Edit tour

Linux Analysis Report
Aqua.i686.elf

Overview

General Information

Sample name:	Aqua.i686.elf
Analysis ID:	1581795
MD5:	ad5378954ed90c2718e9146d27c9e5a0
SHA1:	844d5ff08a90ee3c2562c5d59d2196f48c5ce1c5
SHA256:	4cd90a778beaa5bb1c5bc137a35c3f5300552eae9f093a26a637ff710541c084
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Sends malformed DNS queries

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581795
Start date and time:	2024-12-29 00:27:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.i686.elf
Detection:	MAL
Classification:	mal76.spre.troj.evad.linELF@0/211@181/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
VT rate limit hit for: Aqua.i686.elf

Runtime Messages

Command:	/tmp/Aqua.i686.elf
PID:	5483
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.i686.elf (PID: 5483, Parent: 5409, MD5: ad5378954ed90c2718e9146d27c9e5a0) Arguments: /tmp/Aqua.i686.elf

Aqua.i686.elf New Fork (PID: 5484, Parent: 5483)

Aqua.i686.elf New Fork (PID: 5485, Parent: 5484)

gnome-session-binary New Fork (PID: 5486, Parent: 1383)

sh (PID: 5486, Parent: 1383, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5486, Parent: 1383, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5491, Parent: 1)

systemd-hostnamed (PID: 5491, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 5639, Parent: 1289)

Default (PID: 5639, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5643, Parent: 1289)

Default (PID: 5643, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5646, Parent: 1)

dbus-daemon (PID: 5646, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5657, Parent: 2955)

pulseaudio (PID: 5657, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5658, Parent: 1)

rsyslogd (PID: 5658, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 5662, Parent: 3147)

fusermount (PID: 5662, Parent: 3147, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5668, Parent: 1)

rtkit-daemon (PID: 5668, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5673, Parent: 1)

systemd-logind (PID: 5673, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5732, Parent: 1)

polkitd (PID: 5732, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5736, Parent: 1)

dbus-daemon (PID: 5736, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5737, Parent: 1289)

Default (PID: 5737, Parent: 1289, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5738, Parent: 1)

rsyslogd (PID: 5738, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5742, Parent: 1)

gpu-manager (PID: 5742, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5743, Parent: 5742)

sh (PID: 5743, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5744, Parent: 5743)

grep (PID: 5744, Parent: 5743, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5745, Parent: 5742)

sh (PID: 5745, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5746, Parent: 5745)

grep (PID: 5746, Parent: 5745, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5747, Parent: 5742)

sh (PID: 5747, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5748, Parent: 5747)

grep (PID: 5748, Parent: 5747, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5749, Parent: 5742)

sh (PID: 5749, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5750, Parent: 5749)

grep (PID: 5750, Parent: 5749, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5753, Parent: 5742)

sh (PID: 5753, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5754, Parent: 5753)

grep (PID: 5754, Parent: 5753, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5755, Parent: 5742)

sh (PID: 5755, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5756, Parent: 5755)

grep (PID: 5756, Parent: 5755, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5757, Parent: 5742)

sh (PID: 5757, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5758, Parent: 5757)

grep (PID: 5758, Parent: 5757, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5759, Parent: 5742)

sh (PID: 5759, Parent: 5742, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5760, Parent: 5759)

grep (PID: 5760, Parent: 5759, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5761, Parent: 1)

generate-config (PID: 5761, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5762, Parent: 5761)

pkill (PID: 5762, Parent: 5761, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5763, Parent: 1)

gdm-wait-for-drm (PID: 5763, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5786, Parent: 1)

rsyslogd (PID: 5786, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5790, Parent: 1)

journalctl (PID: 5790, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5791, Parent: 1)

systemd-journald (PID: 5791, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5796, Parent: 1)

systemd-logind (PID: 5796, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5853, Parent: 1)

systemd-journald (PID: 5853, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5854, Parent: 1)

rsyslogd (PID: 5854, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5857, Parent: 1)

systemd-logind (PID: 5857, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5917, Parent: 1)

gpu-manager (PID: 5917, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5919, Parent: 5917)

sh (PID: 5919, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5920, Parent: 5919)

grep (PID: 5920, Parent: 5919, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5921, Parent: 5917)

sh (PID: 5921, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5922, Parent: 5921)

grep (PID: 5922, Parent: 5921, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5923, Parent: 5917)

sh (PID: 5923, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5924, Parent: 5923)

grep (PID: 5924, Parent: 5923, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5925, Parent: 5917)

sh (PID: 5925, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5926, Parent: 5925)

grep (PID: 5926, Parent: 5925, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5927, Parent: 5917)

sh (PID: 5927, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5928, Parent: 5927)

grep (PID: 5928, Parent: 5927, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5929, Parent: 5917)

sh (PID: 5929, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5930, Parent: 5929)

grep (PID: 5930, Parent: 5929, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5933, Parent: 5917)

sh (PID: 5933, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5934, Parent: 5933)

grep (PID: 5934, Parent: 5933, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5935, Parent: 5917)

sh (PID: 5935, Parent: 5917, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5936, Parent: 5935)

grep (PID: 5936, Parent: 5935, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5918, Parent: 1)

dbus-daemon (PID: 5918, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5937, Parent: 1)

generate-config (PID: 5937, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5939, Parent: 5937)

pkill (PID: 5939, Parent: 5937, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5938, Parent: 1)

rsyslogd (PID: 5938, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5943, Parent: 1)

gdm-wait-for-drm (PID: 5943, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5948, Parent: 1)

rsyslogd (PID: 5948, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5949, Parent: 1)

systemd-journald (PID: 5949, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5952, Parent: 1)

systemd-logind (PID: 5952, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6009, Parent: 1)

rsyslogd (PID: 6009, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6010, Parent: 1)

dbus-daemon (PID: 6010, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6014, Parent: 1)

gpu-manager (PID: 6014, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6017, Parent: 6014)

sh (PID: 6017, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6018, Parent: 6017)

grep (PID: 6018, Parent: 6017, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6019, Parent: 6014)

sh (PID: 6019, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6020, Parent: 6019)

grep (PID: 6020, Parent: 6019, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6024, Parent: 6014)

sh (PID: 6024, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6025, Parent: 6024)

grep (PID: 6025, Parent: 6024, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6028, Parent: 6014)

sh (PID: 6028, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6029, Parent: 6028)

grep (PID: 6029, Parent: 6028, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6030, Parent: 6014)

sh (PID: 6030, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6031, Parent: 6030)

grep (PID: 6031, Parent: 6030, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6032, Parent: 6014)

sh (PID: 6032, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6033, Parent: 6032)

grep (PID: 6033, Parent: 6032, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6034, Parent: 6014)

sh (PID: 6034, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6035, Parent: 6034)

grep (PID: 6035, Parent: 6034, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6036, Parent: 6014)

sh (PID: 6036, Parent: 6014, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6037, Parent: 6036)

grep (PID: 6037, Parent: 6036, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6015, Parent: 1)

rsyslogd (PID: 6015, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6016, Parent: 1)

dbus-daemon (PID: 6016, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6038, Parent: 1)

generate-config (PID: 6038, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6039, Parent: 6038)

pkill (PID: 6039, Parent: 6038, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6040, Parent: 1)

gdm-wait-for-drm (PID: 6040, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6043, Parent: 1)

rsyslogd (PID: 6043, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6044, Parent: 1)

dbus-daemon (PID: 6044, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6048, Parent: 1)

systemd-journald (PID: 6048, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6051, Parent: 1)

systemd-logind (PID: 6051, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6108, Parent: 1)

dbus-daemon (PID: 6108, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6109, Parent: 1)

rsyslogd (PID: 6109, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6115, Parent: 1)

gpu-manager (PID: 6115, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6117, Parent: 6115)

sh (PID: 6117, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6118, Parent: 6117)

grep (PID: 6118, Parent: 6117, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6120, Parent: 6115)

sh (PID: 6120, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6121, Parent: 6120)

grep (PID: 6121, Parent: 6120, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6122, Parent: 6115)

sh (PID: 6122, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6123, Parent: 6122)

grep (PID: 6123, Parent: 6122, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6127, Parent: 6115)

sh (PID: 6127, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6128, Parent: 6127)

grep (PID: 6128, Parent: 6127, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6129, Parent: 6115)

sh (PID: 6129, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6130, Parent: 6129)

grep (PID: 6130, Parent: 6129, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6131, Parent: 6115)

sh (PID: 6131, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6132, Parent: 6131)

grep (PID: 6132, Parent: 6131, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6133, Parent: 6115)

sh (PID: 6133, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6134, Parent: 6133)

grep (PID: 6134, Parent: 6133, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6135, Parent: 6115)

sh (PID: 6135, Parent: 6115, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6136, Parent: 6135)

grep (PID: 6136, Parent: 6135, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6116, Parent: 1)

dbus-daemon (PID: 6116, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6119, Parent: 1)

rsyslogd (PID: 6119, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6137, Parent: 1)

generate-config (PID: 6137, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6138, Parent: 6137)

pkill (PID: 6138, Parent: 6137, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6141, Parent: 1)

gdm-wait-for-drm (PID: 6141, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6142, Parent: 1)

rsyslogd (PID: 6142, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6145, Parent: 1)

systemd-journald (PID: 6145, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6148, Parent: 1)

systemd-logind (PID: 6148, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6205, Parent: 1)

rsyslogd (PID: 6205, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6206, Parent: 1)

dbus-daemon (PID: 6206, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6210, Parent: 1)

gpu-manager (PID: 6210, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6213, Parent: 6210)

sh (PID: 6213, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6214, Parent: 6213)

grep (PID: 6214, Parent: 6213, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6215, Parent: 6210)

sh (PID: 6215, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6219, Parent: 6215)

grep (PID: 6219, Parent: 6215, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6220, Parent: 6210)

sh (PID: 6220, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6221, Parent: 6220)

grep (PID: 6221, Parent: 6220, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6222, Parent: 6210)

sh (PID: 6222, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6223, Parent: 6222)

grep (PID: 6223, Parent: 6222, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6224, Parent: 6210)

sh (PID: 6224, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6225, Parent: 6224)

grep (PID: 6225, Parent: 6224, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6226, Parent: 6210)

sh (PID: 6226, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6227, Parent: 6226)

grep (PID: 6227, Parent: 6226, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6228, Parent: 6210)

sh (PID: 6228, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6229, Parent: 6228)

grep (PID: 6229, Parent: 6228, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6230, Parent: 6210)

sh (PID: 6230, Parent: 6210, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6231, Parent: 6230)

grep (PID: 6231, Parent: 6230, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6211, Parent: 1)

dbus-daemon (PID: 6211, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6212, Parent: 1)

rsyslogd (PID: 6212, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6234, Parent: 1)

generate-config (PID: 6234, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6235, Parent: 6234)

pkill (PID: 6235, Parent: 6234, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6236, Parent: 1)

gdm-wait-for-drm (PID: 6236, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6239, Parent: 1)

rsyslogd (PID: 6239, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6240, Parent: 1)

systemd-journald (PID: 6240, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6243, Parent: 1)

systemd-logind (PID: 6243, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6300, Parent: 1)

rsyslogd (PID: 6300, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6301, Parent: 1)

dbus-daemon (PID: 6301, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6305, Parent: 1)

gpu-manager (PID: 6305, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6308, Parent: 6305)

sh (PID: 6308, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6309, Parent: 6308)

grep (PID: 6309, Parent: 6308, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6310, Parent: 6305)

sh (PID: 6310, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6314, Parent: 6310)

grep (PID: 6314, Parent: 6310, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6315, Parent: 6305)

sh (PID: 6315, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6316, Parent: 6315)

grep (PID: 6316, Parent: 6315, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6319, Parent: 6305)

sh (PID: 6319, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6320, Parent: 6319)

grep (PID: 6320, Parent: 6319, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6321, Parent: 6305)

sh (PID: 6321, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6322, Parent: 6321)

grep (PID: 6322, Parent: 6321, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6323, Parent: 6305)

sh (PID: 6323, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6324, Parent: 6323)

grep (PID: 6324, Parent: 6323, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6325, Parent: 6305)

sh (PID: 6325, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6326, Parent: 6325)

grep (PID: 6326, Parent: 6325, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6327, Parent: 6305)

sh (PID: 6327, Parent: 6305, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6328, Parent: 6327)

grep (PID: 6328, Parent: 6327, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6306, Parent: 1)

rsyslogd (PID: 6306, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6307, Parent: 1)

dbus-daemon (PID: 6307, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6329, Parent: 1)

generate-config (PID: 6329, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6330, Parent: 6329)

pkill (PID: 6330, Parent: 6329, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6331, Parent: 1)

gdm-wait-for-drm (PID: 6331, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6334, Parent: 1)

rsyslogd (PID: 6334, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6335, Parent: 1)

dbus-daemon (PID: 6335, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6336, Parent: 1)

systemd-journald (PID: 6336, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6339, Parent: 1)

systemd-logind (PID: 6339, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6396, Parent: 1)

dbus-daemon (PID: 6396, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6397, Parent: 1)

rsyslogd (PID: 6397, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6403, Parent: 1)

dbus-daemon (PID: 6403, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6404, Parent: 1)

gpu-manager (PID: 6404, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6405, Parent: 6404)

sh (PID: 6405, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6406, Parent: 6405)

grep (PID: 6406, Parent: 6405, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6408, Parent: 6404)

sh (PID: 6408, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6409, Parent: 6408)

grep (PID: 6409, Parent: 6408, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6413, Parent: 6404)

sh (PID: 6413, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6414, Parent: 6413)

grep (PID: 6414, Parent: 6413, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6415, Parent: 6404)

sh (PID: 6415, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6416, Parent: 6415)

grep (PID: 6416, Parent: 6415, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6417, Parent: 6404)

sh (PID: 6417, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6418, Parent: 6417)

grep (PID: 6418, Parent: 6417, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6419, Parent: 6404)

sh (PID: 6419, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6420, Parent: 6419)

grep (PID: 6420, Parent: 6419, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6421, Parent: 6404)

sh (PID: 6421, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6422, Parent: 6421)

grep (PID: 6422, Parent: 6421, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6423, Parent: 6404)

sh (PID: 6423, Parent: 6404, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6424, Parent: 6423)

grep (PID: 6424, Parent: 6423, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6407, Parent: 1)

rsyslogd (PID: 6407, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6425, Parent: 1)

generate-config (PID: 6425, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6426, Parent: 6425)

pkill (PID: 6426, Parent: 6425, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6429, Parent: 1)

gdm-wait-for-drm (PID: 6429, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6430, Parent: 1)

rsyslogd (PID: 6430, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6436, Parent: 1)

systemd-journald (PID: 6436, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6439, Parent: 1)

systemd-logind (PID: 6439, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6496, Parent: 1)

dbus-daemon (PID: 6496, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6497, Parent: 1)

rsyslogd (PID: 6497, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6498, Parent: 1)

dbus-daemon (PID: 6498, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6499, Parent: 1)

gpu-manager (PID: 6499, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6500, Parent: 6499)

sh (PID: 6500, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6503, Parent: 6500)

grep (PID: 6503, Parent: 6500, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6508, Parent: 6499)

sh (PID: 6508, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6509, Parent: 6508)

grep (PID: 6509, Parent: 6508, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6510, Parent: 6499)

sh (PID: 6510, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6511, Parent: 6510)

grep (PID: 6511, Parent: 6510, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6512, Parent: 6499)

sh (PID: 6512, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6513, Parent: 6512)

grep (PID: 6513, Parent: 6512, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6514, Parent: 6499)

sh (PID: 6514, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6515, Parent: 6514)

grep (PID: 6515, Parent: 6514, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6516, Parent: 6499)

sh (PID: 6516, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6517, Parent: 6516)

grep (PID: 6517, Parent: 6516, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6519, Parent: 6499)

sh (PID: 6519, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6520, Parent: 6519)

grep (PID: 6520, Parent: 6519, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6524, Parent: 6499)

sh (PID: 6524, Parent: 6499, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6525, Parent: 6524)

grep (PID: 6525, Parent: 6524, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6506, Parent: 2955)

dbus-daemon (PID: 6506, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6507, Parent: 2955)

pulseaudio (PID: 6507, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6518, Parent: 1)

rtkit-daemon (PID: 6518, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6523, Parent: 1)

polkitd (PID: 6523, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6531, Parent: 1)

generate-config (PID: 6531, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6532, Parent: 6531)

pkill (PID: 6532, Parent: 6531, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6535, Parent: 1)

gdm-wait-for-drm (PID: 6535, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6538, Parent: 1)

rsyslogd (PID: 6538, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6539, Parent: 1)

dbus-daemon (PID: 6539, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6543, Parent: 2955)

pulseaudio (PID: 6543, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6544, Parent: 1)

systemd-journald (PID: 6544, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6547, Parent: 1)

systemd-logind (PID: 6547, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6604, Parent: 1)

dbus-daemon (PID: 6604, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6605, Parent: 1)

rsyslogd (PID: 6605, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6609, Parent: 1)

gpu-manager (PID: 6609, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6611, Parent: 6609)

sh (PID: 6611, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6612, Parent: 6611)

grep (PID: 6612, Parent: 6611, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6615, Parent: 6609)

sh (PID: 6615, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6616, Parent: 6615)

grep (PID: 6616, Parent: 6615, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6617, Parent: 6609)

sh (PID: 6617, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6621, Parent: 6617)

grep (PID: 6621, Parent: 6617, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6622, Parent: 6609)

sh (PID: 6622, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6623, Parent: 6622)

grep (PID: 6623, Parent: 6622, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6626, Parent: 6609)

sh (PID: 6626, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6627, Parent: 6626)

grep (PID: 6627, Parent: 6626, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6628, Parent: 6609)

sh (PID: 6628, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6629, Parent: 6628)

grep (PID: 6629, Parent: 6628, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6630, Parent: 6609)

sh (PID: 6630, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6631, Parent: 6630)

grep (PID: 6631, Parent: 6630, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6633, Parent: 6609)

sh (PID: 6633, Parent: 6609, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6634, Parent: 6633)

grep (PID: 6634, Parent: 6633, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6610, Parent: 1)

dbus-daemon (PID: 6610, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6613, Parent: 2955)

pulseaudio (PID: 6613, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6614, Parent: 1)

rsyslogd (PID: 6614, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6632, Parent: 1)

rtkit-daemon (PID: 6632, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6637, Parent: 1)

polkitd (PID: 6637, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6641, Parent: 1)

generate-config (PID: 6641, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6642, Parent: 6641)

pkill (PID: 6642, Parent: 6641, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6647, Parent: 2955)

dbus-daemon (PID: 6647, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6648, Parent: 1)

gdm-wait-for-drm (PID: 6648, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6649, Parent: 2955)

pulseaudio (PID: 6649, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6650, Parent: 1)

rsyslogd (PID: 6650, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6654, Parent: 1)

dbus-daemon (PID: 6654, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6655, Parent: 1)

rtkit-daemon (PID: 6655, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6658, Parent: 1)

systemd-logind (PID: 6658, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6717, Parent: 1)

polkitd (PID: 6717, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6721, Parent: 1)

systemd-journald (PID: 6721, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6722, Parent: 1)

dbus-daemon (PID: 6722, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6725, Parent: 1)

systemd-logind (PID: 6725, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6784, Parent: 1)

gpu-manager (PID: 6784, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6785, Parent: 6784)

sh (PID: 6785, Parent: 6784, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6786, Parent: 6785)

grep (PID: 6786, Parent: 6785, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6787, Parent: 2955)

pulseaudio (PID: 6787, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6788, Parent: 1)

dbus-daemon (PID: 6788, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6789, Parent: 1)

rsyslogd (PID: 6789, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6790, Parent: 1)

generate-config (PID: 6790, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6791, Parent: 6790)

pkill (PID: 6791, Parent: 6790, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6795, Parent: 1)

rtkit-daemon (PID: 6795, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6798, Parent: 1)

polkitd (PID: 6798, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6804, Parent: 1)

gdm-wait-for-drm (PID: 6804, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6807, Parent: 2955)

dbus-daemon (PID: 6807, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6808, Parent: 2955)

pulseaudio (PID: 6808, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6809, Parent: 1)

rsyslogd (PID: 6809, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6815, Parent: 1)

systemd-journald (PID: 6815, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6818, Parent: 1)

systemd-logind (PID: 6818, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6875, Parent: 1)

dbus-daemon (PID: 6875, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6876, Parent: 2955)

pulseaudio (PID: 6876, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6877, Parent: 1)

gpu-manager (PID: 6877, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6880, Parent: 6877)

sh (PID: 6880, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6881, Parent: 6880)

grep (PID: 6881, Parent: 6880, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6883, Parent: 6877)

sh (PID: 6883, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6884, Parent: 6883)

grep (PID: 6884, Parent: 6883, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6888, Parent: 6877)

sh (PID: 6888, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6889, Parent: 6888)

grep (PID: 6889, Parent: 6888, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6890, Parent: 6877)

sh (PID: 6890, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6891, Parent: 6890)

grep (PID: 6891, Parent: 6890, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6892, Parent: 6877)

sh (PID: 6892, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6893, Parent: 6892)

grep (PID: 6893, Parent: 6892, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6894, Parent: 6877)

sh (PID: 6894, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6895, Parent: 6894)

grep (PID: 6895, Parent: 6894, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6899, Parent: 6877)

sh (PID: 6899, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6900, Parent: 6899)

grep (PID: 6900, Parent: 6899, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6904, Parent: 6877)

sh (PID: 6904, Parent: 6877, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6905, Parent: 6904)

grep (PID: 6905, Parent: 6904, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6878, Parent: 1)

rsyslogd (PID: 6878, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6879, Parent: 1)

dbus-daemon (PID: 6879, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6882, Parent: 2955)

pulseaudio (PID: 6882, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6896, Parent: 1)

rtkit-daemon (PID: 6896, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6903, Parent: 1)

polkitd (PID: 6903, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6909, Parent: 1)

generate-config (PID: 6909, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6910, Parent: 6909)

pkill (PID: 6910, Parent: 6909, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6913, Parent: 2955)

dbus-daemon (PID: 6913, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6914, Parent: 1)

gdm-wait-for-drm (PID: 6914, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6917, Parent: 1)

rsyslogd (PID: 6917, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6918, Parent: 1)

dbus-daemon (PID: 6918, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6922, Parent: 2955)

pulseaudio (PID: 6922, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6923, Parent: 1)

systemd-journald (PID: 6923, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6926, Parent: 1)

systemd-logind (PID: 6926, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6983, Parent: 1)

dbus-daemon (PID: 6983, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6984, Parent: 1)

rsyslogd (PID: 6984, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6985, Parent: 1)

dbus-daemon (PID: 6985, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6986, Parent: 1)

rsyslogd (PID: 6986, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6987, Parent: 2955)

pulseaudio (PID: 6987, Parent: 2955, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6991, Parent: 1)

gpu-manager (PID: 6991, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6992, Parent: 6991)

sh (PID: 6992, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6993, Parent: 6992)

grep (PID: 6993, Parent: 6992, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6996, Parent: 6991)

sh (PID: 6996, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6997, Parent: 6996)

grep (PID: 6997, Parent: 6996, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6998, Parent: 6991)

sh (PID: 6998, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6999, Parent: 6998)

grep (PID: 6999, Parent: 6998, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7001, Parent: 6991)

sh (PID: 7001, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7002, Parent: 7001)

grep (PID: 7002, Parent: 7001, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7003, Parent: 6991)

sh (PID: 7003, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7004, Parent: 7003)

grep (PID: 7004, Parent: 7003, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7008, Parent: 6991)

sh (PID: 7008, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7009, Parent: 7008)

grep (PID: 7009, Parent: 7008, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7013, Parent: 6991)

sh (PID: 7013, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7014, Parent: 7013)

grep (PID: 7014, Parent: 7013, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7015, Parent: 6991)

sh (PID: 7015, Parent: 6991, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7016, Parent: 7015)

grep (PID: 7016, Parent: 7015, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7000, Parent: 1)

rtkit-daemon (PID: 7000, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7007, Parent: 1)

polkitd (PID: 7007, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7017, Parent: 1)

generate-config (PID: 7017, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7018, Parent: 7017)

pkill (PID: 7018, Parent: 7017, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7023, Parent: 2955)

dbus-daemon (PID: 7023, Parent: 2955, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7024, Parent: 1)

gdm-wait-for-drm (PID: 7024, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.i686.elf	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x4d3f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
Aqua.i686.elf	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x4cf2:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
Aqua.i686.elf	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x74fd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x759d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
Aqua.i686.elf	Linux_Trojan_Mirai_3a85a418	unknown	unknown	0x47b7:$a: 01 D8 66 C1 C8 08 C1 C8 10 66 C1 C8 08 66 83 7C 24 2C FF 89
Aqua.i686.elf	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x522:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
Aqua.i686.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7a32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
Aqua.i686.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x99c3:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Click to see the 2 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5483.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_268aac0b	unknown	unknown	0x4d3f:$a: 24 18 0F B7 44 24 20 8B 54 24 1C 83 F9 01 8B 7E 0C 89 04 24 8B
5483.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_0cb1699c	unknown	unknown	0x4cf2:$a: DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 10 0F B7 02 83 E9 02 83
5483.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_70ef58f1	unknown	unknown	0x74fd:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C 0x759d:$a: 89 D0 8B 19 01 D8 0F B6 5C 24 10 30 18 89 D0 8B 19 01 D8 0F B6 5C
5483.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_3a85a418	unknown	unknown	0x47b7:$a: 01 D8 66 C1 C8 08 C1 C8 10 66 C1 C8 08 66 83 7C 24 2C FF 89
5483.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_2e3f67a9	unknown	unknown	0x522:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44 0x582:$a: 53 83 EC 04 0F B6 74 24 14 8B 5C 24 18 8B 7C 24 20 0F B6 44
5483.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x7a32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
5483.1.0000000008048000.0000000008059000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x99c3:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Click to see the 2 entries

String: EOF/proc//proc/%s/cmdlinerwgetcurlftpechokillbashrebootshutdownhaltpoweroff/fdsocket/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Networking

Sends malformed DNS queries

Source: global traffic

DNS traffic detected: malformed DNS query: raw.intenseapi.com. [malformed]

Source: global traffic	TCP traffic: 192.168.2.14:57248 -> 89.190.156.145:7733
Source: global traffic	TCP traffic: 192.168.2.14:38784 -> 193.200.78.37:33966

Source: /usr/sbin/rsyslogd (PID: 5658)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5738)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5786)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5854)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5938)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6009)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6015)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6043)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6109)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6119)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6205)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6212)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6300)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6306)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6334)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6397)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6407)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6430)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6497)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6538)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6605)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6614)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6650)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6789)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6809)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6878)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6917)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6986)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5791)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6145)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6240)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6336)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6436)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6544)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6721)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6815)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6923)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: raw.intenseapi.com
Source: global traffic	DNS traffic detected: DNS query: raw.intenseapi.com. [malformed]

Source: syslog.381.dr, syslog.29.dr

String found in binary or memory: https://www.rsyslog.com

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b Author: unknown
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c Author: unknown
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 Author: unknown
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 Author: unknown
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 Author: unknown
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1639, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5486, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 661, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 791, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1289, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1309, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 2991, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 3094, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5468, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5646, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5657, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5736, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5738, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 769, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5326, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5673, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5763, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5786, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5791, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5796, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5918, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5938, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5853, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5857, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5943, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5948, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6009, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6010, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6015, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6016, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5949, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5952, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6040, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6043, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6044, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6108, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6109, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6119, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6048, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6051, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6141, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6142, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6205, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6206, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6211, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6212, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6145, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6148, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6301, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6306, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6240, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6243, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6396, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6403, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6407, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6336, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6429, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6430, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6496, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6497, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6498, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6506, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6507, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6436, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6439, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6535, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6538, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6539, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6543, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6604, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6610, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6613, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6614, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6544, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6647, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6648, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6654, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6649, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6722, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6784, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6787, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6788, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6789, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6721, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6725, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6804, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6807, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6875, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6876, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6878, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6879, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6882, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6815, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6913, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6914, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6917, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6918, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6922, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6983, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6984, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1639, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5486, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 661, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 725, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 782, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 791, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 797, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 940, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1289, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1309, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 2991, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 3094, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 3157, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5467, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5468, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5646, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5657, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1300, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 2956, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5736, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5738, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 769, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 1299, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 2955, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5326, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5673, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5763, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5786, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5791, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5796, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5918, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5938, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5853, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5857, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5943, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5948, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6009, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6010, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6015, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6016, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5949, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 5952, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6040, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6043, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6044, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6108, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6109, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6116, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6119, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6048, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6051, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6141, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6142, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6205, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6206, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6211, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6212, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6145, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6148, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6236, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6239, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6301, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6306, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6307, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6240, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6243, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6331, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6334, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6335, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6396, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6397, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6403, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6407, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6336, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6339, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6429, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6430, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6496, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6497, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6498, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6506, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6507, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6436, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6439, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6535, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6538, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6539, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6543, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6604, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6610, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6613, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6614, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6544, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6647, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6648, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6654, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6658, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6649, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6722, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6784, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6787, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6788, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6789, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6721, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6725, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6804, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6807, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6808, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6809, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6875, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6876, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6878, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6879, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6882, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6815, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6913, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6914, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6917, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6918, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6922, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6983, result: successful	Jump to behavior
Source: /tmp/Aqua.i686.elf (PID: 5485)	SIGKILL sent: pid: 6984, result: successful	Jump to behavior

Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: Aqua.i686.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_268aac0b reference_sample = 49c94d184d7e387c3efe34ae6f021e011c3046ae631c9733ab0a230d5fe28ead, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 9c581721bf82af7dc6482a2c41af5fb3404e01c82545c7b2b29230f707014781, id = 268aac0b-c5c7-4035-8381-4e182de91e32, last_modified = 2021-09-16
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_0cb1699c reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6e44c68bba8c9fb53ac85080b9ad765579f027cabfea5055a0bb3a85b8671089, id = 0cb1699c-9a08-4885-aa7f-0f1ee2543cac, last_modified = 2021-09-16
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_70ef58f1 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c46eac9185e5f396456004d1e0c42b54a9318e0450f797c55703122cfb8fea89, id = 70ef58f1-ac74-4e33-ae03-e68d1d5a4379, last_modified = 2021-09-16
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_3a85a418 reference_sample = 86a43b39b157f47ab12e9dc1013b4eec0e1792092d4cef2772a21a9bf4fc518a, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 554aff5770bfe8fdeae94f5f5a0fd7f7786340a95633433d8e686af1c25b8cec, id = 3a85a418-2bd9-445a-86cb-657ca7edf566, last_modified = 2021-09-16
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_2e3f67a9 reference_sample = fc8741f67f39e7409ab2c6c62d4f9acdd168d3e53cf6976dd87501833771cacb, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 6a06815f3d2e5f1a7a67f4264953dbb2e9d14e5f3486b178da845eab5b922d4f, id = 2e3f67a9-6fd5-4457-a626-3a9015bdb401, last_modified = 2021-09-16
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 5483.1.0000000008048000.0000000008059000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26

Source: classification engine

Classification label: mal76.spre.troj.evad.linELF@0/211@181/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5646)	File: /proc/5646/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5662)	File: /proc/5662/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5736)	File: /proc/5736/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5918)	File: /proc/5918/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6010)	File: /proc/6010/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6016)	File: /proc/6016/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6044)	File: /proc/6044/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6108)	File: /proc/6108/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6116)	File: /proc/6116/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6206)	File: /proc/6206/mounts
Source: /usr/bin/dbus-daemon (PID: 6211)	File: /proc/6211/mounts
Source: /usr/bin/dbus-daemon (PID: 6301)	File: /proc/6301/mounts
Source: /usr/bin/dbus-daemon (PID: 6307)	File: /proc/6307/mounts
Source: /usr/bin/dbus-daemon (PID: 6335)	File: /proc/6335/mounts
Source: /usr/bin/dbus-daemon (PID: 6396)	File: /proc/6396/mounts
Source: /usr/bin/dbus-daemon (PID: 6403)	File: /proc/6403/mounts
Source: /usr/bin/dbus-daemon (PID: 6496)	File: /proc/6496/mounts
Source: /usr/bin/dbus-daemon (PID: 6498)	File: /proc/6498/mounts
Source: /usr/bin/dbus-daemon (PID: 6506)	File: /proc/6506/mounts
Source: /usr/bin/dbus-daemon (PID: 6539)	File: /proc/6539/mounts
Source: /usr/bin/dbus-daemon (PID: 6604)	File: /proc/6604/mounts
Source: /usr/bin/dbus-daemon (PID: 6610)	File: /proc/6610/mounts
Source: /usr/bin/dbus-daemon (PID: 6647)	File: /proc/6647/mounts
Source: /usr/bin/dbus-daemon (PID: 6654)	File: /proc/6654/mounts
Source: /usr/bin/dbus-daemon (PID: 6722)	File: /proc/6722/mounts
Source: /usr/bin/dbus-daemon (PID: 6788)	File: /proc/6788/mounts
Source: /usr/bin/dbus-daemon (PID: 6807)	File: /proc/6807/mounts
Source: /usr/bin/dbus-daemon (PID: 6875)	File: /proc/6875/mounts
Source: /usr/bin/dbus-daemon (PID: 6879)	File: /proc/6879/mounts
Source: /usr/bin/dbus-daemon (PID: 6913)	File: /proc/6913/mounts
Source: /usr/bin/dbus-daemon (PID: 6918)	File: /proc/6918/mounts
Source: /usr/bin/dbus-daemon (PID: 6983)	File: /proc/6983/mounts
Source: /usr/bin/dbus-daemon (PID: 6985)	File: /proc/6985/mounts
Source: /usr/bin/dbus-daemon (PID: 7023)	File: /proc/7023/mounts

Source: /usr/libexec/gsd-rfkill (PID: 5486)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5486)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5491)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5673)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5673)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5673)	File: /run/systemd/seats/.#seat0ilQ9oc	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5732)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	File: /run/systemd/journal/streams/.#9:67441Uc9KeO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	File: /run/systemd/journal/streams/.#9:67442EaC2vN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	File: /run/systemd/journal/streams/.#9:67443Ca5fvL	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	File: /run/systemd/journal/streams/.#9:67449KJ6KZJ	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	File: /run/systemd/journal/streams/.#9:67450IRTfxM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	File: /run/systemd/journal/streams/.#9:67451N0oAVJ	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5857)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5857)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5857)	File: /run/systemd/seats/.#seat0D72pT3	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	File: /run/systemd/journal/streams/.#9:70021Io2kn1	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	File: /run/systemd/journal/streams/.#9:70022STHr92	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	File: /run/systemd/journal/streams/.#9:70023Zl48w3	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	File: /run/systemd/journal/streams/.#9:70030TlGwJ1	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	File: /run/systemd/journal/streams/.#9:70049bLdSI3	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	File: /run/systemd/journal/streams/.#9:70815YHc013	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5952)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5952)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5952)	File: /run/systemd/seats/.#seat0pd5zve	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	File: /run/systemd/journal/streams/.#9:71695ddeHMx	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	File: /run/systemd/journal/streams/.#9:71696UyeBPv	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	File: /run/systemd/journal/streams/.#9:71697ZMwEBu	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	File: /run/systemd/journal/streams/.#9:716980lmKLw	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	File: /run/systemd/journal/streams/.#9:7179714461v	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6051)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6051)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6051)	File: /run/systemd/seats/.#seat0ReJZ6K	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:72851SzhunR
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:72853LJpEeQ
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:72860W8bM2P
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:7286194G7xR
Source: /lib/systemd/systemd-journald (PID: 6145)	File: /run/systemd/journal/streams/.#9:72887otydIQ
Source: /lib/systemd/systemd-logind (PID: 6148)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6148)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6148)	File: /run/systemd/seats/.#seat0rezBg5
Source: /lib/systemd/systemd-journald (PID: 6240)	File: /run/systemd/journal/streams/.#9:72651yDHHG0
Source: /lib/systemd/systemd-journald (PID: 6240)	File: /run/systemd/journal/streams/.#9:72652kmkgi2
Source: /lib/systemd/systemd-journald (PID: 6240)	File: /run/systemd/journal/streams/.#9:7265370uOk1
Source: /lib/systemd/systemd-journald (PID: 6240)	File: /run/systemd/journal/streams/.#9:72660sSqy52
Source: /lib/systemd/systemd-journald (PID: 6240)	File: /run/systemd/journal/streams/.#9:737741y7PL3
Source: /lib/systemd/systemd-journald (PID: 6240)	File: /run/systemd/journal/streams/.#9:73783qoKH50
Source: /lib/systemd/systemd-logind (PID: 6243)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6243)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6243)	File: /run/systemd/seats/.#seat05iMkIe
Source: /lib/systemd/systemd-journald (PID: 6336)	File: /run/systemd/journal/streams/.#9:75073Da4fYh
Source: /lib/systemd/systemd-journald (PID: 6336)	File: /run/systemd/journal/streams/.#9:75075tjLpqk
Source: /lib/systemd/systemd-journald (PID: 6336)	File: /run/systemd/journal/streams/.#9:750777rutYi
Source: /lib/systemd/systemd-journald (PID: 6336)	File: /run/systemd/journal/streams/.#9:75084JvWOph
Source: /lib/systemd/systemd-journald (PID: 6336)	File: /run/systemd/journal/streams/.#9:75110dBOfWj
Source: /lib/systemd/systemd-logind (PID: 6339)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6339)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6339)	File: /run/systemd/seats/.#seat0neZcyy
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:75723FKJiXS
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:75725eE8TAQ
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:75726I95TaQ
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:75727qCFOyS
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:7573413f1JQ
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:757447QrUmP
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:75745MycwlQ
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:75985RrcPHR
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:76094KFHjfS
Source: /lib/systemd/systemd-journald (PID: 6436)	File: /run/systemd/journal/streams/.#9:76103b3ntHR
Source: /lib/systemd/systemd-logind (PID: 6439)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6439)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6439)	File: /run/systemd/seats/.#seat0XmJFL3
Source: /usr/lib/policykit-1/polkitd (PID: 6523)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:77527uyTBY0
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:76715a7upZ2
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:76716PyaGV0
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:76717vBlwr1
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:767199gQTc3
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:76734uChM32
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:76742eEb780
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:76744yMITp0
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:778529PTGn3
Source: /lib/systemd/systemd-journald (PID: 6544)	File: /run/systemd/journal/streams/.#9:77946VzJjV0
Source: /lib/systemd/systemd-logind (PID: 6547)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6547)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6547)	File: /run/systemd/seats/.#seat0PvLoGe
Source: /usr/lib/policykit-1/polkitd (PID: 6637)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 6658)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6658)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6658)	File: /run/systemd/seats/.#seat0hjBZ5B
Source: /usr/lib/policykit-1/polkitd (PID: 6717)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79435qNxiBp
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79436jRAnAq
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79437JBNUpo
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79438uXW04p
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:794397CGHVo
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79440a9wV4o
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79441o2Auoo
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:794420UtGEn
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:794430nCy1o
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79449mbGajo
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:794509DoYBp
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79451zGxL4q
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:794529SCCnq
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:79455VHH0Wo
Source: /lib/systemd/systemd-journald (PID: 6721)	File: /run/systemd/journal/streams/.#9:78846S2rAAp
Source: /lib/systemd/systemd-logind (PID: 6725)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6725)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6725)	File: /run/systemd/seats/.#seat0colaMI
Source: /usr/lib/policykit-1/polkitd (PID: 6798)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:810636judjv
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:81064KL32ox
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:810658jQLzv
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:81066gV8fSx
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:81081xGK3Gu
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:81082F1rKNu
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:81085QPVZFx
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:81086He2yEx
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:80562rRV4yy
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:80650Zlp4Ut
Source: /lib/systemd/systemd-journald (PID: 6815)	File: /run/systemd/journal/streams/.#9:80767fsDqmx
Source: /lib/systemd/systemd-logind (PID: 6818)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6818)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6818)	File: /run/systemd/seats/.#seat0CB3lKJ
Source: /usr/lib/policykit-1/polkitd (PID: 6903)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:824331RbGHF
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82434PHw6gG
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82435mII7UF
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82444oP9cWF
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82451ShVXWG
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82452gV4MUE
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82453wvZrQH
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82454ke1kmI
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:8246318uqgI
Source: /lib/systemd/systemd-journald (PID: 6923)	File: /run/systemd/journal/streams/.#9:82569vnsjJI
Source: /lib/systemd/systemd-logind (PID: 6926)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6926)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6926)	File: /run/systemd/seats/.#seat0sgTE6T
Source: /usr/lib/policykit-1/polkitd (PID: 7007)	Directory: /root/.cache

Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/3760/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/3760/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/3761/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/3761/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/1583/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/1583/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/2672/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/2672/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/110/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/110/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/111/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/111/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/112/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/112/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/113/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/113/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/234/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/234/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/114/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/114/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/235/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/235/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/115/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/115/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/116/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/116/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/117/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/117/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/118/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/118/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/119/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/119/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/10/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/10/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/11/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/11/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/12/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/12/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/13/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/13/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/14/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/14/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/15/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/15/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/16/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/16/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/17/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/17/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/18/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/18/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/19/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/19/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/240/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/240/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/120/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/120/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/121/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/121/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/242/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/242/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/1/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/1/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/122/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/122/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/243/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/243/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/2/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/2/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/123/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/123/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/244/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/244/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/3/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/3/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/124/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/124/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/245/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/245/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/125/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/125/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/4/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/4/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/246/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/246/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/126/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/126/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/5/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/5/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/247/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/247/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/127/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/127/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/6/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/6/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/248/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/248/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/128/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/128/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/7/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/7/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/249/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/249/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/8/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/8/cmdline
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/129/status
Source: /usr/bin/pkill (PID: 6791)	File opened: /proc/129/cmdline

Source: /usr/bin/gpu-manager (PID: 5743)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5745)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5747)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5749)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5753)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5755)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5757)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5759)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5919)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5921)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5923)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5925)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5927)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5929)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5933)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5935)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6017)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6019)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6024)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6028)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6030)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6032)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6034)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6036)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6117)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6120)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6122)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6127)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6129)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6131)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6133)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6135)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6213)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6215)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6220)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6222)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6224)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6226)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6228)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6230)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6308)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6310)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6315)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6319)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6321)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6323)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6325)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6327)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6405)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6408)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6413)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6415)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6417)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6419)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6421)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6423)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6500)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6508)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6510)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6512)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6514)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6516)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6519)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6524)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6611)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6615)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6617)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6622)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6626)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6628)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6630)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6633)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6785)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6880)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6883)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6888)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6890)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6892)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6894)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6899)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6904)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6992)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6996)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6998)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7001)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7003)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7008)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7013)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7015)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 5744)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5746)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5748)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5750)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5754)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5756)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5758)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5760)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5920)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5922)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5924)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5926)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5928)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5930)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5934)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5936)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6018)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6020)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6025)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6029)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6031)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6033)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6035)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6037)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6118)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6121)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6123)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6128)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6130)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6132)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6134)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6136)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6214)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6219)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6221)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6223)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6225)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6227)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6229)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6231)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6309)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6314)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6316)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6320)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6322)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6324)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6326)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6328)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6406)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6409)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6414)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6416)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6418)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6420)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6422)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6424)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6503)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6509)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6511)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6513)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6515)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6517)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6520)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6525)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6612)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6616)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6621)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6623)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6627)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6629)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6631)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6634)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6786)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6881)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6884)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6889)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6891)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6893)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6895)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6900)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6905)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6993)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6997)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6999)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7002)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7004)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7009)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7014)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7016)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 5762)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5939)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6039)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6138)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6235)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6330)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6426)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6532)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6642)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6791)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6910)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7018)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 5791)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6145)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6240)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6336)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6436)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6544)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6721)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6815)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6923)	Reads from proc file: /proc/meminfo

Source: /usr/sbin/rsyslogd (PID: 5658)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5658)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5738)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5738)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 5742)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5786)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5854)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5938)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5938)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6009)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6014)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6015)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6015)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6109)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6115)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6119)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6119)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6205)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6210)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6212)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6212)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6300)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6305)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6306)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6306)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6397)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6404)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6407)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6407)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6430)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6497)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6497)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6499)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6538)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6605)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6609)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6614)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6614)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6650)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6789)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6789)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6809)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6877)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6878)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6878)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6917)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6986)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6986)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 6991)	Log file created: /var/log/gpu-manager.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.i686.elf (PID: 5484)

File: /tmp/Aqua.i686.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5742)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5917)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6014)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6115)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6210)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6305)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6404)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6499)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6609)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6784)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6877)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6991)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 5762)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5939)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6039)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6138)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6235)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6330)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6426)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6507)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6532)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6613)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6642)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6787)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6791)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6882)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6910)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6987)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7018)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 5491)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5658)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5738)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5742)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5786)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5791)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5853)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5854)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5917)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5938)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5949)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6009)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6014)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6015)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6043)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6048)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6109)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6115)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6119)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6145)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6205)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6210)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6212)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6240)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6300)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6305)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6306)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6334)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6336)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6397)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6404)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6407)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6430)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6436)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6497)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6499)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6507)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6538)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6544)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6605)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6609)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6613)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6614)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6650)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6721)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6787)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6789)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6809)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6815)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6877)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6878)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6882)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6917)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6923)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6986)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6987)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6991)	Queries kernel information via 'uname':

Source: kern.log.43.dr	Binary or memory string: Dec 28 17:28:06 galassia kernel: [ 120.255225] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020
Source: kern.log.43.dr	Binary or memory string: Dec 28 17:28:06 galassia kernel: [ 120.255209] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel parport_pc ppdev lp drm parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi scsi_transport_spi mptscsih vmxnet3 libahci mptbase

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Non-Standard Port	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	2 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.i686.elf	35%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.i686.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.intenseapi.com	193.200.78.37	true	false		high
raw.intenseapi.com. [malformed]	unknown	unknown	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.381.dr, syslog.29.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
193.200.78.37	raw.intenseapi.com	Switzerland		29496	LINK-SERVICE-ASUA	false
89.190.156.145	unknown	United Kingdom		7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
193.200.78.37	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
89.190.156.145	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	wkb86.elf	Get hash	malicious	Mirai	Browse
	fnkea7.elf	Get hash	malicious	Mirai	Browse
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.intenseapi.com	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.200.78.37

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	kqibeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	ngwa5.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fnkea7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fnkea7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	kqibeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	wkb86.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	fnkea7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	gnjqwpc.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
LINK-SERVICE-ASUA	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	KCmfLMBjHJ.elf	Get hash	malicious	Unknown	Browse	193.200.79.115
	assailant.i586	Get hash	malicious	Mirai	Browse	194.146.110.216

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/run/systemd/journal/streams/.#9:67441Uc9KeO

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.515111167391843
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/NC4BqPURAAWB72jq:SbFuFyLVIg1BG+f+MU4BAURAAdji4s
MD5:	536054B5BD716284A206CE1400AD23AB
SHA1:	731285ABF4DDAE563215D303DD5EE0E24BD18435
SHA-256:	A18E84DFAC56068A0347BC06D642D823C7AD436B36DAC726DA52CB10513276E6
SHA-512:	F347AD32EEB9F24D0E64D2F099AFE9958B0B6BC9358209452BCCEE9571209DA97C7209D84096AF0188B3442751694B782589E0898F6BB9D99F6E3E5357CAA1ED
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5114cbbb1fa04c6dbf32661d2bee3d59.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:67442EaC2vN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4639150408916715
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr1E5lSTMQEcVvX0je:SbFuFyLVIg1BG+f+M2gM6X0jZcHcljX+
MD5:	1C43192263797A3F0CAAC70DD3CEAF39
SHA1:	B1A6CE140C85776DD7B64E12AFD1E19FADA04E5C
SHA-256:	94297BBA3DE36015A8EADED3CBEA292CC48F4D0E73A414E9482A7D5827C8F133
SHA-512:	25F950BCDE0392343C3566813EB1DAABE9BB8124E9033A7AA677AABE3FE814644A9A0B89593C1CB5CAECC4A02A4D646BBF388728CE7D03773830F03D2484C00D
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a981aa56ba5f45469fa952190f620a09.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67443Ca5fvL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.470365094933006
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MRoR13VRz+qjZcHcljX+:qgFq6g10+f+MRoHz+kmAu
MD5:	9F9D8BCF46792142F446BB1782D7C71E
SHA1:	744FC51C0A9439D6334C61629E1657D51FB99584
SHA-256:	D3B749B55EA3265C14CB4AA7064CEF0508A7FB7C2F3A2808F93F8DDFB48C8192
SHA-512:	84DC68D99BD852B02AF9E4AF0EFEC3C68F26005635E8DF2736EC3F079957348612BBDEABBB0A47B32022B0B82D795C490B0A4B71C446ABD1042136E7AB003A46
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7860533804cc4255b207ec7063cd246c.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67449KJ6KZJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4348481576494345
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9Nvkc6QRWASeh+sjx:SbFuFyLVIg1BG+f+Mn91RH7hTjosQu
MD5:	E4AE6B30DD1598ABB1436BBB620DAECA
SHA1:	4A91D00419792B6A11D08B87D49B00B3F0A2920A
SHA-256:	7F9D1247873C51AEC8B3530B2ECBE9FDABB45C9BB29E645FBD0AE4FCBDFCE9A3
SHA-512:	726CDB81756D21CE67515D6C84D2BB4A57412894140FA2596171E47AF17F4E8F08B96F5DACBDD50477B1E7DFAAC677AD7C39A795816DCC20E38C14DAFD22BAC9
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7ac9bb7f8f81448aaced90532863e71a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67450IRTfxM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.436183686517546
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6YzDTObl2jNALyAZD:qgFq6g1af+MVzDTOCIZD
MD5:	1CE87D4648F151C55594034208F57714
SHA1:	6E1419206090F7F123153FBA40FE2F762823394D
SHA-256:	FCDE3800AA2679C1581F64BB1744BFF0810B6E85D6A5FE9359FDCE6CAF21989A
SHA-512:	151A2275A0BE9E27430C4D7F978DB840E6D9551C419B8F9151CA9802DC8C4BA33E008B34F7030772DC5586500F8B5F6AE64F10C4B75F00E20899054C2D86EB47
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0b75ac1e871942d3b5e9bb50a1937cf4.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67451N0oAVJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.486045856673676
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9akUt3c1QXBzRxsjs2y:SbFuFyLVIg1BAf+MVUt3caR4jNdQIeXD
MD5:	9E295BEB1C63F20CCAF6384BD1AFEAE3
SHA1:	763B80D91F973CA6397AB0B346B10B5691BB97E9
SHA-256:	83286E24FC0C103EF68EBDD00E1518B0A8ADA71E95D58BEEE96CF917C47B8586
SHA-512:	CA54DC11B9ABD9B3D0ECBF600E597E07BA1DEEDE8AE18805854DA20AADD55169A24DEC36EED3549DA9BEFBC38AEC68FC330FA2D9A26559CAAAA60AA6BD166E7E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=774799261aa44b2b99a535d9b6385de2.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70021Io2kn1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.511744199695552
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp/Xguic0p022jsicN:SbFuFyLVIg1BG+f+MNBi0ZjZcHcljX+
MD5:	13F0ABD755DC8B281C6F6754909A73D6
SHA1:	5A24FDE179360124E06AE828DA00BCA37D805693
SHA-256:	2323BFF1BA467118EC78BC6D7671FC75837573B802DA3A39F448F66A1E008F3F
SHA-512:	9B487CFB14BEDDFBA3B1BEF5DE57A46819724A60C17DCDEB0A9B779484072B4DB446273F5BCD50C1AD72AD04BEB8C71A5A20E2496A8DD535996ECD3C6F051EB7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c0512b25ab304f859a66e6ddf3889c76.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:70022STHr92

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.382690034547358
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsHc9B1BBVTpDmhTjx:SbFuFyLVIg1BG+f+MsHcj1nFchTjosQu
MD5:	A9FE0FBA5D1F2A7FE9C584C2744B6BD1
SHA1:	DDC5E05DB858C84AE19C72643560E05BC4F4B21C
SHA-256:	C95CB9C0A14C0877B98BF2DC9E0F4FC3A9CD9793AF9D3677847F6977FE4F79BE
SHA-512:	5B21ECF936C5AF7F04A8815E4F9B7177A9C52C46CF48474BE46EE85F0B95EC32AD0675715880A710FA8513E63B8CD42B8C6567978D4C80D1AF94F8C91E019A19
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fb9c58de5db4440aa0a2a226220fbd26.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70023Zl48w3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.398163964202896
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz0FwAsnyvRqjs1Ha7:SbFuFyLVIg1BG+f+MS0josQu
MD5:	7CD834F4319575EF0EFA1A4D6B89CCDD
SHA1:	C922A779AFB69FCD3EC108D3B846CE151D4C9395
SHA-256:	80F1E131A96FBD8E120C653F195177BF60482E2EDB153155071050D04B23A635
SHA-512:	30115B3C7F740854FFF4572C5264725BE2A8D5AC9F1875A73211B25690FFD9D0BA3A998ECBBA7A7CDF2AF320EA773726947D03280A11C684C701AB095A0BCC63
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=935a853e3553483bb7ed601bb4f5ecd4.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70030TlGwJ1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.3759216768411
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6SW1wNBA1APjP22js2o:SbFuFyLVIg1BAf+M6SWOle2jNALyAZD
MD5:	048D997A457715B0EA2F39E5B0FC607A
SHA1:	585390A20540FA89624571B219F6566178922946
SHA-256:	DA5590674D11017064FED25F115CECA4AF537B34EA6541888259FB9E6923F8F5
SHA-512:	3DD48661C06D1795D3CEEE28D8A9C19D66E97B1DCFA61FA6F709AAB2849B80A99D7B74F5A5D638E6D20E7A6CF47A6DCBAB81AFCE84D124A2E637F3ADDC4F7CC8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0303b0e01aee4d25b9a22e0de8d77507.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70049bLdSI3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.427433193454439
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuKZkw4MdG+sjs2BbQIa:SbFuFyLVIg1BAf+MuKZ4jNdQIeXD
MD5:	D6A5B3D51A2BD615CE90FD9B75F596CA
SHA1:	F03C1309B13C59726B6AF0463842751FC6D68359
SHA-256:	0E2115696F892AEF371C2A0A6357B5B3540CBA871916EFD2D52CB717D6E0368A
SHA-512:	9396600867E9C4CBBEFB0B80E65DD759820EA741D6EF601BC819EE9D47BCFF2DB0C64ADCCBCB8D5D44D8180985D1C868B907032A1A01E4246FF4070391FCF9B5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d8ee31bc720c4affbee47deaced8d693.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70815YHc013

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.424781234755199
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+hHREXkRXtzAuqjsc:SbFuFyLVIg1BG+f+M+heUR9ETjosQu
MD5:	ECE84FC00521A06334E3C8B805865699
SHA1:	3200B386AAC450429834E875F52BA0960F91C3B5
SHA-256:	BB7097EC9C82D72F290258FFDCBED9F0EEC2CC7A06713100B000A3E49690206E
SHA-512:	0AFBC21877F357804B9EC60C8158E1CBC976043FCFF938E4BB3C030D24A8E783E61C1215E7B6D3EBC9CC5BB8DB6A3766DA1C1374D869DCE5D19710FA0222A706
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4bd22fb646d0412293aa533087a2b28f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71695ddeHMx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4433147273660385
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MPB4Ur/TjZcHcljX+:qgFq6g10+f+MWs/RmAu
MD5:	8E46A6171E78FB4BA52CA5D251A68F45
SHA1:	41803B3C3EC13EBEB0C2F028251F90B43547BFF2
SHA-256:	3B48EE26E2287996A66630ECBDAF9039E1DE3845E88DED684EF668F9D353341B
SHA-512:	C77908919734B81B66DD41AD65B94840F9739D46A56B4F4BB0F24367DF6E3BEDE8D227CF714CB283E34D0E1D6BE9AC57509CBD2BDC7A39B0691E4A7028E6A199
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cc9006b54e5e4dce8d189af1ba506e11.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:71696UyeBPv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4357216333372795
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5icmEETCbXlsjs1Ha:SbFuFyLVIg1BG+f+MIczETCD2josQu
MD5:	D25B83580AE1FA3CDA09ED5CBC68E3A9
SHA1:	57ECBDEC7C917669A3E903EE11ED4F52FE95272B
SHA-256:	303537563DE3DE3AD64A3BACDDC44D3926C4BC72892F531D2F5D58645FE7F65E
SHA-512:	CE90C4DFDDABBE40650CF4B33CC5D015DFCDDB60FC3C224EB47F61FE7B6BEF0F53EE1E99541822592220AAFCD1A4C953418C826E8F5CFF6FCC2D4F4C5AF97892
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=37906198c7df4b2793aaa60301c52fb0.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71697ZMwEBu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.412562273339834
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+FHhWEHi7AWFqjs16:SbFuFyLVIg1BG+f+M+qEHisWFqjosQu
MD5:	7F22A6D8D66560069D2A4B9A61C5D378
SHA1:	9503DFA6F9D914C2325880212F8B19756593AFB8
SHA-256:	D5BA11BFFC896E14784727A0AD059D35E168359D2847307F4D4793EE87D5EC48
SHA-512:	BE01A47721310F65A545DB44884D3EF8745ACD60E05BE4E853D9E6A7998615CBE596E66A821066942BAA4B0283ABE8BD8E32C78C4AD906B08639B4D2F8A9F21A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4e5cabdb7456469abb408a4da752f375.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:716980lmKLw

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.405001560394609
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmru4NLQTGb22js2ALAXA:SbFuFyLVIg1BAf+MyCLVbZjNALyAZD
MD5:	4A619EFFA097F329C2238421D01B988A
SHA1:	E76BB76FC115F407164C1B7798F806AFD8CE9686
SHA-256:	A0284D1BEC5A1E76CE459255537064B1DD71996DF30C7739AE0CB63FFE02B8F0
SHA-512:	511FB2F662B45ED83CD97B89D3BC49E27BC312AD53BF8E4687A6570D576FA581DCE7CD3A78D07A92FFE06EDE100F9865E43808C25F425C452BD6A8ADFCFAB791
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a0a4f2b5e54d448ca324a9a11569cced.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:7179714461v

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.486353589215243
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MscYCtD1v8jNdQIeXD:qgFq6g1af+MscYCt5+2D
MD5:	A08D7DD0082BF3E355E4A974FDD43922
SHA1:	72D3EB95CB28558FBF4B39A43CEC2B2C521F6311
SHA-256:	C0B0DC8EBDF9B1A310A7449FA7671C3F411C95D3FC073FCC1D9DFBC5585826C2
SHA-512:	93B59549756511745D78D8E5E3CA7CFFB464239984AB14613FBAEA85C26E27D64B67592FD6498DA02B61A80B1A18C1BF9F99C775151A5E6152DA9801D70A6856
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f6e889b7275d44b7a8a802f10ca38793.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72651yDHHG0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.518152879396538
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxms1ekSEAXf0Mxsjsig:SbFuFyLVIg1BG+f+Ms1WxqjZcHcljX+
MD5:	85F3870EDC9E4517A209D1D712184C0B
SHA1:	FEDFABF51F2D069547D00AD3F5B70EB8BA76238B
SHA-256:	720052D2D3EFB851B7C4B70A8D54EF34CE19A3D82CF348CBC3F5F90897466228
SHA-512:	7C28D7734837733A28AACE53DE2576E5C6233CA6D41AEC32FA2CC4BC264799D3B5C4360EF16502C08C23D8CDA70A0565A363C9BC654A8A30C9D2C3730E0A3D85
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f867503c0032475bae898a2463f71b8c.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:72652kmkgi2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4236274620135205
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+iRK1SRTHXVd9lsjx:SbFuFyLVIg1BG+f+M+iM1SNFd92josQu
MD5:	7D311A0FD8EBFA94FDCACE5311A31414
SHA1:	D35B64C69C009CDC997D754BC1462C1194B1993F
SHA-256:	ABFED190610332D0BD973CE8AB95E4D154F1367C0B2D91CCF55EDA642DB3A345
SHA-512:	B228EBEA257BB4C45C15DC10E91118DBAE61456E547BD534D9287478FFD6A6628E53AE62D50F0AEEE824A40BE2C8996693EA4ADE5C856DA9730E4D8F8F8CB7B6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=41efe4f3f73846f38edf6546b94fe082.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:7265370uOk1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.413952370406475
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8HWC79hKQsMqjosQu:qgFq6g10+f+M8229HR4Qu
MD5:	DE569B66D16E710700FB943DF3F6BC7C
SHA1:	941405685C902A368EF3F3D9A9C299294C847654
SHA-256:	6A012A388520C3632191C7D3F83E17932EC472B6839F0EE941688E17BFB0F01D
SHA-512:	03893CECBD24C61E76DBB5E8C6A85EC43CC2B85D8AC7F369EE620C24E30BE8E85507BE2592757933BB962052AACC5263FE4628DD50BDF45AB29209D274F0F0C0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6b3f6ac7232d4076a180dacc5f3dab9a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:72660sSqy52

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.454003913039627
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmy2AMUmDcEolQBATjs2o:SbFuFyLVIg1BAf+My2SMATjNALyAZD
MD5:	9D644570DCB5CEC78DA08AB87D6111B3
SHA1:	6CF58C0862E0DA0296444C7126D8D87FEF68DF33
SHA-256:	0CEC2C6124C329A750AAE444BECBADC5135B7F7C87D9B16BDDFF0AE07BF6906B
SHA-512:	6120D6DAEB251725A1426F1C9B8769A175A142805A82EF4AC60421EA97ED7027F9B4632A24D2845D30FB1C4392B3369584EAF4DF8F4F70536957E1B9152E2B72
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=809e8091d5fe4617b3f557d1c2be3d76.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72851SzhunR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.446015632237596
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9nsHcc9ZQtg2jsicN:SbFuFyLVIg1BG+f+MlFczQdjZcHcljX+
MD5:	668D8F0E9A8EDF7A68B82642CC300D13
SHA1:	8C9220486571A64E3DBF2069B6BDBDDB24A8E725
SHA-256:	556F6A06CF653B85D588CFD1441FCB1A2CA2C8F5CC22A8808AA0563A9B23288F
SHA-512:	9CAE8F0E55DE3DD15AC745F58A1ECDA0985B40AD624AB694C4B5088967F6E97A4A65FA5B0A988F5559D5C2344148A0814625B4F358DADFF106AD4E846004E052
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7f8498b6d4b949608dadd055e56ed55d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:72853LJpEeQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.408106097005522
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm78djNXzjs1HadmQXt:SbFuFyLVIg1BG+f+MwjjjosQu
MD5:	0725FD0B03FD02A01050448A645DE019
SHA1:	DCAE69761638B596F705D65848DA8B9B9EF62070
SHA-256:	3961D96F6C43BAAC737801454880B182A9F7150A969859337F08BECE8516ACA6
SHA-512:	9BA23B6A7128CB28F64AD0C16C8086E5C984545B40C6A229C05A068982EE6756ACDBFA30DF42E476BED8E85FFD3A59B73FCB4A7799677ADEA3B71A51FD44284A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=158151095506403ea890ca227bbd8d04.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:72860W8bM2P

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3923518702961495
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7SZgRGV1ExfET5qjx:SbFuFyLVIg1BG+f+M2Zg690josQu
MD5:	4A7383DED78E9D7390D80B369F9338E8
SHA1:	DEF66FB2B97C9C081121B6705855F83D4329FA2F
SHA-256:	E353FF0D4795A9C8A1F046EAD6FF8DD4ECF41B06E8A1DB879DA6DF78FE6F1223
SHA-512:	40B989091DF37CD3850B0745439B747B0F4F374634431D53B56C1C53F88A32DF265AB5B9908D64AC00BE8CD736CC41898256B241CD5F0EF39328EF68CB73FAD5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11a5acd4c4c642e5ad2ebb78c0df6ca6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:7286194G7xR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.459012198515027
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmv3ENRRhNASk0js2ALAQ:SbFuFyLVIg1BAf+MMNRTNASVjNALyAZD
MD5:	7701B8055A12726A739718965F88B478
SHA1:	B9C8EC674DA5C4737B30D7B813A20440F6623DEB
SHA-256:	747CBCCB1094C3C466A27A46A8199EC9C2A15D0659987E4D67B27275441F210B
SHA-512:	3682108AA4A4FB6DFFD777EB1800F5639511FF10AAA8188402314361DACBB6D13A650D9F65A726DF4A883F46D993F2659094D686C85D3756B6A2C591D8FB2117
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e9cc646b45a64d9ab15c612d257d3884.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:72887otydIQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.401333520271177
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmp1pVS5HiRqjs2BbQIeT:SbFuFyLVIg1BAf+MjnAjNdQIeXD
MD5:	59416F02D67B50AE048983EFCCF600C1
SHA1:	6D5BA580B6BBDEDB2D33EEA5F4024EDB3CDA55F6
SHA-256:	B45A711AC296E3D3C7004FD239F688B6DF1D389A1195066984E21EAA887B8198
SHA-512:	BADF8A8DCF4CAC140F63F30E1D27F7CC621BF1DFA2F1AA62CEDCFC76A2DF1228ABBA315EC45C8CA4D656994998003C6EEC334CF14C789DD03F233C4523FF8A88
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c33e06eecaad40e1a01298ea485d1be8.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:737741y7PL3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.422018486984923
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9syLF+ddXxsjs2BbQIa:SbFuFyLVIg1BAf+MS6jNdQIeXD
MD5:	FE8342DDA31B2BE369C5F5B7C29EF982
SHA1:	4EC9DBCC7DB6F56E5589A7FF5826C108226486D1
SHA-256:	2066B7E6EDC05517C01E33232617BD3F6AF2F4288A919E62878D403C7916A3DB
SHA-512:	9A9575DD0F0D4C1BDF49055E470561EC84F8C8D52B6045AA0C775A599153D24C55F799CAA2E66A13D3D548F39BC728219C43DA6D30FCB0AAC39FD78287C622C1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=770a7ecee8ce450c9ea6a12f2a0889e2.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:73783qoKH50

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.439179543892139
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyXABRRX/cxX1D3XvE:SbFuFyLVIg1BG+f+MygB/I53kjosQu
MD5:	08BD0752CE5383B225713100B3262C22
SHA1:	2AA91EBC972FC0ED1E55763B08B3F44913BED6A1
SHA-256:	FAD42C139DB7D70299C4523E446E90F5848E55DA39D700A222D759CCA972EF23
SHA-512:	1036412EC01DFD5F3563AC87D5D0BF9B5A5D2D95655B7E2BB43280F2570D92AD4BAF0B8C7D2C42B9856813E2FE3FBC8E137CF0C590434569AA1CA78E23030D87
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8aaf4eda622c48668fa58998527cf9c2.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75073Da4fYh

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.49903103350781
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsAhr9R6zBPwwxkf2i:SbFuFyLVIg1BG+f+Ms2ruPjZcHcljX+
MD5:	F814F6FBF88CD7EF8DDE2E4094F3740F
SHA1:	BEDD45478538DE158A770570FC2341201D9692CD
SHA-256:	C45B39F5E107BEA6D68B09B6E2076D3EADA38B023A1ABF13E41C6C8B5AE147B4
SHA-512:	3657239A37427062B61C26865FC0F2D8756EBB77E25BF17F267C96DB2E401A0B47F176C602CFCCADD7D6EC0972517B9824975DF5490EDDCC02F3C87D32C864CE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fe13060db8cc493bb5df67fb5e7db218.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:75075tjLpqk

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3744182958652065
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5MwVVbIk3jmvsZjsc:SbFuFyLVIg1BG+f+MSgVbIkzjjosQu
MD5:	23E60102925E04AB10BF56B17C3A32C8
SHA1:	793767BD3B59C497379CA2CCFA9DE95AAF848C1C
SHA-256:	121A03AC1447730D1CC9DDBFA6ABAEA8A8AB4E178E3058BAEE2ECD740C5CA580
SHA-512:	10474B27133B0B2D92633933AE220DF57B8FB0272A7229DBE79B7177F47AD4290418FDE541742896632D3B99744C822B5184417BEAB41668832D28FFC73AD9AC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=36ec687bba004fd6a6d0a9cac57ad3ef.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:750777rutYi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.45248817916829
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm90XQ21TLxVzddSCcC:SbFuFyLVIg1BG+f+MmL13xVzdQ6josQu
MD5:	C2A43F2CF40561B0982F4B65EF2985EC
SHA1:	5DDA65310C4EBF030753773B82C509F53857F06F
SHA-256:	5F20EFFC2B54900CBB7898C2F4EEEBDD2C8CA94DD6693DDB508922FCEC7A70C5
SHA-512:	7C7DEAC169AC7E358BE459B05F7A884A120E9C825D2E33DF114ADD60EB0443940DD857C7F53DBFA85394146356F33602EBFD8ECD8EB1C823BF269465CD58FEA3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7e662598246842c1b9f610b66487b4a7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75084JvWOph

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.373001781354971
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrNPxOFgDPDQ3Tjs2ALl:SbFuFyLVIg1BAf+MhPsFgajNALyAZD
MD5:	8B2DED4A97AA8EF1BEAA4980DE7F01B5
SHA1:	C6586F2B55FCDEB4C360B5BA6C47D0B5318DD898
SHA-256:	8330666B70F69D3F0089308BF126158CA2C9B817B899CE64D8EABB2FEFBF4F36
SHA-512:	DE676C3386AE8C33CE3160A6C23488807851210E3F237F5A8728E0674523B895ABB1A4930470E08365C8CA53A12FB18254BAF818A5E6E0F70628CBBA576F6D36
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a6c35c64aaec4f7ca5594fedcf7f1c56.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:75110dBOfWj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.489027802091168
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsoWRHe89kehuqjs2BbM:SbFuFyLVIg1BAf+MsoWheojNdQIeXD
MD5:	4377E7A39F6D0147273EC30A1BC35D8A
SHA1:	87FD783A0420614E7BF7092CA62D246B8CA21CFF
SHA-256:	DEBEB79269C6A701F704B2BF439FE859A2DED9082AED61B01F12FF8128A83577
SHA-512:	AB5A7AD30DAFC0DCCFF77AAE86C6E6B02009ED60E69DBB69C09985142E640FB1FC88C1DD6FC773374AFD98D922C42A081E4778C22FDBB4A45AFAB88C0DD4C111
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f65d8e154b7d485ba7a33a69702c31b8.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:75723FKJiXS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.5058208633865515
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5bmGH0KG0jsicWmIo:SbFuFyLVIg1BG+f+MsGNG0jZcHcljX+
MD5:	360340BA297EDE905DFB61F04F27AD0B
SHA1:	9C61791C61A7D886C520D8D5F180F4976F80A53D
SHA-256:	5E3691F087784C0FF6DB7B63546C5B8944B68925C8493A91C233A32AE1850E1D
SHA-512:	816DF6910E7EB6F1E3493DEC9564AFCB1B600B85277761D80AB76602EF2C3C26BFABE6EE0C773A6286A3B468EF697BBAFC7256F4380E56D8E15EB415710E1742
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=37355292589e4c7cbfcbb1c41301bc49.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:75725eE8TAQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.387335099854171
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmry2KM2REQd20Mqjsc:SbFuFyLVIg1BG+f+Mu/Mjq25qjosQu
MD5:	6168F0E11662F9C2753E6B53BE910AD1
SHA1:	B525AC46912044BD14635F03EA6C6B0DFFABF7E3
SHA-256:	AB35E8C60FB5D61357E10EC190F2DFE81642A411B48809F09BB69E65EB395141
SHA-512:	60196EA550FCD2FC99EDBC691F130A1D1261073A9032D93753EDCD8E7EED7683A038CBBDC57FF25EB005CA4EF4FABC537B92D13AC37C4AE7CB71C03F16A42AED
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a41de6c809b34a539a641de21bca8a39.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75726I95TaQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.399442527036183
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmofl33wXSzlsjs1Ha7:SbFuFyLVIg1BG+f+Mo933iSKjosQu
MD5:	3A3BA50666CC3E8EDB0817028A67329C
SHA1:	1B9BE710F65E6A4D28B5928C841D211C3F5119C5
SHA-256:	2CCB79C71409E1C7B700BAB07431DAA6BCD7A180DF47BF9BB6A5B6068F971A92
SHA-512:	5B1AD4D64C401782A073E2E3B07D797D3D682697313384C390487B1F369D02D7A1DAA4B9BF045C54E4DC2565927B2F2A62C944006B0A09510FF3D5CA29E87975
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b66d606c9e4c49ec82923e2d4432709c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75727qCFOyS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.370629969420532
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsANSyEBRFCJTjs1Ha:SbFuFyLVIg1BG+f+MsAnoRFChjoa
MD5:	D877309C39CDA0013B54665BD62CDEEB
SHA1:	D7D1686E41C8ACA62E6B46F20A222C873B5D1BE2
SHA-256:	59B8092EB37FAF8F810A70E7BA2E479DD1E8F8A6CFC38D9529B3869532B63881
SHA-512:	B00D229C96EBAADC3F1CB20F01EF9872A2A9B07EE84BDEECD800DD0CA7FEE57C20FD3B7C25881B2368DE36CE90C29BDAA07FC6A132A57F5ED3D933F28C0E72EE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f50da6e0a974410fad2d3385952179bf.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:7573413f1JQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.365441341436955
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrPWmZBRyeqQ0hTjsO:SbFuFyLVIg1BG+f+MCmZBkQ0ZjtWL0
MD5:	83FC22DEC24AD16B83861A3422B195DB
SHA1:	64C6042FA49A101925B2156C1A3BB9B171E01863
SHA-256:	DBD25987C442D5364DF63E569F34C155BE24011C399CAB185F866B8C246C6935
SHA-512:	5AC31CA5503ED76F05A1B2DC497C0585E3B7FFE41BB9D258DDF5F0FA7F3157B597C65AAA8465F6428D6D7BFBB261A67045E359E455F4B0DD3C45CF352D5B550C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa54368e1e3c4bb3b2290b91f1062845.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:757447QrUmP

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.3905699977582335
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8GDWTTjXwWhhkb3vJ:SbFuFyLVIg1BG+f+M8UWfTwkhkbf8jNE
MD5:	0CB91C253E19F7661DB74FB2DF5C5838
SHA1:	6F3F9F2C502B75F576C49043E1EAD0B9A3255A33
SHA-256:	3E4AE7742DFF6DFC39128042472233425C78CA4A9234624563E74F0C36EBFECB
SHA-512:	52D7D4ACC24FC02D6A74E9389D69A06545DBCA7443D0D05240A9C56DB12C76E01C6DBAC404465731CB96CCC449CFD0F4A320B33C0361B26EC585A939FBFE84B8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6cf35c6bf2ba4ca4beeaea903fcf5e20.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:75745MycwlQ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.401387872403268
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9XRD4AQTUSzIH0hT4:SbFuFyLVIg1BG+f+MD4Ap4lhTjbVC
MD5:	7BC65CA9F6B68F6BBC223FB7E3471F57
SHA1:	A65F0D7EDD9B5224E582D17803A80A0CB045B39C
SHA-256:	CC6011739313B6E31F9877F136980CEAE3FF86B951C7567D759F0C0A00C7BFBC
SHA-512:	28ADF5CDB753EA5CC5E6375AB6DF548575831B50C7B6441C59618942BE3F52AD78CDE3795C73EAD2F7E5247BEB77A567F3958AC4B19BAE030EE71132562C5397
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=78077bb379aa4e5ca179dc53177f672e.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:75985RrcPHR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.386835289692311
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoGsM7BxK0KhTjs2ALAQ:SbFuFyLVIg1BAf+MogK0KZjNALyAZD
MD5:	8F04778A9312BFC6FF710FE3381E3A89
SHA1:	5F597C4F46A3B157986BE30BB04F39742ACCC98D
SHA-256:	27F9C87B2714770C65FB07F4410F43D51B7E887C2D600B08D11DCE971E439FE5
SHA-512:	7AE11AD31A528C8835F34714D30F6BA6BB92E4CD8EF288C24E819574305C042883A730F9504FFDBD589926E788E1D07CEEF4AC61126CBAD5F10C88F8A9EB3465
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bcac0da4ad40451286e3c10ab2a1a437.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76094KFHjfS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.457994240922243
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7OVERA5ddgRQ9AWvsjs:SbFuFyLVIg1BAf+MqWRAKW0jNdQIeXD
MD5:	2D8550AE55BE06AEC23B9C6A812E42B2
SHA1:	56A0F5326D0A85E32EAD5173C7AB0763C1D578BA
SHA-256:	A7A09CC00AD95F06DC7A7567D18E3BA08167B2B8CF3B12C512CCB6C4989FDA61
SHA-512:	9717030CF2F184D833639904A07894FE660C31D7FAF65E8DEA536DAA33A3D5A8685F1E3A0F03B9A894C25427CA294C2E5149ED5298C5DDB3D6282FDA70482068
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1119bdf3fc9640df9061a8d3450271e3.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76103b3ntHR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.413638691342365
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6OdWImhXWqUYFsZjx:SbFuFyLVIg1BG+f+M6OUnPFsZjosQu
MD5:	AF3235F6AE790514920C969138157E4D
SHA1:	2902C94A451A66B93C9218AB1AC1DAE09C5FC2AC
SHA-256:	B6DE79ACF3F117A2B7E9B1E520E482BF67046744916C46B818B1B6E267A23CC7
SHA-512:	3A835412702BEA3FB6905BC78FD5E8490D65B35D5BAB49CA06C2C086E160F66850690C345B22E78B407056A107A75C5D11924BB983D35C84BB6E3BCBB570C08A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0d618391f76b44e9963291930e1fad79.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76715a7upZ2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496288492898138
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvclnKQF03Z8RvRqje:SbFuFyLVIg1BG+f+M6HJJ8jZcHcljX+
MD5:	3D7FF7B38C4AA5B3AAFDEDEA5C50F6F5
SHA1:	91DF5EC26864F2D3F01B56BE2D924CED8246C744
SHA-256:	113A0362DA62F2DDDFF01E9126FB1D966AEA6D4837D22F5A3DE2E7DD5DC45D80
SHA-512:	55B6D3B05BE275CD713743F3D5AA0B3808AFDA55B1A4233E118C8DA86AF35ACB55D222B53736B3167A3B07EEE87AB7E38BAB1364ABA6013EB95F715DDDFCC990
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e284e919372f4328bb1e87f0119a6b94.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:76716PyaGV0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.421526266515027
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DWBGF3CRWVH0js16:SbFuFyLVIg1BG+f+M8DWBGQCH0josQu
MD5:	BE23E0D19275944AAF125F044F800C3F
SHA1:	CD1B7C5A0A54C91A5608E6FF016A50E92760FDDC
SHA-256:	56EBCA129653A850CECEA852BAC4639D0F8E5FCD9C861DE71733AE06062E9D28
SHA-512:	7A77979BA1EE0D14338C6384246BD77CB139CF6781DEB7041D7C397983E2F1BFE6B18189FF354D9946D3281DF77506AE9404E401D6F7CCC6D24AD8803A45E09A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6fcd4d19cc304dad8787232a3fe40ec5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:76717vBlwr1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.403494413708985
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmukDSu0T6Auqjs1Ha7:SbFuFyLVIg1BG+f+MukDzY6RqjosQu
MD5:	D3CD7BF6B461D62F35FAFFB7FC55730B
SHA1:	E93A7C3692D2D790DFF380B210EB3639E214BE7F
SHA-256:	032C70E1DCD6018EDBB78BB3CB62F60D4A7ABFD45C4A8E0402A981D2275249F9
SHA-512:	0B767DD760B3163D13AE710A53CAFE9E0713B3CF34C6169B04594E39062B265A6A5D156CDC1E523643CA5E81D64DA249B9A99D298DDDDD1DB872B6744B9658EF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dbafa989601d485b84abc69baccd7839.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:767199gQTc3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3521954638003955
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/JiMWUqrLMqjshQJT:SbFuFyLVIg1BG+f+MRnLqrFjtWL0
MD5:	4DC5E44EDF1FE397AB7AEDEFDEC6C2D0
SHA1:	B7BFECCD2FCA71457C3B1CA9B19E0612E384713B
SHA-256:	62355AC7B9CBD90E0AA11A9E3C799095FE8C567389716626CA2E072B23D20C83
SHA-512:	7A83AF58B0CC3078FC34804BEECE16B373F747DE1ADFB007B4CC4CD87165411DBA4CD6C515BAFAC5F364B3E4280212355CB49CE6609182C1E6B7B50CAC3F3249
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=57f812d80aad43ed8005bb094259956f.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:76734uChM32

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.389687458011274
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6BhMW98PatF2jsjOA:SbFuFyLVIg1BG+f+M6TMIejNE
MD5:	5295A71CA0BB6EADFC6C0E54265747D8
SHA1:	7B4F4D4040D62074E66334AE3CFAA57F0814DA3D
SHA-256:	503BA381A5CE0E913D0AEECFF9EB0F1E8234B9CF8FF7E377FBF4E1D2A716AEEA
SHA-512:	2464DC688BC54C0DB9B222D934D29554BEAA960A773B086E79ECCC30222D2A2786D6A01873B213292992AD712E0524CCFE0AEE982F194F90BF9EE6FCE1D1F9E6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=06205cec927043a09e93a17e56a6e638.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:76742eEb780

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.364083599971836
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/nEk6xddStFkoGAj0:SbFuFyLVIg1BG+f+MQdIkoHjbVC
MD5:	51AEC053A2EBCC56BBD58CDC52E6DD93
SHA1:	262EC49A90182BCAD21AEACE4FCCC6AFA84C92FF
SHA-256:	FBE214CCA55121FB09B61EA51DD71C26DC09D53F2272A434729AEFFD3DDE459F
SHA-512:	D4C22E1E137CB135A6850C8CDCAAFD18082C15E16F3D9556A41D7883F7CDDE8603A0F71C789FF1C7C7AEB3978747836CAC32083F6A9820FCB9A315544F99DD5D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=562aa4aed49b4887aac7b18ad04ae904.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:76744yMITp0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.393971438468818
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MqRQcLaoMuqjNALyAZD:qgFq6g1af+MqfwIZD
MD5:	0A2F4D5E83865B6025C5AFCA4DF0A0FF
SHA1:	0ED0096554A830B2551480CDFC3B42371892B2DA
SHA-256:	75192E438D3D1123D46AF9F245887F0721983E993FAA96B6D70D4A1C6ACA6A2D
SHA-512:	ED708407BB269518B180E01BB40D887DEDE6FB3AFD6641F37FC02B82E244A042FFC5BC8D35C557A1905237FAD52023FB7E4C19A4936043FC7F5E19CC8D1A032D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7e138ea464434893a99a836382206339.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77527uyTBY0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.299895149965498
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmovYXGdANEEcO4XFlm:SbFuFyLVIg1BG+f+MovYLW1FXF2jtWL0
MD5:	C4A04E7EBB1B35240133854689B6A620
SHA1:	C0A3EA0277BCA6FFC8DCA806D972A0FCBD771338
SHA-256:	077F62A72E83C116A261D04198A5CC5C5B8A1C3755AFAD84868EE3E74BBCF59A
SHA-512:	2F5566CED9CEE9DFB6A8EA79283127342A0E3EA7B5239C738FA8EE747A988A7FB0993168263391FEB2D50D6D3A3280D6B8811E60FC7F20DC828BDCA63088C98F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b90d7d6c1a9a4bdc8e6daa9911a43463.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:778529PTGn3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.372695363735683
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrUSCBrQdlTI0XXAH9:SbFuFyLVIg1BG+f+MYSCtQdls1AuTjoa
MD5:	89206FB50B313FE1B3A21829EA58ACB3
SHA1:	1A3187C3BDA91E50E8DDACF878937AF44B7CC67B
SHA-256:	6E5F237490F84BD63D17E2C428E677A359B58950F17FDE51ECD7624301EC29A2
SHA-512:	43EB310FE0A2E16631D172D446E4AB14B350A457194E974067EE415E299D0C7AAAA90D5C51C6B61115AB8FBBEA3FFB86BFBCEC6D02C978697F6F1BCF9BAD1ABA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a8371b8dd8584f65818822ebd2f4cf0b.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:77946VzJjV0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.434767093316168
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+fEJy3bjaTUhsjs2BbM:SbFuFyLVIg1BAf+M+sJy3aY6jNdQIeXD
MD5:	9B8A219F5CC4C04A628703032CD67E4E
SHA1:	777C65C9477DFED0AC76AE2CB257F5E594843EF4
SHA-256:	E2BF3BA5F6AFED9680C5F2F3B250CB4AE7D34C31C882E7FEA544AD7294204E33
SHA-512:	47F8F291A65553D279D6D4A8D519D5F42CD43EED008F373EE54634B3BC11908F36889722AB98664A77D057C6E279C7C0A508CC8144BD96FD7BA7B77715EDA7A7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4ffabd8dfda44eed9ba7846db963615a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78846S2rAAp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.381640179509383
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuZPBXuUeAETjshQJT:SbFuFyLVIg1BG+f+MuZEA4jtWL0
MD5:	09B98E4596383417D81BAB40BA40A1FC
SHA1:	BB82F980923161BF6AB3A3FB03ED7E6420299AE7
SHA-256:	B4E20942BC680C41275DFE14E233755212B6982C092F7AE0FAEEE58AC72ED17A
SHA-512:	B2B01B5087CCED0F18FE94A96791F0E1FA7EC7807FBC8C3BDC8F19AA202E8301FD9662C97ED00C28668930F69C5E3BD9BFB01CE6CB00AE91C4BB708A85567281
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dc65b5ea9fd14728a90bdc5121c875ef.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:79435qNxiBp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3676028943974154
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy4DWMcE3A8fXXHQ7u:SbFuFyLVIg1BG+f+My5Mc21fHHSH0jtT
MD5:	D6DA12FD8B29DC6D634E8CB67FBA5A32
SHA1:	4221F98B7B8E01B1A558B04E479C005A982F1374
SHA-256:	86ECABFBA7589EB860C0948F23899EC990DB5AE3BD8EDED212CDB4E1128F81EC
SHA-512:	32E05DD64B4CFEC419723C87DB824EDC3362360D4D5D6B3E4371525CD7F95855129C392D77D859D92126ADD5794C18C860B3D894BFF6320CFFF7FF71CD5C94A5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8184f3292f5a44bea2f66352b53a705b.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:79436jRAnAq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.328868109804521
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmurOVRBVwvHlsMxsjx:SbFuFyLVIg1BG+f+MuIUv2MqjosQu
MD5:	EEAC907543ECF36772C8B9819893F9CD
SHA1:	1B96ACD9D9DF2E913AEA8EAF3FF5F92278950235
SHA-256:	8509AA6C627F1C0BBB68C488DDF26821822501C807EB1C362041171FEBEEB4EB
SHA-512:	A6A7729D129E759D095CC0CEE0BD106DD18BF0FE34FEE4421175A9692777683DAB36992C104A78ABD84B108CD41FEE74076290F17E6E6A4B9CB705C18EEAD5CB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d4e930ca0eba4da0ae058ab84823e29a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79437JBNUpo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.379597435677555
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp9G1NQQhVUd0wsjsx:SbFuFyLVIg1BG+f+MvG1TIejNE
MD5:	0CCBE8C3CC6246089BAF2966F0190EF9
SHA1:	2A7A2A432E182362EF8E47EC102B6F743C7E7CC5
SHA-256:	ECDDEA3FD4EDEBF451A83BE9574C5B9F54F1ED9808F4AA80FE00D01DCAFD2009
SHA-512:	64AE95E762042F80DDC45443DD24C36F4E7130220A2CD8BA81F2523CA27BD0C4748B58C26D9C92CA2A9140BA0423099B11CC24F8ED7CB19B8F1B17876201B3E8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cb1acadc422446bea556a90d262dbe1a.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:79438uXW04p

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.442203925591703
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuVHARcR9ATjZcHcljX+:qgFq6g10+f+MqAK7qmAu
MD5:	BA004668E88DC93E5119C6DC7B574633
SHA1:	B2A62FCD9EFE532599844CA1C3762C4EE3CEA2EB
SHA-256:	22ADFBD153F7B93699ECEF02A1BCFC879F473AB4272A5CCD6AB3E6995ECD865B
SHA-512:	FBD281E91E808AD809A873AA3CC359E3B3985E6987BCB43F3799AC83917B3A8FBECC2CED76785A3AFC42A6F48F0BE0010AF36217F13EC48C3FD2824432FE9F7C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d93057e4100041708694008f3a7aaf86.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:794397CGHVo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.390736392256717
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7FMYEGA/qjshKJvel:SbFuFyLVIg1BG+f+M6YPhjbVC
MD5:	0B0F851F89E6210D415BE64BEB5E5427
SHA1:	60096208AEDFA8730C12DB8AB40669D3A82BE702
SHA-256:	4909D9C57FAF1FA020DAB4D8F7765B6E23D3004749AE0E059737CC6F4EE6ED48
SHA-512:	A688E7B5A833926217F1EA93658B9AED6C9BD6EDC034F0368A63E4102EBC3A0E68F7891E9B88C9D6A8EF81AF20A53B4B1118F6221FDBD5488319BB7D4B676A69
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=11ab046001784ba5b7c44fa7ee566e9d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:79440a9wV4o

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422693295114961
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmutpa/RU6ATjs1Had9:SbFuFyLVIg1BG+f+MuzV6ATjosQu
MD5:	5CA5BBF20434E12343E4DBC26E3DB289
SHA1:	132E48E7483D78AD021FD060B8BFC604F0CDD389
SHA-256:	B24AC289D5AAB871AEE630B9F27CA817B694974C65780B12CB130654CB69E03D
SHA-512:	A6E8BB2EA7826472A2BBF232E45C5E1B1F2A502A6CDE1F2AFCB25DB4EC0DF0738898B071A0D1A1EFD632F30E081030C49889FB6C606FD9954FBE1BAD9667A8F3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dca1ea866ed64780b2a089cf9b133315.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79441o2Auoo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.480512697502596
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpKEIybW0UzwjsicWg:SbFuFyLVIg1BG+f+MAryWpwjZcHcljX+
MD5:	C4C6246B559064D7808D3E0FB2655041
SHA1:	EFE1519E8BCF1A7DBF6D99DD5C79F5D572792E4A
SHA-256:	DC3EC0F03A6391308ECF08EF8791B9E818B1E824927A891AD6ED49F39916867D
SHA-512:	9D103FDC10C5F22DDD6957C38C9CAB3BBE6405084AF458E8F987D4C831A19668F92679E8D2CDBACBBEB4252806502120EAB7E99B4F5D7258B984640B9CBCC2E3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c8ac34f8ced84bc3b1623e4140269946.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:794420UtGEn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.329733663127396
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuKzzm/USUHeddQswm:SbFuFyLVIg1BG+f+MuKzMUHeI8jtWL0
MD5:	D26E3CAB05BA2E6768E79D6CE65F2B31
SHA1:	7A877D7E265F5C9B86F1249A55333B40AF1DD13D
SHA-256:	5ED9E5F048DEB6A779209F08BCC52D818A33D37313FEF2854C6EA0E41577F6E3
SHA-512:	A6B12A8AF1D00CD7387E3A742E41980283139FF93C35983938C7259765623EC51BE373B7DAA0113085C79F0B281960B7E61B68547D4E0CB05D93C747037FD041
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d6caa710404e467581411e236b6788a2.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:794430nCy1o

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4299095394305334
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MfjT/WRIsO2QHTd0josQu:qgFq6g10+f+M7TmO2QHTdiQu
MD5:	72EC2DF69614C7A28144D15661CF0ECD
SHA1:	7DDFE540FACFFC15065F0DECC30383D330DEB514
SHA-256:	7793CE6C0429995430C6A14B02AC100841278D48D8E739F6054FB5F18E0DE2CF
SHA-512:	3DF7DE02565F8432DF8C12E055897D61A9F228D4E6A3C8C7D3A07B9B1335542FEC78E7E8163877C1E0FB10BD4FDADBE4D2937B10CB49889D07E2B45A8179129A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c862756a334149a3878db35573d1ccd8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79449mbGajo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.455430562612624
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoA8nScVAjRT1SHtX4j+:SbFuFyLVIg1BAf+MopS7hY4jNALyAZD
MD5:	008A85D2DC1EBA8847071B8EA4DD8B42
SHA1:	5AC9AD31E65E3A81E526B6EE9E7C877569491C89
SHA-256:	A21029E949860D589C2220A5876570D17F16F85568A19B02541317AD4BBF8406
SHA-512:	8AEC6FF6A4F89A97DA23A54FA9DBB553DC941D5A56761DDE9DF94C6B032A1B8B569994366331157278ED0D3538011F07E41A42109BA9B4290396D0E582C306B1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=be5e3c78309044468575463367b6062f.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:794509DoYBp

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.43286440974407
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmriSXLQBRHGXh4WWL5:SbFuFyLVIg1BG+f+M+ksmRb3jNE
MD5:	9363D1411C058E7E110B15A181C1A0FC
SHA1:	589421B20B9DB734494E9EAC4B8BE22ABAF1EF87
SHA-256:	354BDE417CA63C686223939AE8298B2EC406A9D7A92E65DC68E36A79C4712E02
SHA-512:	01BFAB8007141EED7963B5952F8E71A167A329AACC7300F95F8A2AE7D73E9D3F0313A68C4E69294236E30B638404D0D3BD5A169FBBA5D7D4C8655AF6AB0347E7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ad1852f75f5d4bc2bd507571438144d0.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:79451zGxL4q

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.427460935661542
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoEFNRATsxwcW+sjs1:SbFuFyLVIg1BG+f+MoEFNkftjbVC
MD5:	42DCE60C70AB4A37C3143855E86D707E
SHA1:	B863E42911440CBFDCD851D27055C46AE90D1956
SHA-256:	28398F59EBA6625F086A266CD363F58521C0D9C4E6E342A0F791983BB4B4C814
SHA-512:	718C733ACAF093BF7B6032772F97830C82D08E57946E2A495879162D35C247CC170D1939BEF4845B71701D6F5026DE30EB11C1BC50520E570704E4647F6D48F5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b170755a56404a67868db221feb99e70.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:794529SCCnq

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.484503544070395
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmpWDxpdRWAWjRqjs2BbM:SbFuFyLVIg1BAf+MYDxRFWIjNdQIeXD
MD5:	E470320354569B926322139EF09449E1
SHA1:	77BE6EA9E302E04E0872E89DC47904E69306CEDC
SHA-256:	1BD33ABAC1A00D1315312496797B028DB40914E760ECC7D71EBBBC6B911E3DB7
SHA-512:	CDA74BDF551B7BC3031397024F4B561C512D636F00D05A471D92390783319DDEF628A01B4CE0BCE35A739AAA377495CFB6FEC44BBCE1876F85DF9AE64B85C184
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c2c0abfc89e64d7a81f1a746f43252c6.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79455VHH0Wo

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.3531530700132315
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpIHTTHRfxXMNrqjs4:SbFuFyLVIg1BG+f+MeHTTHR5Xi2joa
MD5:	09CE8EDAE7B01F4078EE42AC852BD609
SHA1:	126A4640E3C92F0F71A5CB009BF804DBC0B653C5
SHA-256:	49E9219F28DFFC34DEB4A6FE6A0D3EB6BAF0CD088D3C07C019832B553C7C0A52
SHA-512:	DC29E8CCD22C82C8AEDE04A2AD34395145A9B3387D43E1660C33970B856FAC35ADF41474D5CF8EE33E50A8EA715C2AA2D4E274ADF5CB8677F35A2E27547972D7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cf33c4b525654abfb156b46ca2242a4d.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:80562rRV4yy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.382220596856213
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvAMhVIURQ8O2js1Ha:SbFuFyLVIg1BG+f+MLsUvBjoa
MD5:	F58D5AA389659CA79F59EEF2BDD63F06
SHA1:	6350351FF0FACB4EC30B34313893207300F0831A
SHA-256:	39154219EAF9C67DA86BC073C5E24C670EA63B78EFF0C3A04B9A3E9CDD881A34
SHA-512:	5CE6DCAC9B3DD1E13AF8E1C8A2D19AC7379EE924938788ADE672C3D6B0853131DB324F3E7BB9FF32451D8B81AD5DB4D58A4FAEB960019397AA15938232FB144C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e41610672901436683201fcc77cb4ecd.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:80650Zlp4Ut

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4629151243455425
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5kt0hdVAEpBVNrqjs2y:SbFuFyLVIg1BAf+MS6JZ0jNdQIeXD
MD5:	C0F3610EEE290BDA0D9F23DB80C82C41
SHA1:	B180BDB553FC9A5583A7C839C389F2784AFB4E32
SHA-256:	A8E64C338F0173AE62DD73C12D1E6F6CEC1304F2F3C131D74FB19FC8B080E606
SHA-512:	19A24E63F4F1BFE85BAB7B034B8D92B0ACFE28DA8535D120F6EFF35383D63B5727A4D1DF708A3B3CDD94103F228CAFDCB4AAE6AA56DA206E0BCE65EED08B621E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=34c1ab99a8fc4992ba85ee8cd00d4536.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:80767fsDqmx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4561349786956495
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9jS/3N02lsjs1Had9:SbFuFyLVIg1BG+f+MpSvN0ZjosQu
MD5:	1D1C2C2EA7488B69F80BC0ADC4094D5F
SHA1:	B9DDE295FF348F5D7F3AF90F76C5E942B9AF40D0
SHA-256:	3600747F9EC5230E945F7A77AACCF08ED1C1E245B9AD29D9BE2F88A1F90305F0
SHA-512:	6881CE4F2C4E7F102E4344AEE8E756CD4801F527945FDEC4DB1209658C08E61E5BB1FBE835474910F0293F7BBAE76EAF4C784304576E561B9A9028A70C6ABADF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=750768c1578347599f8e288cb04552a1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:810636judjv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.505630663477614
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M+1yrHtWJqjZcHcljX+:qgFq6g10+f+MJjtWJkmAu
MD5:	95B864BDC7FF75AED447D33AE614F394
SHA1:	C1CB56E75477B5D5FBCDAE6FFD3AA0993237F8D7
SHA-256:	AEA19DA3FF4B2506634179B467109E77F6FAA3CF030F2C5971C142E9288D326F
SHA-512:	18B019ABF072918D2BEA7FE8718C136D5A7D25F8788DE7E63B3B0C3974F7A0D9372EDD20787B466A63DCB3E3D7B115AC5C8E09433A2D857AC73AB948B161444F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4a5e5668274d49198a2f41ac57543fc9.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:81064KL32ox

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.450400239528052
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmrLAXzvovJRQN22jsc:SbFuFyLVIg1BG+f+MZ4NZjosQu
MD5:	26385EDB9DDAE30A2B175DE59CE6F151
SHA1:	AC58205D3A0D930BDC2192C861290B23252D2053
SHA-256:	6AA0244244AFC2E5659B059DAE9AA3EEEF15741A6DA7F3ABC61EF42360367C94
SHA-512:	62961BCC77497024E80700E1577823CB769DA028E9BFB9AEFB819D24ECFD5A26765DB48505490F926CA5847B5F03CDFA788F6C89CD0121041FC04402F7B8A5B2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=af2e2b12a8834cc681f296a7a9f45ce7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:810658jQLzv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.320072591367908
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmroB1i0r3DVORZfS0h:SbFuFyLVIg1BG+f+Mh0r3DV+ZfS0jtWQ
MD5:	EF37C6AE9C10E5B1B1391F2458BF6B67
SHA1:	986659BC6E940EB1C2D40D1F9399368621ADA941
SHA-256:	645E10042FE6CF5DC3D1BEC24C5D8B635256806CAE5F02F7B630C3B42F14CD01
SHA-512:	5648BD5CB3E534C437CE74BE21F9796FC62647B66626F33CF35C77759D2D09D27E005D086C68EE7F91819724888A5AC829493CAE02FC3E319BD4BF5624BBE8DF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=aa413d5bc4ae4d88ac4f0f74f0807237.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:81066gV8fSx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4289104761671485
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DLlBWB/LRRbosMqd:SbFuFyLVIg1BG+f+M8DmB1REsZjosQu
MD5:	04E096DB1A5C1439DF48CD1B64A4E5B9
SHA1:	27E7B7FD2B21ADB063A5FF8E0410815D55DBA52B
SHA-256:	1EF64C4DC98FF566167A73247ED311DD38FF19F1F012BF220F12CE2789E1B993
SHA-512:	13034E35DEC5857F14F4F29D681C2C69A82C2D638C9B8DC37C98E9889CE732276898FB32A6F02839E735DB621B7EE151F4A85E37D6A939EF1F9F476208265DB8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6fe191b6303243d79b2a3f8646212d08.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:81081xGK3Gu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.387077913399344
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5JTU4DDW4UBNmGAS/:SbFuFyLVIg1BG+f+MLxBUB4SZjtWL0
MD5:	93602ED757341489FA47D47643FFC173
SHA1:	E6C7048C50F3B95DFA69632A1F2222177CACCF30
SHA-256:	123052C665EFE8E31E932CDC21EFD933C8C60083C8E0D95BB225FC3AC7B7D0C8
SHA-512:	79BD1A453798488A2F413B80FCC0FF8CB991C38129185DE1B094309276F0EB727933810DAA50BF550B5BD4AB3D11D20B8F5CDB40592A73BB6C27E4B522725614
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3167617bdf4c460385fe81d1192cce5d.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:81082F1rKNu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.446394171323711
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7h6xRUTv+NWDWERqO:SbFuFyLVIg1BG+f+M4RUqtE8jNE
MD5:	23A2769AAF335E708E960A6D445A473B
SHA1:	2ADCA5CD9AF09DA728905671A8A914CB27EF433D
SHA-256:	4EE2D999C024A1D767E18A57C710B36A5E6C2DBD0A46845A800D20992E86D35D
SHA-512:	6694A58ACEED3F2A9D1FECB86DB250835FDCC9B4C295A38667F08FBD371D2E8ED27E793DD1293F8DEB082CC75BBA3642D3C1CF62475BF66C7D220FA40793D1C5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1c7930fb1d5c418aaac637ed283f39b8.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:81085QPVZFx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.400300952761688
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmp5TXU7HyETxUs22j0:SbFuFyLVIg1BG+f+Mk7H4sZjbVC
MD5:	F29FA2F1B52F032CBDBC12DB65E2CC81
SHA1:	EAE89461486D2FFB7AE53F50C88BBB2786B8DBE2
SHA-256:	0E9298790DCAF74A6410A17B9E3B81DDB4490573E22510898E8165BB80AFFB78
SHA-512:	D6FE2AE19F9955941ACC9B2D8082DAC2295D1C6A3C47FCB8C28D4E30A1A9B70F7C5BCF0BC64EAA701CACA7AE384C6931F1BB059C611859C5DAAF32E4131AE32C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ca562148be254cacbf67d59e51aaa05d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:81086He2yEx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.397998346170708
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9BiSddMETDTv8js2ALl:SbFuFyLVIg1BAf+Mz7pv8jNALyAZD
MD5:	B7FCAF8DBD3CC6022BA820D47558CC15
SHA1:	3A4C66A3AAFFA33C70E0644EA878CF0709972C07
SHA-256:	EE2C90CFFF7784D6D76718872D3F7ED1053FBE23A1B3061CADE7090D3514D382
SHA-512:	DA21D1040930B65E43F1C4F93B0A83C3A239268552FAABA7A9BF96066F71F6825D8AEDEE4116150872D2488D8D7826F0757335A22CEA78BB65C5363F7CF62F75
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7aafff7e96764810a70a2dd83a9168f6.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:824331RbGHF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3279805031659
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmypAXURzyV41Z4grxm:SbFuFyLVIg1BG+f+MyuXUcV41yjtWL0
MD5:	06F05C3A36855E6066C15F228D9C6BA6
SHA1:	96F56BE1ACA97D550DA829B42C12E62BBBE3B1F7
SHA-256:	8E1C49B7C49E8601C6C56A2F0AAEAB02D7106158069F89F46FB886E64061C64E
SHA-512:	9986C499617E14CC2A3C9C5DEBC23D8B5FE6E49565261389063F0736711BBB3219201BF1E72CA54741D7BD8B603A5E82736F6EDAB31C070473123C9713EE6CEE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8ba4ae2143c54ac99a290062e23b51eb.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:82434PHw6gG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.484734456109052
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4qOLNtgNjZcHcljX+:qgFq6g10+f+M4qctgPmAu
MD5:	1C56231B5D563448AC77F6A48A77434F
SHA1:	94CFBF81252B89BA9F9ECBAC3E36ACFF30A588BD
SHA-256:	2D93B6136607E9A5A01454936105E6FF41FF2A20091A1188B7A1D0FE9A0BDED3
SHA-512:	DF757FC96EC75D18E2F2D631BFB1761E5B634D1A7A25942A6F6352A173D27D1E7B6272C16287A1D69EE3B6028D853D164C1B081D9E330E1322E9D21712D09E09
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=28b5ac17c0d64163a79e76f26a2b20ea.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:82435mII7UF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.405940005142204
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7pAEXwRDOuXFcWq2E:SbFuFyLVIg1BG+f+MfXKOu628josQu
MD5:	6018BEACF4C4068821A7B9BACAC0B2FF
SHA1:	46F8FCCF6985691A80F0E4599F3569BCA79F135D
SHA-256:	AE4C21ABB8CC03EC83332989D5B7256A4A303E7B7DBE573AD4F5A5A0512CEAE8
SHA-512:	BF2FA68973217C9EFB855E9CCBBD34485E631B24B65A249DF4CF679414C89822B60B979846DE5825B08DF99F685939FB043557428675753213890D964CE630CF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=10fe7d227f4f4f1ab3de0fceb9349281.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82444oP9cWF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.419059751445855
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7HvR08VkoC02rxsjx:SbFuFyLVIg1BG+f+MTvR08aoCN2josQu
MD5:	4B6E18D5E1EFDD072F0134014A5DF53D
SHA1:	2485FF52A21A5DBCFF3A7FBE1B3E7326F52037FC
SHA-256:	F8EE739A167067CDC99EF24E15BC51227CFFEBC887AC0502A8659D7F1B8DFABD
SHA-512:	DB88A0EBD872FD1BC4CA905AB82B04B5433AE39FA7DC3BD00799B4D023EC97DA44930C44FA442108B831B4A3B722CE0012CD89E6ABE87985B6913B6310AB7674
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1760740037494f278c6ad072dc8e9180.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:82451ShVXWG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.33692543505956
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4FWROvdNKKHrFA+sh:SbFuFyLVIg1BG+f+M4zPKKHrmTjtWL0
MD5:	569B8C7A26C5556D309737C43D2A2420
SHA1:	8ADAC5495715D54BB9B0C9D498B907F66FC62E5E
SHA-256:	39C8BDEA79C7FC2888FB9F34D01B317336FE88622CA4F6982ED8C9746F654D74
SHA-512:	291E9CBA97E9F044E93C13F0F2E001F10C2FDF5EA7DB84AFA03BBA47D770B4FDA5DECEA1006169896468563880670DFB49CD5A7822F660D93D39F8F00C1AEF3C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=26d23cc309384b8d8eaf7ef3f0ab0d82.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:82452gV4MUE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.413194733468668
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmo5VU2T2E1WJ02rqja:SbFuFyLVIg1BG+f+MowpJN2jNE
MD5:	13309608A7C52BA7C8FCD752B8D537CB
SHA1:	E7E397CB672B9F76396EAD3A67300DC8C7FC096A
SHA-256:	B008DC7158A61DB4DEC241AA1FB50E48B6EE7DFD8D155C50E19C5021E45113BC
SHA-512:	DE2B972AFFCA3F02CBA97ABF8D4205C3761A16DA5142915385F68E95109D1092EC0AB05A6DE55DE9BEFE3344F0D47B60D6B26AC2CD3333DB2D9BCB7B61A0F137
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b0664269de664a05b77dfb5a4e6dcc6f.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:82453wvZrQH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.395644277432988
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzTDpRmw/D51Yuqjs1:SbFuFyLVIg1BG+f+MjpHN1YTjbVC
MD5:	616D07AA730BAC4760FE81166330D0F5
SHA1:	194C863EEC9E05F4A534E54399BD5AE89A4F245E
SHA-256:	845143A380667EC496ACA145DA75FF3D855F55D4FF95E4000CDF025149AA2309
SHA-512:	D9BC7EF945736340AB4C00571DC963AB2500DF4ED5B5515E7B98FB1916318C8A16B7DCEB2FC547658F30DB6A8949533051EEEC7E4B00429FB4CEFE8FAAC8261E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=92f7c2060fcc4e9d9bda62b6a971c49d.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:82454ke1kmI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.415476469633752
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzKwvdRMswsjs2ALAXaN:SbFuFyLVIg1BAf+MngsZjNALyAZD
MD5:	5EFDE87F64D90AA5B4D1D17863B15E15
SHA1:	96E0D38423182FE554681414DBD2F0CD8C92FCED
SHA-256:	146AD62250FBDDF1B109A82708C193E3F78102DC85DA4B87D30599DD467E867E
SHA-512:	6426C0C279D9E6B4E52086D7DD15A19C17DC4C8952377341C122623F437E971A8E421613C6BB2E5B545BA855924FC196712D5AE21F08BE2D371B6C55F54A71E7
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9a50c64db25e4a5b99a6ee9a457cb262.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:8246318uqgI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.34257105943122
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmypRvyGRAdX4lB5WYJ:SbFuFyLVIg1BG+f+Mypd/GXQDW0joa
MD5:	379FBA92F051798EE07185E6CBA4B036
SHA1:	F01C857B1DE9C035F0E36E1DF6D510962B846E2A
SHA-256:	EA6470925392C4F5292BD35DC7F8C2D54F193E390BD36C52E2DFD303CCF9E1B6
SHA-512:	D765D7772DA04E07F3AAC1AC3D0EAFE42C1762E9A07DC20CB176BCA678B984DFA16E0FD14D6B1E554361C579C3F3899071C5C76322182996B4B2BA758969336B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8ec040157d23435582a49d53ca545aeb.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:82569vnsjJI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4710505797950555
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/tWNtAgjRqjs2BbQIeT:SbFuFyLVIg1BAf+MsMgVqjNdQIeXD
MD5:	1E674B1F5F77970AA8A9533162924584
SHA1:	603CA8EB64C105A055B69F248A39713D677F185E
SHA-256:	F79C2FE551104DBA7F530A3BC030FA4656751FA9BFCF58EDC63353A3F7FE4381
SHA-512:	BD7950B2732240C48C5AFD9C0D96314E5A28484F7760A5033DCEC457FCF45CF13580D8DB2128547608B9EBBE10699A71F23BD476B25B0D9D1B2E22131772E4B8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=59932fa41b0e4c09926a072e04c52489.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/seats/.#seat05iMkIe

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0CB3lKJ

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0D72pT3

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0PvLoGe

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ReJZ6K

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0XmJFL3

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0colaMI

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0hjBZ5B

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ilQ9oc

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0neZcyy

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0pd5zve

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0rezBg5

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0sgTE6T

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:Ic:Ic
MD5:	6D10DE51B68AB82F80B21E068F54C191
SHA1:	F52B79251DC31767CDFB233B1F9F9AB9C28FFA0E
SHA-256:	BAACFC8381D29ED7CE7DFADC0920B2D494248F0650205C0FA262C5547FB9AED1
SHA-512:	15751FC1DA06D612ABAB3B60296ADC94245F3C0BB6209365CD8F8826BE8A43A83653254B3B6E96387F291B539894B24797D1329869CEC4068821362AC30D21A2
Malicious:	false
Preview:	6987.

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	782
Entropy (8bit):	4.908257403025465
Encrypted:	false
SSDEEP:	12:DeF9TZPaV5pMHeF9TZPgKMHeFjGHeFn3eFUnMneFoAvmIeFoA2+V1eF1L:QZea8Z4BOGG3yAvFA2+VG
MD5:	50957A952BC648A7548BEB75D1A03334
SHA1:	AFAB10BC4347A93A2B8FCAC731CA959C72F6C11E
SHA-256:	94FA5B88C65BC3C2F061171403F52154C504AC604DC7CB30C6FFF2D65D15B3B5
SHA-512:	53F81C976B41455B90B6F997E9022844F9F104EF0AB82B473F3DB10635A7A3A9DFA512969A30C49BD950D03102D71DF93D1820EE4B856AA92C0F467749CF0D92
Malicious:	false
Preview:	Dec 28 17:30:29 galassia systemd-logind[6926]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 28 17:30:29 galassia systemd-logind[6926]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 28 17:30:29 galassia systemd-logind[6926]: User enumeration failed: Invalid argument.Dec 28 17:30:29 galassia systemd-logind[6926]: User of session 2 not known..Dec 28 17:30:29 galassia systemd-logind[6926]: Session enumeration failed: No such file or directory.Dec 28 17:30:29 galassia systemd-logind[6926]: Watching system buttons on /dev/input/event0 (Power Button).Dec 28 17:30:29 galassia systemd-logind[6926]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 28 17:30:29 galassia systemd-logind[6926]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.426192686117159
Encrypted:	false
SSDEEP:	3:F31HlXTtmll//vTtmVl/:F3Hw3w
MD5:	3778E0FC97100CC03F977DDCC9D7A3E6
SHA1:	53A3BC2DB62D868F918F0415DCC7E3D4409C01C9
SHA-256:	73D04931221FA56DF13E2978A6BC5E35FF251A56602F63D3E7A804E5954D2E0B
SHA-512:	0521B6E7FC00F2562208DBBBD22CC050CA3891E9B823361537D97B9E5C734E8847792B809B06F1FCE47871390F496A29BD519C478805B3C12E6717710DA81EB3
Malicious:	false
Preview:	LPKSHHRH.................}`..oJ..].}..C.................................}`..oJ..].}..C........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.448047321524811
Encrypted:	false
SSDEEP:	3:F31HlnsQsJd/XPsQsJdnl:F38zMz
MD5:	DB803F9D35261ED7E000BB68DC3C9E62
SHA1:	5F6EBC436077B19F948452A0F6956748BE7C1C8D
SHA-256:	6F0E57D43AF7807869185E0CC2044FA9C555092D54088B2060D7B589AD29C812
SHA-512:	292C02525BA216D0DF3F98D710F7A7C35A11D6A2DE1974BD97730C917BB9235D77CA009C50690DFDE7D1DEE20376C088EBEEF6622235F083FDE1D2F1887FDC2D
Malicious:	false
Preview:	LPKSHHRH................_K..t.C....6.D.................................._K..t.C....6.D..........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	4733
Entropy (8bit):	4.796515631347424
Encrypted:	false
SSDEEP:	96:YkDoJ54UvjMj28W7h7nPXnwon8FOCCbGKcNwmqYxQQqRZ:NY3XZ7
MD5:	FD3311DA30CE54F710420015F9C96993
SHA1:	23ACDDFE642501B68C8F47CC961C6B0EECFC5EFC
SHA-256:	C035DCCE2AF6F6F95BBD9D2309222EE26F7E2801932A8ADF76672689F6530CD4
SHA-512:	AA73F4BD78C1F0F0DD96C1B993969986D130DA6986072034665062F8E72C3C1D2C7FCFAA02B97DA6285BEF398B211C60D37F743882D1B33E068547339619D292
Malicious:	false
Preview:	Dec 28 17:30:22 galassia kernel: [ 254.295896] blocking signal 19: 5485 -> 3157.Dec 28 17:30:22 galassia kernel: [ 254.442210] blocking signal 9: 5485 -> 661.Dec 28 17:30:22 galassia kernel: [ 254.564664] blocking signal 9: 5485 -> 725.Dec 28 17:30:22 galassia kernel: [ 254.687472] blocking signal 9: 5485 -> 767.Dec 28 17:30:22 galassia kernel: [ 254.810140] blocking signal 9: 5485 -> 769.Dec 28 17:30:22 galassia kernel: [ 254.932505] blocking signal 9: 5485 -> 780.Dec 28 17:30:22 galassia kernel: [ 255.054830] blocking signal 9: 5485 -> 940.Dec 28 17:30:22 galassia kernel: [ 255.177114] blocking signal 9: 5485 -> 1299.Dec 28 17:30:22 galassia kernel: [ 255.299028] blocking signal 9: 5485 -> 1300.Dec 28 17:30:22 galassia kernel: [ 255.421793] blocking signal 9: 5485 -> 2955.Dec 28 17:30:22 galassia kernel: [ 255.544010] blocking signal 9: 5485 -> 2956.Dec 28 17:30:22 galassia kernel: [ 255.666046] blocking signal 9: 5485 -> 3157.Dec 28 17:30:22 galassia kernel: [ 256.27958

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	14952
Entropy (8bit):	5.089100950218771
Encrypted:	false
SSDEEP:	192:NY3TFt+LnnOABE2H1U+/adVHPDcjfouVjb:NYDFMnnOQHuP7cLxdb
MD5:	959ED5D883709BB3214A7362528E5C42
SHA1:	956FAB76827EAB6C66E053CDB916277424482965
SHA-256:	EFB79D74D78CE9F841C1070F268398EE13B0E43ED5F62AA23A0A33370181B3FD
SHA-512:	98DC188EAFEDF9605354C96411F5D0591383365D51A762603DAFD19A13AAA192CA757C2FD96F1BC7DFC7D4C58F6F360404539153057D038E77630586346CE90A
Malicious:	false
Preview:	Dec 28 17:30:22 galassia kernel: [ 254.295896] blocking signal 19: 5485 -> 3157.Dec 28 17:30:22 galassia kernel: [ 254.442210] blocking signal 9: 5485 -> 661.Dec 28 17:30:22 galassia kernel: [ 254.564664] blocking signal 9: 5485 -> 725.Dec 28 17:30:22 galassia kernel: [ 254.687472] blocking signal 9: 5485 -> 767.Dec 28 17:30:22 galassia kernel: [ 254.810140] blocking signal 9: 5485 -> 769.Dec 28 17:30:22 galassia kernel: [ 254.932505] blocking signal 9: 5485 -> 780.Dec 28 17:30:22 galassia kernel: [ 255.054830] blocking signal 9: 5485 -> 940.Dec 28 17:30:22 galassia kernel: [ 255.177114] blocking signal 9: 5485 -> 1299.Dec 28 17:30:22 galassia kernel: [ 255.299028] blocking signal 9: 5485 -> 1300.Dec 28 17:30:22 galassia kernel: [ 255.421793] blocking signal 9: 5485 -> 2955.Dec 28 17:30:22 galassia kernel: [ 255.544010] blocking signal 9: 5485 -> 2956.Dec 28 17:30:22 galassia kernel: [ 255.666046] blocking signal 9: 5485 -> 3157.Dec 28 17:30:22 galassia kernel: [ 255.78972

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.383876619793197
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	Aqua.i686.elf
File size:	67'028 bytes
MD5:	ad5378954ed90c2718e9146d27c9e5a0
SHA1:	844d5ff08a90ee3c2562c5d59d2196f48c5ce1c5
SHA256:	4cd90a778beaa5bb1c5bc137a35c3f5300552eae9f093a26a637ff710541c084
SHA512:	8568c653f343c3ca58c8eca6b239e6ff4e19f7f8f09157367fface175d9aa59ae4299986fa5615822f34561a12cdafc4351d759700978c4d2232529cb21f4c49
SSDEEP:	1536:R+XkIsiWIGc8k1KDVmU7tp/HOaLWZsh1RaCrZqfCxCEE7H:R+XvsidGyKDVmU7tpvOVih1RaCl+9
TLSH:	BD632A81FA87C0F5D81B09304077F33FCA32E5294171DA6EEF69EE36DA63541A216299
File Content Preview:	.ELF....................h...4...D.......4. ...(.....................................................x....(..........Q.td............................U..S............h....3...[]...$.............U......= ....t..1...................u........t...$........... .

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048168
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	66628
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xe561	0x0	0x6	AX	16
.fini	PROGBITS	0x8056611	0xe611	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8056640	0xe640	0x1a45	0x0	0x2	A	32
.ctors	PROGBITS	0x805908c	0x1008c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8059094	0x10094	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x80590c0	0x100c0	0x344	0x0	0x3	WA	32
.bss	NOBITS	0x8059420	0x10404	0x2560	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x10404	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0x10085	0x10085	6.4105	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x1008c	0x805908c	0x805908c	0x378	0x28f4	4.1933	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 29, 2024 00:28:12.785381079 CET	192.168.2.14	192.168.2.1	827a	(Port unreachable)	Destination Unreachable
Dec 29, 2024 00:29:32.797296047 CET	192.168.2.14	192.168.2.1	827a	(Port unreachable)	Destination Unreachable

Start time (UTC):	23:28:01
Start date (UTC):	28/12/2024
Path:	/tmp/Aqua.i686.elf
Arguments:	/tmp/Aqua.i686.elf
File size:	67028 bytes
MD5 hash:	ad5378954ed90c2718e9146d27c9e5a0

Start time (UTC):	23:28:02
Start date (UTC):	28/12/2024
Path:	/usr/libexec/gnome-session-binary
Arguments:	-
File size:	334664 bytes
MD5 hash:	d9b90be4f7db60cb3c2d3da6a1d31bfb

Start time (UTC):	23:28:03
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:04
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:05
Start date (UTC):	28/12/2024
Path:	/usr/libexec/gvfsd-fuse
Arguments:	-
File size:	47632 bytes
MD5 hash:	d18fbf1cbf8eb57b17fac48b7b4be933

Start time (UTC):	23:28:06
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:07
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:08
Start date (UTC):	28/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	23:28:09
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:10
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:16
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:17
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:19
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:20
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:21
Start date (UTC):	28/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.i686.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Initial Sample

Memory Dumps

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/run/systemd/journal/streams/.#9:67441Uc9KeO

/run/systemd/journal/streams/.#9:67442EaC2vN

/run/systemd/journal/streams/.#9:67443Ca5fvL

/run/systemd/journal/streams/.#9:67449KJ6KZJ

/run/systemd/journal/streams/.#9:67450IRTfxM

/run/systemd/journal/streams/.#9:67451N0oAVJ

/run/systemd/journal/streams/.#9:70021Io2kn1

/run/systemd/journal/streams/.#9:70022STHr92

/run/systemd/journal/streams/.#9:70023Zl48w3

/run/systemd/journal/streams/.#9:70030TlGwJ1

/run/systemd/journal/streams/.#9:70049bLdSI3

/run/systemd/journal/streams/.#9:70815YHc013

/run/systemd/journal/streams/.#9:71695ddeHMx

/run/systemd/journal/streams/.#9:71696UyeBPv

/run/systemd/journal/streams/.#9:71697ZMwEBu

/run/systemd/journal/streams/.#9:716980lmKLw

/run/systemd/journal/streams/.#9:7179714461v

/run/systemd/journal/streams/.#9:72651yDHHG0

/run/systemd/journal/streams/.#9:72652kmkgi2

/run/systemd/journal/streams/.#9:7265370uOk1

/run/systemd/journal/streams/.#9:72660sSqy52

/run/systemd/journal/streams/.#9:72851SzhunR

/run/systemd/journal/streams/.#9:72853LJpEeQ

/run/systemd/journal/streams/.#9:72860W8bM2P

/run/systemd/journal/streams/.#9:7286194G7xR

/run/systemd/journal/streams/.#9:72887otydIQ

/run/systemd/journal/streams/.#9:737741y7PL3

/run/systemd/journal/streams/.#9:73783qoKH50

Linux Analysis Report
Aqua.i686.elf

Start time (UTC):	23:28:22
Start date (UTC):	28/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	23:28:23
Start date (UTC):	28/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	23:28:24
Start date (UTC):	28/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	23:28:27
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:34
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:35
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:36
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:37
Start date (UTC):	28/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	23:28:38
Start date (UTC):	28/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	23:28:39
Start date (UTC):	28/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761