Edit tour

Linux Analysis Report
Aqua.x86.elf

Overview

General Information

Sample name:	Aqua.x86.elf
Analysis ID:	1580709
MD5:	6c810013c99f6d43ad7bfe3fccc6a51c
SHA1:	8b88911c526ab2beba9db5a68b31c98c26fd4e2a
SHA256:	71504c9ebaec8c03e24dd0e3c504c9c37c4c4aef70f5ba7f0a66e127e365e7fa
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Tries to resolve domain names, but no domain seems valid (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580709
Start date and time:	2024-12-25 17:46:37 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.x86.elf
Detection:	MAL
Classification:	mal72.spre.troj.evad.linELF@0/181@120/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.

Runtime Messages

Command:	/tmp/Aqua.x86.elf
PID:	5485
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.x86.elf (PID: 5485, Parent: 5403, MD5: 6c810013c99f6d43ad7bfe3fccc6a51c) Arguments: /tmp/Aqua.x86.elf

Aqua.x86.elf New Fork (PID: 5486, Parent: 5485)

Aqua.x86.elf New Fork (PID: 5487, Parent: 5486)

gnome-session-binary New Fork (PID: 5488, Parent: 1588)

sh (PID: 5488, Parent: 1588, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5488, Parent: 1588, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5493, Parent: 1)

systemd-hostnamed (PID: 5493, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 5548, Parent: 1400)

Default (PID: 5548, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5645, Parent: 1400)

Default (PID: 5645, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5648, Parent: 1)

dbus-daemon (PID: 5648, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5658, Parent: 1)

rsyslogd (PID: 5658, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5659, Parent: 2935)

pulseaudio (PID: 5659, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

gvfsd-fuse New Fork (PID: 5663, Parent: 3122)

fusermount (PID: 5663, Parent: 3122, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5675, Parent: 1)

systemd-logind (PID: 5675, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5694, Parent: 1)

rtkit-daemon (PID: 5694, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5735, Parent: 1)

polkitd (PID: 5735, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5739, Parent: 1)

dbus-daemon (PID: 5739, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5741, Parent: 1400)

Default (PID: 5741, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5742, Parent: 1)

rsyslogd (PID: 5742, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5746, Parent: 1)

gpu-manager (PID: 5746, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5747, Parent: 5746)

sh (PID: 5747, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5748, Parent: 5747)

grep (PID: 5748, Parent: 5747, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5749, Parent: 5746)

sh (PID: 5749, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5750, Parent: 5749)

grep (PID: 5750, Parent: 5749, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5751, Parent: 5746)

sh (PID: 5751, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5752, Parent: 5751)

grep (PID: 5752, Parent: 5751, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5753, Parent: 5746)

sh (PID: 5753, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5754, Parent: 5753)

grep (PID: 5754, Parent: 5753, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5755, Parent: 5746)

sh (PID: 5755, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5756, Parent: 5755)

grep (PID: 5756, Parent: 5755, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5757, Parent: 5746)

sh (PID: 5757, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5758, Parent: 5757)

grep (PID: 5758, Parent: 5757, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5759, Parent: 5746)

sh (PID: 5759, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5760, Parent: 5759)

grep (PID: 5760, Parent: 5759, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5761, Parent: 5746)

sh (PID: 5761, Parent: 5746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5762, Parent: 5761)

grep (PID: 5762, Parent: 5761, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5763, Parent: 1)

generate-config (PID: 5763, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5764, Parent: 5763)

pkill (PID: 5764, Parent: 5763, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5767, Parent: 1)

gdm-wait-for-drm (PID: 5767, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5789, Parent: 1)

rsyslogd (PID: 5789, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5793, Parent: 1)

journalctl (PID: 5793, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5794, Parent: 1)

systemd-journald (PID: 5794, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5797, Parent: 1)

systemd-logind (PID: 5797, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5854, Parent: 1)

rsyslogd (PID: 5854, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5855, Parent: 1)

systemd-journald (PID: 5855, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5858, Parent: 1)

systemd-logind (PID: 5858, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5917, Parent: 1)

gpu-manager (PID: 5917, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5920, Parent: 5917)

sh (PID: 5920, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5922, Parent: 5920)

grep (PID: 5922, Parent: 5920, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5924, Parent: 5917)

sh (PID: 5924, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5925, Parent: 5924)

grep (PID: 5925, Parent: 5924, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5926, Parent: 5917)

sh (PID: 5926, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5927, Parent: 5926)

grep (PID: 5927, Parent: 5926, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5928, Parent: 5917)

sh (PID: 5928, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5929, Parent: 5928)

grep (PID: 5929, Parent: 5928, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5930, Parent: 5917)

sh (PID: 5930, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5931, Parent: 5930)

grep (PID: 5931, Parent: 5930, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5932, Parent: 5917)

sh (PID: 5932, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5933, Parent: 5932)

grep (PID: 5933, Parent: 5932, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5934, Parent: 5917)

sh (PID: 5934, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5935, Parent: 5934)

grep (PID: 5935, Parent: 5934, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5936, Parent: 5917)

sh (PID: 5936, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5937, Parent: 5936)

grep (PID: 5937, Parent: 5936, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5923, Parent: 1)

dbus-daemon (PID: 5923, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5938, Parent: 1)

generate-config (PID: 5938, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5940, Parent: 5938)

pkill (PID: 5940, Parent: 5938, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5939, Parent: 1)

rsyslogd (PID: 5939, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5946, Parent: 1)

gdm-wait-for-drm (PID: 5946, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5949, Parent: 1)

rsyslogd (PID: 5949, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5955, Parent: 1)

systemd-journald (PID: 5955, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5958, Parent: 1)

systemd-logind (PID: 5958, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6015, Parent: 1)

dbus-daemon (PID: 6015, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6016, Parent: 1)

rsyslogd (PID: 6016, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6017, Parent: 1)

dbus-daemon (PID: 6017, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6018, Parent: 1)

gpu-manager (PID: 6018, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6019, Parent: 6018)

sh (PID: 6019, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6020, Parent: 6019)

grep (PID: 6020, Parent: 6019, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6024, Parent: 6018)

sh (PID: 6024, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6025, Parent: 6024)

grep (PID: 6025, Parent: 6024, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6026, Parent: 6018)

sh (PID: 6026, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6027, Parent: 6026)

grep (PID: 6027, Parent: 6026, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6028, Parent: 6018)

sh (PID: 6028, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6029, Parent: 6028)

grep (PID: 6029, Parent: 6028, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6030, Parent: 6018)

sh (PID: 6030, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6031, Parent: 6030)

grep (PID: 6031, Parent: 6030, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6032, Parent: 6018)

sh (PID: 6032, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6033, Parent: 6032)

grep (PID: 6033, Parent: 6032, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6034, Parent: 6018)

sh (PID: 6034, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6035, Parent: 6034)

grep (PID: 6035, Parent: 6034, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6036, Parent: 6018)

sh (PID: 6036, Parent: 6018, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6039, Parent: 6036)

grep (PID: 6039, Parent: 6036, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6040, Parent: 1)

generate-config (PID: 6040, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6041, Parent: 6040)

pkill (PID: 6041, Parent: 6040, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6042, Parent: 1)

gdm-wait-for-drm (PID: 6042, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6045, Parent: 1)

rsyslogd (PID: 6045, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6046, Parent: 1)

dbus-daemon (PID: 6046, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6047, Parent: 1)

systemd-journald (PID: 6047, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6050, Parent: 1)

systemd-logind (PID: 6050, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6107, Parent: 1)

dbus-daemon (PID: 6107, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6108, Parent: 1)

rsyslogd (PID: 6108, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6112, Parent: 1)

gpu-manager (PID: 6112, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6114, Parent: 6112)

sh (PID: 6114, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6115, Parent: 6114)

grep (PID: 6115, Parent: 6114, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6117, Parent: 6112)

sh (PID: 6117, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6118, Parent: 6117)

grep (PID: 6118, Parent: 6117, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6119, Parent: 6112)

sh (PID: 6119, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6123, Parent: 6119)

grep (PID: 6123, Parent: 6119, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6126, Parent: 6112)

sh (PID: 6126, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6127, Parent: 6126)

grep (PID: 6127, Parent: 6126, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6128, Parent: 6112)

sh (PID: 6128, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6129, Parent: 6128)

grep (PID: 6129, Parent: 6128, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6130, Parent: 6112)

sh (PID: 6130, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6131, Parent: 6130)

grep (PID: 6131, Parent: 6130, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6132, Parent: 6112)

sh (PID: 6132, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6133, Parent: 6132)

grep (PID: 6133, Parent: 6132, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6134, Parent: 6112)

sh (PID: 6134, Parent: 6112, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6135, Parent: 6134)

grep (PID: 6135, Parent: 6134, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6113, Parent: 1)

dbus-daemon (PID: 6113, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6116, Parent: 1)

rsyslogd (PID: 6116, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6136, Parent: 1)

generate-config (PID: 6136, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6137, Parent: 6136)

pkill (PID: 6137, Parent: 6136, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6138, Parent: 1)

gdm-wait-for-drm (PID: 6138, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6141, Parent: 1)

rsyslogd (PID: 6141, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6145, Parent: 1)

systemd-journald (PID: 6145, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6148, Parent: 1)

systemd-logind (PID: 6148, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6205, Parent: 1)

dbus-daemon (PID: 6205, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6208, Parent: 1)

rsyslogd (PID: 6208, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6209, Parent: 1)

dbus-daemon (PID: 6209, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6210, Parent: 1)

gpu-manager (PID: 6210, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6211, Parent: 6210)

sh (PID: 6211, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6212, Parent: 6211)

grep (PID: 6212, Parent: 6211, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6216, Parent: 6210)

sh (PID: 6216, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6217, Parent: 6216)

grep (PID: 6217, Parent: 6216, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6218, Parent: 6210)

sh (PID: 6218, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6219, Parent: 6218)

grep (PID: 6219, Parent: 6218, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6220, Parent: 6210)

sh (PID: 6220, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6221, Parent: 6220)

grep (PID: 6221, Parent: 6220, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6222, Parent: 6210)

sh (PID: 6222, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6223, Parent: 6222)

grep (PID: 6223, Parent: 6222, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6224, Parent: 6210)

sh (PID: 6224, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6225, Parent: 6224)

grep (PID: 6225, Parent: 6224, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6226, Parent: 6210)

sh (PID: 6226, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6227, Parent: 6226)

grep (PID: 6227, Parent: 6226, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6228, Parent: 6210)

sh (PID: 6228, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6229, Parent: 6228)

grep (PID: 6229, Parent: 6228, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6230, Parent: 1)

generate-config (PID: 6230, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6231, Parent: 6230)

pkill (PID: 6231, Parent: 6230, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6234, Parent: 1)

gdm-wait-for-drm (PID: 6234, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6235, Parent: 1)

rsyslogd (PID: 6235, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6236, Parent: 1)

dbus-daemon (PID: 6236, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6239, Parent: 1)

systemd-journald (PID: 6239, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6242, Parent: 1)

systemd-logind (PID: 6242, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6299, Parent: 1)

rsyslogd (PID: 6299, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6300, Parent: 1)

dbus-daemon (PID: 6300, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6304, Parent: 1)

gpu-manager (PID: 6304, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6305, Parent: 6304)

sh (PID: 6305, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6306, Parent: 6305)

grep (PID: 6306, Parent: 6305, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6309, Parent: 6304)

sh (PID: 6309, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6310, Parent: 6309)

grep (PID: 6310, Parent: 6309, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6314, Parent: 6304)

sh (PID: 6314, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6315, Parent: 6314)

grep (PID: 6315, Parent: 6314, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6316, Parent: 6304)

sh (PID: 6316, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6317, Parent: 6316)

grep (PID: 6317, Parent: 6316, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6318, Parent: 6304)

sh (PID: 6318, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6319, Parent: 6318)

grep (PID: 6319, Parent: 6318, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6320, Parent: 6304)

sh (PID: 6320, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6321, Parent: 6320)

grep (PID: 6321, Parent: 6320, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6322, Parent: 6304)

sh (PID: 6322, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6323, Parent: 6322)

grep (PID: 6323, Parent: 6322, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6324, Parent: 6304)

sh (PID: 6324, Parent: 6304, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6325, Parent: 6324)

grep (PID: 6325, Parent: 6324, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6307, Parent: 1)

dbus-daemon (PID: 6307, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6308, Parent: 1)

rsyslogd (PID: 6308, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6326, Parent: 1)

generate-config (PID: 6326, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6327, Parent: 6326)

pkill (PID: 6327, Parent: 6326, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6330, Parent: 1)

gdm-wait-for-drm (PID: 6330, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6333, Parent: 1)

rsyslogd (PID: 6333, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6334, Parent: 1)

systemd-journald (PID: 6334, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6337, Parent: 1)

systemd-logind (PID: 6337, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6394, Parent: 1)

rsyslogd (PID: 6394, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6395, Parent: 1)

dbus-daemon (PID: 6395, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6399, Parent: 1)

gpu-manager (PID: 6399, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6402, Parent: 6399)

sh (PID: 6402, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6403, Parent: 6402)

grep (PID: 6403, Parent: 6402, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6406, Parent: 6399)

sh (PID: 6406, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6408, Parent: 6406)

grep (PID: 6408, Parent: 6406, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6409, Parent: 6399)

sh (PID: 6409, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6410, Parent: 6409)

grep (PID: 6410, Parent: 6409, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6411, Parent: 6399)

sh (PID: 6411, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6412, Parent: 6411)

grep (PID: 6412, Parent: 6411, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6413, Parent: 6399)

sh (PID: 6413, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6414, Parent: 6413)

grep (PID: 6414, Parent: 6413, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6417, Parent: 6399)

sh (PID: 6417, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6418, Parent: 6417)

grep (PID: 6418, Parent: 6417, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6419, Parent: 6399)

sh (PID: 6419, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6420, Parent: 6419)

grep (PID: 6420, Parent: 6419, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6421, Parent: 6399)

sh (PID: 6421, Parent: 6399, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6422, Parent: 6421)

grep (PID: 6422, Parent: 6421, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6400, Parent: 1)

dbus-daemon (PID: 6400, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6401, Parent: 1)

rsyslogd (PID: 6401, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6423, Parent: 1)

generate-config (PID: 6423, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6424, Parent: 6423)

pkill (PID: 6424, Parent: 6423, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6425, Parent: 1)

gdm-wait-for-drm (PID: 6425, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6428, Parent: 1)

rsyslogd (PID: 6428, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6432, Parent: 1)

systemd-journald (PID: 6432, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6435, Parent: 1)

systemd-logind (PID: 6435, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6492, Parent: 1)

dbus-daemon (PID: 6492, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6494, Parent: 2935)

dbus-daemon (PID: 6494, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6495, Parent: 2935)

pulseaudio (PID: 6495, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6498, Parent: 1)

gpu-manager (PID: 6498, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6501, Parent: 6498)

sh (PID: 6501, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6502, Parent: 6501)

grep (PID: 6502, Parent: 6501, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6506, Parent: 6498)

sh (PID: 6506, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6507, Parent: 6506)

grep (PID: 6507, Parent: 6506, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6508, Parent: 6498)

sh (PID: 6508, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6509, Parent: 6508)

grep (PID: 6509, Parent: 6508, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6510, Parent: 6498)

sh (PID: 6510, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6511, Parent: 6510)

grep (PID: 6511, Parent: 6510, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6512, Parent: 6498)

sh (PID: 6512, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6513, Parent: 6512)

grep (PID: 6513, Parent: 6512, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6514, Parent: 6498)

sh (PID: 6514, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6515, Parent: 6514)

grep (PID: 6515, Parent: 6514, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6517, Parent: 6498)

sh (PID: 6517, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6518, Parent: 6517)

grep (PID: 6518, Parent: 6517, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6522, Parent: 6498)

sh (PID: 6522, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6523, Parent: 6522)

grep (PID: 6523, Parent: 6522, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6499, Parent: 1)

rsyslogd (PID: 6499, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6500, Parent: 1)

dbus-daemon (PID: 6500, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6516, Parent: 1)

rtkit-daemon (PID: 6516, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6521, Parent: 1)

polkitd (PID: 6521, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6529, Parent: 1)

generate-config (PID: 6529, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6530, Parent: 6529)

pkill (PID: 6530, Parent: 6529, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6533, Parent: 1)

gdm-wait-for-drm (PID: 6533, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6534, Parent: 1)

rsyslogd (PID: 6534, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6535, Parent: 1)

dbus-daemon (PID: 6535, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6536, Parent: 2935)

pulseaudio (PID: 6536, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6539, Parent: 1)

systemd-journald (PID: 6539, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6542, Parent: 1)

systemd-logind (PID: 6542, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6599, Parent: 1)

dbus-daemon (PID: 6599, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6600, Parent: 1)

rsyslogd (PID: 6600, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6601, Parent: 2935)

pulseaudio (PID: 6601, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6605, Parent: 1)

gpu-manager (PID: 6605, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6606, Parent: 6605)

sh (PID: 6606, Parent: 6605, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6607, Parent: 6606)

grep (PID: 6607, Parent: 6606, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6609, Parent: 6605)

sh (PID: 6609, Parent: 6605, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6610, Parent: 6609)

grep (PID: 6610, Parent: 6609, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6608, Parent: 1)

dbus-daemon (PID: 6608, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6611, Parent: 2935)

pulseaudio (PID: 6611, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6612, Parent: 1)

rsyslogd (PID: 6612, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6613, Parent: 1)

generate-config (PID: 6613, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6614, Parent: 6613)

pkill (PID: 6614, Parent: 6613, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6618, Parent: 1)

rtkit-daemon (PID: 6618, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6623, Parent: 1)

polkitd (PID: 6623, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6627, Parent: 1)

gdm-wait-for-drm (PID: 6627, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6630, Parent: 2935)

dbus-daemon (PID: 6630, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6633, Parent: 2935)

pulseaudio (PID: 6633, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6634, Parent: 1)

rsyslogd (PID: 6634, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6635, Parent: 1)

systemd-journald (PID: 6635, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6638, Parent: 1)

systemd-logind (PID: 6638, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6695, Parent: 1)

dbus-daemon (PID: 6695, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6696, Parent: 1)

rsyslogd (PID: 6696, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6700, Parent: 1)

gpu-manager (PID: 6700, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6702, Parent: 6700)

sh (PID: 6702, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6703, Parent: 6702)

grep (PID: 6703, Parent: 6702, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6707, Parent: 6700)

sh (PID: 6707, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6708, Parent: 6707)

grep (PID: 6708, Parent: 6707, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6709, Parent: 6700)

sh (PID: 6709, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6713, Parent: 6709)

grep (PID: 6713, Parent: 6709, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6714, Parent: 6700)

sh (PID: 6714, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6715, Parent: 6714)

grep (PID: 6715, Parent: 6714, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6716, Parent: 6700)

sh (PID: 6716, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6717, Parent: 6716)

grep (PID: 6717, Parent: 6716, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6718, Parent: 6700)

sh (PID: 6718, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6719, Parent: 6718)

grep (PID: 6719, Parent: 6718, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6720, Parent: 6700)

sh (PID: 6720, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6721, Parent: 6720)

grep (PID: 6721, Parent: 6720, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6722, Parent: 6700)

sh (PID: 6722, Parent: 6700, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6723, Parent: 6722)

grep (PID: 6723, Parent: 6722, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6701, Parent: 1)

dbus-daemon (PID: 6701, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6704, Parent: 1)

rsyslogd (PID: 6704, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6724, Parent: 1)

generate-config (PID: 6724, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6725, Parent: 6724)

pkill (PID: 6725, Parent: 6724, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6726, Parent: 1)

gdm-wait-for-drm (PID: 6726, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6729, Parent: 1)

rsyslogd (PID: 6729, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6730, Parent: 1)

systemd-journald (PID: 6730, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6735, Parent: 1)

systemd-logind (PID: 6735, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6792, Parent: 1)

rsyslogd (PID: 6792, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6793, Parent: 1)

dbus-daemon (PID: 6793, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6797, Parent: 1)

gpu-manager (PID: 6797, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6800, Parent: 6797)

sh (PID: 6800, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6801, Parent: 6800)

grep (PID: 6801, Parent: 6800, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6805, Parent: 6797)

sh (PID: 6805, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6806, Parent: 6805)

grep (PID: 6806, Parent: 6805, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6807, Parent: 6797)

sh (PID: 6807, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6808, Parent: 6807)

grep (PID: 6808, Parent: 6807, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6809, Parent: 6797)

sh (PID: 6809, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6810, Parent: 6809)

grep (PID: 6810, Parent: 6809, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6811, Parent: 6797)

sh (PID: 6811, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6812, Parent: 6811)

grep (PID: 6812, Parent: 6811, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6813, Parent: 6797)

sh (PID: 6813, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6814, Parent: 6813)

grep (PID: 6814, Parent: 6813, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6815, Parent: 6797)

sh (PID: 6815, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6816, Parent: 6815)

grep (PID: 6816, Parent: 6815, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6817, Parent: 6797)

sh (PID: 6817, Parent: 6797, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6818, Parent: 6817)

grep (PID: 6818, Parent: 6817, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6798, Parent: 1)

dbus-daemon (PID: 6798, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6799, Parent: 1)

rsyslogd (PID: 6799, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6821, Parent: 1)

generate-config (PID: 6821, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6822, Parent: 6821)

pkill (PID: 6822, Parent: 6821, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6823, Parent: 1)

gdm-wait-for-drm (PID: 6823, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6826, Parent: 1)

rsyslogd (PID: 6826, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6830, Parent: 1)

systemd-journald (PID: 6830, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6833, Parent: 1)

systemd-logind (PID: 6833, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6890, Parent: 1)

dbus-daemon (PID: 6890, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6891, Parent: 1)

dbus-daemon (PID: 6891, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6892, Parent: 1)

gpu-manager (PID: 6892, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6894, Parent: 6892)

sh (PID: 6894, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6895, Parent: 6894)

grep (PID: 6895, Parent: 6894, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6899, Parent: 6892)

sh (PID: 6899, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6900, Parent: 6899)

grep (PID: 6900, Parent: 6899, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6901, Parent: 6892)

sh (PID: 6901, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6902, Parent: 6901)

grep (PID: 6902, Parent: 6901, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6903, Parent: 6892)

sh (PID: 6903, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6904, Parent: 6903)

grep (PID: 6904, Parent: 6903, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6905, Parent: 6892)

sh (PID: 6905, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6906, Parent: 6905)

grep (PID: 6906, Parent: 6905, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6909, Parent: 6892)

sh (PID: 6909, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6910, Parent: 6909)

grep (PID: 6910, Parent: 6909, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6911, Parent: 6892)

sh (PID: 6911, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6912, Parent: 6911)

grep (PID: 6912, Parent: 6911, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6913, Parent: 6892)

sh (PID: 6913, Parent: 6892, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6914, Parent: 6913)

grep (PID: 6914, Parent: 6913, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6893, Parent: 1)

rsyslogd (PID: 6893, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6915, Parent: 1)

generate-config (PID: 6915, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6916, Parent: 6915)

pkill (PID: 6916, Parent: 6915, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6917, Parent: 1)

gdm-wait-for-drm (PID: 6917, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.x86.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x4000:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
Aqua.x86.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x69b2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
Aqua.x86.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa1c1:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
Aqua.x86.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x8875:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Aqua.x86.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x6982:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88

Memory Dumps

Source	Rule	Description	Author	Strings
5485.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x4000:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
5485.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x69b2:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5485.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xa1c1:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
5485.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x8875:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
5485.1.0000000008048000.0000000008057000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x6982:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88

String: EOF/proc//proc/%s/cmdlinerwgetcurlftpechokillbashrebootshutdownhaltpoweroff/fdsocket/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Source: global traffic

TCP traffic: 192.168.2.13:44734 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5658)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5742)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5789)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5854)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5939)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5949)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6016)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6045)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6108)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6116)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6141)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6208)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6235)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6299)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6308)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6394)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6401)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6428)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6499)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6534)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6600)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6612)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6634)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6696)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6704)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6792)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6799)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6826)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6893)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5794)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6145)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6239)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6334)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6432)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6539)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6635)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6730)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6830)	Socket: unknown address family

Source: unknown

DNS traffic detected: query: 45.148.10.84 replaycode: Name error (3)

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic

DNS traffic detected: DNS query: 45.148.10.84

Source: syslog.427.dr

String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5488, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5464, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5465, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5648, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5658, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5659, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5739, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5742, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5322, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5675, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5767, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5789, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5794, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5797, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5923, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5939, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5855, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5858, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5946, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5949, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6015, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6016, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6017, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5955, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5958, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6042, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6045, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6046, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6107, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6108, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6113, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6047, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6050, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6138, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6141, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6205, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6208, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6209, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6145, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6148, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6234, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6235, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6299, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6308, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6242, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6330, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6333, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6394, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6395, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6401, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6337, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6425, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6428, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6492, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6494, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6495, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6499, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6500, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6432, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6435, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6533, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6534, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6535, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6599, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6600, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6608, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6611, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6612, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6630, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6539, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6542, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6627, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6633, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6634, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6695, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6696, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6701, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6704, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6635, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6726, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6729, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6792, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6793, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6798, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6799, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6730, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6735, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6823, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6890, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5488, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5464, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5465, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5648, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5658, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5659, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5739, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5742, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5322, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5675, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5767, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5789, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5794, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5797, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5923, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5939, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5855, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5858, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5946, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5949, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6015, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6016, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6017, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5955, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 5958, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6042, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6045, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6046, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6107, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6108, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6113, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6047, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6050, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6138, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6141, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6205, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6208, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6209, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6145, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6148, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6234, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6235, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6299, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6308, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6242, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6330, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6333, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6394, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6395, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6400, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6401, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6337, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6425, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6428, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6492, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6494, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6495, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6499, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6500, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6432, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6435, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6533, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6534, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6535, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6599, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6600, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6608, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6611, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6612, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6630, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6539, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6542, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6627, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6633, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6634, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6695, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6696, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6701, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6704, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6635, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6638, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6726, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6729, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6792, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6793, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6798, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6799, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6730, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6735, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6823, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6826, result: successful	Jump to behavior
Source: /tmp/Aqua.x86.elf (PID: 5487)	SIGKILL sent: pid: 6890, result: successful	Jump to behavior

Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: Aqua.x86.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5485.1.0000000008048000.0000000008057000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26

Source: classification engine

Classification label: mal72.spre.troj.evad.linELF@0/181@120/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5648)	File: /proc/5648/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5663)	File: /proc/5663/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5739)	File: /proc/5739/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5923)	File: /proc/5923/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6015)	File: /proc/6015/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6017)	File: /proc/6017/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6046)	File: /proc/6046/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6107)	File: /proc/6107/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6113)	File: /proc/6113/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6205)	File: /proc/6205/mounts
Source: /usr/bin/dbus-daemon (PID: 6209)	File: /proc/6209/mounts
Source: /usr/bin/dbus-daemon (PID: 6236)	File: /proc/6236/mounts
Source: /usr/bin/dbus-daemon (PID: 6300)	File: /proc/6300/mounts
Source: /usr/bin/dbus-daemon (PID: 6307)	File: /proc/6307/mounts
Source: /usr/bin/dbus-daemon (PID: 6395)	File: /proc/6395/mounts
Source: /usr/bin/dbus-daemon (PID: 6400)	File: /proc/6400/mounts
Source: /usr/bin/dbus-daemon (PID: 6492)	File: /proc/6492/mounts
Source: /usr/bin/dbus-daemon (PID: 6494)	File: /proc/6494/mounts
Source: /usr/bin/dbus-daemon (PID: 6500)	File: /proc/6500/mounts
Source: /usr/bin/dbus-daemon (PID: 6535)	File: /proc/6535/mounts
Source: /usr/bin/dbus-daemon (PID: 6599)	File: /proc/6599/mounts
Source: /usr/bin/dbus-daemon (PID: 6608)	File: /proc/6608/mounts
Source: /usr/bin/dbus-daemon (PID: 6630)	File: /proc/6630/mounts
Source: /usr/bin/dbus-daemon (PID: 6695)	File: /proc/6695/mounts
Source: /usr/bin/dbus-daemon (PID: 6701)	File: /proc/6701/mounts
Source: /usr/bin/dbus-daemon (PID: 6793)	File: /proc/6793/mounts
Source: /usr/bin/dbus-daemon (PID: 6798)	File: /proc/6798/mounts
Source: /usr/bin/dbus-daemon (PID: 6890)	File: /proc/6890/mounts
Source: /usr/bin/dbus-daemon (PID: 6891)	File: /proc/6891/mounts

Source: /usr/libexec/gsd-rfkill (PID: 5488)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5488)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5493)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5675)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5675)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5675)	File: /run/systemd/seats/.#seat0yQCJal	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	File: /run/systemd/journal/streams/.#9:6517703V9fX	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	File: /run/systemd/journal/streams/.#9:65255NrP6YU	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	File: /run/systemd/journal/streams/.#9:65256TCNJNW	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	File: /run/systemd/journal/streams/.#9:65263zqQdjV	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	File: /run/systemd/journal/streams/.#9:65264X14TCT	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	File: /run/systemd/journal/streams/.#9:65265b6txsU	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5858)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5858)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5858)	File: /run/systemd/seats/.#seat05yTqAa	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	File: /run/systemd/journal/streams/.#9:66497NOPHVv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	File: /run/systemd/journal/streams/.#9:66498DSJ0sv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	File: /run/systemd/journal/streams/.#9:66499NJsWgw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	File: /run/systemd/journal/streams/.#9:665001fErJw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	File: /run/systemd/journal/streams/.#9:676205Itgku	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	File: /run/systemd/journal/streams/.#9:67628vKK5Et	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5958)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5958)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5958)	File: /run/systemd/seats/.#seat0k80cvH	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	File: /run/systemd/journal/streams/.#9:67824PnWpzt	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	File: /run/systemd/journal/streams/.#9:67825XqyIYp	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	File: /run/systemd/journal/streams/.#9:67826j9rF0q	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	File: /run/systemd/journal/streams/.#9:67833C25nyp	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	File: /run/systemd/journal/streams/.#9:67854R1iYLt	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6050)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6050)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6050)	File: /run/systemd/seats/.#seat0ClvdYF	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:69127kZZW7O
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:691281hkk6Q
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:69129YHMuNR
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:69130RZanwP
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:69228IMfa4Q
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:69341fgDMJP
Source: /lib/systemd/systemd-logind (PID: 6148)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6148)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6148)	File: /run/systemd/seats/.#seat0cIUog7
Source: /lib/systemd/systemd-journald (PID: 6239)	File: /run/systemd/journal/streams/.#9:69878z5RbNV
Source: /lib/systemd/systemd-journald (PID: 6239)	File: /run/systemd/journal/streams/.#9:69880UPXKsX
Source: /lib/systemd/systemd-journald (PID: 6239)	File: /run/systemd/journal/streams/.#9:698872wSbuW
Source: /lib/systemd/systemd-journald (PID: 6239)	File: /run/systemd/journal/streams/.#9:69888FaHcqW
Source: /lib/systemd/systemd-journald (PID: 6239)	File: /run/systemd/journal/streams/.#9:69982VE4bXX
Source: /lib/systemd/systemd-logind (PID: 6242)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6242)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6242)	File: /run/systemd/seats/.#seat0HMIdYc
Source: /lib/systemd/systemd-journald (PID: 6334)	File: /run/systemd/journal/streams/.#9:71721KkTvG7
Source: /lib/systemd/systemd-journald (PID: 6334)	File: /run/systemd/journal/streams/.#9:71722uANeH9
Source: /lib/systemd/systemd-journald (PID: 6334)	File: /run/systemd/journal/streams/.#9:71729LQurGa
Source: /lib/systemd/systemd-journald (PID: 6334)	File: /run/systemd/journal/streams/.#9:71730yfXl36
Source: /lib/systemd/systemd-journald (PID: 6334)	File: /run/systemd/journal/streams/.#9:71818YgCC4a
Source: /lib/systemd/systemd-logind (PID: 6337)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6337)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6337)	File: /run/systemd/seats/.#seat0tdTjjn
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72655xSTRQy
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72663xML6Sy
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72665KUddDz
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72666wRbWqx
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72667A4o7zA
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:726842z3KKA
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72686NxBNzw
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72694dc8foz
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:72830Wdfoxz
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:71160XpOnez
Source: /lib/systemd/systemd-journald (PID: 6432)	File: /run/systemd/journal/streams/.#9:71161t1ozoy
Source: /lib/systemd/systemd-logind (PID: 6435)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6435)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6435)	File: /run/systemd/seats/.#seat0wwmSrN
Source: /usr/lib/policykit-1/polkitd (PID: 6521)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74758puFohG
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74759ipmP9E
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74760AJirbF
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:747611ira6B
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74771143T1E
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74777Cwn7HD
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74783FAcifC
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74784H1I3NE
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74785T6bm7F
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74786RNrnAD
Source: /lib/systemd/systemd-journald (PID: 6539)	File: /run/systemd/journal/streams/.#9:74826nvXmVE
Source: /lib/systemd/systemd-logind (PID: 6542)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6542)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6542)	File: /run/systemd/seats/.#seat0PMZZnT
Source: /usr/lib/policykit-1/polkitd (PID: 6623)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6635)	File: /run/systemd/journal/streams/.#9:74138xx4wAS
Source: /lib/systemd/systemd-journald (PID: 6635)	File: /run/systemd/journal/streams/.#9:74139P82htU
Source: /lib/systemd/systemd-journald (PID: 6635)	File: /run/systemd/journal/streams/.#9:74140lictLT
Source: /lib/systemd/systemd-journald (PID: 6635)	File: /run/systemd/journal/streams/.#9:74147l2ErfW
Source: /lib/systemd/systemd-journald (PID: 6635)	File: /run/systemd/journal/streams/.#9:74164IQUeFW
Source: /lib/systemd/systemd-logind (PID: 6638)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6638)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6638)	File: /run/systemd/seats/.#seat00kEfT7
Source: /lib/systemd/systemd-journald (PID: 6730)	File: /run/systemd/journal/streams/.#9:76220dHteX7
Source: /lib/systemd/systemd-journald (PID: 6730)	File: /run/systemd/journal/streams/.#9:762211yuJs3
Source: /lib/systemd/systemd-journald (PID: 6730)	File: /run/systemd/journal/streams/.#9:76228C8aob4
Source: /lib/systemd/systemd-journald (PID: 6730)	File: /run/systemd/journal/streams/.#9:76229uqMMM5
Source: /lib/systemd/systemd-journald (PID: 6730)	File: /run/systemd/journal/streams/.#9:76322ptQNQ3
Source: /lib/systemd/systemd-logind (PID: 6735)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6735)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6735)	File: /run/systemd/seats/.#seat0lnToar
Source: /lib/systemd/systemd-journald (PID: 6830)	File: /run/systemd/journal/streams/.#9:76969jlTtkD
Source: /lib/systemd/systemd-journald (PID: 6830)	File: /run/systemd/journal/streams/.#9:769703YCsDF
Source: /lib/systemd/systemd-journald (PID: 6830)	File: /run/systemd/journal/streams/.#9:76971xhQKTG
Source: /lib/systemd/systemd-journald (PID: 6830)	File: /run/systemd/journal/streams/.#9:76972oeJ34D
Source: /lib/systemd/systemd-journald (PID: 6830)	File: /run/systemd/journal/streams/.#9:77066uuGU1D
Source: /lib/systemd/systemd-logind (PID: 6833)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6833)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6833)	File: /run/systemd/seats/.#seat0JL5JoT

Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/6230/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/6230/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/6231/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/6231/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/230/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/230/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/110/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/110/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/231/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/231/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/111/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/111/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/232/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/232/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/112/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/112/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/233/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/233/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/113/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/113/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/234/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/234/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/114/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/114/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/235/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/235/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/115/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/115/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/236/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/236/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/116/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/116/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/237/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/237/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/117/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/117/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/238/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/238/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/118/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/118/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/239/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/239/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/119/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/119/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/10/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/10/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/11/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/11/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/12/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/12/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/13/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/13/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/14/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/14/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/15/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/15/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/16/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/16/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/17/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/17/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/18/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/18/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/19/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/19/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/240/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/240/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/120/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/120/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/241/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/241/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/121/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/121/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/242/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/242/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/1/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/122/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/122/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/243/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/243/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/2/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/2/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/123/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/123/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/244/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/244/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/3/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/3/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/124/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/124/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/245/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/245/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/125/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/125/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/4/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/4/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/246/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/246/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/126/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/126/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/5/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/5/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/247/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/247/cmdline
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/127/status
Source: /usr/bin/pkill (PID: 6231)	File opened: /proc/127/cmdline

Source: /usr/bin/gpu-manager (PID: 5747)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5749)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5751)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5753)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5755)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5757)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5759)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5761)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5920)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5924)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5926)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5928)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5930)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5932)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5934)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5936)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6019)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6024)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6026)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6028)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6030)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6032)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6034)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6036)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6114)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6117)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6119)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6126)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6128)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6130)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6132)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6134)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6211)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6216)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6218)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6220)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6222)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6224)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6226)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6228)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6305)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6309)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6314)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6316)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6318)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6320)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6322)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6324)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6402)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6406)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6409)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6411)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6413)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6417)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6419)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6421)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6501)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6506)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6508)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6510)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6512)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6514)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6517)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6522)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6606)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6609)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6702)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6707)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6709)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6714)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6716)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6718)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6720)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6722)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6800)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6805)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6807)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6809)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6811)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6813)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6815)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6817)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6894)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6899)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6901)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6903)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6905)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6909)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6911)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6913)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 5748)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5750)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5752)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5754)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5756)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5758)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5760)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5762)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5922)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5925)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5927)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5929)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5931)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5933)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5935)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5937)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6020)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6025)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6027)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6029)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6031)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6033)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6035)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6039)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6115)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6118)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6123)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6127)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6129)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6131)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6133)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6135)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6212)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6217)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6219)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6221)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6223)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6225)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6227)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6229)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6306)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6310)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6315)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6317)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6319)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6321)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6323)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6325)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6403)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6408)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6410)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6412)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6414)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6418)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6420)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6422)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6502)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6507)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6509)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6511)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6513)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6515)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6518)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6523)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6607)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6610)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6703)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6708)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6713)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6715)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6717)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6719)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6721)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6723)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6801)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6806)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6808)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6810)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6812)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6814)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6816)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6818)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6895)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6900)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6902)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6904)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6906)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6910)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6912)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6914)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 5764)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5940)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6041)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6137)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6231)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6327)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6424)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6530)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6614)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6725)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6822)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6916)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 5794)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6145)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6239)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6334)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6432)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6539)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6635)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6730)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6830)	Reads from proc file: /proc/meminfo

Source: /usr/sbin/rsyslogd (PID: 5658)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5658)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5742)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5742)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 5746)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5789)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5854)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5939)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5939)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5949)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6016)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6016)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6018)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6108)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6112)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6116)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6116)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6141)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6208)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6208)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6210)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6299)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6304)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6308)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6308)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6394)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6399)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6401)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6401)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6428)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6498)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6499)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6499)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6600)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6612)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6612)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6696)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6700)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6704)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6704)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6792)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6797)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6799)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6799)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6826)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6892)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6893)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6893)	Log file created: /var/log/auth.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.x86.elf (PID: 5486)

File: /tmp/Aqua.x86.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5746)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5917)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6018)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6112)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6210)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6304)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6399)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6498)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6605)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6700)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6797)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6892)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 5764)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5940)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6041)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6137)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6231)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6327)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6424)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6495)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6530)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6611)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6614)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6725)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6822)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6916)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 5493)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5658)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5742)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5746)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5789)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5794)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5854)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5855)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5917)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5939)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5949)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5955)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6016)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6018)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6045)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6047)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6108)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6112)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6116)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6141)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6145)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6208)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6210)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6235)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6239)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6299)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6304)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6308)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6334)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6394)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6399)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6401)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6428)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6432)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6495)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6498)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6499)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6534)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6539)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6600)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6611)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6612)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6634)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6635)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6696)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6700)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6704)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6730)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6792)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6797)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6799)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6826)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6830)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6892)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6893)	Queries kernel information via 'uname':

Source: kern.log.43.dr	Binary or memory string: Dec 25 10:47:43 galassia kernel: [ 128.498376] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
Source: kern.log.43.dr	Binary or memory string: Dec 25 10:47:43 galassia kernel: [ 128.498351] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel parport_pc ppdev lp drm parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse mptspi scsi_transport_spi ahci mptscsih libahci mptbase vmxnet3

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	2 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.x86.elf	33%	Virustotal		Browse
Aqua.x86.elf	39%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.x86.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
45.148.10.84	unknown	unknown	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.427.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
89.190.156.145	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm5.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	ngwa5.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	kqibeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/systemd/journal/streams/.#9:6517703V9fX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.497518243103976
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+fRBRHQcG9pMh+sjq:SbFuFyLVIg1BG+f+M+JBRwgji4s
MD5:	E73615DC340BECB050A62FDB34050CEB
SHA1:	11230FD1DA2B3F10629317311112F074211D63F5
SHA-256:	DFE13D9488FFFAE292F4EF52FE75809E4CDCA22DC2721B47B15ED4C2B820AA67
SHA-512:	B8F521D98F47441A832F999744F91D733CE0F58699B66EC6BBC2FC7B11B5C967C65F5565F189AA8D589734A35707344E7362A2A48C596B7FF1F46938F6B997DA
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4d3cfbd5c4bd44b59234a1fa0e26ae42.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:65255NrP6YU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.470851188684872
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MgSKR+w0jZcHcljX+:qgFq6g10+f+MgSKR+wimAu
MD5:	8ED220ECAAD657237FD4D263264ED7DD
SHA1:	11A7F7178CD6AE5846EB7F028F523809E85F221C
SHA-256:	D0751543F8F5E08E723C6DB76A1A00178E9AE870347E0EDBAAF63C31EB41DD2B
SHA-512:	56949EDAEB47E7BD388EA9BF1B298E6C501D9D4AB3837895468AE3F9F1558AB1CD0A15856F9D4FD484FB3BC74621A6EA9899728F37D4899827580BF03014D171
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=335db575487c48469611d00a54058eab.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65256TCNJNW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.463429697499686
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmptVxeRZa4bxzsZjsV:SbFuFyLVIg1BG+f+M3eRZ54jZcHcljX+
MD5:	6B45FBAE68286D6E655000FB7BB96DB3
SHA1:	C8121BC2C055287E87F2828459FC5C935663DD8F
SHA-256:	D1B0DDABA5F3B1761ABFBD961E582B88394A48013AD7B8E0D78C2FA9252B0D5B
SHA-512:	99C0E3B4B721EA62B794E5ADAE6C6AEBADB0ABE8F2F775A99FB3FC7C86BBD135453945D65E130FD8D29B6FDACF6E0D3484E625CC1DE0BA434310F7C2E90D0A3A
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c7a27ed0b48941e2af508c8e8255a18d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:65263zqQdjV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398555795490084
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5SiSDgREw2DC6lMqd:SbFuFyLVIg1BG+f+MKDdw2fjosQu
MD5:	C4E315BF2A22706E998DC247511A2DCC
SHA1:	E05B27FA7C3CBEC4BCF544FD3689CF5B30A2344D
SHA-256:	230D1564829BFF501DB2A7C83555AB3ECC4FA6D16CD1224FC213E9765EC5BA01
SHA-512:	CBC219DF9F32F7E797A2614C0B69980C403B25C532CDFA06FBF4CFC20AB001A0A8E6463C6847B76D81B497A06C7FA8143BA02FC65E9E84215FF00D4705225C65
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=387b74d7febf4a439bdd6e78030a62af.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:65264X14TCT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4570000581972
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8lJX92Z15qjNALyAZD:qgFq6g1af+M8QZ15wIZD
MD5:	C719B22AC02C23D4497E0E6D779F6F39
SHA1:	0CDA47CE5187FB37D3AA4BE5FA9DFDB90B6A5C5E
SHA-256:	7C9E38581C38CFEEC0D2951F66CED183512F7D9229DB06B7432370C70794C65E
SHA-512:	D02067C3D5A17E35461D5BF189810FBF25B04AAD9036DB34318ED7BC90656C63B152E8A5771C06B44466460A17BA374906F1D35F773A50D164F784F793377D7B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=66267de531014d8792b64b5f2ee6b219.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:65265b6txsU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4633884204124135
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9dCwCBRTlC0wsjs2BbM:SbFuFyLVIg1BAf+MbCRBC0ZjNdQIeXD
MD5:	9F91B3A0124F601579F7B46EE41A1EFC
SHA1:	C4FA596C61D6308CFE2D222107F4302F9155D513
SHA-256:	3C98755566AEE255A733A927995478C8BEFBFE3B8E2AB2DC4A4F337C6F9E37D4
SHA-512:	2654C543AD591EB57939B8F8CF174BC129884DE0B5A42BA98E98235739775B3EE5DB089A4E92CAB6F1F97150236A3BCC628369DF1CFB55C69CF0D3EA4551B074
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7646d570bc0d40f295eeec46a739e11b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66497NOPHVv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.5201174407853095
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm92HASUEHGjVV0+sje:SbFuFyLVIg1BG+f+M6A/QjZcHcljX+
MD5:	2DA791D242FA7FCDDC5B8F1BB415AEA7
SHA1:	2F086990ED3D9AD35B076EA141B0F009F7A84172
SHA-256:	BA1CA04192B01B31E616A20B9F9A3566E6E8DA2AEE690B052AB6EA32593D476E
SHA-512:	B0B7C105D60B26BBC81B67A9FE5ED24AC1539EB9E0446AC5F38E7A1C5CD74F914F77F0EB14F85C8C5D109FDC7CD170E1E023D73BDAADF1C7F07DEE4D77BE0156
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=79317c13be5248528838b6967f382031.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:66498DSJ0sv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.374103819317167
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsARAYHVLA7RYTjs16:SbFuFyLVIg1BG+f+MsUHV07R0josQu
MD5:	FB304942A1DE6ACA90FB4221C331547D
SHA1:	C0B0DDD1A9D042A8891B2F7694EFDF0410B71444
SHA-256:	10ACF8A38ED400632D05504307C843B418B53FEF51BC3CFE096C9F392651F912
SHA-512:	39EF6A8196BB2B442B834120633EAC05669D4F36CF3B71A681C02F94E13AA151E852CB5BE369FEDA88E444FAD3AFE15C3BE27FCB54BBF94FBC958A4AE23F12A3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=feccefab07e04ba5a5e304ef02227584.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66499NJsWgw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4255000009647505
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4DHuHwGWHZEQMqjsc:SbFuFyLVIg1BG+f+M4D7G8EQZjosQu
MD5:	E3D6FD06D28C0FF46D33025F879CCD34
SHA1:	5719267B3F9ACEF987A395CCA47D717990D05488
SHA-256:	FCD6D055F2D7ADF2901DE222E6A6CEABFEDACA1903F70E8A283AB1E940564FC8
SHA-512:	A17E34EF5378BD5F7D9A7173C3DEBDC240014ADEF1735716D6BC45789E909D48C22E59AA93DEDFA2C1412BFF286870D3FE7DCCD960BC03579CE9266FF2ECD61E
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2fbc4b3ad7d9411ba48c435734d375a6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:665001fErJw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.480869772161613
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm4HFq2LZjs2ALAXaGKjr:SbFuFyLVIg1BAf+M4H4ojNALyAZD
MD5:	2DBD3B95298B7C3421837AB1CA3340C6
SHA1:	CE35E81778E5272D302ACB27106B24C6B9183613
SHA-256:	C1FC8F7EEB9498675EA4DDB1BBE7B2603006C9E7B97EF5B218CBEDDD0563C32D
SHA-512:	1C799BCF1EE49F9FE3ED43893FDA748B82FF9ABEB25B6A66B78AB1330443DFC89D571C19077BAD81996125935C9E44BC521D8428D75820C9C70CBF37467EB3FB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2b673f234a50429587dbb9cc9b227965.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:676205Itgku

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.451619937756622
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsAHM4WfXWmAXHjs2BbM:SbFuFyLVIg1BAf+MsdWmA3jNdQIeXD
MD5:	43E2BA85CFB144FB027F918816DD60BF
SHA1:	E65467BEFDF4839D6EAAE610028ED0EBC68B57B2
SHA-256:	4F59B1B207DC0C44062E6D395A5C237634F4E75F07E14451DDCD9EC387142498
SHA-512:	73CBEC77D8EC14B1C3060B5D324429245C500A38AB6689968B4BEA831ADE2219E1CA2DD3E4F14C62D2DE9FF4FF097BE407657EA6A256911CD067394301570C64
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fe1aff1706ea43c3bb52b9353b3d3b27.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67628vKK5Et

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.442937877652851
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm73JCzD6VgRrdXF0jx:SbFuFyLVIg1BG+f+MUzD+UrL0josQu
MD5:	910F39BDC2B8D52976AB766D48C8396C
SHA1:	153D1A07985E5069B9AE9DAA767E86FC705EA841
SHA-256:	2089595020F1ADA30F22F5A4B4975E28A2CA2DE5F11DF0257F6BFCEED052EE16
SHA-512:	7352403914D18E7306F05E2E4E5A54E08DAB9E39A29819E719C327F39A2AF93A35A9161E4AFB429769226BAA46533E9125807511B3C15FF24B7DD6247A64E65F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=10890e2e77f240f58b04c4d8835f2268.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67824PnWpzt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.452195749308727
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6MTG7q2155LqjsicN:SbFuFyLVIg1BG+f+M6L7T1qjZcHcljX+
MD5:	40174F518D4BEC556640345CF70CC555
SHA1:	08F597B5D04C41E6B2355688588BF8BBD5D1D48D
SHA-256:	5AEB66B7804AA58FD05828956429A235D579987B20F7E2BF85BD22EEC463ACD1
SHA-512:	852BECF3B9603ABBC38447AD8F9069EE0EA6AB34DF209C1CDBB784690C80D84680520A2D67EAC7906EC7CD221716331907ACF2CC3136707B4EBBEF1E9C29C584
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0b26979ac48c4860a000946e4eb83e19.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67825XqyIYp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.363632606761421
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvD22KBeOqRqjs1Ha7:SbFuFyLVIg1BG+f+MS2KBpJjosQu
MD5:	52418437D2367E0F0884FD439D37A1E0
SHA1:	C83565B2C440591D9AC9C110A7857A8A2196BC5C
SHA-256:	F461066B1B99B537FB72ADF444E56534350561621FCC5A0926984F3BEC64D97C
SHA-512:	339C33FA925DD173934B198C9838110671ABF723FEE2A254518C62A481CFDE0C55AB0EFE0017D80A03412EAE9DBEBD72BD15813F88F5F4839B96DCBF1674CD95
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e538fe8801d84d0b8ded899aacf6ab58.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67826j9rF0q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.37032215864948
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp4YjAT+VU3TERSvAJ:SbFuFyLVIg1BG+f+MSYjAeU3CjTjosQu
MD5:	6C5AA75000C2DC3370C15FB9945261B0
SHA1:	EB04894A6657762009BB4A3C60AC32887A1DE9E3
SHA-256:	4783182024160659AA111B7BA3766DD5061B4136E822D60D6FB3254BA82EE73C
SHA-512:	C894E7A8D84B3AA773B2794125C4249ABCE22E708936E15288AAAA612ACF60200CA42A92A2712AFF7C23DD052999A1E11D88634046C524E72B27C4373827CBF1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ce861ecaae68423aaf056e6d37a6a337.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67833C25nyp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.467950517294008
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8VWgPow+WJglsjs2ALl:SbFuFyLVIg1BAf+M8aWJTjNALyAZD
MD5:	57293FE4511F6D5AFF73082FAA8C934B
SHA1:	ECA63E05982C247A1371028944B662BA70B06870
SHA-256:	4C61B797CFBB08A9E95494246491D8F70C3EF1A3286C3CD40C35E718EC5C512C
SHA-512:	ABEDEF91B2072CBEB6DF67368DB0BF20A98C0ED2DA11030864B5D6A8D3E5125765C022CC1CD250660D153553C11436391B30E7A1F2E54280F837B7B17DD4FB52
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6684b25e34c84f7f8b935339039f5650.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67854R1iYLt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.455088183803347
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8DWFHhIXyBcGcd0ZjNdQIeXD:qgFq6g1af+M8HCcGs0n2D
MD5:	205BDB394244BF668EE3D767973BAFDD
SHA1:	247AE8A9A79D662172F98997F22704E27808CA91
SHA-256:	9D3056181E5F647A11AF950CEE7734AEA45249E74E4CA26759C7292692A186A8
SHA-512:	53B44896CA214306EC90B6546349CE42B4769CA041ABB614070707A07804F733E1394D0B46254336A84A187D8F5DBB511778458C4DFB0BD18DB8BB0E6FFD0EDE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f81280ac28b4bce9b6d020f9d941098.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69127kZZW7O

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.47900207006887
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MX7ZDJQATjZcHcljX+:qgFq6g10+f+M9JQARmAu
MD5:	19A7A6FF88A36D7FC5BD4A91291D59B1
SHA1:	C164353956C98429F332ECD83DEB7A4851F7D17D
SHA-256:	FFB375A02716B9EDEAA5E352C3BCCD468414BF78A79E3AA86D7E68CA4E3E5183
SHA-512:	249863E53266F63F89F11E26FFEC4CA55DFA3928ECF979E3C6E29BEAB026C36DE637603FE55ACE99FEDE73C7E404B027B9BFBD2B746CAF93DC514CF440CB1956
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a44f76fb0cba41af878bf0b13fac2d90.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:691281hkk6Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.447876495871752
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7S8JVb1XTUU0wsjsc:SbFuFyLVIg1BG+f+Mu8JVJwLZjosQu
MD5:	ACA50D2C00B94CE64824D7C2388A3625
SHA1:	F456242CBE777B9F43FED6FD569FDA00F2F29BB5
SHA-256:	07ABC34D34C1F5090E8206DA7CE55515D10E34F4680FBC721A8E443A485A2168
SHA-512:	169C46A4F04A301E4BDB825102832CCAC9BDE7F83D87C23DC8D4FB7F796326B7D58B744E5562D956E37D2F5DB2A9C82AE811A83DE56DA277CFDB58ABD671D410
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1913603817b8406299f2928d5262ab7b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69129YHMuNR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.441176872934976
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/5t7TWEUEevsMqjsc:SbFuFyLVIg1BG+f+MhZCEQqjosQu
MD5:	9D6D462DDB0F0E10047100B5B2FAC6DC
SHA1:	124C3F0AA44ADD7368F7F5F65CCA1D55F54F92B2
SHA-256:	7E5BABF926CE865F2BA9D59CBA0AFF2A3A24155E58BFD7B88C07CFF009107D92
SHA-512:	A1884A48197C8BE4456C6650C35B34FC5BAB64F2236B528C9D6EBC1201486765A9C0149ED9CB2881E9000EAB05562F9D83ACA078F50DCAB820F679DCBE1DDADC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5664149b47874c0a867f3b7423b41a67.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69130RZanwP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.40033275091201
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5tiyp2GDGTG8js2ALAQ:SbFuFyLVIg1BAf+MXi8haT1jNALyAZD
MD5:	C272B1B4EFD878421786ED9EF42EB233
SHA1:	216B9333366DCBDEF27821BB882651809C5C73DA
SHA-256:	4896469CDEF5229C0E218BCCFAA2262D40F7709A03B460B3F81C8AF6E127F577
SHA-512:	61E7455994E6CA50FC12D4C14075D41FC8D6DB1BD3E40F42303AF5A6B087D2795ECC6BE8B93D2DD925FCD973E9B69213E90198797E756A47E91CB8F821ACC28C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3f03eb332afe42d1ab6b448eaccfc654.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69228IMfa4Q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.472317909032729
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MecA9wHYP7SUBZjNdQIeXD:qgFq6g1af+Mc9H7V2D
MD5:	0E7B20CB1F7CF3C2C0362D6A5E6ECAD2
SHA1:	4EF5E6B47BA3A05E96E603A40054243E1B00FCF4
SHA-256:	5E6E9EB95CF3ED9B6459D7EB9D8F156255686ECDE46079559ECA430A8A9F2CB3
SHA-512:	7A4F6EEF70FA61528E7C726708D9C83E3AB927CE2341A24E9F2AF80072D837DA2A4C5C162666A145B5B2DB6219B11A335B90A325C1E42B10746BE020F102926A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1279ec0536bc449db53a6fa771f1e610.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69341fgDMJP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417767932754314
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5SS2RLCS3mx1xvAgC:SbFuFyLVIg1BG+f+M52ErDp8josQu
MD5:	D083763525647E7A7EC2617C355B9F2B
SHA1:	4E131CAFE08895EAF31021195D79E87391BAEA2D
SHA-256:	4329E23285E700135CB6AAE2C59D88A9B06E5E4D477D3181E4E61832A008470C
SHA-512:	6495F52B51172B3FFC74EC2DAD13718B80BC32A689A43DEDA600D8426B3BE169D3991AE187C10D1446A830984EFA6A529A086D63EB923C2C1BD05B652151FD4D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=39d7761f8de44acd9618e7e792b4469e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69878z5RbNV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.508693292685414
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp7B0JCyxsjsicWmIo:SbFuFyLVIg1BG+f+MVBPyqjZcHcljX+
MD5:	9B65D1510EF0BC31F0D8EB02A59EEFC1
SHA1:	2F49D8B050BBC44FE86C823F5915C1A9290FD360
SHA-256:	19CA78F90C60D2F924E68BC32C5D1626AD81C0FE310330BFD30F95679F7787BF
SHA-512:	0C1B57A165C933F3D1EEB3E5271D60219F0AA54F9AE5E215C8122852086BBAB52047D354EC39DE57EC4BA08BBEFFCFF6EE43118435A5B0F9D8F3CF23F712B83E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cf6fdb1c29e84e01985c33276b51e633.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:69880UPXKsX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.437776190967243
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+tBGUHnONv62aW/sd:SbFuFyLVIg1BG+f+M+6Uuxa5josQu
MD5:	8C6A23D8CD0271AF86B767BD8C188979
SHA1:	3E9E54650BF29876D958EDA277B287B4CA84C787
SHA-256:	D30AE6B9E85FC18CFA655804B5FACB944F9411DB60A929491209668D3A40B699
SHA-512:	2E09E4CFAD2CA6677279D5F7B934D166F5A3462842B765D4FAC55D73720836A1B2253DEE6B53A393BA9193F3D6E194F04B4C8805E16A8B9EE7B201266053225C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=42578563c41b45e9aabaa1474945fc32.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:698872wSbuW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.385462560902941
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+jWR5HhGTDSB0uqjx:SbFuFyLVIg1BG+f+M+jQHGAIjosQu
MD5:	D23CBDBAAAB8AF14A951E841B5810ED2
SHA1:	F896336F766849B6CA4E26740927A8C29A796BF5
SHA-256:	35C6BD903EEBC390F8B3C3BF2E855736E6DCB3D62B926034D01445FEF9DEF37D
SHA-512:	DBC84B5855A37C6E245E0AC1AA767DDFA548F74EAF11DC2B7AFEFD2BAF14E19FFC67FD7DA2A5727FE79FD74972BCEDB09B7CEC7AD038D59D1FB5F691146CED4D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=45b554af5ccb4d1eb3bac6f85a180a36.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69888FaHcqW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.436369877076154
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxms6XdAnX+JykQVj0wsj+:SbFuFyLVIg1BAf+Ms6N40yEZjNALyAZD
MD5:	1C37914015D6491579B8D0DF55F2DA24
SHA1:	A9436243B1B3CC02E6D969747843A650669392C3
SHA-256:	943C1EBD02CA195C4823F0F59CC93BF9363297775A72DAA54748454930F1643E
SHA-512:	4199795692D093D45F2B864D85C2A20F7330B13C0CDD20F094D97F4043E5CA0FBAFC04FB1F001D184F487925EC999375680FC3EFED05769E73BAD2FD15515CB7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f4a082bb938e4d35b89f07dba50bf882.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69982VE4bXX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.449981209875398
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzWNTeRSEQHoKH9QFwsA:SbFuFyLVIg1BAf+M1SESocajNdQIeXD
MD5:	59382E3431E328B298A48DF756A8A0CA
SHA1:	0167F4AFECD6CA71814D0D8A9B35A2C71E003E3F
SHA-256:	D975F88284536874A057AA75FC53B0CB214450C28FE732DA2D2C79C75FF4EAAA
SHA-512:	77A75384F8B980CA523A89852D9459AF6A1B8DC015BBE464CA441961454E680987966045FFC5D23D0696DB34CE42E730B0838949E610A42F21754548EE119513
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=906f1116ffbc47a5badbae50b372560a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71160XpOnez

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3542203511958455
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm53JrJnycSkIeswsjx:SbFuFyLVIg1BG+f+MPlyctIesZjosQu
MD5:	B463FA077158E3C4B69E76F06BCCBE97
SHA1:	AB7692673F791A5B206AED0537D8E3AC39CD132B
SHA-256:	F901691CE04627A3675F59355B270E60EEA5DD635D896A13A8AF0BD9BC943997
SHA-512:	C18EF32EBCF74B854F17A90C0369E9BD76BA1804573AE3264C16DBA8185EFDBD27FFA2E26A2C9676F8C6DEB0B0076689502A18D7F1CF3C26C875708E56CB1047
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3e791d9abbba4c5993aa5497edac573c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71161t1ozoy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.353086639327199
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvEKb+RHTJVCsh+sjt:SbFuFyLVIg1BG+f+McY0THvhTjtWL0
MD5:	6804EDFD538425DFC823DB7F67A6B6FC
SHA1:	800C747D380452288684CE4E49510C5287A92971
SHA-256:	3495590A8AF2B0F93453F11995C077782753F84CD08DDA017D1297111415C050
SHA-512:	B1FE2BB8D3357DF51AFFB6FA130ECE1A6DCD3126A333A7609BF7E9B006A6E4E44DBB8C297E6A33D97DA7F4C594AB1F65418C4526732E44C801092E43404E0143
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e18263ba766346f9b66a43be1530dcfa.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:71721KkTvG7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496729954295643
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6umzKB8jZcHcljX+:qgFq6g10+f+MO+8mAu
MD5:	6B4BBE04BE1FF9FA8A518785011759DE
SHA1:	16D4DD8BDF7AD44C83074BC9FCD283CAC210CAB0
SHA-256:	0C014630EB426058347A71CB46DB3E8CF5EF60C79E1737A9DF3BBD2649E1854B
SHA-512:	2FAAAD6F1C0F4EBC4990B19A70B583C49EBA2A49EB41524E10FDC8CB1CC66D8D83261A692FA9B133AFBF384A9F68A53DFE279B1D767141B16C04ED13C98E1212
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0c1164e296fc4f99b9dc30596e787afd.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:71722uANeH9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.393630433129437
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+KtPyaVBjs1HadmQ9:SbFuFyLVIg1BG+f+M+KtPy2josQu
MD5:	BC961CA48DD68D966F686C5D3FB3BC44
SHA1:	C89AF8E38318FA55948708151173231350260B0A
SHA-256:	42FF2ED28EFFE1649D9D621A4356914090BDD88C414C4B27F8A2612A778AF7F9
SHA-512:	0C86D0E24F0413618F3FAF5A8406FE8A4C0275213D59F25128E2E2E102B4AA3A50D2D3C18CB6C37A919FC04FFC418D6F4F53EBA0CBA31026A39F67CA68CC1D6F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=415a7dbe02e14021b719c97db49085b4.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71729LQurGa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3446358701862
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6BwK3sHK0js1Hadme:SbFuFyLVIg1BG+f+M6CdjosQu
MD5:	DCF7BFC6DAADA82396C2875B84AB71F9
SHA1:	876A0473EB008B821BB16DAE41DB2DB985D842A7
SHA-256:	2C720FF8F31EA1A7882B606FE723CC796045AA458D601B11FA0CC7C47C936969
SHA-512:	78A70337345A15E094C7E5D9C95E94034AF9ED72A031C44A9E07EE062EDB36F26A2FA9AA917123DFDBC914321E2B006FF9872B0CDFAC8BC15A761C1293169CA5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0519d0ac70544a50b370e5eccad08c9e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71730yfXl36

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4110839529613575
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/FhcNqiHt+sjs2ALAXA:SbFuFyLVIg1BAf+MiHdjNALyAZD
MD5:	B9C60D260F12AE3449D944E9FFC15BE7
SHA1:	3A2C10C44C54C68A0F8E0CC6608460D45A65E06C
SHA-256:	43017468E99D8722B5DDA5390241C434DB5F8E13A87163F6546A46E0617E0565
SHA-512:	4EE1335F319B14C4E2B3513E2B1EA804C055923F8590E3509B4B13468D8988ECFA6383D31A36E1A67DCDE42ABC17325C7AAD6A58BE2B83B011F3D3A8BF641953
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5194b65e89b040e4add41dad2268d06a.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71818YgCC4a

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.485450136204137
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpla3f+bC4grxsjs2BbM:SbFuFyLVIg1BAf+M7aPB2jNdQIeXD
MD5:	A0C3CD5EAD72AFAA9AB7C424FAD72425
SHA1:	70271A0BE1EC39C6E5FB11499BA90E73851CECAF
SHA-256:	96F59B381561C56EE1E70398D366277A9321B549448AEFF25B31D74988E436E1
SHA-512:	174D4C61E3BE37EFED6577BC4B38BE295CCFEA38D019F4820C6820829B454825178E2CABF07FD3A3CDEA6ED73D7C14476D5CD710AD5B049CD05FB0A056A925B3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c487fb61385a4ad2a9b6ed35c1568c0b.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72655xSTRQy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.460630051978113
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6Pg45WhgrqjZcHcljX+:qgFq6g10+f+MW5WhgYmAu
MD5:	CFCFE5F0A36510A5F3F3D4E7DF475413
SHA1:	9AD6343713967DC9A3A42FB9BA68887ECEB923FC
SHA-256:	A7FD44715EFB2B3B043927F2D05F751327A3A805837E5DF1899E9563D40A3FD3
SHA-512:	43A3F302C640C0944A591DA5B68F7CBF34318F50C62F3A6416DC78E8FAB098A5F3F7D4D4395D55F9CAE3A352B5FED119021EC851BDE5B14060399DB8DFB90259
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=07d96b116af64414b1a48ffb1e06b189.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:72663xML6Sy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.448952913874284
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8h/4cpdRBSGPsMxsd:SbFuFyLVIg1BG+f+M8JBS5josQu
MD5:	6C4AE208E644EBB8533D008B4284EBAF
SHA1:	8DABFCC106A210D883E4E719EBD02738FA0692CC
SHA-256:	A91E05A316EAF513762B2687AA8D03078C960A211F97D2A2C28F4AE0B799B97D
SHA-512:	8D2366E3E8165C7F0D8ACF50325473BA34EC7C535E4E8E6C60F436E96D06C9703E23FC518D763EF49C8759FB5A2B37C3524BAC60D024800412826690FCCFE426
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=69513b60e8fd41bfae84293491974ccb.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:72665KUddDz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.35627524178986
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmucVKIWQVC1+sjs1Ha:SbFuFyLVIg1BG+f+Muchyjoa
MD5:	7EC72FF53115DFC0CE0714D29A16976B
SHA1:	0E0B6C2D64BE374406659B12D3FFEDCD6701A408
SHA-256:	DB213C21597C108D36BECC8D5DC26CB656B3C3D1F05606DABEB60F129C94B588
SHA-512:	C65AC9F215F4E908182DBC2BAFA307B21F6336094B43E8511E1EB3ECDC2692B802FFCD656E2EBB6AF5AB4DA3326AB9B7F57C13F38E10EE6CF9FBE70D2429DA38
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d239a8d0c84b420ea7cc1ff50c050b1a.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:72666wRbWqx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.353926463583868
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm48hETAVT+VmglsjsO:SbFuFyLVIg1BG+f+M4F+T+8jtWL0
MD5:	F6983175B4CF78E5E6B02A8F0920E6E4
SHA1:	2A96314BF22330C90712BC9CFD259E9CF0B9F5CB
SHA-256:	970CB3DE82C6E3CB914CAE57815F5DE0239A0B8655F61CBE074698E61999A9FA
SHA-512:	56B7542D9AB9E2B17331DDD360BC33779339F0A851CD84EF69C3C43880E78C581E67A308680EB4EDF0E91E6EB7101E61A4631E99470038AB15D539D9448D29D7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=26e4817ec41840b9a6e3784e69960d53.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:72667A4o7zA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.438370167085185
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8ECkWVzJtF2josQu:qgFq6g10+f+M87XcQu
MD5:	CBFF137398F5F8B975FCCE02B2E4DAF4
SHA1:	AD6DD962DB9ADA9A065930623D4BF02A8F9AF380
SHA-256:	E7F8F3FC64651138F86B5FEAB98D7C97528235B209F7CD24E50A75633C5F2435
SHA-512:	40AB0432C76E25754E5DFE132C4CAAA029A6681B843D6680E1298DBF147FF45184102BD56736B78DB5E0FFE3BFC0AC941A83094FC73572DF11B73EC7FA2292D1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=64b72f1197ae430d8a62fa80950219fd.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:726842z3KKA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.442123669003329
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+z9XXlyhglsjsjOdy:SbFuFyLVIg1BG+f+M+z9X1yhg2jNE
MD5:	7FE14BEB6A39C62FF64AE2B8D10C4316
SHA1:	A2BD79A3C1907B4D1B3C3F1CC5C3A4D1BE715E56
SHA-256:	6AFF209935ABB54D5019F8EDAE1BEF8C236825EEF4416709AD3E2F042D4EBD23
SHA-512:	A186FCC2B4588DF072D94D1F830539A5C4D378225C517A450A65636B31DCEAA7DDCAAB80AB3CBED879D83E39E78FEF5A764C63C02D3539248F82B20B9102DEE7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=43304d1ce63145579059fa4867f5d44b.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:72686NxBNzw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.436446852928599
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4boRKEGRE1Sxshg24:SbFuFyLVIg1BG+f+M4bBEGRE1Sx8jbVC
MD5:	61817BC3B46A6A78631DFE3EBA433931
SHA1:	844998F7376D246BD7623411F5C1292517C0BD7F
SHA-256:	39E689629408BF586AD9704770D7208EEDC43BD1CC0C1D24A7A4B2DE0ED803E1
SHA-512:	82738C0AA42D07A996D5C68A48A8A51E568FD3205EFAD6DC74DCB6BA468CEE19EA320646359D4735E1C7854213C39C2B8EA64B81665770B31C56C69E704442EB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=27818cb337764885bac4a3f979908176.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:72694dc8foz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.465306914618086
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzbUrXIXTidhGiYYuqj+:SbFuFyLVIg1BAf+M3UDoiLUqjNALyAZD
MD5:	AC5569D7222F7B7953A2105D8F4663BF
SHA1:	34BAB877D8FD3E34B882369930E1CAFB17DC00D7
SHA-256:	92C5054B1262432165358F25FC40AC6D7AAFFC6E9821DBAD4ABF2EA06632D770
SHA-512:	AB97733B9FDF14B44B78326DDCB13ED10A8E89D305F36BF923EB8143384AD5D9D7352D30D4C8CFE8ECF878676D88752AB682A24D32D077B6281C91F8F57343CF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=93081195a6f742598a26aa584bcebdf7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72830Wdfoxz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.471324780794913
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6+RE6xVjeZjNdQIeXD:qgFq6g1af+MBEiVQ2D
MD5:	0287AB7C796A2E4D2CE807AC58103D86
SHA1:	8392BEC5BAD47EC3A9A495E5FCC42E030C294BFC
SHA-256:	5802CDF452DE553AD5E8422D22E6C33FF6B802A8CC0AC020BCA1052238011D1C
SHA-512:	6C6677CD7F02EC4DAAE8C18622E9FF349DFCC91359A6356ACF2E8D708CA6C2E256F45C2B0C4FAA33D9E5E97523E89D23469CC27E053B487586C3343BAB002548
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0a9764d2ad4b4c81ba99f3d0316d95c8.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74138xx4wAS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.464178774937778
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7UYHqXGSzYTjsicWg:SbFuFyLVIg1BG+f+MQIi0TjZcHcljX+
MD5:	A7D912F076970E0734E1791057851039
SHA1:	1F59962A22F872896C021302A166D570E1350120
SHA-256:	F524537A1FB05781960A27929C7103A8B7A951AC83F12F56D5F51073DEA57B87
SHA-512:	F87F4FD7D6D79BF6BE5AB539DC232236DA635EE78D85A9878C0D7CBA1FEFBDE1FE7C80E0AACA127F17537E0869FD9DE92408673341FB1EEB6A83A8449174F7B7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=190861332dd948bfb13da0306bb5d6ef.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74139P82htU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.39098189938153
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy33TUjgQA6WmvshTd:SbFuFyLVIg1BG+f+MyHYjemvsZjosQu
MD5:	3656E3EF85CE6CC4B4A200D1D7333183
SHA1:	E2283F3C607E62983241F860EA6744B605AD73A4
SHA-256:	5D22CB6B2585799D3BEC54C6A12F95C8C0659E8FF1863D1D5CE7CB75567324C2
SHA-512:	B173689EF0FE971A4027197DF5561FD9672F9BCD4CAA7DA858868DCB693F93471C849E1B4816FBD0E21DAD974D44D8E4F689996490AFC608CD78735597E858E4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=84408636035849d8afb8e465bbe053ef.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74140lictLT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.412268720427746
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmupTdTDJSzyWoRxsjx:SbFuFyLVIg1BG+f+Mu9dTDJBWuqjosQu
MD5:	F488AF38FBD73A09A863D891FC697C25
SHA1:	412432F160C9B04B7C00A696927F21C35E4BB98B
SHA-256:	103C6A1EBF5DFFB5135A66D0E5F0937A20D38D4FA53CB913E7F8A8E447774F83
SHA-512:	685FD8E7BFE67F3D6B42A52C20685636AB4E351EBBE058B04929E516E01C77E713CCB9D800DB912A66ECC8D541481FED3A4A05FBF25038FE23E8D262E435E321
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dd83f09686c14cd4ac32af2773c6da33.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74147l2ErfW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.434324831633911
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MjodtQZR+8jNALyAZD:qgFq6g1af+M0XQm+IZD
MD5:	F2E458293241D06C53EB8ED0064C2BAD
SHA1:	CEC19F9A40F594D865791F56677A8E16FEE41B72
SHA-256:	531605A00CA9F0D0F62A809F23499294F0AF4EF035BE3F0AD627BD7196C9A83B
SHA-512:	AFBD5DAF98C54D0EDDBE8B23EB06CB329E26C0DC664EE295023D6D66A58655B54D5B6667E7F4E459FC64A887D29D32035A611B3BDD54331E8F84C7EEF7177039
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c45f1b854240464a96efdc0b321e4492.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74164IQUeFW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.444080202776647
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/F5QEHwV1GU9+sjs2BI:SbFuFyLVIg1BAf+MkPDNjNdQIeXD
MD5:	285EC3F11F4C2253CAA9CD8B9DCFC16D
SHA1:	12AB1A30D871DB33ABC236CF31F59170A89CF2CF
SHA-256:	B087B0A8A53734BEC4345EA034523F6FB8B4825C4C1D22F5A141F9EBF9BDECA5
SHA-512:	8A3486FEEF5D059D1FA4865F190EB5D4EA8C61D600200808E9C041B06A343D366E80BDD27E7A415C0E349DB03BFEBADA7599E918D0011BF9059007D40AA95D2C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=55510ef4881246b8a18ab5bf09ac1ffa.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74758puFohG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.460261374357897
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvQwgIvDMTtvswsjsV:SbFuFyLVIg1BG+f+Mitv8jZcHcljX+
MD5:	F175C846E9546FF4439B01C7BF4572FD
SHA1:	A52F36123BC06DD2989E17F42A509D4E25DADD52
SHA-256:	CC0AEBEAC1C2FA0AF38D5D1A0FF807E19C0EE76E54F4B67E4E41E25B38D32892
SHA-512:	168FAA9508A3B09B1E2832F052FC83A84E07E49F0BEAA169431634DB8A0782FEC1E10F7A36B459EDBBA0AAF68C022CF47BC764DB9287B90474E169C1A5C670F2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e4450dc0c89546f1acf220c6ec420071.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:74759ipmP9E

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.33506544251874
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6TdxnAR5BJNg2js16:SbFuFyLVIg1BG+f+M6RxAR5BzTjosQu
MD5:	76B1EB961C0553F7F6158E5638F50EF8
SHA1:	7051EDFE9D384A5DAC39B1E683409476DCDA8FD2
SHA-256:	E519AE54F7FBBE47621C2385C7D23AE1B449EB9F904B6FCA0F214AA26EDA17F5
SHA-512:	38AC7994ED60543F24A798D4A58A99FBCAE2800E187C5DE0AC9EC7EBB6A9C5F63B691782027955549DCF8D28BDE03A0A65656B8D517B873FF76FCFC05599A68E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=07bc0e5dd8db4de4a5d7e0e903b48a34.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74760AJirbF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.356348224710642
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm44GBUlSARmSHw7TTf:SbFuFyLVIg1BG+f+M4eiSWeGBTjtWL0
MD5:	A67A10446B70952CCFBC1D0BD7523780
SHA1:	D5A3D9E7461345EA72EE29A9AABCCCCF27027D1C
SHA-256:	6AC9B08CEF7E04EC8144FEAF3611D7DE4B02C7A946AAEA4AD32B8867BA57311B
SHA-512:	B518B7B699F4671395BE53A9E044010F09009CBB85C7EE26957EEC8A0E231B6C26A3939A7859F7818E2AA6767B3BB908F7AB7608366B6058142388E94CCDC435
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=213ecd14e77e44e7b0c46b96166813d5.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:747611ira6B

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.421728411345784
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu01cK1wiSBd0js1Ha:SbFuFyLVIg1BG+f+MujKv7josQu
MD5:	57584C310A0DE0AB5246006EA05A9E28
SHA1:	DDA7342FD8F030F8AAE2ACFCC5BE17389153E6D6
SHA-256:	B40AF8BF0D1E682078E5FF98498F7F3B8876E74EDD548F5CA0467D87D0E9BFD9
SHA-512:	7A36ABAC2DBAA0D36CC111B8099F37FF79C6847A1C1BF537DBDA0340F86EF7CB31AA054AB31B7F4644486E186EEA5F2C9CDE0DE2AD1E2D402B403A8F9512E95D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=df357fa9963d469392d22dadec42b5d8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:74771143T1E

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3591783788363845
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuhBHiUTd/WoHl5qjt:SbFuFyLVIg1BG+f+MuSR25qjtWL0
MD5:	51ECC26EEA0EAB3C7D9CA4024E1CB068
SHA1:	0CD570B4E43BA20B3BC18E6121B8CBB458343260
SHA-256:	DA857254878C4A777B80E4DEDF0A3641385C50AB6B18AB1B98452587B82134B4
SHA-512:	F9508D1FDC44CE7698D02A7D0B6927E586B323153DAA7AD682F06D9B33813BF3ABE8EB1D6680D6F4FC2D8A063AF62F936B1C7F6E04B4AEBD7D4691597C5EADCE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ddc1d0c153ea43218459613b3c77bb55.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74777Cwn7HD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.3829313893664335
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvS/gHVDVhDEuATjs2Ax:SbFuFyLVIg1BAf+MXVb7ATjNALyAZD
MD5:	6E95DE30F639FD111F2C6CC385CC7E1D
SHA1:	3F8B6436BD9D12C0EFBD385824897A334A1FD4BE
SHA-256:	557C72F6D7E6DF702E88231631CAC62376E7B266A8A1C32C81617847BB209F1F
SHA-512:	DFCAFF6264F5DA42017421DB243F77FA1FD6266578A3771403CF387E209D6E75A4CFE04B8C77F62039A1270D23CCDFDA1D1F0E9C3EBF377F08A796EC0E25BDF4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ef09fcf34b934beb930771e04bfea7f5.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74783FAcifC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.425111761407461
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9Fe1adcBV3SAlKlsO:SbFuFyLVIg1BG+f+MG1bBV3ScjNE
MD5:	A5058D23A70EC38DBEF910AB4EE72278
SHA1:	5D1171CC4C25C835983F28897D05B91EFDE5CCC0
SHA-256:	F22B304EBEC7408EBB5ADEA7E5608B8B310031E19EC55CB8994F8CB2B1DE18A7
SHA-512:	699A9DF5F96A79AF9046122DDF6DC8287A34129DB21FFDA08064DA2AE62D18C5A1CF5A15EE3F4D08BDFE0A7E600246D22790787A43F4755AA4EF9E115DD1ED12
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=720d5fd617d54351a89d083c69c7eee1.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:74784H1I3NE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.393535967649917
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvWWW6y+MXvsMqjshP:SbFuFyLVIg1BG+f+MOWW9X8jbVC
MD5:	0A110184670B1891CD90B74C2B3ED869
SHA1:	77D431EA97A0B3A571EF11FB8A7E37164E3C6213
SHA-256:	AB923F4448E6792F66C0401EB682D9CE0684D05A8524BAA102C3742FAF576FFF
SHA-512:	8BA38B3840D6DE7FDED3231097CA219C72AC58A34C71AB2D436089CDA1CF31EA5D88504CA565AA7DC3817FEC5392B29EC97C7FFC8E1E9F2E150CB2E25FDE0678
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e44d6d7d32ca4648b86ab11ba25ce486.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:74785T6bm7F

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.46011848706695
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MHJTCIgQDcshTjNdQIeXD:qgFq6g1af+MFCWjF2D
MD5:	E13B35CB3ACE023045F9FF40108A041B
SHA1:	F9D6057C49D347D993898BA446E7D03E6FE9F44F
SHA-256:	DA6077D96361BA3843A07872F3AA837DE8EC454D052662FBFDEF69F1CCE9F98D
SHA-512:	A24CC13B1BB9E21873D394005AF0C0A518FD8726DF2817EC14E55FE614412793089EABD02B9965BC476924E3964FABC430D60E6B130E9684237FF650C1C7C675
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e83f41c8eeec4ad0bcba092a2bf95537.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74786RNrnAD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.414358342470746
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyBEkRT2cEPohuxsjx:SbFuFyLVIg1BG+f+MyBR2L8uqjoa
MD5:	4010D38437682F5F335C0B0D77D37E9D
SHA1:	9182344557B6E4B7AC13C7F150F10EA52EEA51AB
SHA-256:	05490F568624169B0252B3349E6A8E40D4D7D6259BAD346AB85F33C313814F0A
SHA-512:	1658579C57F5954B87A59A8CF0E09C1DB8371EB405AB7EB125D0FBDDCF3556D275D3A0C98266C7A2CCB68F297A681CFF228CDCECB22EE830A0F44F0E8F8EF692
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=86fcf5e14172460fb619c60da749a583.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:74826nvXmVE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.348180104746334
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6y0d0cxjFV6BIVXo2:SbFuFyLVIg1BG+f+M6y0d/GeW8jtWL0
MD5:	C5C8ECBEAAF57F2015D7378D9048E390
SHA1:	6E6B6BDC0F1677320E72092C3691877499EAA3FE
SHA-256:	5D1F4DFEFFDCE3D3EE7E6E435973868DA901585ED34BFCEDB64C87DED374DCE9
SHA-512:	F50BC8C8A42EAE5984DC98E1A3CF75D7FCFE8C0049C4FDE11CEF8714D66C1F57A10AFA12702AE8B5A5BF0F19227FFBE2011BDCDC806A80D30296275DB362F8CC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0e247812f0a44952b9218b0f1bd6a023.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:76220dHteX7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.440410138270356
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsDWC2+0jZcHcljX+:qgFq6g10+f+MsKZpmAu
MD5:	9897E41446E14A59C689A060B5352208
SHA1:	D3E50BBE9ED47796FBEDED7AE3E9E2CA7BE7FB3A
SHA-256:	1A196C6C93A29D51C2C2F08EF822585D942781CDC314132D31B41F029F3372DE
SHA-512:	6C21732BBE34988F819C41DE5F6C011C2C220567048F30A58F4FB246C9A2F41A8FAE46F705DB9E57DF293ED994E3C046A4FDDCA36D3C83D313BE89166442B186
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ff33fa32f08f4a37a475bd2b340ace00.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:762211yuJs3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398646406087486
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+hmtHB0DYTHFhexwU:SbFuFyLVIg1BG+f+M+yyDYTlheTjosQu
MD5:	C11AB84F9CCD9D314A5BB4CA7B73B059
SHA1:	AA45F7346E39DBAFAFEB08CFBBB068BEECF0D7B4
SHA-256:	C522657766DEDB8A4E553035D22DEAE802073C15AEFFC8A8F81A751E1FE5B775
SHA-512:	45886E2E9D83D7E72ED804BE4A98B86C62BA54F3E37A7EDC2F78A66A6193949CDFAD97667A123BD9D5629AC121AF25B35FD7E30942B09687928A7AD52BB684BB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=48acb4eaabc3473a9c8786b554b80673.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76228C8aob4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.434365715764845
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8gXi5dEq+Tjs1Had9:SbFuFyLVIg1BG+f+M864+TjosQu
MD5:	91BCD73DDE4568A3414043FC2A1E066F
SHA1:	1598F65B3C97494179B8930B98A59A0034197A19
SHA-256:	4741F813E846F535EE78757B1F74C4BA66DC919D68315B27DA80F92815B3ACCA
SHA-512:	F9859132E194953F3FE31F49D52BABE485C315E22AE1EDE915E6740C729184D7B446B8C4C7D44E0714711F5AD4418CE4CEECEE9B302D62BB6F829AA55A94425B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=60e994c6f9274fa188cbe31bb6201d18.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76229uqMMM5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.430806378914102
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7sDbf7Aj022js2ALAXA:SbFuFyLVIg1BAf+M4DjG0jNALyAZD
MD5:	E0F2A34E758D373D1AC598A0B957E3C9
SHA1:	A5A5E6EAF28FD1C9CE6B57134BBCE635D52F7758
SHA-256:	15116067E75655F29918C2875F19778CEE3019B71577D5BD55A457644AC0D5B9
SHA-512:	7DAD48AC9B97BCB979E66D7780D08A871638692DE25AEADE1145AFD2EA3319C657B27D2620E5FF2EBFE3B4CA21AEB6530BE441BECBC4C66CEA96B7849E86AAF9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11e7f62827ba4652b9e709008eeff49e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76322ptQNQ3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.44317674976554
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Mh2RnRdOj8jNdQIeXD:qgFq6g1af+MsRP2D
MD5:	EF959852227DA7EA76829EA7E09A5C2B
SHA1:	78C7796B9CDF6CCBB624F9BDDC0DCDFD0A75189C
SHA-256:	F66048A71A45C07AA28685DB8AF2EB810D4A61E477E6728B7AA1670E09353019
SHA-512:	553DEA920E0A2CB4A0586C3A71855D1C0FD7A1F7259C9340398C1C957CADBFC4088710D61687D385C64132A4BF0940847D56B25F9314C63EE6C8C21C53B88533
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=34cae1f48f4544d88e3117c22b78d431.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76969jlTtkD

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.419263419773107
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6BzJxB2mg2jZcHcljX+:qgFq6g10+f+Mi9xBDRmAu
MD5:	DFBBC501016042F4E20432EA5C4FB12C
SHA1:	3F80AEE9038BD1A296831F14E9A381792C1FCAAD
SHA-256:	BDFAA1A4E36EF6DAB602662B5B122A89055DA27239D53E4758AFFF2358A8ABE6
SHA-512:	52824583F6CF47B47855AA54DC9080ACB7D0723AD918B2F6535A368B32808F353F8C22831A0BF70FF6B5DE37BDE2F383C6911D54B514A320AAA6262405B99129
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=03a21a2284934b00923b9b3d10b39b40.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:769703YCsDF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.429035266258757
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm42cU7El6WDhglsjsc:SbFuFyLVIg1BG+f+M42cU4HC2josQu
MD5:	32AD8B18579C4CE8378F778CBF003EC5
SHA1:	F452C1DE64775608FFA03A7B5529DEF49329AF12
SHA-256:	8E34044F63B5480935787BE123FFEBA457FFBEA3C8CF569D16A0BA3A15816C06
SHA-512:	09556361DA30213D2784BBDA71A73B7B4165FD04175E2A64918830CC5E407B8C38D83373F8F849A6D05F4B5316803ADE291F85E78C28A7291D4F986893DB4D08
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=21e72fe15ec94c4e8a6d605b5fe69f0c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76971xhQKTG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.366138889405356
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpuRSQSPiBsyPvsMxU:SbFuFyLVIg1BG+f+MESquyXsMqjosQu
MD5:	B7E03AF2851CB84A65CA1AE89611E7FF
SHA1:	8975412574C35E9D205ACEFA8DA9ED5F9F6D4C3E
SHA-256:	7A2F98A293DABAA2B9D1C07B23E924014D434EF384E1C78BEA5F29645B47676C
SHA-512:	3661AE17ED0116F85A61EA77F40BCC7296691E974BEF70AC509AC28426378EA12BA03B877227C16C877F901A7D0512983D033FF47F6BD278D3957AAF0466BE53
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cd074755babe4ae385ca4e4bae325213.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76972oeJ34D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.426646810504885
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6spciRELd61jNALyAZD:qgFq6g1af+MLciRELdmIZD
MD5:	F463471E341EEBA9822A902DF395A605
SHA1:	7B7F23D979B5E3E9DDF9D994AC1B2C0690CE6826
SHA-256:	B8E39DB1C0E729F2C0931E3C32B3DA2B0694A05077840C82651FD3CEE08B2D7B
SHA-512:	593F6FC71667EB28B7D1772DAF5D654A3A72306D4C755302174F992A294B4F4E833081E3E430C5510BB3A11FD3BA304411C26822095F21410944946352DCEB3D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=098041bd79794a2da00f1ac24d56994d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77066uuGU1D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.452612283628685
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsJEcEzLYE5xsjs2BbQL:SbFuFyLVIg1BAf+MsUp5qjNdQIeXD
MD5:	2873FF98A02D733A0DD49A67CA400CC1
SHA1:	3AC857E34D938A0ECCB7CAE03986A83C8CDD8FF4
SHA-256:	1DC23961555823EF82308E2D55848222AC290F67E373EBC199A1D0155DFAA911
SHA-512:	266F70730539F9B1C4E7E1185EAFE075C896750A4DBEF51E426C5C429DEDFBD0E81C8D140D436E73F12702E3DD0651E71A3C38FCB3B63763BEA228983D2296BB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f15af1d1c05a4c4ea8a9b63e7c24052a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/seats/.#seat00kEfT7

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat05yTqAa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ClvdYF

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0HMIdYc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0JL5JoT

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0PMZZnT

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0cIUog7

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0k80cvH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0lnToar

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0tdTjjn

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0wwmSrN

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0yQCJal

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:Fvn:Vn
MD5:	DC4851F1947C3C458F495243CC19F445
SHA1:	E2997F6662795C67794846D81F984F1E7D89F17B
SHA-256:	C0703853690D324F8BDA129F0502E7A22854338F3ACF012C334356180D28198E
SHA-512:	45863B7F3AD919397FC98FCE2FA374EF762323F4EDF670062132FF72F2BBC16EB25CC23FFD23B12CC04C5A00875FAB23F54D6257071CABC82C5F19187C99C7F5
Malicious:	false
Preview:	6611.

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	782
Entropy (8bit):	4.9109195606258735
Encrypted:	false
SSDEEP:	12:RFIZPaV5pMdFIZPgKMdFxWBGdFxWNtFLM9FBAvmwFBA2+V7Fc:AZeaEZ4B94G9Av+AvNA2+V6
MD5:	0769DE2C23CFAAF8BFD897975FD4538C
SHA1:	6BB0069A2914BAB7D5297FF83D4D0B64C4E8DF69
SHA-256:	8E944532E37DD9433DF773CFD463BA61AF72739DB6EB8FBC8E7D41E8BD0E0B73
SHA-512:	E53CA05BCEC11651BD0B250BB5995E7C1E378DFC8E8EA7D278915285A52218D7DF863FABB301DEC66658620A494D5064B985427504796A3DF1B332E8480245F9
Malicious:	false
Preview:	Dec 25 10:50:04 galassia systemd-logind[6833]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 25 10:50:04 galassia systemd-logind[6833]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 25 10:50:04 galassia systemd-logind[6833]: User enumeration failed: Invalid argument.Dec 25 10:50:04 galassia systemd-logind[6833]: User of session 2 not known..Dec 25 10:50:04 galassia systemd-logind[6833]: Session enumeration failed: No such file or directory.Dec 25 10:50:04 galassia systemd-logind[6833]: Watching system buttons on /dev/input/event0 (Power Button).Dec 25 10:50:04 galassia systemd-logind[6833]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 25 10:50:04 galassia systemd-logind[6833]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.459526019450492
Encrypted:	false
SSDEEP:	3:F31HlOmB/tlWmBdt:F3fB/tlB
MD5:	757B2B6F3005B9F66C5020F19D3E0D89
SHA1:	FA3EBBF96B23519802959771512CBE398024A7B1
SHA-256:	C8849D60A01E14F8F7CF7750C568672EA2BFFA7E33B747DB7B301EA5293BF03D
SHA-512:	E39591006D3F549F12F8D9F760544B8591A40558E72E2AC46DBAEE4042D7D2464F257E1B57CE961D88FDF0EEDE03CB5FB5DE67F2A30EC84EDB275CF3ABE5A9E8
Malicious:	false
Preview:	LPKSHHRH.................Wh1..Nw....o).M.................................Wh1..Nw....o).M........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.425089925673449
Encrypted:	false
SSDEEP:	3:F31HlWXGFEuQ3l/mXGFEuQ:F3pFEuUJFEu
MD5:	D6D92974075275BE51B8DF159D1119C9
SHA1:	F447D783173860225FD5F1439E8AF762FE659C95
SHA-256:	E8E5D24083DD5E2E54AC41E0CB6D4E179D9ECB6DC47530DA68472DDB5A8EFCDA
SHA-512:	F51A68A9794D75A7C1A05D216A08045FCC6002B48B3F6ED45080ACD1A52C31D213FB6A8F573CFB20A54DEF40E54AE9E8AE1D0D32CD1F48AB189C7092C402D73D
Malicious:	false
Preview:	LPKSHHRH.................Q.."RL^. aK.'.,.................................Q.."RL^. aK.'.,........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	2608
Entropy (8bit):	4.720269686045602
Encrypted:	false
SSDEEP:	48:YY+oYKwYtaY+ZPY+ZwYIZRYpOY/7JY8b3YbRYyX/YO9pYkM4YgIiYYLK9YC9H+9u:ql5e2TjIqLntP
MD5:	E234E113BB64347BA4C10BEF1991DDB1
SHA1:	4D0373C921555121AC0AFDF2E26BC4F94BDB163C
SHA-256:	2308FB3B8D5B57EA47D6B75C3BD60BE48537C4C3D2160914FF337785A41EC9FB
SHA-512:	F1C023F33DEB93FC1C8FC29AB179A0F4067DA91F616006E13280EAD6EB4538B8130DFEFA20E7F605BCD92641CDBED6AA7C6D3E687A47F6FA216FDEDB02ECCA9C
Malicious:	false
Preview:	Dec 25 10:50:00 galassia kernel: [ 265.583294] blocking signal 9: 5487 -> 3132.Dec 25 10:50:00 galassia kernel: [ 266.168184] New task spawned: old: (tgid 6892, tid 6892), new (tgid: 6894, tid: 6894).Dec 25 10:50:00 galassia kernel: [ 266.257539] New task spawned: old: (tgid 6894, tid 6894), new (tgid: 6895, tid: 6895).Dec 25 10:50:00 galassia kernel: [ 266.578299] New task spawned: old: (tgid 6893, tid 6893), new (tgid: 6893, tid: 6896).Dec 25 10:50:00 galassia kernel: [ 266.579744] New task spawned: old: (tgid 6893, tid 6893), new (tgid: 6893, tid: 6897).Dec 25 10:50:00 galassia kernel: [ 266.595722] New task spawned: old: (tgid 6893, tid 6897), new (tgid: 6893, tid: 6898).Dec 25 10:50:00 galassia kernel: [ 266.689727] New task spawned: old: (tgid 6892, tid 6892), new (tgid: 6899, tid: 6899).Dec 25 10:50:00 galassia kernel: [ 266.752832] New task spawned: old: (tgid 6899, tid 6899), new (tgid: 6900, tid: 6900).Dec 25 10:50:01 galassia kernel: [ 267.009114] New task spawned:

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	6702
Entropy (8bit):	5.032528717824783
Encrypted:	false
SSDEEP:	48:YY+oYsWz3sYChYJsYvY9YSyJPuYuQJYFfYV0YY2rYyRAYKwYtaY+ZPY+ZwYcYIZf:qQtyJsQzRd5W27jIqLntL5R0LS86PNo
MD5:	F9CD6F8830120F935FC8AE0739CE7BB3
SHA1:	07C2CECF9457C92EA448A797E1711770BF2561DE
SHA-256:	7BF78DA0F99B7A8990CE964412CC81B210D765D8673A653D2570905A09C591AB
SHA-512:	1671A8770CDE46B05818E8E7041619251FF213F4DDEB8B8400BCC55883B76B489AE4A94BFB81370B77D11E8647F36DCF7BFB09C7B4B8B71E6396EFA7A5154111
Malicious:	false
Preview:	Dec 25 10:50:00 galassia kernel: [ 265.583294] blocking signal 9: 5487 -> 3132.Dec 25 10:50:00 galassia kernel: [ 265.712205] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 25 10:50:00 galassia kernel: [ 265.712291] systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 25 10:50:00 galassia kernel: [ 265.718774] systemd[1]: dbus.service: Main process exited, code=killed, status=9/KILL.Dec 25 10:50:00 galassia kernel: [ 265.718778] systemd[1]: dbus.service: Failed with result 'signal'..Dec 25 10:50:00 galassia kernel: [ 265.720831] systemd[1]: Started D-Bus System Message Bus..Dec 25 10:50:00 galassia kernel: [ 265.921333] systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 31..Dec 25 10:50:00 galassia kernel: [ 265.921439] systemd[1]: gdm.service: Scheduled restart job, restart counter is at 12..Dec 25 10:50:00 galassia kernel: [ 265.921454] systemd[1]: Stopped GNOME Display Manager..Dec 25 10:50:00 galassia kernel

Source: Aqua.x86.elf	Virustotal: Detection: 32%			Perma Link
Source: Aqua.x86.elf	ReversingLabs: Detection: 39%

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.518672991389714
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	Aqua.x86.elf
File size:	62'772 bytes
MD5:	6c810013c99f6d43ad7bfe3fccc6a51c
SHA1:	8b88911c526ab2beba9db5a68b31c98c26fd4e2a
SHA256:	71504c9ebaec8c03e24dd0e3c504c9c37c4c4aef70f5ba7f0a66e127e365e7fa
SHA512:	a86e5f10a4c4dc5485f72480dd9d3786a7eb003d1428d918f81db64c1e7050ac4108b431a0bb7685d3a444faf95ef9d420d4d7a12decab360c787f50413a4840
SSDEEP:	1536:MOf6FP7mQT9+CgAf92NJcJjbRUbPqadvPcifVd7c/4CSQP:ff6BaQT9+EMc1b2TqIPfn7q
TLSH:	5B535AC1A643D8F6F82A01719137E7365A73E439113DDA87C7B9E836ED52900EB163AC
File Content Preview:	.ELF....................d...4...........4. ...(..............................................p...p..d....(..........Q.td............................U..S.......w....h....s...[]...$.............U......=.s...t..5....$p.....$p......u........t....h.n..........

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	62372
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xd396	0x0	0x6	AX	16
.fini	PROGBITS	0x8055446	0xd446	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8055460	0xd460	0x1a45	0x0	0x2	A	32
.ctors	PROGBITS	0x8057000	0xf000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8057008	0xf008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8057020	0xf020	0x344	0x0	0x3	WA	32
.bss	NOBITS	0x8057380	0xf364	0x2560	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0xf364	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xeea5	0xeea5	6.5703	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0xf000	0x8057000	0x8057000	0x364	0x28e0	4.2703	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 25, 2024 17:47:48.749557018 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable
Dec 25, 2024 17:49:08.761025906 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 25, 2024 17:47:39.078560114 CET	192.168.2.13	8.8.8.8	0xeb9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.220956087 CET	192.168.2.13	8.8.8.8	0xeb9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.487699986 CET	192.168.2.13	8.8.8.8	0xeb9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.626840115 CET	192.168.2.13	8.8.8.8	0xeb9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.761295080 CET	192.168.2.13	8.8.8.8	0xeb9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.900901079 CET	192.168.2.13	8.8.8.8	0xf707	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.042862892 CET	192.168.2.13	8.8.8.8	0xf707	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.177517891 CET	192.168.2.13	8.8.8.8	0xf707	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.311402082 CET	192.168.2.13	8.8.8.8	0xf707	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.445275068 CET	192.168.2.13	8.8.8.8	0xf707	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.232867002 CET	192.168.2.13	8.8.8.8	0xb4b9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.366806030 CET	192.168.2.13	8.8.8.8	0xb4b9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.500900984 CET	192.168.2.13	8.8.8.8	0xb4b9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.635026932 CET	192.168.2.13	8.8.8.8	0xb4b9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.768857956 CET	192.168.2.13	8.8.8.8	0xb4b9	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:53.531718969 CET	192.168.2.13	8.8.8.8	0x2a85	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:53.666538000 CET	192.168.2.13	8.8.8.8	0x2a85	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:53.802191019 CET	192.168.2.13	8.8.8.8	0x2a85	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:53.944178104 CET	192.168.2.13	8.8.8.8	0x2a85	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:54.078752995 CET	192.168.2.13	8.8.8.8	0x2a85	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:55.847917080 CET	192.168.2.13	8.8.8.8	0x24b8	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:55.982214928 CET	192.168.2.13	8.8.8.8	0x24b8	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:56.116681099 CET	192.168.2.13	8.8.8.8	0x24b8	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:56.251079082 CET	192.168.2.13	8.8.8.8	0x24b8	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:56.389988899 CET	192.168.2.13	8.8.8.8	0x24b8	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.158971071 CET	192.168.2.13	8.8.8.8	0x2fe1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.293184042 CET	192.168.2.13	8.8.8.8	0x2fe1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.437764883 CET	192.168.2.13	8.8.8.8	0x2fe1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.571763039 CET	192.168.2.13	8.8.8.8	0x2fe1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.707010031 CET	192.168.2.13	8.8.8.8	0x2fe1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:12.474492073 CET	192.168.2.13	8.8.8.8	0x9f0f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:12.609251022 CET	192.168.2.13	8.8.8.8	0x9f0f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:12.743864059 CET	192.168.2.13	8.8.8.8	0x9f0f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:12.883207083 CET	192.168.2.13	8.8.8.8	0x9f0f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:13.017214060 CET	192.168.2.13	8.8.8.8	0x9f0f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:20.776926994 CET	192.168.2.13	8.8.8.8	0xd4f4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:20.913213015 CET	192.168.2.13	8.8.8.8	0xd4f4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:21.047113895 CET	192.168.2.13	8.8.8.8	0xd4f4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:21.180984020 CET	192.168.2.13	8.8.8.8	0xd4f4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:21.320955038 CET	192.168.2.13	8.8.8.8	0xd4f4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.077039003 CET	192.168.2.13	8.8.8.8	0x7076	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.211308002 CET	192.168.2.13	8.8.8.8	0x7076	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.345921993 CET	192.168.2.13	8.8.8.8	0x7076	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.480350971 CET	192.168.2.13	8.8.8.8	0x7076	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.616817951 CET	192.168.2.13	8.8.8.8	0x7076	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.398646116 CET	192.168.2.13	8.8.8.8	0x1b8e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.538244963 CET	192.168.2.13	8.8.8.8	0x1b8e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.673686981 CET	192.168.2.13	8.8.8.8	0x1b8e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.817629099 CET	192.168.2.13	8.8.8.8	0x1b8e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.960012913 CET	192.168.2.13	8.8.8.8	0x1b8e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:35.726191044 CET	192.168.2.13	8.8.8.8	0x5f1e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:35.868807077 CET	192.168.2.13	8.8.8.8	0x5f1e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:36.008184910 CET	192.168.2.13	8.8.8.8	0x5f1e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:36.147412062 CET	192.168.2.13	8.8.8.8	0x5f1e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:36.281574965 CET	192.168.2.13	8.8.8.8	0x5f1e	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.043515921 CET	192.168.2.13	8.8.8.8	0x74d4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.182928085 CET	192.168.2.13	8.8.8.8	0x74d4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.317867041 CET	192.168.2.13	8.8.8.8	0x74d4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.466631889 CET	192.168.2.13	8.8.8.8	0x74d4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.601082087 CET	192.168.2.13	8.8.8.8	0x74d4	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.370565891 CET	192.168.2.13	8.8.8.8	0x6f3f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.504842997 CET	192.168.2.13	8.8.8.8	0x6f3f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.639744043 CET	192.168.2.13	8.8.8.8	0x6f3f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.773972988 CET	192.168.2.13	8.8.8.8	0x6f3f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.913523912 CET	192.168.2.13	8.8.8.8	0x6f3f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:57.667968035 CET	192.168.2.13	8.8.8.8	0xbdb1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:57.801749945 CET	192.168.2.13	8.8.8.8	0xbdb1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:57.936158895 CET	192.168.2.13	8.8.8.8	0xbdb1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:58.070395947 CET	192.168.2.13	8.8.8.8	0xbdb1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:58.205343008 CET	192.168.2.13	8.8.8.8	0xbdb1	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.005963087 CET	192.168.2.13	8.8.8.8	0xbf3d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.139853001 CET	192.168.2.13	8.8.8.8	0xbf3d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.274502993 CET	192.168.2.13	8.8.8.8	0xbf3d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.409454107 CET	192.168.2.13	8.8.8.8	0xbf3d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.543472052 CET	192.168.2.13	8.8.8.8	0xbf3d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.313749075 CET	192.168.2.13	8.8.8.8	0x6394	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.447884083 CET	192.168.2.13	8.8.8.8	0x6394	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.582326889 CET	192.168.2.13	8.8.8.8	0x6394	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.717237949 CET	192.168.2.13	8.8.8.8	0x6394	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.851339102 CET	192.168.2.13	8.8.8.8	0x6394	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:22.635041952 CET	192.168.2.13	8.8.8.8	0x10e3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:22.769081116 CET	192.168.2.13	8.8.8.8	0x10e3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:22.903283119 CET	192.168.2.13	8.8.8.8	0x10e3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:23.037540913 CET	192.168.2.13	8.8.8.8	0x10e3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:23.171770096 CET	192.168.2.13	8.8.8.8	0x10e3	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:24.957621098 CET	192.168.2.13	8.8.8.8	0x9962	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.094671011 CET	192.168.2.13	8.8.8.8	0x9962	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.228508949 CET	192.168.2.13	8.8.8.8	0x9962	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.363281012 CET	192.168.2.13	8.8.8.8	0x9962	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.499461889 CET	192.168.2.13	8.8.8.8	0x9962	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.255958080 CET	192.168.2.13	8.8.8.8	0x1a00	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.390482903 CET	192.168.2.13	8.8.8.8	0x1a00	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.524327040 CET	192.168.2.13	8.8.8.8	0x1a00	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.658265114 CET	192.168.2.13	8.8.8.8	0x1a00	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.793042898 CET	192.168.2.13	8.8.8.8	0x1a00	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:34.556022882 CET	192.168.2.13	8.8.8.8	0x498b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:34.695157051 CET	192.168.2.13	8.8.8.8	0x498b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:34.829473972 CET	192.168.2.13	8.8.8.8	0x498b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:34.964127064 CET	192.168.2.13	8.8.8.8	0x498b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:35.099165916 CET	192.168.2.13	8.8.8.8	0x498b	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:43.855083942 CET	192.168.2.13	8.8.8.8	0xd58c	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:43.989037991 CET	192.168.2.13	8.8.8.8	0xd58c	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:44.126776934 CET	192.168.2.13	8.8.8.8	0xd58c	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:44.261112928 CET	192.168.2.13	8.8.8.8	0xd58c	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:44.395230055 CET	192.168.2.13	8.8.8.8	0xd58c	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.159496069 CET	192.168.2.13	8.8.8.8	0x8a08	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.294466019 CET	192.168.2.13	8.8.8.8	0x8a08	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.433883905 CET	192.168.2.13	8.8.8.8	0x8a08	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.567620993 CET	192.168.2.13	8.8.8.8	0x8a08	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.701735973 CET	192.168.2.13	8.8.8.8	0x8a08	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:02.469527960 CET	192.168.2.13	8.8.8.8	0xef2f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:02.604028940 CET	192.168.2.13	8.8.8.8	0xef2f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:02.743441105 CET	192.168.2.13	8.8.8.8	0xef2f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:02.877048016 CET	192.168.2.13	8.8.8.8	0xef2f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:03.011600018 CET	192.168.2.13	8.8.8.8	0xef2f	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:06.768780947 CET	192.168.2.13	8.8.8.8	0xa76d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:06.903253078 CET	192.168.2.13	8.8.8.8	0xa76d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:07.037708998 CET	192.168.2.13	8.8.8.8	0xa76d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:07.171643972 CET	192.168.2.13	8.8.8.8	0xa76d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:07.305783033 CET	192.168.2.13	8.8.8.8	0xa76d	Standard query (0)	45.148.10.84	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 25, 2024 17:47:39.220860958 CET	8.8.8.8	192.168.2.13	0xeb9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.487587929 CET	8.8.8.8	192.168.2.13	0xeb9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.626743078 CET	8.8.8.8	192.168.2.13	0xeb9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.761189938 CET	8.8.8.8	192.168.2.13	0xeb9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:39.900777102 CET	8.8.8.8	192.168.2.13	0xeb9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.042764902 CET	8.8.8.8	192.168.2.13	0xf707	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.177354097 CET	8.8.8.8	192.168.2.13	0xf707	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.311294079 CET	8.8.8.8	192.168.2.13	0xf707	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.445146084 CET	8.8.8.8	192.168.2.13	0xf707	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:40.579535007 CET	8.8.8.8	192.168.2.13	0xf707	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.366723061 CET	8.8.8.8	192.168.2.13	0xb4b9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.500799894 CET	8.8.8.8	192.168.2.13	0xb4b9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.634906054 CET	8.8.8.8	192.168.2.13	0xb4b9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.768748045 CET	8.8.8.8	192.168.2.13	0xb4b9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:44.904011965 CET	8.8.8.8	192.168.2.13	0xb4b9	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:53.666392088 CET	8.8.8.8	192.168.2.13	0x2a85	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:53.802072048 CET	8.8.8.8	192.168.2.13	0x2a85	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:53.944022894 CET	8.8.8.8	192.168.2.13	0x2a85	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:54.078639984 CET	8.8.8.8	192.168.2.13	0x2a85	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:54.213329077 CET	8.8.8.8	192.168.2.13	0x2a85	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:55.982088089 CET	8.8.8.8	192.168.2.13	0x24b8	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:56.116549015 CET	8.8.8.8	192.168.2.13	0x24b8	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:56.250926018 CET	8.8.8.8	192.168.2.13	0x24b8	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:56.389867067 CET	8.8.8.8	192.168.2.13	0x24b8	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:47:56.525772095 CET	8.8.8.8	192.168.2.13	0x24b8	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.292977095 CET	8.8.8.8	192.168.2.13	0x2fe1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.437438011 CET	8.8.8.8	192.168.2.13	0x2fe1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.571396112 CET	8.8.8.8	192.168.2.13	0x2fe1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.706799030 CET	8.8.8.8	192.168.2.13	0x2fe1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:07.840778112 CET	8.8.8.8	192.168.2.13	0x2fe1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:12.609046936 CET	8.8.8.8	192.168.2.13	0x9f0f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:12.743674040 CET	8.8.8.8	192.168.2.13	0x9f0f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:12.883069038 CET	8.8.8.8	192.168.2.13	0x9f0f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:13.017103910 CET	8.8.8.8	192.168.2.13	0x9f0f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:13.153351068 CET	8.8.8.8	192.168.2.13	0x9f0f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:20.912975073 CET	8.8.8.8	192.168.2.13	0xd4f4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:21.047002077 CET	8.8.8.8	192.168.2.13	0xd4f4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:21.180834055 CET	8.8.8.8	192.168.2.13	0xd4f4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:21.320837021 CET	8.8.8.8	192.168.2.13	0xd4f4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:21.455231905 CET	8.8.8.8	192.168.2.13	0xd4f4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.211211920 CET	8.8.8.8	192.168.2.13	0x7076	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.345813990 CET	8.8.8.8	192.168.2.13	0x7076	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.480246067 CET	8.8.8.8	192.168.2.13	0x7076	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.616708994 CET	8.8.8.8	192.168.2.13	0x7076	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:23.758665085 CET	8.8.8.8	192.168.2.13	0x7076	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.537888050 CET	8.8.8.8	192.168.2.13	0x1b8e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.673496962 CET	8.8.8.8	192.168.2.13	0x1b8e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.817308903 CET	8.8.8.8	192.168.2.13	0x1b8e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:31.959846973 CET	8.8.8.8	192.168.2.13	0x1b8e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:32.094120979 CET	8.8.8.8	192.168.2.13	0x1b8e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:35.868607044 CET	8.8.8.8	192.168.2.13	0x5f1e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:36.007932901 CET	8.8.8.8	192.168.2.13	0x5f1e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:36.147157907 CET	8.8.8.8	192.168.2.13	0x5f1e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:36.281354904 CET	8.8.8.8	192.168.2.13	0x5f1e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:36.420568943 CET	8.8.8.8	192.168.2.13	0x5f1e	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.182667017 CET	8.8.8.8	192.168.2.13	0x74d4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.317595005 CET	8.8.8.8	192.168.2.13	0x74d4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.466442108 CET	8.8.8.8	192.168.2.13	0x74d4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.600959063 CET	8.8.8.8	192.168.2.13	0x74d4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:44.734785080 CET	8.8.8.8	192.168.2.13	0x74d4	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.504535913 CET	8.8.8.8	192.168.2.13	0x6f3f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.639581919 CET	8.8.8.8	192.168.2.13	0x6f3f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.773835897 CET	8.8.8.8	192.168.2.13	0x6f3f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:47.913400888 CET	8.8.8.8	192.168.2.13	0x6f3f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:48.047924995 CET	8.8.8.8	192.168.2.13	0x6f3f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:57.801623106 CET	8.8.8.8	192.168.2.13	0xbdb1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:57.936048985 CET	8.8.8.8	192.168.2.13	0xbdb1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:58.070281982 CET	8.8.8.8	192.168.2.13	0xbdb1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:58.205192089 CET	8.8.8.8	192.168.2.13	0xbdb1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:48:58.368057013 CET	8.8.8.8	192.168.2.13	0xbdb1	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.139736891 CET	8.8.8.8	192.168.2.13	0xbf3d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.274370909 CET	8.8.8.8	192.168.2.13	0xbf3d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.409240961 CET	8.8.8.8	192.168.2.13	0xbf3d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.543235064 CET	8.8.8.8	192.168.2.13	0xbf3d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:07.682463884 CET	8.8.8.8	192.168.2.13	0xbf3d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.447777987 CET	8.8.8.8	192.168.2.13	0x6394	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.582178116 CET	8.8.8.8	192.168.2.13	0x6394	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.717120886 CET	8.8.8.8	192.168.2.13	0x6394	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.851219893 CET	8.8.8.8	192.168.2.13	0x6394	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:18.985110044 CET	8.8.8.8	192.168.2.13	0x6394	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:22.768965960 CET	8.8.8.8	192.168.2.13	0x10e3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:22.903157949 CET	8.8.8.8	192.168.2.13	0x10e3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:23.037228107 CET	8.8.8.8	192.168.2.13	0x10e3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:23.171627045 CET	8.8.8.8	192.168.2.13	0x10e3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:23.311022997 CET	8.8.8.8	192.168.2.13	0x10e3	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.094537973 CET	8.8.8.8	192.168.2.13	0x9962	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.228368998 CET	8.8.8.8	192.168.2.13	0x9962	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.363131046 CET	8.8.8.8	192.168.2.13	0x9962	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.497639894 CET	8.8.8.8	192.168.2.13	0x9962	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:25.633958101 CET	8.8.8.8	192.168.2.13	0x9962	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.390383959 CET	8.8.8.8	192.168.2.13	0x1a00	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.524199963 CET	8.8.8.8	192.168.2.13	0x1a00	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.658178091 CET	8.8.8.8	192.168.2.13	0x1a00	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.792944908 CET	8.8.8.8	192.168.2.13	0x1a00	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:29.932200909 CET	8.8.8.8	192.168.2.13	0x1a00	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:34.694912910 CET	8.8.8.8	192.168.2.13	0x498b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:34.829339981 CET	8.8.8.8	192.168.2.13	0x498b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:34.963893890 CET	8.8.8.8	192.168.2.13	0x498b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:35.099088907 CET	8.8.8.8	192.168.2.13	0x498b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:35.233498096 CET	8.8.8.8	192.168.2.13	0x498b	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:43.988894939 CET	8.8.8.8	192.168.2.13	0xd58c	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:44.126626015 CET	8.8.8.8	192.168.2.13	0xd58c	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:44.260840893 CET	8.8.8.8	192.168.2.13	0xd58c	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:44.394956112 CET	8.8.8.8	192.168.2.13	0xd58c	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:44.529035091 CET	8.8.8.8	192.168.2.13	0xd58c	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.294356108 CET	8.8.8.8	192.168.2.13	0x8a08	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.433790922 CET	8.8.8.8	192.168.2.13	0x8a08	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.567508936 CET	8.8.8.8	192.168.2.13	0x8a08	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.701631069 CET	8.8.8.8	192.168.2.13	0x8a08	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:49:51.836082935 CET	8.8.8.8	192.168.2.13	0x8a08	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:02.603926897 CET	8.8.8.8	192.168.2.13	0xef2f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:02.743339062 CET	8.8.8.8	192.168.2.13	0xef2f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:02.876934052 CET	8.8.8.8	192.168.2.13	0xef2f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:03.011504889 CET	8.8.8.8	192.168.2.13	0xef2f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:03.145828009 CET	8.8.8.8	192.168.2.13	0xef2f	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:06.903155088 CET	8.8.8.8	192.168.2.13	0xa76d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:07.037563086 CET	8.8.8.8	192.168.2.13	0xa76d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:07.171479940 CET	8.8.8.8	192.168.2.13	0xa76d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:07.305699110 CET	8.8.8.8	192.168.2.13	0xa76d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false
Dec 25, 2024 17:50:07.439539909 CET	8.8.8.8	192.168.2.13	0xa76d	Name error (3)	45.148.10.84	none	none	A (IP address)	IN (0x0001)	false

Start time (UTC):	16:47:38
Start date (UTC):	25/12/2024
Path:	/tmp/Aqua.x86.elf
Arguments:	/tmp/Aqua.x86.elf
File size:	62772 bytes
MD5 hash:	6c810013c99f6d43ad7bfe3fccc6a51c

Start time (UTC):	16:47:39
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:40
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:41
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:42
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:43
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:44
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:47:45
Start date (UTC):	25/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	16:47:46
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:53
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:54
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:55
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.x86.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/journal/streams/.#9:6517703V9fX

/run/systemd/journal/streams/.#9:65255NrP6YU

/run/systemd/journal/streams/.#9:65256TCNJNW

/run/systemd/journal/streams/.#9:65263zqQdjV

/run/systemd/journal/streams/.#9:65264X14TCT

/run/systemd/journal/streams/.#9:65265b6txsU

/run/systemd/journal/streams/.#9:66497NOPHVv

/run/systemd/journal/streams/.#9:66498DSJ0sv

/run/systemd/journal/streams/.#9:66499NJsWgw

/run/systemd/journal/streams/.#9:665001fErJw

/run/systemd/journal/streams/.#9:676205Itgku

/run/systemd/journal/streams/.#9:67628vKK5Et

/run/systemd/journal/streams/.#9:67824PnWpzt

/run/systemd/journal/streams/.#9:67825XqyIYp

/run/systemd/journal/streams/.#9:67826j9rF0q

/run/systemd/journal/streams/.#9:67833C25nyp

/run/systemd/journal/streams/.#9:67854R1iYLt

/run/systemd/journal/streams/.#9:69127kZZW7O

/run/systemd/journal/streams/.#9:691281hkk6Q

/run/systemd/journal/streams/.#9:69129YHMuNR

/run/systemd/journal/streams/.#9:69130RZanwP

/run/systemd/journal/streams/.#9:69228IMfa4Q

/run/systemd/journal/streams/.#9:69341fgDMJP

/run/systemd/journal/streams/.#9:69878z5RbNV

/run/systemd/journal/streams/.#9:69880UPXKsX

/run/systemd/journal/streams/.#9:698872wSbuW

/run/systemd/journal/streams/.#9:69888FaHcqW

/run/systemd/journal/streams/.#9:69982VE4bXX

/run/systemd/journal/streams/.#9:71160XpOnez

/run/systemd/journal/streams/.#9:71161t1ozoy

Linux Analysis Report
Aqua.x86.elf

Start time (UTC):	16:47:56
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:47:57
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:47:58
Start date (UTC):	25/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	16:47:59
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:48:00
Start date (UTC):	25/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	16:48:01
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:48:04
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:48:11
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:48:13
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	16:48:14
Start date (UTC):	25/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75