemd-logind (PID: 7710)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7710)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7710)	File: /run/systemd/seats/.#seat0boCnqc
Source: /usr/lib/policykit-1/polkitd (PID: 7796)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7815)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7815)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7815)	File: /run/systemd/seats/.#seat0TKPyZ9
Source: /usr/lib/policykit-1/polkitd (PID: 7874)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95440ZPcTd1
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95442Azbd21
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:9544496xJl4
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95445PQ3Wl2
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95446FElFh4
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95448wJIqx4
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95449inpKO2
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:954506ccx54
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:9545198ou10
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95452SWAep1
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:954597v1ge4
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95460i0kFB2
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95468SGO4f2
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:954697NwcE4
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95470GcY0G1
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95471iJehg1
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:95472Ps9MF3
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:96525bOb480
Source: /lib/systemd/systemd-journald (PID: 7880)	File: /run/systemd/journal/streams/.#9:96535tIXvG4
Source: /lib/systemd/systemd-logind (PID: 7887)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7887)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7887)	File: /run/systemd/seats/.#seat0SawTUB
Source: /usr/lib/policykit-1/polkitd (PID: 7972)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7994)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7994)	Directory: <invalid fd (17)>/..

Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7484/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7484/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7484/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7484/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7484/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7484/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7572/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7561/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7561/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7561/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7561/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7561/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7561/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7561/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7563/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7563/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7563/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7563/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7563/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7563/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7563/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7576/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7576/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7576/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7576/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7576/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7576/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7576/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7564/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7564/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7564/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7564/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7564/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7564/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7564/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7487/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7487/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7487/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7487/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7487/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7487/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7487/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7586/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7586/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7586/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7586/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7586/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7586/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7586/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7545/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7545/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7545/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7545/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7545/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7545/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7545/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7544/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7544/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7544/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7544/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7544/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7544/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7544/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7590/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7590/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7590/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7590/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7590/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7590/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7590/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7482/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7482/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7482/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7482/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7482/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7482/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/7482/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/environ
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/sched
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7484)	File opened: /proc/1/cgroup

Source: /usr/bin/gpu-manager (PID: 6537)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6539)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6547)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6549)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6551)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6556)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6560)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6563)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6716)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6718)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6720)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6722)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6725)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6728)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6731)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6733)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6951)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6954)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6960)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7116)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7119)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7124)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7281)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7284)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7287)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7448)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7450)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7452)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7554)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7557)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7560)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7660)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7666)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7669)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7772)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7777)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7779)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7945)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7950)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7955)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"

Source: /bin/sh (PID: 6538)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6544)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6548)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6550)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6552)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6557)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6561)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6564)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6717)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6719)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6721)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6723)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6726)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6729)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6732)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6734)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6952)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6957)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6961)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 7117)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7120)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7283)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7285)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7288)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7449)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7451)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7455)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7555)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7558)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7562)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7665)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7667)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7670)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7773)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7778)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7949)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7952)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7958)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

Source: /usr/share/gdm/generate-config (PID: 6566)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6740)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6964)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 7126)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7292)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7458)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7566)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7677)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7784)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7960)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 6644)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6823)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6988)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7052)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7153)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7220)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7319)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7383)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7484)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7595)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7707)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7880)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7991)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 6555)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6645)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6886)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 7049)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7214)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7380)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7546)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7655)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7768)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7881)	Reads version info: /etc/issue

Source: /usr/sbin/rsyslogd (PID: 6453)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6453)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6535)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6536)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6536)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6575)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6649)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6742)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6742)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6816)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6885)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6962)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6962)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6978)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7048)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7127)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7127)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7143)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7213)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7294)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7294)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7382)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7456)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7456)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7474)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7545)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7563)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7563)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7658)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7675)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7675)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7701)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7776)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7776)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 7882)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7953)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7953)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7984)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 8055)	Log file created: /var/log/kern.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.dbg.elf (PID: 6275)

File: /tmp/Aqua.dbg.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6535)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6712)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6947)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7112)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7280)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7444)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7553)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7659)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7771)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7944)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 6566)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6740)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6964)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 7126)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7292)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7458)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7561)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7566)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7668)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7677)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7784)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7783)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7810)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7954)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7960)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 6284)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6453)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6535)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6536)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6555)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6575)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6644)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6645)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6649)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6710)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6712)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6736)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6742)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6816)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6823)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6885)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6886)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6887)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6962)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6978)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6988)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7048)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7049)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7052)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7121)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7127)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7143)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7153)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7213)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7214)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7220)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7286)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7294)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7311)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7319)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7380)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7382)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7383)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7456)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7474)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7484)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7545)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7546)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7561)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7563)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7593)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7595)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7655)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7658)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7668)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7675)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7701)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7707)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7768)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7776)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7783)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7808)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7810)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7880)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7881)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7882)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7953)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7954)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7984)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7991)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 8055)	Queries kernel information via 'uname':

Source: syslog.32.dr	Binary or memory string: Dec 25 10:47:12 galassia kernel: [ 427.883152] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
Source: syslog.32.dr	Binary or memory string: Dec 25 10:47:12 galassia kernel: [ 427.883134] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel drm parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi vmxnet3 scsi_transport_spi mptscsih libahci mptbase

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.dbg.elf	31%	Virustotal		Browse
Aqua.dbg.elf	32%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.dbg.elf	100%	Avira	EXP/ELF.Mirai.W
Aqua.dbg.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
daisy.ubuntu.com	162.213.35.25	true	false		high
45.148.10.84	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.512.dr, syslog.32.dr, syslog.378.dr, syslog.170.dr, syslog.94.dr, syslog.220.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.213.35.24	unknown	United States	41231	CANONICAL-ASGB	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.213.35.24	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse
	njvwa4.elf	Get hash	malicious	Mirai	Browse
	qkehusl.elf	Get hash	malicious	Mirai	Browse
	wheiuwa4.elf	Get hash	malicious	Mirai	Browse
	iwir64.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.ppc.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
89.190.156.145	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb
91.189.91.43	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	na.elf	Get hash	malicious	Unknown	Browse
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse
	xd.x86_64.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
daisy.ubuntu.com	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	162.213.35.24
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	Aqua.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	Aqua.arm6.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	boatnet.mpsl.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.sh4.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	boatnet.arm6.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	ngwa5.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	kqibeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
CANONICAL-ASGB	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
CANONICAL-ASGB	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.ppc.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	na.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
INIT7CH	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	na.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	boatnet.ppc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.arc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.m68k.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	109.202.202.202

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.492225951931036
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvU0RVOHW7DDh1B8jq:SbFuFyLVIg1BG+f+MXPO6DVsji4s
MD5:	9E9A61253CD667C6152CA261AC253E0C
SHA1:	452F3ED4B1787C6C332FD716C17AC052FB9942AF
SHA-256:	0B62CEFCAAB2BAF5180703B553CC72A0A09ACEB811EBB6C5F69ADD6001DBB559
SHA-512:	FB25CA2D07690375BE3A956E43BCA0D8906B0CBC1ACAF894ED159BC843CAA4C9E297DF1B84BB2507FDDF38E1D7D83966A9A7C8515463B0B7FCBE465F972C4DF3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=edfbc474e5064894b348ffdc38ee4dae.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:78630x5oJbB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.349559549838284
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MumzshVH+qjdCLKzK:qgFq6g10+f+M7AdlCLAK
MD5:	AE47B0DA5A37D2282421BA6BDBCA67B5
SHA1:	C56C05BF37478CAC1615A6B8A4B04A4099C2CD4C
SHA-256:	F345D31BEBE870E5AC24B92A99A878A541262AD55C6AF9B133388FE3DA375C02
SHA-512:	DA7FB660ECF31E7A5ABB87FE82F53CFFBD3DB0BD543934304108D461E5F99876FEABDE7B1D9ECD8B57FAA57977C43BF27BC8F56E2E888A0CB221CF1D7B323005
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dbc7e8c7d30e41518cfde7ec10f40d25.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:78631tgt9GA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422210853230371
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5yVAy2GX+1HDvATjx:SbFuFyLVIg1BG+f+MIXVX+NETjosQu
MD5:	B0B4EF14F35F5183D8F3255B81C18EDE
SHA1:	3ECB585A2ABF316F9492F8F225E79F435E66DA11
SHA-256:	BBD2FE8BFAD029E90728148DF724564F822A4BE36AB41447742C03A81B06ACF9
SHA-512:	24CF78B143A833E4421242A1BBFD230A8F15FD67162E5C537787BC2168A246F77113E510B4F24EBA60DEACA3676B01672E9E7EBE9B146FDA067AE364BB9F9BF3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3e282e5ae7d345d692c002c313fb4b8d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:786329aZDCy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.47252680951469
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4zTTl70jZcHcljX+:qgFq6g10+f+M4zngmAu
MD5:	5697EF5CAAA257C47F440EB7C94D8B68
SHA1:	D12AE4D51746F3754848CE94699A00BECDF6271B
SHA-256:	9BC0289C62FB7697671BC864478E58D697C69FAA8CFCB9C57FB5AA05E6846139
SHA-512:	16986903663BF2448A03E9C7B66BE36C8053333C9EBB1F7CD2022BC032041D840C367CB4BE1E3B3BECBCED2B6CF403EB6E647BA8AA0B5FE92420CCD32D6B11B3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2788e6ea7ad5495ab1f216ee174447e2.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78633URCUmB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.366198279977995
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5obLl5bcUcKATjsmM:SbFuFyLVIg1BG+f+MmxCpjdCLKzK
MD5:	7422D3DF1B5D52681EABA06483D8AE39
SHA1:	8DEAA341616B426C850B5245E42CABC5889134A6
SHA-256:	3FBCEA66C8DF4D630407A7EE3977FDE2A66E326F88108AAE59CD5B2E686E489F
SHA-512:	C2D8D34B539EC7556CD1536A24FB039DB6FC3BBE5C154B8EB8D8C578E2153216F40633C01AE225231962633ACBB49177050942F1F69515F098FFA1780FC04CA7
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3b5862be5ecb4ee3981629db953efb9e.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:78634UvSG5y

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.438934984769935
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MpSKSR9GR1Dr4jLkGq:qgFq6g10+f+MpGR9G1DlT
MD5:	788B1F4E6C97FF6D8F0F84CB53C21895
SHA1:	F07DE5A9A81649B7D652B408A8705B66378F36C6
SHA-256:	05758E48761B6D72C7F5CD7117742FBCF758A53BBAA5FC67C32402A6E1300A39
SHA-512:	58739AF2E1033A9A3D55556A3CFABE9824630EDA50F9B99D12568DB31950630210F630255510D83179D2DE0531AE54A474591FCC83DC6720F45294F01489A43A
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9f517cd2280645d2bb82341d8ef72d3f.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:78643g09UWx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.466600903483759
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MuqeN0pRcXQGE0jNALyAZD:qgFq6g1af+MC0pmXQGE2IZD
MD5:	AD59AD8421702F3DA5555FFDF9F8F590
SHA1:	E516A0DD030639A798627C619697A88C6D40A9EB
SHA-256:	C5F7AA7ADFE44093A936B61CAF94BC55539E32B79402749223E816418FE93969
SHA-512:	1712064374E7757357EB51E2E982187BED12D08A834340560458DF6692C5E11C1CA9F34F007355C0F5AE10D3E7C55E903B2BE429D490340353BF9130B8257F14
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d47689d6df404278b62d4f6122b5c94d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78644tQdCSB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.362367840160063
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MAX5LJW3JTjdCLKzK:qgFq6g10+f+MmW3/CLAK
MD5:	C29A90A2DE252D1259A010F38DEC7829
SHA1:	5E2B95B517FB4C33E1FFDC12B7B532B07D185F1D
SHA-256:	94E46EB057357C4CDBEDD00537BE5BC9BFF6E582D5486C949C6B5296A3349F7E
SHA-512:	41B346E26E97795EF3BDFFC39D932D3E2CEA5C57E942D2430BFA17BD7B3CF3C72E4464BDF7DCC819BA2C54EAFE42A8E34DB4A1357F51B0603F38DDF8002FA204
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1c34a2c17ea544669c04597660819999.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:78645QoaerA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.426478140592183
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9eIxSwsjs1HadmQXt:SbFuFyLVIg1BG+f+MACqjosQu
MD5:	3AE0F561005B1F2E5B4BC93AA8F36EB2
SHA1:	8A96633F510F08BBCFCAD4A278A42F77A3E59BA7
SHA-256:	EE4073DC57D0BD53310CC75A995F841616B5274674224469ED7D92E2387FFD68
SHA-512:	253B6979F8FA8CE80C8FED79DC1020E53F52C9FF91F2475E95B00227278BAE1648B578281CD3A209D589E99971ACEDF898FD3BFF7AF4C20E174077B410F583A1
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=735ca6e664d1426880b49528aac36a12.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:786538CUWsz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.485450136204136
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MulI3huRvHjNdQIeXD:qgFq6g1af+MzhuRx2D
MD5:	45D3FCD3EDAF2EE236A911E3CCF4A0A1
SHA1:	29D0F7F88EC0B400FE40652CF8F6B6898B6F86F4
SHA-256:	858178DED357B8D2AF5CC4BFBA229575FCFCBCA8F2CCB96FACC04FD17132C81B
SHA-512:	F95AE880FFE09DBE2836F9AF5EE712FA9D2A56BCAF7F10874026F40CE5BBFA9A578A7CFE2C1A449A55039AD8FB44E9BDEA0027FDEE5DD6C132050D23C6FF57B8
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3839fd52668472ebd150cdfab40c037.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:786602IAdRB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.505525719903504
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsH6LOZ2jZcHcljX+:qgFq6g10+f+MsaLOemAu
MD5:	D9C077CE1ED100988B260A241AF79B16
SHA1:	2068B9815B466B73BD055A8150A0401580D12944
SHA-256:	1D95AB0890373FC4C945EECB1D05BCC6B2CF21239EF7B5CC7A7B30B65802B139
SHA-512:	AB424757CCD794E933EFE3276FC2EA1F0E25E9550B2BB47F1D8162C25C843CB7CB9A6BFBA15148903300479B6466B89A422F0AB480848FCDD142D1C06BEAD199
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fbea6d1a987f46e6b38ce448527d7126.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78742Gd2hdy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390454922081922
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrn0RRRfMvswsjsmNm:SbFuFyLVIg1BG+f+MIhMvsZjdCLKzK
MD5:	7AC4DB5948F97E36CF75F478D54B33D8
SHA1:	D5C818E909AC40BFDD86575C219845173F064C19
SHA-256:	116F896766D082162D51F5D4D0D690A0DE1328FC5AB83CD899BB9B73D5B6C8F5
SHA-512:	039CE8B724A9069A6B03941BC59037E6787A910F2FA9D4ACCD33BB6CE3CB4D351E702A8495F070B33FFDD7DBEDB9E4C4FA60F126464F8768E20BE84905F85036
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ae9255536980468f86ef1d991216638b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:78819WWBjNz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.424096648039856
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrfQpjLStzDNlsjs16:SbFuFyLVIg1BG+f+M0patz4josQu
MD5:	ABE12805AACEF4DEA22FF3B9DBFDD6E8
SHA1:	866E165B2D5772625A68C7AF51B9BC56A599E1EB
SHA-256:	9C905518299EE4C46AFF7091479B5CB83C8B1D7BEC88F07C85D3449149EFF863
SHA-512:	088382FC4F402A980729DAF4BF0D8A32C1F1298B6E69B88EB849A1353389BB0455BE7020FC41F8D0E316B8E936E4D38961DAE9570C11BC125B8AD7C14742CA62
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a1545a627288408882f7bf4aedd6d4cc.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81753AWelzY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.472888533850932
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8DQiMs0ZjZcHcljX+:qgFq6g10+f+M8x0mAu
MD5:	E84AFCF689889BC0BFB3BD8B21032632
SHA1:	29BF32D0E672C81481D7D7918895E20E03E392A4
SHA-256:	22E3C3D7EA06C76D37B64D43D272BAFD850F3566D33D17F57E67C22141DF9D70
SHA-512:	2031B48911F7196F114B87E14AF2FF431CEB214E8B9A904DD9FB1223C4978616BF97B6498DAB3D55502A684A145096672D54D84337E94B826CC611AFA83CF0D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f5f4fabc93e48d9bd4f49f9dc3c4b42.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:81754umducW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.387910090288744
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsJUWWHjOHEgSR8jst:SbFuFyLVIg1BG+f+Ms6MEg3jdCLKzK
MD5:	F90D679BFC7FF68FE09BE9A7288EADD0
SHA1:	F1F6A2C4F7DD8F8DE24F189EB30CCDB9DE1AC39D
SHA-256:	BA20B31E9D6E47F54A7B57173AF040F33AB675029FE801E652C5F803F5CACD3B
SHA-512:	CA9D35D892704426E994B55AC726FD90CB53343AD5B105BA64F03B994ECA40DC6429BF7A5896CE460EC6E55A99303D2E398E7D152D4AC1B13D9C3C282D29356C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f1512c3b019144a2945d34a945bc7279.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81755gGs1NW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.395795727508823
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoEVRWw4Ogswsjs1Ha:SbFuFyLVIg1BG+f+MoEVRWw4SjosQu
MD5:	74E833E4535E5B151034A8FF058F689B
SHA1:	473976C1B6A2EEAD6E2970E6A333BDEA055764C4
SHA-256:	9F029B6FAD602B4E0079741E41006A1567F412F3B3AF97BBBEB7C9792977635D
SHA-512:	A06415B1BA9FF38082CD58279E16E8833BB1FEE18FBE48C28765778602D855E18E84A15BBC1B1EDFDF9DF339810F6517E99F2027305042791F0B6EA176E4E96F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b21f51d4422343a4944652b3aabbfd90.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81761c0oGVZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.49598087685755
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsSKU6Hdme92jZcHcljX+:qgFq6g10+f+Mshme9YmAu
MD5:	98F6022C9678CD5B8B207566E21FB2A6
SHA1:	78E2DBF918B909AEA6413223FF10C9D612C171B7
SHA-256:	E4B5B31441F5F641607E72E18A1612A0D7FFE1B42F398E19510091553D0C1E42
SHA-512:	B9BEF58C05C8960EB180918C313669B4080C9C6A73A5D532718DDAE193BD0CA247A7AD7A1A39A77EEACB61DF002908A0B30F0A591D1C53B78375846569568C7E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f22e406c8ed5412d9b88636cfbe88782.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:81762UWZ8wW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.391895289439276
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mu2de3lag2jdCLKzK:qgFq6g10+f+Mbe1agcCLAK
MD5:	2648E2BAA163899C3C6AFD5C4612FE59
SHA1:	C97E1DF4515AB7F0B0D6A949D06E16D0C2032501
SHA-256:	2DE1CE9F03984C435CBC7EBBB7856952E0B6117CFAFC20AD8338A77659F8EBD3
SHA-512:	DB3EE608C7F668CFEA400BD334E290C94DD4F6398668637D9D7FF08DD142094B5A11D8DEAC1220F2444EC2B3EE5E3ED2E3FA0879C5AA7D80FAD57B9D85D8A9CC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d7f9186ccb3a4ebbb944a073f0c2e2fd.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81769lvLZeX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.394224409247379
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4B6U2HSCKYH4hg2jx:SbFuFyLVIg1BG+f+M4B6UoSRjosQu
MD5:	5073247CA1853920CA3B9AA7B889BE08
SHA1:	88579C4C00CE8418A4EE760647F69AB9A4A81739
SHA-256:	A6966CCB32CFE10598AEBEDA3D2FEAC195B60ECECFCDB2007CF4E8D314AB6C96
SHA-512:	68106E6247BEB353046CFCF59F1FB4D4CCACC1AFF567422DD5B2116479E7D91369394CADB887FF121BCF2834ED3FA8F3E862E3F1B74EC1775113A7549521BC80
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2d051f27d9d2417191008e5e0a882ba7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81770DldQwX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.437334043280337
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmr9G8oN9hGahTjs2ALAQ:SbFuFyLVIg1BAf+MQTQqTjNALyAZD
MD5:	9F3F9A717277D9AAA3F3313C3B432DBA
SHA1:	01446F3D43C5C711A75E52778B5CE648900E2D4B
SHA-256:	6C9724E1FC00F9A3B1D743543D4781FFC48F464E1D7BC5C75C77C98FA463D521
SHA-512:	E5A29E052C8C9F15711C5ABB72A8C95564CC8E7A6637E6A7EF26187CA3D17DFA72D1E936929C7E45F968A7A7370173DCDCCBEF9C4D13712E8851BA5203048BA4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a75dcb915231486fa80b7183edceaaf9.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81771Rw5D3V

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.390733871553765
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/Ttt5AglsjsmNz0L7:SbFuFyLVIg1BG+f+MLttz2jdCLKzK
MD5:	F39DC7F85FB596D36FC625B51E8CC2D8
SHA1:	126C7F36B051CDDBF21B5F8C2C56E0E6A78EA259
SHA-256:	29EA3407B144C12A09F2D15FB0F71B6402D413168AF0BBE4A6ACBD54D2C88E2E
SHA-512:	95A32D1327E1DC891F0DC6A057B3614241866DA01F3359D30E1CFABFFB78C9480DF5D5F7E52D2D965E966363E08C42DA68B0C890098536C16CE96BEE6E6CE84A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5d7b6cfe41f849979da5e97993593fb3.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:817721pXI5X

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.412346872650824
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrzkWgSVVDI3aX9ATd:SbFuFyLVIg1BG+f+MUWX/ac9ATjosQu
MD5:	A8D4E298BEAE808B974B6A67697AC47C
SHA1:	6197BC93F737DD2312CF186237B6DBA8D01075A9
SHA-256:	E1301091BC335947A67B35C748097E878296D7B27038623C14F6392F43E87F6A
SHA-512:	7EDB13B88EE594E9B648BB41FAE6C0740EEE8167790560FD99D7FFFDC03F9F3998C546094F56057E287D8ABF29DE19A4F277DAAC49C607125EA357EB16FD6E12
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a7eed394700f4b4a962c61ec4dc3826d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81778mFKfrW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.375256559299567
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7OpXxLYW2ZGvAuxsS:SbFuFyLVIg1BG+f+Mq5NYW2ZuqjLkGq
MD5:	727CCE2545E81910E8FA80C8AE73B669
SHA1:	53DB9F37CBBFFD06E0A3893475E02F94BF25C763
SHA-256:	23C4932887637C54507AD070DA12CEEB71A42360962A76E00C7258BD89E42FF3
SHA-512:	976988AF948566334D9572EC97D2041D64D26923B093A5B27492BAC711194B5C9085D4102B5B4F22AD7958C79184249E76A2C4ED7F799D9095C03E86AD4993DB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=111966d2e1f846bfa34019ee9838e9ac.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:817860tcOuW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.447459555962413
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Mo5LWbHQGAqjNdQIeXD:qgFq6g1af+Mo5qTQK2D
MD5:	AB958741FF3D8DE406023DBB09708EAF
SHA1:	2FF4E026AC095036DB1A392A95363396F12DDD2D
SHA-256:	AC3FCE18E0CB145B3DA3189EC4774F3A56E81B4BB765DC1A20975957CB1E108E
SHA-512:	067B0F647336DFF48166FD50A11DE013479521B393250AA91F6AE6193F2A0F0FDEDE5C32234C2C3A173BFB4FEE18ACC60FDD50E20C08A3FFAB9AC8B8E44B310F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b1d16dd22d474827ba3e327fb28053da.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:81870P46MnX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.362693203279915
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoBBEH0QHsgaFrxsje:SbFuFyLVIg1BG+f+MoB8H7jdCLKzK
MD5:	C1EFC714FEB64E5B2E476F1A90311794
SHA1:	0E3D065DEB23A0D07831FED9B8068987357B5D44
SHA-256:	FC6D0641138F1355A3F3172CB1713A34EAEEBD5599CD2A497DC159EA059487BE
SHA-512:	ACD91734BE9BDFF259D6115F288B3553A3E7927F762CBB4FBB83438CEFE735D65580CFAE3DA11381869BBA5F9A04B9CA16FD231B889A5C4B23422E40563F257D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bd24a3e1c9294871bd089085bece41eb.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:81888bbMB8V

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.429427097545944
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoAzAo2A8AFTjs1Ha7:SbFuFyLVIg1BG+f+Moxo3jFTjosQu
MD5:	77644690B1013BF234E9877512255F9A
SHA1:	1428C24A134E307F51CDA5065454120AAE382508
SHA-256:	076B4F308FA3E1B8FC98F21610E1ED8AE3CCD6B1D3AD35380496C500F5D5443F
SHA-512:	A41152FE42F4923342EAA11092AC2AAF607D290CAB02DCB388E7CAA715D49F359CA98A73C0E6286EFCA218CD6C6C56E632DCA16E9C498634BBD42CE3F18A438C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b967ccc2aa6e4381b408d4e755850c95.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82557wX14Hr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.5278879223514314
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7HhL9PhfwF2jsicWg:SbFuFyLVIg1BG+f+Mbx9hLjZcHcljX+
MD5:	B677F6D645EE99DF032A1F9B4C7DBB88
SHA1:	4BC167CF6F5871FDE8C81F4FF5A76FB113519131
SHA-256:	FA6E2790D6F62529B314F1D50C8DA0E357562E271CFB65720666463831F443DF
SHA-512:	43A16126F76CEE5B49695987C3BD2296F0CD63A31839D373B5D3B2035E61C349AC4D4F282E83E10DE5C5D754FBC1FB800B3846C28DC704C38D8B0EA29F762BF0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=16c9bd2ac34448b78c113d8956fff65f.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:825589FZiet

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.409172347340397
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6fOVSnRmwhhg2jsmM:SbFuFyLVIg1BG+f+M6GVs3TjdCLKzK
MD5:	02C1D6D47085ED18F0928CE4D7911B04
SHA1:	2061D7BE2AEC29631D04EA9B6E9E9502E89CF488
SHA-256:	5A832526A6609F057D8D0DED034591F716938711D35758A9C056B053130D1CDF
SHA-512:	ABD6BC1EAAA71BD1AE29DB98055034B25A06A0E49CAF8464F85EC7E45B17FBEB8F80F01F7DE312B91C10A457D568ED600393456CD57B6BFB7D80B001D1CE3B46
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0fc11ad707bb497da4326858f10fb4cf.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82564Tl081o

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.45484316000411
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4uvEHgRDAXPTkSATd:SbFuFyLVIg1BG+f+M4gIgyYSATjosQu
MD5:	F7AAD5AEF906DE52AC8F033C0C910AFB
SHA1:	DA2B4645BEBAF43883291CA063D007335B46899A
SHA-256:	5AA5890A91D898BFA1E9C4D970350CD61541CC79F7D62FCC4FE155307CD90CC3
SHA-512:	F2C05A65D91452655B5374F729A4EB18497DAFE5AAD2CDEC94E98DFF3A5AD6C6CA7A1F966E9B1A9FDF5FE41BFD7BE2F6FB9B1533FB16E8651440215B53A9C7F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=21460e1ac5944fe2bf815a76684a8795.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82566Wzcuqr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.477904002249842
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8HxTVCO7GVT5jZcHcljX+:qgFq6g10+f+M8RTVCi6mAu
MD5:	FA246C35EAD5A85E1307B66174972749
SHA1:	B637B18A7E10623775C25D7326D63F3B5377611C
SHA-256:	60C9C04B7C48165BA74CFAE36DE40602870DB3D8018BDA931FADAFF814CD7418
SHA-512:	38D0F56792AF53BC73D48B68A933607DD4A01D35D4EE1B929D6F0D6EEF5D24BBB9EFF5DCCF044766DCF9792A0CB95DE94891ABD20C350AD045850406FE2DFB42
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6bd70e03b41041a7bfb265f48bd50315.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:82573SH3e8o

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.383800700998969
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+My+JDusOMqjdCLKzK:qgFq6g10+f+MblA3CLAK
MD5:	53717E8F7B00A7F60769715AF3C416A3
SHA1:	B4B19499B5EB142AEB56A83F72846B1B855A1FFA
SHA-256:	10CB34D5116C807CB3638B29373136D2C30D5345B89AF0833C9CC42B3ABDDBD0
SHA-512:	5D182A36F98B0761A40E594B1F433D34FB82DDCFA02EA5CA1A0659CA77B733C6FD783B76E6F02556EF1DCEBCDCA69C8B82E052E28D9B795338C131BEDE3BA824
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=82ee1638fc494c78bee30046f7a56661.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82574r201ap

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.437405283316009
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoHdDiRDXLucWEV2sj:SbFuFyLVIg1BG+f+MoHwbaEQATjosQu
MD5:	B42C3FDEC8299A33A87A116AAF905FEE
SHA1:	D60113B78540780C7735501DA250B4AF986ACA40
SHA-256:	370E03EF7DA855D8BF2979C6F4397F0409525A38EA7E573CF32ED3D7040591EF
SHA-512:	721C59F16B505D9C185C65DE8FE1151032AF5F559D43DA316C9C1F1D6345113ED20CDF95AF4D4165564D8B3A8E0402561ECEC7A3CA83479435FB32F479279F26
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bb1af4ff97f74f26ba686c48793a2ee1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82575SDeiUs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4359844294700865
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9C7nlcBcWMQuxsjs2Ax:SbFuFyLVIg1BAf+MYRcWWoqjNALyAZD
MD5:	2FA6A3E5A6DD476B386E4A895C1BA225
SHA1:	A607FEBD426B0EDAF94ACB80DD7F87467428480E
SHA-256:	8367BF55CFC4334C421C09179DFCD8C8266603B73F5B1BC815F80E34B608B0D2
SHA-512:	37586F8EEC8A2226795208FA28CA147C7541A19548022E89E168318AB2C8063BC2DB9CAB8C7A52C22C3E7670C0BF194F0D39C82A1E0E3DDF6D16939C0F3DC271
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7322ffad54684bce91924c1e3ac1c46c.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82576nf0awp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.365641174684179
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz5BcAdL+kRNrxsjst:SbFuFyLVIg1BG+f+MzT+MNrqjdCLKzK
MD5:	5B39A5C6AC9A61F4B277F127206FAD9E
SHA1:	0DB8C6EA879026EA34A9CE95B89B01320FD3B8BC
SHA-256:	2EB3AA70CD7EC0265397066C81A15CB6A9AD5D78A60DABCADBA26476F34C2C1E
SHA-512:	8BF918A35AB7368DD0A798DFC0CD363084CFA1061A95A5722FC01F99B2050D70E08961E96B264D6FFC15F6BD270E2F46D9DF2E7C229D632C70548241564D5539
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9792d249e41e4dfd88696eded303b6d1.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82583Q1PNlr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.433835838527796
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr0NSxP5ESEEZjs1Ha:SbFuFyLVIg1BG+f+MgyREfEZjosQu
MD5:	4757E97E38ECD96D29CBCABA4D00051D
SHA1:	72D3EDF7D58C7B81E696721F5ADC66B7CCCB112B
SHA-256:	21FD0A6F8998045C7DA29D6C7F1CEB1586D878186B6BA03E59D0D5BA7789A074
SHA-512:	1D31767DF359D603B6CF45CED28328BD64D55D837F9612924BC3A4C4CDF3D5E530704D068A56FEE8CA7023157C4CEB2380D9CDF685F8FCCBCD82BB0D98917D10
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aee01f259f3548cdb13e9a7619ab286d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82584p2nM9s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.366732170513429
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8GrYjVtAGFvsjswkT:SbFuFyLVIg1BG+f+M8oYjAGWjLkGq
MD5:	77B6081CA2EE0E21B3B53BF6169CBD7C
SHA1:	EDFF55AE1B65F73D0540ECAAB170F5E798BA5957
SHA-256:	4CAA956F923EE16BDEBD020F750A0EC9F78AAA2E477D6453A6DC5AFD56C47A0F
SHA-512:	0D50DEFCB16157AAAD3A1DE7C6B690C8F77F701DE5D15F8A2ABEA94EC4024B7839B7F945E237AA4D01F082A97DA14BDC7E3D7E378577ABDC578C4869731B6B55
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6c3c85578aec4d3ca4ae088dfee1eb73.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:82594hKX2Lp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.443957778373978
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9gRWUTEHF0AH0hvXsjs:SbFuFyLVIg1BAf+MaSHnHIv8jNdQIeXD
MD5:	2E1C7C9181FDEBB0CE4D10A3FB262E30
SHA1:	AA5D2C9E6242F0BF368F92FC76D251842127AA52
SHA-256:	5EFAE6E2E66BC8967D008B444B51AE8AEAE7A5B2397DF3B81289244582A250C9
SHA-512:	868A657C1A515419D5CFD86C84E922705157B4567B90DB4A18F1A2F4EFFA1EAFC213427CE12A435FB324626B24362123894B1C8E5E6257826901578F8F167C61
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7be47131621f40e0b3b1e55af25e4242.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:82725QXyAeq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.376216804204468
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+abRxGagfAg2jsmNm:SbFuFyLVIg1BG+f+M+abuIg2jdCLKzK
MD5:	E82A61975070B342003489AF414ECD98
SHA1:	13247CEA3B8451199584009BE504BB2FB971AF25
SHA-256:	CC3DC8BE5D8D76EF9B5405464C97A5A31804C93B01D0D1463CC4C278BD3FECA4
SHA-512:	A2749247B3A89870313FFCE1C9E5D0F39973B0790E16035E3D2E3F00255D2E0ED281E87DB36421A85B5BD8EE5287DE295ED7BD9AE4001BEC776B70104606308C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4fce8343b4624a01b86fca307628fbb4.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:82756VsuG9s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.43505030248019
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoG8xcjC69AFTHiwWd:SbFuFyLVIg1BG+f+MoVxAlApHlWjosQu
MD5:	EC82FA4A52AB04F9C4B5549E96F67AA7
SHA1:	9747705FB371BEA9E05D5ADF1FEEC2A5A9C3C2FB
SHA-256:	0129E31397E9F5AE965DE0B53F22EC151A4C49D5F6C51AA46CD6C741D5BB5A14
SHA-512:	96629293043B6DF9019FE80D1C8645D4AE9CDB844BDB93C0EE8E6544CC6E4348F2518E124C4CC78A07ED124C79EB5F5567A83D72E5A00B72F13127D383F29A09
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bc035749ec8e49fb8bfe2063e74dc369.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85303iA4MSa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.492549570029534
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+McgRGrEXt8jZcHcljX+:qgFq6g10+f+McgRGQ9qmAu
MD5:	CE0AEC2075B6CAEE222653A76B6774AC
SHA1:	48D86E44CA3241206B2D106C9B9C74419F1B09B7
SHA-256:	B40E87C864877D15AA4D56A75485BE8E87BF4FDE58C35DF35A2D8FF64744932B
SHA-512:	AA1AE4E2A2D1AD02B03259A3E8124EABCDB347E3548990D632AD5999C4FADCBF527CD904CB79F11FB66A1C35EDFDAC3417D37FF3F4A4EBE83B4D4415B40EF296
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ab527b3f14c543a9af644afaf2bfecf8.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:85307CSnnka

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.384871943914949
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5NwHqS6A/V5xsjsmM:SbFuFyLVIg1BG+f+MTpS6A/V0jdCLKzK
MD5:	F832E686D56C5EE8A87F6F2C2F99393E
SHA1:	2AD84AB508CE6AF376AA072739E996DD8EFDC34F
SHA-256:	891EBDAA7EAAAA9D3818B0DB77AF1736246F71800C75E2F42A805C569C38DE19
SHA-512:	C6C969A59D515B85D25D5CF9726F9A3955A3D12A699C177B2AF11EE92D04EDFB40E68EB0F9F353433552CFD5E387CB390E7C7CD33E2E780809A0D7A246D3F118
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3d62b41463d549de9294f54a72319a30.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85308PkQjn9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.415042044267261
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6S4Z6BVcc2ukh+sjx:SbFuFyLVIg1BG+f+M6S86BGakZjosQu
MD5:	20164F48C7805CEDF6C7D9EE96C6D7F4
SHA1:	A3B0CBA848B91B8860ECC873CC3F6944E43DB332
SHA-256:	0C9FD02BC056907C14AFAFCFFD2D68725B30F2CDCBC6C5E4812CE69B82781EF9
SHA-512:	1D770122811A35A6786F4A39C9829F114346E57B28836CBDC73C8B6F50E3F3ED9BED122233C31268FB0136AAB64F5201B320BE4D344DB562AE7B7C05B86D9A0E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=02a54c563a4840058d802f59829f0982.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85309gdWG76

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.46191831970608
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5HfTUSVhJXDjii0hG:SbFuFyLVIg1BG+f+MJVHShTjZcHcljX+
MD5:	53C36B4D2ABF9E36313D647CB3719F99
SHA1:	AFC018DBEC7A482D7C36917D8940264297873EAE
SHA-256:	8A167BDDF4BC04E6C5F5C00610B16E4DBA68E78FE3A8206C09DD28D8830DFC84
SHA-512:	9EF4690AD94A26DB3F65E05ACF3080EBA19842BE1A7951CD1EF2FD86FCD65FC85C41A4B01A4AC6299D21987DD0F44163DE7449068DCA1120E0682E99B9418394
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3c5ff61703344914912e1aed04ac5951.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:85310OIqf7a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.41008883092378
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4MWHod57a0jdCLKzK:qgFq6g10+f+M4YJCLAK
MD5:	014072BBBBC676199E52FC4234DBC7B4
SHA1:	69484E50FB3E867010D567A7F079BE1131F0D2BA
SHA-256:	1BC67F9B2AC22085693AD3DAB67051F0D461BB862A24F3133C979612E8E6927F
SHA-512:	3153D5E9B9D999AD905580D21785D2635F4384204F775CD171A91E6CDBB586CCEE024D2DBD4A1F5D921BC221645A91F2FF1A298A3C83D619E9D3B8B5BFCE3F6A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=22247d3503c54389a2063f7bbf064652.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:853171ObKj7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3984776432670065
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrRdURW3lQZMdFrxsd:SbFuFyLVIg1BG+f+MnIW32yd8josQu
MD5:	548AAD3037D9F6C5EC37232C341CBF1B
SHA1:	E4F13523ABBE7C85E45C1ACF6ECF901A2FCC63D5
SHA-256:	F869C62182E9432B42AF35031F91225B4A1955151B58147EADD3B123946DA64B
SHA-512:	0FC4C2F8D7B3DBB38E3274B2B0A6FCDD9490A2A9B59159735294C11F897B94C302C655848646BBDBC3FDDBF73EDEDA84D30979231F47188B3167EC3A8D186D5E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a2ee89ae83814817afe1cb1ef528fc5b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85318GDx087

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.409547362501196
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MMFKWXQ6F2jNALyAZD:qgFq6g1af+MMAWXV+IZD
MD5:	64A9E2882BCF24BABA80941D0B179F3C
SHA1:	9DB36C31AC1C4F7822B5666040EF98CB23EE2430
SHA-256:	56AA6B503CF9003CEB16371B5C9F778B51DA34921B8FD9AA6339026A62115D8D
SHA-512:	FDC12CD3449EC7B2EDA58C4D0617CB8FFBBD13BFB1B5332A7193CDF38D97C68FC59A367CEECBB929AF47C45F870704B35B3FA8BD81BBC354684BF8039CF97F56
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a254afe82205442db2710a77259ded45.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:853194Z4aF8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.409307305099661
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyxAVXp8xuxsjs1Ha7:SbFuFyLVIg1BG+f+MyG9puTjosQu
MD5:	9EB857A52242CC6830FC6D89C84216EC
SHA1:	93AD3D57A17DB498EE05E0EFDCFE1F40AB0DAB98
SHA-256:	957EC54152DB440D8C945B1C513AE7F0CAA4410E3AA980F644A25C1B481B307F
SHA-512:	B958D93C85CB5847DA0775F822361DA0A8BB2CA23F75FB382CF0546B6772DA2F2B36CFFCED45393108C4BB002DC11D56EB32DAE955A538D09A2DCB684A6043CE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8dbea6542ed54f9abe10712718b67deb.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85321Lw80l9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.377690393081663
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9a9l1A2sjsmNz0LKO:SbFuFyLVIg1BG+f+MQ9lKLjdCLKzK
MD5:	DA1ADE262CDDDFF7E801C3B9C2B0CDE4
SHA1:	988BDE8123B51EDB60F58D86C176DC2DC7BAE2E5
SHA-256:	845233A7D292AB642B4884B5E6B8FEA6CE5C20BF134A071BC011C32028AA3675
SHA-512:	11F59224166F9D1E8D6A7514BCB365BD60D793DBB5AB4A5FA3CECFEF7F6778B3ACEBAB1FD282B7A3461A70801EB9FAD57F60991DFA95B7D51AA0A6291C84643A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7fc3b3cc4fc84f5ea77b029f58e03f9c.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:85327t6jh16

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.429675532467757
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+rUmirCDqccGlglsS:SbFuFyLVIg1BG+f+M+r4r2c0TjLkGq
MD5:	3B58A3A2CD11519FA903F23E1091A7E6
SHA1:	515330D8E4569FF4A0400ADAEE9C246C1D21ACB1
SHA-256:	A72568379209FEB6555CED7953906F34D456A09BF4D349FFAC358F58CEF0B212
SHA-512:	0AD77F5CCD2C45EBAD6E3BAADB04EDC99F8166A69D41BB52BE7E530409886BE020612F2A8CA83E31B736D154696FCDB6E3B38136E088E91ADCFDEAA849EBE93E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4716625cd7814289b225ed27faf9feca.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:85328xshWGa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.470269551186617
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7bTnVUVdn2QG2js2BbM:SbFuFyLVIg1BAf+MjeVjjNdQIeXD
MD5:	D6FFDA101EC56FDE77D45EE225EA23A1
SHA1:	1901E18C9900C8BE85907F07554C42893ED5407F
SHA-256:	4A8B70FEC688857EF1E0B865EC72B5A8D09F4188E7093E3A7FD72E9249EEED73
SHA-512:	EE72E4AE4033C4318F0B049B206406B07EA3E440F53E4ACD36E6D9DD4110B36A1B81F0A3029348B4BFDF05784555A497239701F73D3FF4D61E3DA7989A6AA4C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=15a283762fdd4080a0893db4e5e8527f.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:86283HxW7K9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.365329003692494
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Ms3bBprIEeEEojdCLKzK:qgFq6g10+f+MsVpr5et6CLAK
MD5:	48903FD2D1E919BAF6525E767049A911
SHA1:	0F8C108C906C440A1FECCFE41B7531DDDE365C66
SHA-256:	BF5DF7F33F766C1C383FC8510FBFC8B7674CCD91A00639926536CDCA94627B41
SHA-512:	85CC12E1A92135525C61FBD376DEDA1C4544A7DB89B6CA94A910FC2C5C87A921121365C7DE6C0EFDBD14E9280081154877CEBEAB2A48E22BBD62EDE76DA7E222
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f45a6f639d6f4537ad89a77f6eaa6154.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:86446ZX6qH6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4287425108306
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8W2RnY2Gejs1Hadme:SbFuFyLVIg1BG+f+M8W2tKejosQu
MD5:	256E466B557CEFAE42F3D184027A4053
SHA1:	0A7275C14D5B8D4421B37E104D6F2904C9432A30
SHA-256:	C71A6F7DA672EA087FDD9459A644959BB24071B876E5DC16C6167178632A3C1D
SHA-512:	5439DF8CF466569BF4A367FBBCEC9BA83FA630C6E4D414D11DEAAC9FCD174BFE7FE40D6949A85C3B1E2F8E9ADFC18D6CD9FBA37D42BCEB64E467048E24B12B6A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=66546093371a402ebec9a9016f6bb238.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:8726978mr5u

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.449428263583977
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6+PBAfL5TjZcHcljX+:qgFq6g10+f+MPPgL5RmAu
MD5:	38F26AA033883423673CAF613A99515A
SHA1:	C474CF5EA6D6E574BBB2A627B5B68C666DCD65B2
SHA-256:	6792034ADA311CBD79C46A6A3823F6C989C2DCAE2CDC6024AB3A45475F557949
SHA-512:	96A7B2F14B8442B60DAE3733BE8F8BF38262ED5F188950DD9E6745D4A7177F7CFEF80F5DD4E9B2B61A27314189DB2EE6F2D4702ADC4491580A0F13101549984E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0a275f6ffc1443cea47f202cf7f24ac1.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87270CmZqhs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.353467766147453
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm75tR7Or2VvA+sjsmM:SbFuFyLVIg1BG+f+M0BTjdCLKzK
MD5:	250311F25443A19C33E7CC82868B1696
SHA1:	EE2453763ADC5CDD3909F1D0C71C451305A04B60
SHA-256:	A710D0364C36A8D7CFFB9062491AB3FDE7E0383DA2621F17069E4814026EF7E1
SHA-512:	AB85A719AC3A61D7A18810000D1923ABBB3C676603CB34B353B38FC8D7F169A331A2317192510C23DAC9F42DC44C016E899ED31637AD0DACB53A1CF047EC861B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1061284baccc4a2795ead0d3a07b13aa.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87271PXSymt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.407623655120932
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4BwAAmCH2KQVxsjsc:SbFuFyLVIg1BG+f+M4BwAAmApjosQu
MD5:	814AB33EB05D6833A806F7CC8867B09F
SHA1:	CCBBB7F16245206C2D112121F95753BA83C7E56D
SHA-256:	97E85F605BF0D583857DB863C4BB95EB8FE50761106ED4179E15FDA8DA2FA94D
SHA-512:	2BE6D9CACC6AF4EA6B99CD721D0507D2DB16B0B1548E8D20EABE79201B4F4C4D5C4EF565BD8976A9F631847D199A3A7D85621FB2C61DEE603F41CB987CBB7745
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2db5e1ce22cf47ea8110098ae385600b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87272NyrYNs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.485423222327396
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M5YISIV0ZjZcHcljX+:qgFq6g10+f+M5YISnmAu
MD5:	9326FD6DA266C7F2133817D2393F2A16
SHA1:	D2FC8EAB351482D9261DB97F39E97E5D73722642
SHA-256:	3008D1D9551051948A879AF52D697E54A887E75550369A3BD2AED44B7C5ECF85
SHA-512:	064451D92D3AE616BF45307E0F61B1A187B9A90CEBD32CD5FF6CA2A60101937FA8628E0613A0C3DE9C26BA48B2995363AB1DCD0E54181BB191DF3E6711A3D499
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5dcd779371df461297c8392a92724d2f.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87273LjpXNu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.397525474904129
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MHVPaydQp8jdCLKzK:qgFq6g10+f+MH4wCLAK
MD5:	153C0CC7598ECF493CE0818A7B7E9318
SHA1:	43D7D72F10599EBD703AB12B4AE6AA464612B93F
SHA-256:	761DDF74C329B059FFB5D65B6453CF09E77D76786AB1359BB6F50E31E0EA48AD
SHA-512:	3997094A93231CA0CB549AB44EB0C2942DB0E686EF49957E7C4A046B389D05029015E400F5DCDC9DB75F0B98057DB7D472FCB16AF43263363D302B87F6F99CA2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ea9539d506ec4e6c9ff72b1fea328542.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:87274071OWq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.366608075431692
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8BW137xdvRqjosQu:qgFq6g10+f+M8BI7xD4Qu
MD5:	676B8913FB3994BD09615394A07AC60A
SHA1:	45F6C787E53CE3D89D80BDE03F59A9078CFDBDE9
SHA-256:	EF74E787053C4F27C8E7E528B22F1210ECF45667E97A39FFE89090B5C471029E
SHA-512:	1A54D57A4CACA22A8B5ECC4785AA95C83AAEC2636D8872C66A54AD1746CF26EA8BB0E4AE55BF2E820A36438B46CBA247EC6C9836CA2B11CEA1DD32931AEF38DF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d39a44010134a1b994b2af4fe99d9ce.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87275M7uPcv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.417013060093912
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M5JmIDRgkqZjNALyAZD:qgFq6g1af+M5o4glIZD
MD5:	47C71FA508CEF35768A2A93965E49DE8
SHA1:	40EE7667245F3245BBC78966A7D0270B2DE36CBB
SHA-256:	FDD41F7DBD098AF58EDDB6F0BEF6DACA4B7136AA4F84D39CF8B3F857BA60505D
SHA-512:	83B1451C25FBB47C5975AE60C7F4C6748D0896D0D8CE63A7FAA0E4BF0D9861104C5A5FB2B13980B5C88FE775C9D0DED74D7E123303669725DC6ED05BD1D9DC60
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3693fb880d5148d4b3b0c0acbe1e4506.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87276Mwd7Hs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.44754956094939
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+LImDGwMRsDh+sjsc:SbFuFyLVIg1BG+f+M+nGo9TjosQu
MD5:	F707A2C94DDBA9756BBA8FAE3DFB25DE
SHA1:	42F9A18F80B65E42AC2DF0BCCA4A39CC9CA09D44
SHA-256:	8B9DD26EA10D83D447FAD6D56B0C817F0C05DAEB2D5A2710058DDD31DE019FCF
SHA-512:	D18B160AB47B4CF4664CA06CE47B4A0BE30E45677740B51B1602C56998F13C9FD12B0E7E1FC43CE099E25128D949302F4798078DA23B0F877DCA79A171ABDB1A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4b5186aec5b141fc984067860ce38b92.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87277Ovu10s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.36943839298227
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoe0SRCxV+AEoRxsje:SbFuFyLVIg1BG+f+Moe0iPo8jdCLKzK
MD5:	4AE44288024A369AB195F6A86525B9FF
SHA1:	9ED3BB2F0134F82A286360ED41840A61C7744D1B
SHA-256:	CC5E0D8D4C08A2981D19B2CB8BA9DAD127EB639300BD1194025AC07E3936D9C3
SHA-512:	0CD690F5BBC66570487A114E5A5D9D834F79A5B75089E2AD8BF5B3C1EA707B8BDE7F90219A60956AA4FDA2B13AFABD4E0C7BB7832AF93E3498FAF767D807F258
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b89409d1cd7f4ec9be10cafd3fea3602.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:8728947W75s

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.393090722494502
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpjXN1VHh5sjswkClK:SbFuFyLVIg1BG+f+MP1VHUjLkGq
MD5:	C4FE8158AAABA35AC9577FC15C426E09
SHA1:	C2442B9DCC5A05A4E968CF5EEEA3947B382873A2
SHA-256:	7CD92A243AF33605C7C7B960D6DB0DC4E39CD0868D58649A79B90ACDD30B8042
SHA-512:	E3EDAE50C5C94BDD0AE659D5B7A65A890161E894618A63FA2CD08858470E48726729F5E12821F90D5EC64B2EF21A19BFDB40FA5B6F20EF72511F771311E8A0B5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c3c080d62ecb460b99b42915e22453a1.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:872906p5Vyt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.475422278852889
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MuCEOdZtNH0ZjNdQIeXD:qgFq6g1af+MAOnK2D
MD5:	16FF58D463E75EADCD6B07AB8EF0C624
SHA1:	79FD59A2CBCCBCAD6EE6049F1D435D8650FAA6A2
SHA-256:	392B743FC80366B99E8D06A7DA8CE63DF5E0C418BEE7775CEA2C27EF5E4A45DF
SHA-512:	6195EB8C2C93C0B5C2525ED19D4CE91D5085530CB7E702E354704DA9CB3D8B4A2F5CF0C50A9CDED7804563A4EA756E23A32E2CC87A7C55B5EEBE15C82E861EC4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d1785f654e1042bba8ca00b11ff74f29.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:873789hedgv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.434723367557827
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/YuGcvUzj4js1Had9:SbFuFyLVIg1BG+f+MwuLC4josQu
MD5:	4FFDB806C99372E73B315ADB6CF443EE
SHA1:	CEA989D5B8772D818619E173D344DFBE8B865C87
SHA-256:	93FEF77DA4AB210DA40D439F5BD7C9DD06334E7DBC64C4EFFE60253AD55356D8
SHA-512:	780BEDE691D097F110BE09FE6D2007DFA22B25D5992FCC93B42E7EB58231E9564D7CE95D13BBF5318BCA545341229A92DE36A6B15B8A666E2A3DB519A0801EEF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=51d9b77fc49f4feeb77620a31622d026.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87385MQqS9q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3950444338241486
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MulWSZieTTjdCLKzK:qgFq6g10+f+MW9pCLAK
MD5:	4CBAF651A40113DB53558AF204CA2C99
SHA1:	3F12F97E4C02DF876733CFFFD90E99825C184107
SHA-256:	7909F2B8B6BE334998D3DA35F30A97F5C5ECE6426172D1CD438679D0292A0FC5
SHA-512:	216EF0E0B2E13AD10160992D35611AEA73F17050F77A841F68B6B54D5B2DBAD33A1B529D2B8FDA5CDFAC06565E892F20F00B7A87541397E481C758E805F70840
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d7c95189814e45e88bb75f40649c0896.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:89457m9Y0o6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.365809126144946
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/t+cwBMSWAAglsjst:SbFuFyLVIg1BG+f+M1EaK2jdCLKzK
MD5:	FC0FBFF63C78C258480029E4E1CFD8EA
SHA1:	BC010F6BD9D194EEBBA8907D58D74EE43ACB6852
SHA-256:	053114668394479CB8CE6C66AC189C0BCA2254ADB0984A4555E0F0901A75C2C5
SHA-512:	383AB61A33E5C308721812C395E5E97FD8F3D5925E42359E7EEAAE2B3D27FD3474A2F32E1639374BE32A81619A6454F8B0865BAA6850D259D45A5966FBE0A1BB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5088019666ed4f9e9c51ffebbbda3b0a.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:90118TbuPR7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.36233474987307
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrcsmI6SEgeNTjs1Ha:SbFuFyLVIg1BG+f+MwXI6we9joa
MD5:	786797B232DA21ED2872A03438387FBF
SHA1:	27D129E993F261A10597736E3FAE7B5627BFA152
SHA-256:	5A8CB0B571807922C236F0D09245F7AC277BD3EE4661EE6A32B4BD185E12700B
SHA-512:	E47C6BEF18416D27A7DC036057A9A1B7A7D69E7218671638C43469CBF8B460F5096BB75832259E6CC4BED2D79CABC882B5F44545B8DC36FC53DEB2F65538F11D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a65553bc414f4fffa7a9eb32ab7db35d.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:90119JeML77

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.344387320053798
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6SyhDfIsL7GSvshTh:SbFuFyLVIg1BG+f+M6SkDfIWX0hTjtWQ
MD5:	48F737DB7CCE25E26B1368C2FB8D72D2
SHA1:	3FB0C978AB0A83C48E3896E96CF1F73AC1FC1569
SHA-256:	4E5CF6072A546DCF2D3AD73A12AEB5A9FC0A2CF09CF10BCC5598E1DC83C6791F
SHA-512:	3DE55B69E76AB9C6AA957A2C7871A89D878B8A2F1E4195EC86A02786D9A37F6AA84BF2C78948A11D99941952693EEA53949933B8BB35D8402EA81C782CDC8C13
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=04531b777fc34ff882ede1eee4482385.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:90120IAZrM4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.492727297380932
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoVIPz3TjZcHcljX+:qgFq6g10+f+MoVIL3RmAu
MD5:	35BDE9EF4905BF36C0D6CEFAE1AFB418
SHA1:	8983C4BD205475A378CA7CB5A89BD7415DEA5B86
SHA-256:	4C3AC829E09F3211B6E5B54AEFC80609825033232E8A584790BF572BFF9F69D4
SHA-512:	4B0399F594D5F8D14D5F37F6ADA86F54C330F28E0A770CDC90D574A51AEFDA019BEA9F725444E6D8C8ACB879348C67BD80D00208A1148D8E1FB089927AB14DBF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c289fe3d6660465fbcf61230e5c5f7d3.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:90121rxiwM8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.385560561463988
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7iccs7jM8vVk2rxsd:SbFuFyLVIg1BG+f+MuTsnMek22josQu
MD5:	DAA00E02083D654BA425D064C06C0EA2
SHA1:	DA654D0491B24865B132FE000B83AFBC36D2390C
SHA-256:	2ADDCCE9D7A09E0B992ED67212FA3516CF52B411EC936A06962381D11D42198E
SHA-512:	04C610D54F9447993914F29688F4117DCF7C860D95DD50B32B48D9BC4698F4E334DC8CCC4E17CB17DC0604FF6287BF59E79D113A8EB2BCFBF8E85D9FAF91D1B8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=14a79afef1404008acb3d9df5a0a6a02.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:90123X6MOv8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4214567538882035
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoBKqiBRSeZjdCLKzK:qgFq6g10+f+MoBiSe3CLAK
MD5:	5C23E1827527190BC578F270FD997ABB
SHA1:	C635E943E232412C5EF663DF038F2B5365210F1C
SHA-256:	FC243AD4651F75F964EB152682408A9A2B74B308FFE406E45D6E5FC3B3E80219
SHA-512:	5A45B0EF223D728CB820B4EA06401EC5F46E771ACA87064A918A771A470B170E155B62D7148CCC569F490300BC5111EC7DDB2E70051917E4E19D1BA5C49E7C81
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bdf3024cc7f74fd682fe8894d472d965.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:901349KDNl5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3658461339771995
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpmgGQbMCBSHDvlTjx:SbFuFyLVIg1BG+f+MogoCkj9josQu
MD5:	D0CC3C6387F2C509901484EF09779EBD
SHA1:	D63B6945504C4D4130BFB024ABFB2901E0474BF4
SHA-256:	39176329C947C64B9ED6821DFD7212CBEA64ED8FBE692A6D25FCA6F9B4DEED92
SHA-512:	F60DEFCAD269C613E6305FE54EA0D218F4B3243B92777B0CE139FBC399492C9C51DD992BB61910C77F14ABB7619F5AA5ECAAFEC746E1441563B7499D5A4A72DD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cf17ac3d3c0940fbb39ee3c0d7bfac18.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:90142RWOEs5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.356879424019738
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9wJUdcnkERAuqjshQ:SbFuFyLVIg1BG+f+Mp2nkESjtWL0
MD5:	70A34B4EF57EBD397FDB848BCFB91DD5
SHA1:	B47895B0FCA57B5C3C4CF1EBD452DD9B122C0C9C
SHA-256:	260EECE3F777F911644FD0D0EC51A8842E20288DEC748EEA5FE703C6970A224A
SHA-512:	CBA52590A9CC7E04399C3104933A6D0B5C379662254AA0356A66BC4D657254E1E4CBE1E538E11AFBB0A45618F8056666C460BD517067B55ED6C646C53317C87A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7d4cb134c09645918652345beda54e44.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:90143XWZzK6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.371724821866744
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoZKDTcxs+sjsmNz0/:SbFuFyLVIg1BG+f+MoZKDTYsTjdCLKzK
MD5:	2A8B6B4EE1B5B11AF196DD724D87A2EA
SHA1:	5F5735323F7143EA2AB5FD682F51FD4FE7BB0586
SHA-256:	5823366F108404B63AAE2068C3C57437B4BBC74F8EB8F0D855EB00F96E988D53
SHA-512:	0CBCC3D0164C50190571D4F8355F935D9D703A003F494B65FE028B73692024DC0AA513EF4C8561BFBD8E246E6498E8E12AAEE516385838F4BD68DA0641E562F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b5b2c8fedea64ee092a079ae7db41fc2.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:90144zhuF57

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4304407699435995
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5i4OuqmdHGvsjs2ALAQ:SbFuFyLVIg1BAf+Ms4qkjNALyAZD
MD5:	29D1FAD5CFBF35B654508C77E1E4F99E
SHA1:	FA4904A890AF1B7AFB17EF5D68BF933CA60E3D34
SHA-256:	A4E3A16DE5BCFA085CF0B5A33403649890DF2922CAC0C6975E95908E1AA865E4
SHA-512:	EAC51AA8C6D2FD1E990DC943E2F3F812FF0FEA75844906E94DE86EC8202C32E7779E5D8457D5F3534788E4FC5CD7ABD4F7B890EE654F441DACDD66A6B6E06B71
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=399096bfc6fb4aabba813f1495c5d8bc.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:90152W7A0Q6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.451650782017079
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmofIRWxOQtxDUvA+sO:SbFuFyLVIg1BG+f+Mo3x/txDUvATjNE
MD5:	8C1E557A1CB6B90ECF6191F639C6BA43
SHA1:	FD5D5C8484805707BE6F17C60E671319E25D830D
SHA-256:	01CA64FD7C9FC30F96B9EB28AEC38013831645F5D7B17BE1DED69B13B5831158
SHA-512:	6AB4DE78A07511F85D099C9230FE34BDCC7B900DA91091067B16DE64C814C71A4A53960FDFD18694E7E38ECC7E5632DC1AEE15DB347C55F5F6E0BA8C6F3DD60E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b6ca58e5bbd24f5fb43a75965de7dc11.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:90154TB1DH7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.390249243622035
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/JAAE+A+fXBHUWsj0:SbFuFyLVIg1BG+f+MyMyrjbVC
MD5:	3BE11852F6D2EAC2DC85B5EE843C687B
SHA1:	7DE64422ECB11877BAA9402CD9D2FE39260A2455
SHA-256:	7CE16C7DC2030BD30CED171987E2770634080FD4D8426477AA9E718310FFFCB0
SHA-512:	AA466438C2E3D565C23CC75845EE7BCCE0D31D27E99A21416F23E9630CCA9955BE0FA1C33D3D218F9A66D054837379FEDDF4D8399EC5836102E63CE3F57B9250
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=559c2db362ae4f3e8ea22f4880d221a2.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:90155hvf6o4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.400863393791318
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmycB2ucRPFGS3BYg2S:SbFuFyLVIg1BG+f+MycgTRP8SqjLkGq
MD5:	4A3456E39A0B09B941668C1CE4158A3B
SHA1:	453092C12EDFFB1B53B75663980D92ACB2852ED2
SHA-256:	B778B8BC151253C35F4D81846CC441EAFCB79BAF80EA2E0FD78C87C18FA7EFA6
SHA-512:	D20A86EB1F0FE03BDE90544343B69B59102CD893CD85D9FAF68E9BC4FD9EB80088B4692B04F0862CB61A6F5F479C0BBE900F5D334CD195CEA714391BEC817EE0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8fbe8f2d0901494b9f7ad9d26cf097ad.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:90156j9KrD8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.457596833153966
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MuPdunDDAlQpjNdQIeXD:qgFq6g1af+MEduD92D
MD5:	E843718314F560461082D9E96BDB306F
SHA1:	230187C12C6F83DB89357D5EED9A23AB11FE2E0D
SHA-256:	F10CF9726A5F564F4F8D2C2813B7D0FC2DB89C4828A696817ADF482CC514298B
SHA-512:	698D67524893EBEBBA2E21E2957C0EC3F148154589E6B500EB2AECE8E78AA89449B6971CC9D2A315565CBFBACB76639E6D2E74960F0EDF861C5F46CF3407903A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d1fa8d1e7dce48b9af53e912e26dc750.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:90187qPHPU5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.395259715621875
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoEIidcQW6Vvs22js4:SbFuFyLVIg1BG+f+MoEJhn8joa
MD5:	26C9750BB64BA23D92350101AB9B2D5A
SHA1:	CE04A85F40437DED7ED8216BE48598121347744F
SHA-256:	C0EB1568EF0B320A44B1E7626C3597F71D48A407E85280303A980A83E17975B6
SHA-512:	DC84402E429B90928B3325BF387ADD77D89B6CD650CF1722792A19FBF1861B2B6E434CF8DA0AF92EB354DE2E52D6E8B402F9CF17CE62FDD6F3F9F441B96C0FDC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b210ab2106054d7895d2ecbf19f92337.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:90396tQkmY7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.408106097005521
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsvdGBz8G2js1Hadme:SbFuFyLVIg1BG+f+Ms8Bz8G2josQu
MD5:	5C2731B7535D9F1AEE562C102E8F367B
SHA1:	64180C3A7DF2904DC8815295105D7B08AD39D724
SHA-256:	6E760BC95AA414F0B8F602FAA055FD6DE03DFFA6C554D642AA74755F2DAA6060
SHA-512:	E240F130A9177F04389A98B9E2983EDF7FBEDC4F77C12577D02C3D91345AAFBCC3C794C2CECCA87B0E5CAE538FFE509BD6009690C79AE1C7B8E67A4D9261E3B0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f86ff42dfbcd46ec9e282e5faadea7f9.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91519K4AxXw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.310173471620129
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9nnxXm0dMqjshQJWQ:SbFuFyLVIg1BG+f+MNn8EZjtWL0
MD5:	FECD9FB5FA65CAA509AC8BBF7993B13D
SHA1:	F9D92E525DCDCCDBD448F129CF119E5980C331C0
SHA-256:	4C98BACE3009E51B3A2D8C82B3D4B37EC4DC41A8D99C6AAC3BAF4F69A468D40E
SHA-512:	3776B20F30DBE7F3708E28F1D01597CB283A0855B0AFF519E8C489626D9BFCA8A1178B98D309648A68BE4D6E043FD7FB4FE9ECF3423BCC8BFD245108E8ECE35B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=75f9fee420e045f3ae9f80652a8a042d.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:9152010VOgt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.407808962824407
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MZIdvU/4FrqjdCLKzK:qgFq6g10+f+M6dsARgCLAK
MD5:	6EE682E49EF75077352B56FB7EEA77E0
SHA1:	579F98CA125ACAB6F51135D206367DF09E78CBB9
SHA-256:	56B0AC9191813D54F350D3CB329439876C023EDE47EB1302410D3EE7C5C712FA
SHA-512:	0D6BAD75032D71BFB75FB3B877D6BA20E2C129C3817BB23201D105B70E0423E920A085C2490A60807CF70E55E72B0C602305D7E662064107608BEE91CDC481DF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=54d6e5916c88494f94b9e2fef72ce36c.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:92185HgYyLw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.346018551785873
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6aOeeddsRTVcQLJmO:SbFuFyLVIg1BG+f+M6aBesfXLJXTjtWQ
MD5:	868D722F1DABDE974D424833DA0F9008
SHA1:	560583AFEBE072B1F8F4D083783CEDB4148CCAAF
SHA-256:	46951D176D604EB9DA84A9CBBF84FEED3446646D4C4E2CF564A2B3D9F9858B94
SHA-512:	312BEB9211A2AA35F36FCB0F08DEDE389921BD3C332E9E9A04C2DCBD37885E623EAAC29D48097C9C12C13F10B1D032252EABD8544A0BCA06B7DB2D4AF982D891
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0fc48fa8a819489880c460fe326b154e.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:92187JD2Fbu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496171076766489
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8E32Q1AUamZuqjsig:SbFuFyLVIg1BG+f+M8U170qjZcHcljX+
MD5:	123B684B111F9A1BCA0F8698177C6965
SHA1:	A19A66D26DF926E2A54E9982C0055DD51C52F307
SHA-256:	FE1D83C79748112954CAB5B868484E252877BB598695F12A4AA242F4126B65AC
SHA-512:	4C3EF1829E23317B4618FEA64A64050E392E17DEE9DB5FB048EA634AFBFA4C0BAB144024C26D2FFC3C8CED904A6B495D0C53B9198C2382096DC0DDDC017DDD0A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6a44b51dc52d491e83c2f2b08bcf7dee.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:92188wKRYZv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3953365754241585
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9+3RwdTjsmNz0LKzK:SbFuFyLVIg1BG+f+MkBwdTjdCLKzK
MD5:	D20FDCDBE7E60446B8E3C1EACF9C2AB1
SHA1:	638A6668EEE941076E137FD58202B32B54DDB378
SHA-256:	8EDEDB75B0122A7F514B89694882F4645B4EE72E184CD068DE5923F68C38D1B5
SHA-512:	88D4EAAFF83307352CB0EF56F77DA0EFE21249696D5762313967BF895E4FB73865830C9F5E7507BA7E8D402070676C366AC536B54045F0FA05682D2206085E0B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7018b4ea1e2d444099b869faedff5565.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:92189Ub5hlv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398646406087485
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4cWU7g9TuUEUjvATd:SbFuFyLVIg1BG+f+M4nU7yuUELjosQu
MD5:	037E9642DE5857953ADA4D58044F3B6C
SHA1:	59B2AE5C576D668934EFDFD8E96C4D8FC501213D
SHA-256:	FB23817B9ED9C06172502AA4F8D4A7A19C9F024069CB3381A32F5E0B025FF9E9
SHA-512:	0C0EB5E5F68E841B4E0BDD285B6C87C068778ECB663A2A20B3E8DE2A55C83B8B6CD49EBF990DCEA1C3222F35D9DDF92A26E5246CE20B36064FC798F02CACD7EC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=292157c063104d3ea8dcc865ea1a14ae.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:921913q08bw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.367740296253602
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm95DgyTlvUHB5GQ0MQ:SbFuFyLVIg1BG+f+M/RTlMhYQ0ZjtWL0
MD5:	341E24476B86420E3B5578A062BB1A68
SHA1:	0E39FAA0CF1B2CF5C7C12C406CF2188F8C7170E7
SHA-256:	413C0963FCBE52965E9380654738F54D4D72606144692DFCFB327AA64EAA9FBB
SHA-512:	53A0306FF6253916F626995D4ECDDCA041E29104E6CEBF62EE7DFE56CDEF0907849334760E82A5E5C46A2D124B114CB435FFDC5E3346F45189926A455C1B050A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=706f948ef29d414992e3f1bd9fc6c294.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:9219817AcUt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.423300527091158
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoycU7RBzzjvW0josQu:qgFq6g10+f+MoGzjOiQu
MD5:	ACC75FAC936BB9CD85B49D86A7AD0F53
SHA1:	9E18E20B3E4E1578F5AFB662B7CC9687CC93BC3A
SHA-256:	A4549E2037C6EE23141961010F0D56D770B01F7CCB1FF379D7B4B4E7EB0B1504
SHA-512:	11F658A268B78F42E3F3FDC6C28762EB6D2ABEDBE2D0978DE34397A7707C664F7D924FE433DE2AB1C471F8496B06C655B348121D7F095DACAD3025F59CCEB2E2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b739cb4791a7442ba14b62cef5c00c93.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:92199AjaHiu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.411049075828682
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpgmDT+ttUiRdA+sje:SbFuFyLVIg1BG+f+M2qWtfATjdCLKzK
MD5:	CCF2FC4CDEFA7BA34E5BF148E1DEDCDC
SHA1:	63B319426116BE558CF2B18BFDAD9BD9FE510426
SHA-256:	CF7894B521456B069425C8EE697219C44831080C5459CB1F9A49B3C06DD7158E
SHA-512:	98C3415DA0757DCE8E381483D32DEE77472D74DE8904B54E7C3668658C47C8265694ECAEFA27457189D645E24DD01B0ED2046E90A786585E3C6870379852A76D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c148652f6a60471aa9bf819f034519dc.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:92205xWjAIt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.40156518729661
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MmU3SR5XxYTjNALyAZD:qgFq6g1af+MmU3SLh2IZD
MD5:	5B20D7B16A1C2B6C9045F4CACE5103FF
SHA1:	5337AA7D6F6892B3E21C0EAEB8D6096CB78F6EA1
SHA-256:	28C701F525485B20FFA07A8969DBF3C718FF070447AC6FFEF0FD8FD9B3302086
SHA-512:	D763CF50CA82751603D9040ADAE88C5B59B06615F45E1760325352633BE354560933E29D957A92261E386180D54586A3C213F2DEC4C0E9FD18161BB68309C5A4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e970ec44f087442c9d52fe2bf7eef37e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:92218F0xX1u

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.408701072017803
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+aW2m2pfvsZjsjOdy:SbFuFyLVIg1BG+f+M+aW2m2pcjNE
MD5:	C8C24B1FDC159DEF46BD5F1B068F6AE0
SHA1:	398F0126D06B4B12B0B03A1689A1840778EA68F5
SHA-256:	4D852395D9BFBA9F1E055A7A788A6E55798E3113CDC4BCE06BF2A3BFD592E21E
SHA-512:	0471F1962A9532513937E6E9C03DC76A8C11502D4E3DCC4BFA641DFD7661ABD13604504602DDFD422B1BA4D41EB78919A36A3AD496FD449E04115A793AFBFEFD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4511cbdc3ceb450084dbb1c53614af88.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:92219JccTyt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.427177904002305
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/zbDlKdVSwVNGcehM:SbFuFyLVIg1BG+f+MzlJgLeZjbVC
MD5:	D5C64530EA013A5120BE99F36FF6BFC4
SHA1:	5C125D5BC8C7E7E933F2D6A27C2791A727E58921
SHA-256:	44D1F5E405DE31462B70896CECB63B0F828CDC82BA29BE78F04BB266932D4706
SHA-512:	4323EC4684677B3C1E6CDB1F24BB7A7A69E651F5957BF34094F1087D459E19095CCF944462BA3335AA4CD8C52A5F6E1FB2BE0DEB8013CC6FD741B55D74D41D66
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=585afc1b3a2f4f6797837857f007ec98.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:92220K2zBgv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.393604860116669
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp0X8nqbdHHh3h+sj+:SbFuFyLVIg1BG+f+MI8udHHzTjLkGq
MD5:	016CF9665E4A3AE26EF5524EED5B9E1D
SHA1:	E04EBC05B0C323F6D12F0A894BFF30C533869D2F
SHA-256:	A70F5F5EC648B9AE8DB900D4DBE03B9B62D3C269D4D6795F83729CFFB764233A
SHA-512:	7064EC6120F440BE12B013518C1BFD6F04CA07A889D3A4677A001436E9C34C6B77F5DBED1B971E317442CB0426BD1054CD1D515A5FD93F350A93DE1B0A280D16
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cbcf20dd35604a35a6d39844b34ed250.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:922212VwRNs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.453744966267078
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpZUU7nG+QUBn+sjs2BI:SbFuFyLVIg1BAf+MXP7nEUJjNdQIeXD
MD5:	C9BC3309531018DDC61F15ADC04ED4ED
SHA1:	A37561F2DA391619EA047DE77EF74CB613E59A22
SHA-256:	CAA98B697D0C940FFE7674946188D3CFCCF8F8105399679B4A96E27E5389B453
SHA-512:	CED8544EA2633B7A104ABAC80B341A60FCE2694AB76A64BFFC072A893715DC81F806ED69B3B21CD4B41D35DFB9D78ADFD4CC385914F3869D05375557370D89AF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c080f15d1a1247938a89b6180d1f84d3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:92256GB69av

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.370629969420532
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoBdVeQkdVQglsjs16:SbFuFyLVIg1BG+f+MoBdViVQg2joa
MD5:	4F7B4C91CFDB0072BE579243642E8E9A
SHA1:	585C79E3CD83BBD458D336CCC83DED467EC97525
SHA-256:	A725EA46A54DC7969679B7023D7126F4DAA993678B28E0A05EE0F99FBDD6CA39
SHA-512:	EE468C5B67171D07CA080AFDE4BD893E5D4F6F450C7003F5B99C4CC8543BAA134E2B10A32A117423D786A3636AFB91765412C5BB2D0B4C4979C58312008053C7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b34ddcdaa07e4d0895d7643f2e6e96f2.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:93108pDcbVZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.490880152123811
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M5sRDsMG6jZcHcljX+:qgFq6g10+f+M5SCUmAu
MD5:	532A07BF3A53177212D81C8907F6E3E1
SHA1:	9B743DE1ED42799EAA94E7F010E310C2E2C472A6
SHA-256:	3DCEE8FEDECB5F0662B5845D197FCAFBAFADCE6BB43CEC060B84DB39BEC5EBCC
SHA-512:	DC36013C3C66C5CD0B7FE5AE3C83053C0E519D3C5CC71E0CDD21B46EB6C2D2D7955572466638EC53AD21ABA0607C0EC8E8789E619BC0F26BEE762CD608C75809
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=589ab8b16a0c49b1a36fa29529c4e3dd.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:93110tUMBMW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.387021420790061
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyVEncR3ToA4WxSHwm:SbFuFyLVIg1BG+f+MyychTod722josQu
MD5:	D3BD26F870AD63E53A1A9C3EEFE5EBA6
SHA1:	C26F19AD7750CB81E018AC91A5A3CF16D07818EA
SHA-256:	5E185BF3A44D01C93E1CF1141084E667D4CE6D3234B6BA7D701314A8F24E693C
SHA-512:	0A39FEBB222F54D331ADB94842B5FAA0AD46DCC6478B807B36889642E32AD4C5E4DC4EF95702F67E6F512543BAC5250A4C4294EB382E7B285383350B75CE6EF0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8c5b0851ad49444ca1e3e7e13427be04.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93112ZNDMJY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.288157697750887
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6/dWRGgbTjshQJWL0:SbFuFyLVIg1BG+f+M6/db0jtWL0
MD5:	4272BADBA522175C737AC955F1A4BEB9
SHA1:	AA49057942AE8280DF663D7E2435C167A22A1CA6
SHA-256:	22E91DDBA8213A74A3F661E8A9A441FE3350776CECD6B20F578D52765971EF53
SHA-512:	9760A05300C138A1D527DC163777674C4E51DE4B4C9A929EE07681F15EDD0EDDE5C48AADEB24273D8988F698AA8111F7DA1DBB8472CD532E76FBAA9CE9885EB6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=03adbb88baab47479800867a7d249887.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:93115LsYy9Y

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.377969342553508
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyXXVdNztIATjdCLKzK:qgFq6g10+f+MwXVnzDCLAK
MD5:	30646DEFD23EF20CDB5D8F7DD063C896
SHA1:	C77FD251B9FC8C7BDB2F8BA3D2D50AB978A1BD8D
SHA-256:	F22A8220826598AB2B8C37E19B95B63428763BBD7995E3356F1B9745A27BB404
SHA-512:	58B3CD06EAF2774E4C0EA281F63B152A55269BE9239A2292272878F6C4A6B7915C4775BD3D17BCE843F3D0597A6826C5EE04BC49AA073BDCE4663ED1ED03EBB0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=835f20a1208f457ca7ede05bbbbcd143.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93116NKET5X

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.34629125511312
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6u7x/lxfBzTljs1Ha:SbFuFyLVIg1BG+f+M6uxnp/ljosQu
MD5:	FC180FF9FFCAA0FA750A131EF2FEA7CA
SHA1:	D0ACE8110F0B28DB9BF4E449F814E9B430E8F9DD
SHA-256:	44A16AA26119882020DE84C1178F49BD9260FF9E65BB5E65F717AF32D8D8DBB2
SHA-512:	EE6B45A52FB4947E881791C9145EBD3F48E3E1DE8A91429C23C434609F9FB1505D22907DA07281B02A29985A6955CB2E0B8DAE5A2FCB1114DEBA2527CA269364
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0aba7b4aefd6450c8a9dcac8adb6caa8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:93128DuRNjX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.363049135593123
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8GYBhUeGEj2jsmNzi:SbFuFyLVIg1BG+f+M8thUenj2jdCLKzK
MD5:	CBEEFD7881F55D74C9891D4B021EFAED
SHA1:	EEA7168E1A929D03A2BF79BC6BBB7A4A633F40C6
SHA-256:	BCBDB64DB7BF6402308B901F1C84F1A62B5E95CF86818E88CF7BDD58CA11AA10
SHA-512:	E0B1DFD71000D601E7142AB37ADEC2AD03767EBD414413051008631457CED23440601A4FE52D62A68973170B3F6C50D45B53352973C0DEC99440F8D89D72B409
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6c3de6adaad54741af9566cce2a39f24.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:93132avIBwX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.441237943606215
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MwwGaBRsU022jNALyAZD:qgFq6g1af+MDQU02MIZD
MD5:	744ADF55873E611585407ACD77022173
SHA1:	672684330ED09FB0E963D046D800CC076445BDB4
SHA-256:	196CB2DBAA992741562FF3182DB8098AC4D217095ECAD0B8ECE61E2250B9A60D
SHA-512:	02A9AA00790A665C9DD625A29B9D4C6B4E238584F37CAFEC8208CCA7755555E92EA72A06F2A4E312E5D53301C9D1562172B4FC597CD2D15E24ABCFEC1892D56E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5776a27fc38244089e32c79e85e489d8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:93140xbbw3X

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.389548091307378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7xmiWww5shg2jshQJ:SbFuFyLVIg1BG+f+Mxhi8jtWL0
MD5:	7F7DCA892ABB6D256A5431E53FAB7B76
SHA1:	CDC929A956021189AC94C5B619FB3AC78C7FEE75
SHA-256:	4223FCC892E0872DD0FC761325BC435147FC5E0DF9BD5674BDC84106C6E31AA6
SHA-512:	B9E1791F818CA0BD231658A904FA951ADD90F6A067512383D7E0A30718E1FBF0DF7FA38A25E597940545C8DBBBB4AACF40BE08CC5E4D851C7E59B9FBDD041CEC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1b4d52bb5c9c4e4382c453557316f7a4.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:93141GVfSMY

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.4359837543075695
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy8tDHvDRxBNTURrqO:SbFuFyLVIg1BG+f+Mys79iRrqjNE
MD5:	230D04947DAEE5BE680C5D337E93BE12
SHA1:	F1F6663624ACB151B1B5BA302E70C1F74F5C636B
SHA-256:	270683CE2AD027AA897E4C61E8F95F330FF084F0CB1F2EEF203533E193B918AD
SHA-512:	57BC251DBA366DF1EF6E8CF3B32370B6F18264B9770E74174A9EB673341A3F497E6BDD4058218782C4B385CC21689FDB8D84968DAD5C0CF810092BDCAE2AEA0A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=855c3e3a4fbe43f5ae3b42d6d61f2147.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:93152RdP1hX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.37888456483211
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm//rYAU66qjshKJvel:SbFuFyLVIg1BG+f+MnrJSqjbVC
MD5:	9A274B413363D62D22AE3141D466E40B
SHA1:	188F325F7A4C0391FFB3B72C2FD57AFE75A1FBBA
SHA-256:	A4D07AAEBB456DEA425EA59F1B798B482A35578BAB1C4CEC44E5165B20B522FB
SHA-512:	A8027061A9DC4FF1866ED39F691EFCFD7952E236A89D8239ED30A066A42B9BE63387379398B3FC8BFFC9C60B8739E2B84E3C4F3A6D743A684E35254A0AB223EB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5662815de99246048e2ed71de8d9a205.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:93153k2PmwX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4426412344486215
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyqGtPAWiTgxLqjswK:SbFuFyLVIg1BG+f+MyqbWiaqjLkGq
MD5:	C6B31B588E122FC9106E9C8E2E971ADC
SHA1:	5057B4B87FFA40C55AC2BADDEFA2E6973F74F141
SHA-256:	FEA3D7F3D50EA60879CAACE70F62F96A9D25FFEFBCA5B63B5624C6464948342D
SHA-512:	A8EE044027DC4C309FB66F436044574431723DEAB4C6C14714E5A93A117193E998D607037102F394E254EDCD6672CB0C5C0F3B4D44A5F2B12AD55A66A2F15FC9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8d93dbfb4b424663b3f9b686c3db7455.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:93154TtbYLZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4913511433028885
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6eQTjCSELMWXQlkwsjs:SbFuFyLVIg1BAf+M6eGjREkOjNdQIeXD
MD5:	5C744F46F6DCA8B828D224B2B866481D
SHA1:	BE63FF6DA79F236924DE4600F0212F2DA975471E
SHA-256:	B564F991DE9DDBE95C8DFDD70BAB6C656A00E937CEE5B2E0AFCDDADB668544AC
SHA-512:	32630FA991011A22DDCA12161F28710814BF8F96E596202FDEEA6543471DE699AFA0E75D555CAF824228F195986C2F9FD786438ACDDBC58A1B86501BDB722F6B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0d78b56c85234227a394d103250c5b62.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:933177CwH9W

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.33879921581734
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzlES8Nr6L0wsjs1Ha:SbFuFyLVIg1BG+f+MRES80IZjoa
MD5:	7324A4DA20A0205D6EA55D1F55D53D29
SHA1:	2E6FD178BC18622B75734AD6120C27E22F5CD0AE
SHA-256:	82A1D9AD09AE44D9CB08192E5EB1BDE3927D2E2DD5AEEF32692B9770DBCC1554
SHA-512:	7E050AB3DB5651C3EFA561FA7CBAA2F617FE71DEAE0F0D2D21C03A61283775C7002D328C51E322D4E94FFCA2E7DCE24C5001DD0CAC2DD5C0F4A941FD8677FA0F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=926bdda2703a42c094e61c93de09416b.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:94332XZNAIX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.373859953263732
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+f8D0TWFD7YuqjsmM:SbFuFyLVIg1BG+f+M+fSx5sTjdCLKzK
MD5:	B339C7C545F3545C12CE437475F0A59A
SHA1:	ECC07148D68816DE941A51357FDF93DB213FF7F8
SHA-256:	90FFA6E32CD6AD074308BB51E71499B64B1735FBACE7D3325FB9E6269417DBF3
SHA-512:	F6846E9D581853145FD7C97E95C90A7E544D8F922EA64D984BF1DC430C5F47A00E6E47AD88FC61AD54308E8C150F686B7048DEEBEE4B0631F07BF2E4B4D4CD29
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=41b3422fef7742afacc1681d0bdf0dd4.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:95440ZPcTd1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.327126083363178
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7bBdamahMqjshQJWQ:SbFuFyLVIg1BG+f+MKMqjtWL0
MD5:	07BDF7631331E6D79C59641513CA8D4D
SHA1:	5FDC603DCE8045EEF340A10494BE0F4A87CCA342
SHA-256:	DE8FA5044DD751A7D95E617805E73710F2CAA9933D9CEDE2B67C69C48DC7BA5D
SHA-512:	21C08B97A36AA95986871A9049A2AC9860F3A479110808C920D0114813EDE2CD451B62D69CF8A6580B4E916B0E1B260AB45F70A11A367FEFD3B83F9284D10CD7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1bac29f005dd40b081f49edccff3c1c9.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:95442Azbd21

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3982754984362495
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvvNXWdV9TX9Mxsjsc:SbFuFyLVIg1BG+f+M879j9MqjosQu
MD5:	3F9D3673D79A300888DBBC1EABFAA0B3
SHA1:	40435BDF33FC8152AFA630FEBC447D9BA5A4E6C6
SHA-256:	D5CF5BAEFB164131300EEA736E564D2FC397E7F2068557DE3CA0AE8159C3E77C
SHA-512:	87F5BC93DD9CA6BF9EA49D41A2970F65C660BE124ED12312787D78A435FD6958817F48F4B220F3AEA6584688C805E30A093920FF4097C55508E7CE22EFE1CC63
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=eacdee31d23049dab97d883b4f362b41.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:9544496xJl4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.434638874421212
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+cKcCp7MsjsjOdlJO:SbFuFyLVIg1BG+f+M+fhbjNE
MD5:	2A1DCFAE32E229A62CD3C501E0F3BFFB
SHA1:	488476054478254F74B86112937950ECCF68F3C0
SHA-256:	1B76C5F050A5DB67CFED013148DD369293B8BCED84F7722564FB53443F0ADA7C
SHA-512:	99CB950253E8C4A66ED04B411CCB82EB0CA87BA83974977D84C685FB11003FDCF5A54A6AA6FC20C3E60A7FD4EA56BC69F1CE840084B61F91A4ADEB9E31E903D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=41a4e428ff734c579459ca38e7a7384b.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:95445PQ3Wl2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.486318617679947
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6SoWFJQ71DmqjZcHcljX+:qgFq6g10+f+Mc6eVmkmAu
MD5:	2887AD3CA252A91A50F837A8ABB8CC7A
SHA1:	2365B2460CF1B77703C5D4951BCA8C4F4787793F
SHA-256:	34CC3F9FBC9F9A2B30992404BE8E498EA3B9D66FD2526C40F2E40AE757B6C253
SHA-512:	5B873BF15644857CE096CDF0D1E6A90884CED39A1C9B117F8BC1590A5DC2EBFB8890902D8F943815B82DE45AB4A4C52216A24C6F0275A999AC3E881E8B67AAFA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0dca10c486eb4d1ab59874865afe52d7.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:95446FElFh4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.422521228673609
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/LkHC3tmW7VAgrqj0:SbFuFyLVIg1BG+f+MQijhAuqjbVC
MD5:	AC98DA9466C6A1C6AF32D6D344D33546
SHA1:	24D778821B74AF476915217425B9D02B261063D2
SHA-256:	B0BD79ABC5D5F3A001E4ECAC70FA30DEA55B2A6FFB40D7D89B02660D09E83E0A
SHA-512:	ECCFE50A4554EE99CBE308D7F45340B73D5ACF1588E35E020A90351F24C86611AEB06758CDAC30A340A0F9A5608E3F1F962C3D0869E15A6837F09974EF73055E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=51790b5db868499a8c51533bd245c119.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:95448wJIqx4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.34461065980649
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyBEUAdY6H32VFRqje:SbFuFyLVIg1BG+f+MyB6H3ymjdCLKzK
MD5:	F60EB3224D141DE47CF060573D7F749E
SHA1:	DDE6D2982784C84007AD35460C76FFCC838BAB90
SHA-256:	5DF3C30F237CD1DA5C4B8870312A77ED7D3D4B47C86B4C106FC672E68B93075B
SHA-512:	430CCDEDE29E2B123A12FECDE23673E778B19C8BD320FADB1E403A1E8FE0DAB3A73E4D409A06515A99EA43F6B1D1D876BB0060630AE389AE981C8A934BB7C6B3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=87708acfe81d458bbdc071d3071a0e16.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:95449inpKO2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3918561725533065
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu/1XBdqQcWzQxwsjx:SbFuFyLVIg1BG+f+MuyjTjosQu
MD5:	3D3D9CD558F99AA23DA6AA2D8BA15725
SHA1:	DEBAD5B4B591CCCA2384AC992B116D3058908700
SHA-256:	03F17C95A68CAF17C7930750135D33D777C13284DEA897FEF545DD5A8C5779DE
SHA-512:	505F039274BEB941D4CABDEB292B1AEB8FE307E929C201714D6D007D5A86698CD856AB8385FB4CC1474D3ACE139A7EBC6B32C6A3686907B3C3A3A4C99AF021BD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d60dd1e9af9e4d78943c959a05434053.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:954506ccx54

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.507668008643674
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8QG0Sy41Q0jsicWmt:SbFuFyLVIg1BG+f+M8QFSLfjZcHcljX+
MD5:	B6A65943539DBE1814C20C579A1CF07E
SHA1:	733893A1294778E8653C6A4E0B5AEA20AE07AD67
SHA-256:	652CF550800627385B4954E198AC2AFC1708C27D4928C871316613C95402A18E
SHA-512:	DBD88F6D63C3E388DEB1D5175C0CA65EAD3B236E9C9F92910FBE83305A962833492E6F3D15F1EA5C020C1B2D6019408EB450A6ED2DF658E0D8785E84951908B6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=60c53a6fb8d4477882524ebfdfde2295.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:9545198ou10

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.341557165928056
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsAhkIbFSFDGdEASEb:SbFuFyLVIg1BG+f+Msp/WQAjtWL0
MD5:	D9AF31A212FA7D5E3B408A1D05D6C4AA
SHA1:	487F10454978DDD591C2444A9993C42E9BBC5658
SHA-256:	B868322B8CCDE708F791EAF5A5D63C922216A9D10621B8ED9EDCC35B69A30809
SHA-512:	554CD3D29EA66A401F95B41FAAAA311E35F80D7B755721FCA8E5FAC2FE5341133CE0EC9762D2C28FFDEC45F3AC469FAD945FBF4510B435D3B85225B4829C9E6B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fed2ed7951d34a18b7c7fc8ae7cf9afe.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:95452SWAep1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417410280961333
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6UTAZ0c2js1HadmQ9:SbFuFyLVIg1BG+f+M6UsT2josQu
MD5:	9FC4918FD5D5E874D100C1FA157537D5
SHA1:	DAB0BED9B625B5FA91424FAF63F41D669C38366E
SHA-256:	55943CA6E3EB27114A094E098842C8F4FA4197BAF70D335FC00FB81B3A8DB49D
SHA-512:	97BBEB107BD9120FF06D4C1B82C05FC2B77C9A0FF9643B563A4538DA6E28817A055E5B01ABF882A74FA8B6427E6C12EB41C2F6AA699428CEF7F2E70E0C811A90
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00f576a645b8438dbc364018090a54b7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:954597v1ge4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3930907224945015
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/NARGFbQdllisZjst:SbFuFyLVIg1BG+f+M24Udlc8jdCLKzK
MD5:	8114875494EA1DD8827155F15BFE4D9B
SHA1:	3EEE85942CD2D8E312B16D5F06CE9402D659A4B4
SHA-256:	782F54C192FA6CA0849DD7C266914A63261A90DC58B1ADF55833BB45BA6573DB
SHA-512:	8FD53A32F89C23F2CEEFC356D137580EBA5F94038AF791838D8FA27DE8F58EEC0FF32CA168A2C5F84FDB6354C3175461C17C84B91C614E4708852BC0E984702F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=511cd204cf3242cfb929a8b19016a6fe.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:95460i0kFB2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.454356455521278
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9sISKnHWTUSpjs2ALAQ:SbFuFyLVIg1BAf+MjFHujNALyAZD
MD5:	0A709A34F88251BB5A18F31A7B9AA88D
SHA1:	B81DE8F520BAF150550D67FAE768C27F11369C2A
SHA-256:	A16417224239A29790ADCA502778E33743E00D1E9F4151B94052EB22A371DA41
SHA-512:	6CBCC9F0149294CADF86F9269AC07E916EB449166B5B27D78D81E8AD3146646A347E084F65A48C1B62E3CFC1CE02CD8E8D8D4C856B059114E334576C91375A50
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7d92bad8552b4b93b361e51e87d6938e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:95468SGO4f2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.453276983444187
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpJTE0scqWTuYuqjsx:SbFuFyLVIg1BG+f+MPTE09trTjNE
MD5:	0F1ADE56DB806CE5D84217D40687FFF8
SHA1:	169736DA2056A50ABE96F19CEC6D5FC738721D99
SHA-256:	C8CBC49A4A08DD0734C7CCD8DEBBA0CEE8C17CE92005351F7F52405359A55E51
SHA-512:	44F68B62927E43FFC48562DEDB7B743CFFDFEE28EC46455D891F916AA88E1A876341007FCFB3A3F2E1B848859CDB6FA050698A005C1607340C8E4F600BA6E6F1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c1ba5da84a9945c7b20397c56b36362d.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:954697NwcE4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.328199884219607
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6dm6WYEA1UAYTjshP:SbFuFyLVIg1BG+f+M6cdAeRTjbVC
MD5:	E692A6C2C6284A65EEE8115FB856CD02
SHA1:	0BF1CCB735361ABA10EAE106EF45A8563E0AF24A
SHA-256:	BF274074A4D224444228FB5D10586699A58847750814A5B28BB24084239BCB2D
SHA-512:	B92F8232B60AB7474D89E8E71EAD6D68177939D9566E5C0DA6BCAB1ECB73086DED03A36253F6EB0AC3275A01AD2051DC85B20C093279910C78E3A1B63EF06DDD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0d48b390ee3e4fcd904a18f9e0139a1e.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:95470GcY0G1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3949674509827865
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7kW2gRM9g+sZjswkT:SbFuFyLVIg1BG+f+MosMqTZjLkGq
MD5:	BC66A34C767F12FCBB8409D84D619D1D
SHA1:	CA6E428079E151C0A737F04DB0D7629D2CD1D649
SHA-256:	27F1C426408BEA11C49F275C6AF2FC76BA9A481B3C405E4424339161C8B7D30C
SHA-512:	70C5971F2A6FF4BE724E2378DE1FB094CADE75A057370836663DB61301F03660D3167F788C283CB60A3CDE390CB6AC4A4E0BAF359541C4D136F87CAFB2A7E1F2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1bbbf8b413094c4b9d18b14802d3e798.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:95471iJehg1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.445212103049288
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6KBNHD2tcRHyeSHjs2y:SbFuFyLVIg1BAf+M6KquhyzjNdQIeXD
MD5:	61853B896552FFD5B1DB1C0D49539075
SHA1:	054A55ACC7267F7C242706F8CCE60654EDFDF4D8
SHA-256:	0CBDEA2EB44A34DDBB40ABBEF976FACF87043C905ECCEA686452BF9D9B671072
SHA-512:	C217E2C5DF7092CD6D185B769825478E9F450B0298D29993AD9E2F75272B07DE5172A7DC90636CF1891CFB1738CE066FF5380BF577E1441D274EAC9E769852E3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0c8d15f766074fb3aa980dbb70ea3307.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:95472Ps9MF3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.362641741884412
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy3WVRd+H8vs2rxsjx:SbFuFyLVIg1BG+f+MyVc0Zjoa
MD5:	20F5B6B21A57CA6F3A784EDDB8A5E28D
SHA1:	FEA33349265646D1074543B6CABFB4321F8CBA2D
SHA-256:	0FEC3EBD52FF2823D4B4A4FACD566B87D5C1387DF3DAAE18CC6A6B358DD78FDB
SHA-512:	9369EC96A06C36E998185D328DBFF74FFA290A4232F2E27C6015F7A74BC54C64BF5170B68DB697BF35AD56269ED3D7C7B0DB90D707E3E6F233AA2F266474E82A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8dd74da37658488b893c40f4f8ebcfa0.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:96525bOb480

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.443747254459804
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9AT9blR1RJyH2js16:SbFuFyLVIg1BG+f+M6pxR1GWjosQu
MD5:	E5A948BB07FF2FC05EBAF4B16D814FF7
SHA1:	950C3DF1BE5793B61F92D1ECCF73CE546907AE73
SHA-256:	FA58DB0B46D50C13976E96EF3251D6E92E5F12618642FDBCF0E61222400FC348
SHA-512:	8AEC749FED51E8F26DC2BDCC957BE6FC14846C86ADC92E2B9689E1D9DBA50CE4BC9E1DD66B10365C3B1D97BFF6BFFE08950578658B1878C76ED2DB13C9E4B8AE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7cdb6b8392df477794530bc22f24e474.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:96535tIXvG4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3941751575386485
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmosk8Xki0bAuxsjsmM:SbFuFyLVIg1BG+f+Mob80iqATjdCLKzK
MD5:	1218F29E5ACD2B13D08DEBFA0BB528DB
SHA1:	0B78ECAF5AB7AEB3EB3FF84402EE59A10F598860
SHA-256:	D69B5EE701446BF0A25316275023950D7F07CACC79D25D53D08B15452C01FA4E
SHA-512:	D5CD10C4BCA07089EC023AA0A48C57AF803DB03BC9A233480934A063C5C763F189417D40AAACCA88CEE9EFE32AF77324DBAC8752A70EC079554B025091D846C3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b5538044f8ef4cd080b21ebbde95763b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/seats/.#seat0DWYJUs

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0EgAPYF

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0F7Yq8K

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Hwzucl

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ITEYJb

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0SawTUB

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ScHJyJ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0TKPyZ9

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0VLY28l

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0VnYAVM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0boCnqc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0nRd3Bh

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:vGn:On
MD5:	00F159F51052AF74C48F1B1D2C8D17B4
SHA1:	A132EE4B4BFEDA438518E86453A58E5FD507145C
SHA-256:	9D09EDE90C6CA5631652DA52288D95EC8DCA12571340D6C10562A133297787A3
SHA-512:	8EFC21C21644211202BB7FB7AE9633E6C1A94D64DD6972DFB261702A80D70FECAE0898E7046D149ADED7080F0B24A0B3CD0965149F55DB013A8CDD03E70DE667
Malicious:	false
Preview:	7954.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:QlmlsXlXEWtl/sCh8:YmA+ylkV
MD5:	F8045B41B0F02CA4024EC4C1F9DB9892
SHA1:	90200CFDAEEEB06ED3781AEED024303B3D1857DE
SHA-256:	09193776EA442E66B884EF289DDB0E1174E22028BFC4F31974DE44AF72C92E3B
SHA-512:	F447C767E714CC852ECB526EEEBDBC1CAD929BB12D0CCD97653862AB55CB242F6D8A0FE08CDE5EE64ACF8987D366264BC4873B939AF3218737A07923793DFDDE
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................7lg........................................

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1718
Entropy (8bit):	4.942275813718494
Encrypted:	false
SSDEEP:	24:6mZea+mZ4B+YG+gugmBHjAv2jA2+VMf9Zea+9Z4B+TG+3u3mYH4Av24A2+VMR:FvtfV8vQfVQ
MD5:	A5A6FAE7EB997CE0358EDBDD712A2F35
SHA1:	684EB3AB6AAFB0906D9D6F1D0426017C6291A011
SHA-256:	92871A6DC0B020575E4B8B405941596D4EDE688168B5D8E4CEE2FC47D0D2B96C
SHA-512:	58B7E148B53AB2E4B3ACCFD3B182C8959960D11B7CFAF79FD4D205ED8500B2BD73F7283DCC5CAC6DF83130C500CC5EAC40922E16C73B38977E280DDC8168EFAE
Malicious:	false
Preview:	Dec 25 10:49:33 galassia systemd-logind[7815]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 25 10:49:33 galassia systemd-logind[7815]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 25 10:49:33 galassia systemd-logind[7815]: User enumeration failed: Invalid argument.Dec 25 10:49:33 galassia systemd-logind[7815]: User of session 2 not known..Dec 25 10:49:33 galassia systemd-logind[7815]: User of session c1 not known..Dec 25 10:49:33 galassia systemd-logind[7815]: Session enumeration failed: No such file or directory.Dec 25 10:49:33 galassia systemd-logind[7815]: Watching system buttons on /dev/input/event0 (Power Button).Dec 25 10:49:33 galassia systemd-logind[7815]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 25 10:49:33 galassia systemd-logind[7815]: New seat seat0..Dec 25 10:49:33 galassia systemd-logind[7887]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 25 10:49:33 galassia syst

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.4595260194504922
Encrypted:	false
SSDEEP:	3:F31HlIFpLCSU5llll/wFpLCSU5:F3YFplU5/ll4FplU5
MD5:	CA5E0DFC209CD3EFAE05B857C50D8DF1
SHA1:	787A9F8BFB4868F3B98C74FE2F5C7275AF6F4CD8
SHA-256:	8C05B5CC88A050F8F338ECC4EDC17E722656CA1585B446A1C2E6654557B1F678
SHA-512:	B9E3B71DAF861D18FDB9F9F5C9D0F1708038F26BD5B389291364DE370CC1B9F7ED98691A0B0556FCD1F76EB95E09D304240CDF76AFEC8FA88F4425FC14512A5D
Malicious:	false
Preview:	LPKSHHRH..................Jx.cN?.&..87q...................................Jx.cN?.&..87q.........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.3807197082782183
Encrypted:	false
SSDEEP:	3:F31Hlf48ji51vfrh48ji51vfDXl:F3Ni5lfXi5lf
MD5:	8B4C7B8B0E6491B75AA33AA014000E43
SHA1:	861EDD37B6A5D9EF404491616438DA07F33093CF
SHA-256:	6D57E27C174F5CA0E8692426DF4FDAA64FBD054006170B483CCB282D50165DB1
SHA-512:	F592F2B8C4DA3439618C81769C6A2ADDC19A3FC90D66F5F378D6C7738E2C0A5987AB4F020532D7FFEF071A859CF323007977D85C4F6BC3E71DF700D54E1AACC3
Malicious:	false
Preview:	LPKSHHRH.................!.9..F..^\PJ...................................!.9..F..^\PJ..........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1479
Entropy (8bit):	4.75834886726968
Encrypted:	false
SSDEEP:	24:6QaN7l+QGUGPwQZGBCQkMQWfQQzQB2uQfZGbMQr7QTA3QP3QAem7l+Q8AI2QTAIi:PklLSAkXpkfeAJoAdlLCzti+HIyM
MD5:	4E5CB6598D4086DA98B0E1B3776EF3AC
SHA1:	856E36C1043B60229F004FC37B99A6DF4DD84151
SHA-256:	5D16AAD9D0A4E5D3F477883117B1E8704200EF0DB7750F739C57E18B77FF6863
SHA-512:	EB5AB46F65919A0BFA69AEDAA1F8BDEE24B00258934D7E6C8DC69B5FA06D01E0B47BA45CF94E839BDE8021C2155FFBE9CA8A725C3E93531D720393AD02337777
Malicious:	false
Preview:	Dec 25 10:49:38 galassia kernel: [ 571.894954] blocking signal 19: 6276 -> 2048.Dec 25 10:49:38 galassia kernel: [ 572.071055] blocking signal 9: 6276 -> 658.Dec 25 10:49:38 galassia kernel: [ 572.193775] blocking signal 9: 6276 -> 720.Dec 25 10:49:38 galassia kernel: [ 572.316587] blocking signal 9: 6276 -> 759.Dec 25 10:49:38 galassia kernel: [ 572.439118] blocking signal 9: 6276 -> 761.Dec 25 10:49:38 galassia kernel: [ 572.562227] blocking signal 9: 6276 -> 772.Dec 25 10:49:38 galassia kernel: [ 572.688287] blocking signal 9: 6276 -> 936.Dec 25 10:49:38 galassia kernel: [ 572.812025] blocking signal 9: 6276 -> 1334.Dec 25 10:49:38 galassia kernel: [ 572.934997] blocking signal 9: 6276 -> 1335.Dec 25 10:49:38 galassia kernel: [ 573.058032] blocking signal 9: 6276 -> 1860.Dec 25 10:49:38 galassia kernel: [ 573.181301] blocking signal 9: 6276 -> 1872.Dec 25 10:49:38 galassia kernel: [ 573.304982] blocking signal 9: 6276 -> 2048.Dec 25 10:49:38 galassia kernel: [ 574.49879

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	4886
Entropy (8bit):	5.032979581365461
Encrypted:	false
SSDEEP:	48:PklLSAkXpkfeAJoAdlL/qrRfn/t/rBjUdHWPmD2PRjoj4PsEI+8FX6fo6JZ3jOag:KHJ+cdWi+Jy+Uaqaz5F1VRqdOA
MD5:	24D5B739E7A31F1735C359D07829F193
SHA1:	52858122981C338D614544893DA33143125EF0A2
SHA-256:	EF3EF8ADA468BA940038736D033A2AAF95CB018A0169BFC416C9D5BE49F2B84B
SHA-512:	70C3F2CB3DA43C7EF8C8CFF4E167823AC0DB35840AF940D3F01726958582E22FC0719A59DBA818A81032DC60E9D6C2335F65D415BB94EFE30838565B1165495E
Malicious:	false
Preview:	Dec 25 10:49:38 galassia kernel: [ 571.894954] blocking signal 19: 6276 -> 2048.Dec 25 10:49:38 galassia kernel: [ 572.071055] blocking signal 9: 6276 -> 658.Dec 25 10:49:38 galassia kernel: [ 572.193775] blocking signal 9: 6276 -> 720.Dec 25 10:49:38 galassia kernel: [ 572.316587] blocking signal 9: 6276 -> 759.Dec 25 10:49:38 galassia kernel: [ 572.439118] blocking signal 9: 6276 -> 761.Dec 25 10:49:38 galassia kernel: [ 572.562227] blocking signal 9: 6276 -> 772.Dec 25 10:49:38 galassia kernel: [ 572.688287] blocking signal 9: 6276 -> 936.Dec 25 10:49:38 galassia kernel: [ 572.812025] blocking signal 9: 6276 -> 1334.Dec 25 10:49:38 galassia kernel: [ 572.934997] blocking signal 9: 6276 -> 1335.Dec 25 10:49:38 galassia kernel: [ 573.058032] blocking signal 9: 6276 -> 1860.Dec 25 10:49:38 galassia kernel: [ 573.181301] blocking signal 9: 6276 -> 1872.Dec 25 10:49:38 galassia kernel: [ 573.304982] blocking signal 9: 6276 -> 2048.Dec 25 10:49:38 galassia kernel: [ 573.43098

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6775035134351415
Encrypted:	false
SSDEEP:	3:QlmlsXlXEWtl/sCh8:YmA+ylkV
MD5:	F8045B41B0F02CA4024EC4C1F9DB9892
SHA1:	90200CFDAEEEB06ED3781AEED024303B3D1857DE
SHA-256:	09193776EA442E66B884EF289DDB0E1174E22028BFC4F31974DE44AF72C92E3B
SHA-512:	F447C767E714CC852ECB526EEEBDBC1CAD929BB12D0CCD97653862AB55CB242F6D8A0FE08CDE5EE64ACF8987D366264BC4873B939AF3218737A07923793DFDDE
Malicious:	false
Preview:	........tty2.tty2.......................tty2LOGIN....................................................................................................................................................................................................................................................................................................7lg........................................

Source: Aqua.dbg.elf	Virustotal: Detection: 31%			Perma Link
Source: Aqua.dbg.elf	ReversingLabs: Detection: 31%

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.255930547126144
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.dbg.elf
File size:	75'920 bytes
MD5:	78226180f205f37487849c994f9eb35a
SHA1:	3b98db60d97761ca1f0a8df8cbf28aab167d5751
SHA256:	3bcbbc785755e486cf45e2462fecf9c44f3665583ab53374604649ed2341fec5
SHA512:	4d9fdf72a7c444c1bfff5de73a532484d5c87b7871028ce0b2a285cfb1b84a3144ea5ade645b6b8205e2d49e9776d2e37c1170bbb2c68bcd11dad55c32cb1ce5
SSDEEP:	1536:KCy7rRwCMo01sMQ85CJiLBogTr1c4ynFwVzMNAhwknl67mBnFkbr3:/y3RwCMZ1sMpKwBogTpOFweNAhD67mBq
TLSH:	7C735B17758080FCC29DC174576EA63BF6B2F17E1235B26D17E0ED222E9AE205E2E194
File Content Preview:	.ELF..............>.......@.....@........&..........@.8...@.......................@.......@...................................... ....... Q...... Q............../..............Q.td....................................................H...._........H........

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	75280
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0xf436	0x0	0x6	AX	16
.fini	PROGBITS	0x40f536	0xf536	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x40f560	0xf560	0x2585	0x0	0x2	A	32
.ctors	PROGBITS	0x512000	0x12000	0x10	0x0	0x3	WA	8
.dtors	PROGBITS	0x512010	0x12010	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x512040	0x12040	0x590	0x0	0x3	WA	32
.bss	NOBITS	0x5125e0	0x125d0	0x29c8	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x125d0	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x11ae5	0x11ae5	6.3933	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x12000	0x512000	0x512000	0x5d0	0x2fa8	2.7380	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 25, 2024 17:47:16.785867929 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Dec 25, 2024 17:48:36.798012972 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-25 16:47:19 UTC	307	OUT	POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1 Host: daisy.ubuntu.com Accept: / Content-Type: application/octet-stream X-Whoopsie-Version: 0.2.69ubuntu0.3 Content-Length: 164887 Expect: 100-continue
2024-12-25 16:47:20 UTC	25	IN	HTTP/1.1 100 Continue
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61 Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20 Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67 Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37 Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73 Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
2024-12-25 16:47:20 UTC	16384	OUT	Data Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "_source" "server/udev"Aug 17 20:25
2024-12-25 16:47:21 UTC	279	IN	HTTP/1.1 400 Bad Request Date: Wed, 25 Dec 2024 16:47:21 GMT Server: gunicorn/19.7.1 X-Daisy-Revision-Number: 979 X-Oops-Repository-Version: 0.0.0 Strict-Transport-Security: max-age=2592000 Connection: close Transfer-Encoding: chunked 17 Crash already reported. 0

Start time (UTC):	16:47:07
Start date (UTC):	25/12/2024
Path:	/tmp/Aqua.dbg.elf
Arguments:	/tmp/Aqua.dbg.elf
File size:	75920 bytes
MD5 hash:	78226180f205f37487849c994f9eb35a

Start time (UTC):	16:47:08
Start date (UTC):	25/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Start time (UTC):	16:47:09
Start date (UTC):	25/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	16:47:10
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:11
Start date (UTC):	25/12/2024
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Start time (UTC):	16:47:12
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:13
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:47:14
Start date (UTC):	25/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	16:47:15
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:47:19
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:16
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:18
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:24
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.dbg.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Process Tree

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/journal/streams/.#9:78629EtYb6z

/run/systemd/journal/streams/.#9:78630x5oJbB

/run/systemd/journal/streams/.#9:78631tgt9GA

/run/systemd/journal/streams/.#9:786329aZDCy

/run/systemd/journal/streams/.#9:78633URCUmB

/run/systemd/journal/streams/.#9:78634UvSG5y

/run/systemd/journal/streams/.#9:78643g09UWx

/run/systemd/journal/streams/.#9:78644tQdCSB

/run/systemd/journal/streams/.#9:78645QoaerA

/run/systemd/journal/streams/.#9:786538CUWsz

/run/systemd/journal/streams/.#9:786602IAdRB

/run/systemd/journal/streams/.#9:78742Gd2hdy

/run/systemd/journal/streams/.#9:78819WWBjNz

/run/systemd/journal/streams/.#9:81753AWelzY

/run/systemd/journal/streams/.#9:81754umducW

/run/systemd/journal/streams/.#9:81755gGs1NW

/run/systemd/journal/streams/.#9:81761c0oGVZ

/run/systemd/journal/streams/.#9:81762UWZ8wW

/run/systemd/journal/streams/.#9:81769lvLZeX

/run/systemd/journal/streams/.#9:81770DldQwX

/run/systemd/journal/streams/.#9:81771Rw5D3V

/run/systemd/journal/streams/.#9:817721pXI5X

/run/systemd/journal/streams/.#9:81778mFKfrW

/run/systemd/journal/streams/.#9:817860tcOuW

/run/systemd/journal/streams/.#9:81870P46MnX

/run/systemd/journal/streams/.#9:81888bbMB8V

/run/systemd/journal/streams/.#9:82557wX14Hr

/run/systemd/journal/streams/.#9:825589FZiet

/run/systemd/journal/streams/.#9:82564Tl081o

/run/systemd/journal/streams/.#9:82566Wzcuqr

/run/systemd/journal/streams/.#9:82573SH3e8o

Linux Analysis Report
Aqua.dbg.elf

Start time (UTC):	16:47:25
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:26
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:33
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:28
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:29
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:30
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:47:31
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:47:32
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:47:34
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:36
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75