Edit tour

Linux Analysis Report
Aqua.mips.elf

Overview

General Information

Sample name:	Aqua.mips.elf
Analysis ID:	1581807
MD5:	2b711d17881cc12fdcc3a761c22799d3
SHA1:	bcffbbc116c25851ce51968024ba949040270023
SHA256:	b5d1cf8b222162567f46281e792145774689c205701a02f3723cf6fb13a429de
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Creates hidden files without content (potentially used as a mutex)

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads system version information

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581807
Start date and time:	2024-12-29 01:37:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.mips.elf
Detection:	MAL
Classification:	mal68.spre.troj.evad.linELF@0/205@52/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Runtime Messages

Command:	/tmp/Aqua.mips.elf
PID:	6237
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	about to cum inside a femboy btw
Standard Error:

Process Tree

system is lnxubuntu20

Aqua.mips.elf (PID: 6237, Parent: 6159, MD5: 0083f1f0e77be34ad27f849842bbb00c) Arguments: /tmp/Aqua.mips.elf

Aqua.mips.elf New Fork (PID: 6239, Parent: 6237)

Aqua.mips.elf New Fork (PID: 6241, Parent: 6239)

gnome-session-binary New Fork (PID: 6243, Parent: 1477)

sh (PID: 6243, Parent: 1477, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 6243, Parent: 1477, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 6248, Parent: 1)

systemd-hostnamed (PID: 6248, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 6396, Parent: 1320)

Default (PID: 6396, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 6397, Parent: 1320)

Default (PID: 6397, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6409, Parent: 1)

dbus-daemon (PID: 6409, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 6412, Parent: 1320)

Default (PID: 6412, Parent: 1320, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 6414, Parent: 1860)

pulseaudio (PID: 6414, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6415, Parent: 1)

rsyslogd (PID: 6415, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

gvfsd-fuse New Fork (PID: 6420, Parent: 2038)

fusermount (PID: 6420, Parent: 2038, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 6431, Parent: 1)

systemd-logind (PID: 6431, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6455, Parent: 1)

rtkit-daemon (PID: 6455, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6492, Parent: 1)

polkitd (PID: 6492, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6493, Parent: 1)

dbus-daemon (PID: 6493, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6498, Parent: 1)

gpu-manager (PID: 6498, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6502, Parent: 6498)

sh (PID: 6502, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6503, Parent: 6502)

grep (PID: 6503, Parent: 6502, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6505, Parent: 6498)

sh (PID: 6505, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6509, Parent: 6505)

grep (PID: 6509, Parent: 6505, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6510, Parent: 6498)

sh (PID: 6510, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6511, Parent: 6510)

grep (PID: 6511, Parent: 6510, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6512, Parent: 6498)

sh (PID: 6512, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6513, Parent: 6512)

grep (PID: 6513, Parent: 6512, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6517, Parent: 6498)

sh (PID: 6517, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6518, Parent: 6517)

grep (PID: 6518, Parent: 6517, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6520, Parent: 6498)

sh (PID: 6520, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6521, Parent: 6520)

grep (PID: 6521, Parent: 6520, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6523, Parent: 6498)

sh (PID: 6523, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6524, Parent: 6523)

grep (PID: 6524, Parent: 6523, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6526, Parent: 6498)

sh (PID: 6526, Parent: 6498, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6527, Parent: 6526)

grep (PID: 6527, Parent: 6526, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6501, Parent: 1)

rsyslogd (PID: 6501, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6516, Parent: 1)

agetty (PID: 6516, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6528, Parent: 1)

generate-config (PID: 6528, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6529, Parent: 6528)

pkill (PID: 6529, Parent: 6528, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6532, Parent: 1)

gdm-wait-for-drm (PID: 6532, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6536, Parent: 1)

systemd New Fork (PID: 6537, Parent: 1)

rsyslogd (PID: 6537, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6543, Parent: 1)

dbus-daemon (PID: 6543, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6544, Parent: 1)

agetty (PID: 6544, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6547, Parent: 1)

systemd-logind (PID: 6547, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6604, Parent: 1)

dbus-daemon (PID: 6604, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6605, Parent: 1)

rsyslogd (PID: 6605, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6607, Parent: 1)

journalctl (PID: 6607, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 6611, Parent: 1)

systemd-journald (PID: 6611, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6612, Parent: 1)

gpu-manager (PID: 6612, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6614, Parent: 6612)

sh (PID: 6614, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6615, Parent: 6614)

grep (PID: 6615, Parent: 6614, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6616, Parent: 6612)

sh (PID: 6616, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6617, Parent: 6616)

grep (PID: 6617, Parent: 6616, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6618, Parent: 6612)

sh (PID: 6618, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6619, Parent: 6618)

grep (PID: 6619, Parent: 6618, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6679, Parent: 6612)

sh (PID: 6679, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6683, Parent: 6679)

grep (PID: 6683, Parent: 6679, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6685, Parent: 6612)

sh (PID: 6685, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6688, Parent: 6685)

grep (PID: 6688, Parent: 6685, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6751, Parent: 6612)

sh (PID: 6751, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6752, Parent: 6751)

grep (PID: 6752, Parent: 6751, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6755, Parent: 6612)

sh (PID: 6755, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6756, Parent: 6755)

grep (PID: 6756, Parent: 6755, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6757, Parent: 6612)

sh (PID: 6757, Parent: 6612, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6758, Parent: 6757)

grep (PID: 6758, Parent: 6757, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6622, Parent: 1)

systemd-logind (PID: 6622, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6684, Parent: 1)

rsyslogd (PID: 6684, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6686, Parent: 1)

systemd-journald (PID: 6686, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6691, Parent: 1)

systemd-logind (PID: 6691, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6753, Parent: 1)

dbus-daemon (PID: 6753, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6761, Parent: 1)

generate-config (PID: 6761, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6762, Parent: 6761)

pkill (PID: 6762, Parent: 6761, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6763, Parent: 1)

agetty (PID: 6763, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 6764, Parent: 1)

rsyslogd (PID: 6764, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6766, Parent: 1)

dbus-daemon (PID: 6766, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6769, Parent: 1)

rsyslogd (PID: 6769, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6774, Parent: 1)

gpu-manager (PID: 6774, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6775, Parent: 6774)

sh (PID: 6775, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6776, Parent: 6775)

grep (PID: 6776, Parent: 6775, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6777, Parent: 6774)

sh (PID: 6777, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6778, Parent: 6777)

grep (PID: 6778, Parent: 6777, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6839, Parent: 6774)

sh (PID: 6839, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6840, Parent: 6839)

grep (PID: 6840, Parent: 6839, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6842, Parent: 6774)

sh (PID: 6842, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6843, Parent: 6842)

grep (PID: 6843, Parent: 6842, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6844, Parent: 6774)

sh (PID: 6844, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6845, Parent: 6844)

grep (PID: 6845, Parent: 6844, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6846, Parent: 6774)

sh (PID: 6846, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6847, Parent: 6846)

grep (PID: 6847, Parent: 6846, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6848, Parent: 6774)

sh (PID: 6848, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6849, Parent: 6848)

grep (PID: 6849, Parent: 6848, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6850, Parent: 6774)

sh (PID: 6850, Parent: 6774, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6851, Parent: 6850)

grep (PID: 6851, Parent: 6850, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6782, Parent: 1)

systemd-logind (PID: 6782, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6854, Parent: 1)

generate-config (PID: 6854, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6855, Parent: 6854)

pkill (PID: 6855, Parent: 6854, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6856, Parent: 1)

gdm-wait-for-drm (PID: 6856, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6861, Parent: 1)

dbus-daemon (PID: 6861, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6862, Parent: 1)

rsyslogd (PID: 6862, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6871, Parent: 1)

systemd-logind (PID: 6871, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6928, Parent: 1)

rsyslogd (PID: 6928, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6930, Parent: 1)

dbus-daemon (PID: 6930, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6931, Parent: 1)

systemd-journald (PID: 6931, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6935, Parent: 1)

dbus-daemon (PID: 6935, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6936, Parent: 1)

systemd-logind (PID: 6936, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6959, Parent: 1)

systemd-journald (PID: 6959, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6996, Parent: 1)

rsyslogd (PID: 6996, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7001, Parent: 1)

gpu-manager (PID: 7001, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7002, Parent: 7001)

sh (PID: 7002, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7003, Parent: 7002)

grep (PID: 7003, Parent: 7002, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7004, Parent: 7001)

sh (PID: 7004, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7005, Parent: 7004)

grep (PID: 7005, Parent: 7004, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7006, Parent: 7001)

sh (PID: 7006, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7007, Parent: 7006)

grep (PID: 7007, Parent: 7006, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7008, Parent: 7001)

sh (PID: 7008, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7010, Parent: 7008)

grep (PID: 7010, Parent: 7008, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7072, Parent: 7001)

sh (PID: 7072, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7075, Parent: 7072)

grep (PID: 7075, Parent: 7072, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7077, Parent: 7001)

sh (PID: 7077, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7078, Parent: 7077)

grep (PID: 7078, Parent: 7077, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7143, Parent: 7001)

sh (PID: 7143, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7144, Parent: 7143)

grep (PID: 7144, Parent: 7143, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7147, Parent: 7001)

sh (PID: 7147, Parent: 7001, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7148, Parent: 7147)

grep (PID: 7148, Parent: 7147, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7013, Parent: 1)

systemd-logind (PID: 7013, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7070, Parent: 1)

systemd-journald (PID: 7070, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7081, Parent: 1)

rsyslogd (PID: 7081, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7082, Parent: 1)

systemd-logind (PID: 7082, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7139, Parent: 1)

systemd-journald (PID: 7139, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7146, Parent: 1)

dbus-daemon (PID: 7146, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7149, Parent: 1)

generate-config (PID: 7149, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7150, Parent: 7149)

pkill (PID: 7150, Parent: 7149, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7152, Parent: 1)

dbus-daemon (PID: 7152, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7153, Parent: 1)

rsyslogd (PID: 7153, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7157, Parent: 1)

gpu-manager (PID: 7157, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7158, Parent: 7157)

sh (PID: 7158, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7159, Parent: 7158)

grep (PID: 7159, Parent: 7158, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7160, Parent: 7157)

sh (PID: 7160, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7161, Parent: 7160)

grep (PID: 7161, Parent: 7160, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7162, Parent: 7157)

sh (PID: 7162, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7163, Parent: 7162)

grep (PID: 7163, Parent: 7162, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7164, Parent: 7157)

sh (PID: 7164, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7165, Parent: 7164)

grep (PID: 7165, Parent: 7164, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7166, Parent: 7157)

sh (PID: 7166, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7167, Parent: 7166)

grep (PID: 7167, Parent: 7166, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7168, Parent: 7157)

sh (PID: 7168, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7169, Parent: 7168)

grep (PID: 7169, Parent: 7168, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7170, Parent: 7157)

sh (PID: 7170, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7171, Parent: 7170)

grep (PID: 7171, Parent: 7170, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7172, Parent: 7157)

sh (PID: 7172, Parent: 7157, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7173, Parent: 7172)

grep (PID: 7173, Parent: 7172, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7176, Parent: 1)

generate-config (PID: 7176, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7177, Parent: 7176)

pkill (PID: 7177, Parent: 7176, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7178, Parent: 1)

gdm-wait-for-drm (PID: 7178, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7181, Parent: 1)

rsyslogd (PID: 7181, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7182, Parent: 1)

systemd-journald (PID: 7182, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7185, Parent: 1)

systemd-logind (PID: 7185, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7242, Parent: 1)

rsyslogd (PID: 7242, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7246, Parent: 1)

dbus-daemon (PID: 7246, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7247, Parent: 1)

gpu-manager (PID: 7247, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7248, Parent: 7247)

sh (PID: 7248, Parent: 7247, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7249, Parent: 7248)

grep (PID: 7249, Parent: 7248, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7250, Parent: 7247)

sh (PID: 7250, Parent: 7247, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7251, Parent: 7250)

grep (PID: 7251, Parent: 7250, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7253, Parent: 7247)

sh (PID: 7253, Parent: 7247, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7313, Parent: 7253)

grep (PID: 7313, Parent: 7253, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7315, Parent: 7247)

sh (PID: 7315, Parent: 7247, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7316, Parent: 7315)

grep (PID: 7316, Parent: 7315, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7317, Parent: 7247)

sh (PID: 7317, Parent: 7247, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7320, Parent: 7317)

grep (PID: 7320, Parent: 7317, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 7252, Parent: 1)

systemd-journald (PID: 7252, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7256, Parent: 1)

systemd-logind (PID: 7256, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7314, Parent: 1)

rsyslogd (PID: 7314, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7322, Parent: 1)

dbus-daemon (PID: 7322, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7323, Parent: 1)

generate-config (PID: 7323, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7324, Parent: 7323)

pkill (PID: 7324, Parent: 7323, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7325, Parent: 1)

dbus-daemon (PID: 7325, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7326, Parent: 1)

rsyslogd (PID: 7326, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7332, Parent: 1)

gpu-manager (PID: 7332, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7334, Parent: 7332)

sh (PID: 7334, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7335, Parent: 7334)

grep (PID: 7335, Parent: 7334, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7336, Parent: 7332)

sh (PID: 7336, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7337, Parent: 7336)

grep (PID: 7337, Parent: 7336, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7338, Parent: 7332)

sh (PID: 7338, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7339, Parent: 7338)

grep (PID: 7339, Parent: 7338, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7340, Parent: 7332)

sh (PID: 7340, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7341, Parent: 7340)

grep (PID: 7341, Parent: 7340, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7342, Parent: 7332)

sh (PID: 7342, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7343, Parent: 7342)

grep (PID: 7343, Parent: 7342, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7344, Parent: 7332)

sh (PID: 7344, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7345, Parent: 7344)

grep (PID: 7345, Parent: 7344, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7346, Parent: 7332)

sh (PID: 7346, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7347, Parent: 7346)

grep (PID: 7347, Parent: 7346, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7348, Parent: 7332)

sh (PID: 7348, Parent: 7332, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7349, Parent: 7348)

grep (PID: 7349, Parent: 7348, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7333, Parent: 1)

agetty (PID: 7333, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7350, Parent: 1)

generate-config (PID: 7350, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7351, Parent: 7350)

pkill (PID: 7351, Parent: 7350, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7354, Parent: 1)

gdm-wait-for-drm (PID: 7354, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7355, Parent: 1)

systemd-journald (PID: 7355, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7356, Parent: 1)

rsyslogd (PID: 7356, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7359, Parent: 1)

systemd-logind (PID: 7359, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7419, Parent: 1)

dbus-daemon (PID: 7419, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7422, Parent: 1)

gpu-manager (PID: 7422, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7423, Parent: 7422)

sh (PID: 7423, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7424, Parent: 7423)

grep (PID: 7424, Parent: 7423, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7425, Parent: 7422)

sh (PID: 7425, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7426, Parent: 7425)

grep (PID: 7426, Parent: 7425, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7427, Parent: 7422)

sh (PID: 7427, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7428, Parent: 7427)

grep (PID: 7428, Parent: 7427, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7429, Parent: 7422)

sh (PID: 7429, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7430, Parent: 7429)

grep (PID: 7430, Parent: 7429, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7432, Parent: 7422)

sh (PID: 7432, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7433, Parent: 7432)

grep (PID: 7433, Parent: 7432, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7493, Parent: 7422)

sh (PID: 7493, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7494, Parent: 7493)

grep (PID: 7494, Parent: 7493, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7495, Parent: 7422)

sh (PID: 7495, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7496, Parent: 7495)

grep (PID: 7496, Parent: 7495, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7498, Parent: 7422)

sh (PID: 7498, Parent: 7422, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7499, Parent: 7498)

grep (PID: 7499, Parent: 7498, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7431, Parent: 1)

systemd-journald (PID: 7431, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7436, Parent: 1)

systemd-logind (PID: 7436, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7497, Parent: 1)

agetty (PID: 7497, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7500, Parent: 1)

rsyslogd (PID: 7500, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7501, Parent: 1)

dbus-daemon (PID: 7501, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7502, Parent: 1)

generate-config (PID: 7502, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7503, Parent: 7502)

pkill (PID: 7503, Parent: 7502, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7504, Parent: 1)

dbus-daemon (PID: 7504, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7505, Parent: 1)

rsyslogd (PID: 7505, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7509, Parent: 1)

gpu-manager (PID: 7509, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7510, Parent: 7509)

sh (PID: 7510, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7511, Parent: 7510)

grep (PID: 7511, Parent: 7510, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7571, Parent: 7509)

sh (PID: 7571, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7572, Parent: 7571)

grep (PID: 7572, Parent: 7571, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7573, Parent: 7509)

sh (PID: 7573, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7574, Parent: 7573)

grep (PID: 7574, Parent: 7573, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7577, Parent: 7509)

sh (PID: 7577, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7578, Parent: 7577)

grep (PID: 7578, Parent: 7577, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7579, Parent: 7509)

sh (PID: 7579, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7580, Parent: 7579)

grep (PID: 7580, Parent: 7579, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7581, Parent: 7509)

sh (PID: 7581, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7582, Parent: 7581)

grep (PID: 7582, Parent: 7581, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7583, Parent: 7509)

sh (PID: 7583, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7584, Parent: 7583)

grep (PID: 7584, Parent: 7583, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7585, Parent: 7509)

sh (PID: 7585, Parent: 7509, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7586, Parent: 7585)

grep (PID: 7586, Parent: 7585, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7514, Parent: 1)

systemd-logind (PID: 7514, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7587, Parent: 1)

generate-config (PID: 7587, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7588, Parent: 7587)

pkill (PID: 7588, Parent: 7587, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7589, Parent: 1)

gdm-wait-for-drm (PID: 7589, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7593, Parent: 1)

rsyslogd (PID: 7593, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7594, Parent: 1)

systemd-journald (PID: 7594, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7598, Parent: 1)

systemd-logind (PID: 7598, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7655, Parent: 1)

rsyslogd (PID: 7655, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7659, Parent: 1)

dbus-daemon (PID: 7659, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7660, Parent: 1)

gpu-manager (PID: 7660, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7661, Parent: 7660)

sh (PID: 7661, Parent: 7660, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7662, Parent: 7661)

grep (PID: 7662, Parent: 7661, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7663, Parent: 7660)

sh (PID: 7663, Parent: 7660, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7664, Parent: 7663)

grep (PID: 7664, Parent: 7663, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7667, Parent: 7660)

sh (PID: 7667, Parent: 7660, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7668, Parent: 7667)

grep (PID: 7668, Parent: 7667, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7728, Parent: 7660)

sh (PID: 7728, Parent: 7660, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7729, Parent: 7728)

grep (PID: 7729, Parent: 7728, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7731, Parent: 7660)

sh (PID: 7731, Parent: 7660, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7732, Parent: 7731)

grep (PID: 7732, Parent: 7731, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7736, Parent: 7660)

sh (PID: 7736, Parent: 7660, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7737, Parent: 7736)

grep (PID: 7737, Parent: 7736, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7665, Parent: 1)

systemd-journald (PID: 7665, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7666, Parent: 1)

agetty (PID: 7666, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7671, Parent: 1)

systemd-logind (PID: 7671, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7730, Parent: 1)

rsyslogd (PID: 7730, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7740, Parent: 1)

generate-config (PID: 7740, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7741, Parent: 7740)

pkill (PID: 7741, Parent: 7740, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7742, Parent: 1)

rsyslogd (PID: 7742, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7746, Parent: 1)

gpu-manager (PID: 7746, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7747, Parent: 7746)

sh (PID: 7747, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7748, Parent: 7747)

grep (PID: 7748, Parent: 7747, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7749, Parent: 7746)

sh (PID: 7749, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7750, Parent: 7749)

grep (PID: 7750, Parent: 7749, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7751, Parent: 7746)

sh (PID: 7751, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7752, Parent: 7751)

grep (PID: 7752, Parent: 7751, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7753, Parent: 7746)

sh (PID: 7753, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7754, Parent: 7753)

grep (PID: 7754, Parent: 7753, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7755, Parent: 7746)

sh (PID: 7755, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7756, Parent: 7755)

grep (PID: 7756, Parent: 7755, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7757, Parent: 7746)

sh (PID: 7757, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7758, Parent: 7757)

grep (PID: 7758, Parent: 7757, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7759, Parent: 7746)

sh (PID: 7759, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7760, Parent: 7759)

grep (PID: 7760, Parent: 7759, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7761, Parent: 7746)

sh (PID: 7761, Parent: 7746, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7762, Parent: 7761)

grep (PID: 7762, Parent: 7761, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7763, Parent: 1)

generate-config (PID: 7763, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7764, Parent: 7763)

pkill (PID: 7764, Parent: 7763, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7767, Parent: 1)

gdm-wait-for-drm (PID: 7767, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7769, Parent: 1)

systemd-journald (PID: 7769, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7770, Parent: 1)

rsyslogd (PID: 7770, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7774, Parent: 1)

systemd-logind (PID: 7774, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7834, Parent: 1)

dbus-daemon (PID: 7834, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7835, Parent: 1)

gpu-manager (PID: 7835, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7838, Parent: 7835)

sh (PID: 7838, Parent: 7835, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7839, Parent: 7838)

grep (PID: 7839, Parent: 7838, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7840, Parent: 7835)

sh (PID: 7840, Parent: 7835, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7841, Parent: 7840)

grep (PID: 7841, Parent: 7840, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7844, Parent: 7835)

sh (PID: 7844, Parent: 7835, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7845, Parent: 7844)

grep (PID: 7845, Parent: 7844, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7905, Parent: 7835)

sh (PID: 7905, Parent: 7835, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7906, Parent: 7905)

grep (PID: 7906, Parent: 7905, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7907, Parent: 7835)

sh (PID: 7907, Parent: 7835, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7908, Parent: 7907)

grep (PID: 7908, Parent: 7907, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7909, Parent: 7835)

sh (PID: 7909, Parent: 7835, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7910, Parent: 7909)

grep (PID: 7910, Parent: 7909, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7842, Parent: 1)

systemd-journald (PID: 7842, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7843, Parent: 1)

agetty (PID: 7843, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 7848, Parent: 1)

systemd-logind (PID: 7848, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 7911, Parent: 1)

rsyslogd (PID: 7911, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7912, Parent: 1)

dbus-daemon (PID: 7912, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7913, Parent: 1)

generate-config (PID: 7913, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7914, Parent: 7913)

pkill (PID: 7914, Parent: 7913, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7915, Parent: 1)

dbus-daemon (PID: 7915, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7916, Parent: 1)

rsyslogd (PID: 7916, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7920, Parent: 1)

gpu-manager (PID: 7920, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 7921, Parent: 7920)

sh (PID: 7921, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7922, Parent: 7921)

grep (PID: 7922, Parent: 7921, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7926, Parent: 7920)

sh (PID: 7926, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7927, Parent: 7926)

grep (PID: 7927, Parent: 7926, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7928, Parent: 7920)

sh (PID: 7928, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7929, Parent: 7928)

grep (PID: 7929, Parent: 7928, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7930, Parent: 7920)

sh (PID: 7930, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7934, Parent: 7930)

grep (PID: 7934, Parent: 7930, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7935, Parent: 7920)

sh (PID: 7935, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7936, Parent: 7935)

grep (PID: 7936, Parent: 7935, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7940, Parent: 7920)

sh (PID: 7940, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7941, Parent: 7940)

grep (PID: 7941, Parent: 7940, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 7945, Parent: 7920)

sh (PID: 7945, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 7946, Parent: 7945)

grep (PID: 7946, Parent: 7945, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 7947, Parent: 7920)

sh (PID: 7947, Parent: 7920, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 7948, Parent: 7947)

grep (PID: 7948, Parent: 7947, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 7924, Parent: 1860)

dbus-daemon (PID: 7924, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 7925, Parent: 1860)

pulseaudio (PID: 7925, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 7931, Parent: 1)

rtkit-daemon (PID: 7931, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 7939, Parent: 1)

polkitd (PID: 7939, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 7949, Parent: 1)

generate-config (PID: 7949, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 7950, Parent: 7949)

pkill (PID: 7950, Parent: 7949, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 7955, Parent: 1)

gdm-wait-for-drm (PID: 7955, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 7957, Parent: 1)

systemd-journald (PID: 7957, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 7958, Parent: 1)

rsyslogd (PID: 7958, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 7962, Parent: 1)

systemd-logind (PID: 7962, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 8019, Parent: 1860)

pulseaudio (PID: 8019, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 8023, Parent: 1)

dbus-daemon (PID: 8023, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 8024, Parent: 1)

gpu-manager (PID: 8024, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 8025, Parent: 8024)

sh (PID: 8025, Parent: 8024, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 8026, Parent: 8025)

grep (PID: 8026, Parent: 8025, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 8027, Parent: 8024)

sh (PID: 8027, Parent: 8024, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 8028, Parent: 8027)

grep (PID: 8028, Parent: 8027, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 8029, Parent: 8024)

sh (PID: 8029, Parent: 8024, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 8030, Parent: 8029)

grep (PID: 8030, Parent: 8029, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 8033, Parent: 8024)

sh (PID: 8033, Parent: 8024, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 8066, Parent: 8033)

grep (PID: 8066, Parent: 8033, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 8096, Parent: 8024)

sh (PID: 8096, Parent: 8024, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 8097, Parent: 8096)

grep (PID: 8097, Parent: 8096, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 8098, Parent: 8024)

sh (PID: 8098, Parent: 8024, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 8099, Parent: 8098)

grep (PID: 8099, Parent: 8098, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 8031, Parent: 1)

systemd-journald (PID: 8031, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 8032, Parent: 1)

agetty (PID: 8032, Parent: 1, MD5: 3a374724ba7e863768139bdd60ca36f7) Arguments: /sbin/agetty -o "-p -- \\u" --noclear tty2 linux

systemd New Fork (PID: 8036, Parent: 1)

systemd-logind (PID: 8036, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 8094, Parent: 1860)

pulseaudio (PID: 8094, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 8095, Parent: 1)

dbus-daemon (PID: 8095, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 8100, Parent: 1)

rsyslogd (PID: 8100, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 8102, Parent: 1)

generate-config (PID: 8102, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 8103, Parent: 8102)

pkill (PID: 8103, Parent: 8102, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 8104, Parent: 1)

dbus-daemon (PID: 8104, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 8105, Parent: 1860)

pulseaudio (PID: 8105, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 8109, Parent: 1)

rtkit-daemon (PID: 8109, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 8112, Parent: 1)

polkitd (PID: 8112, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 8116, Parent: 1)

gdm-wait-for-drm (PID: 8116, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 8120, Parent: 1860)

dbus-daemon (PID: 8120, Parent: 1860, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 8122, Parent: 1)

rsyslogd (PID: 8122, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 8123, Parent: 1)

dbus-daemon (PID: 8123, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 8127, Parent: 1)

systemd-journald (PID: 8127, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 8128, Parent: 1860)

pulseaudio (PID: 8128, Parent: 1860, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 8130, Parent: 1)

dbus-daemon (PID: 8130, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

cleanup

HTTP traffic detected: POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1Host: daisy.ubuntu.comAccept: */*Content-Type: application/octet-streamX-Whoopsie-Version: 0.2.69ubuntu0.3Content-Length: 164887Expect: 100-continue

Source: /usr/sbin/rsyslogd (PID: 6415)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6501)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6537)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6605)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6684)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6764)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6769)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6862)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6928)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6996)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7081)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7153)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7242)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7314)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7326)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7356)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7500)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7505)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7655)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7730)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7742)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7770)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7916)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 7958)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 8100)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 8122)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 6611)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6959)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7139)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7182)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7252)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7355)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7431)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7594)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7665)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7769)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7842)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 7957)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 8031)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 8127)	Socket: unknown address family

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 91.189.91.42
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic	DNS traffic detected: DNS query: raw.intenseapi.com
Source: global traffic	DNS traffic detected: DNS query: daisy.ubuntu.com

Source: unknown

Source: syslog.485.dr, syslog.33.dr, syslog.220.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53128
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6243, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6221, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6222, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6409, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6413, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6414, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6415, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6501, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6516, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6547, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6604, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6606, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6611, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6622, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6544, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6684, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6687, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6753, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6761, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6764, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6763, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6765, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6766, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6769, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6859, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6859, result: no such process	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6860, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6861, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6862, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6935, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6936, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6959, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6975, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6986, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6996, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7013, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7070, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7071, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7001, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7076, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7081, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7146, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7149, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7151, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7152, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7153, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7182, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7185, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7242, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7246, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7247, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7314, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7322, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7323, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7325, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7326, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7355, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7359, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7333, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7356, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7419, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7422, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7500, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7501, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7502, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7497, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7504, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7505, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7594, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7595, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7598, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7655, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7659, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7660, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7730, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7740, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7666, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7742, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7769, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7771, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7774, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7770, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7834, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7835, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7911, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7912, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7913, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7843, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7915, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7916, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7957, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7959, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7962, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8019, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8023, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7958, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8024, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8094, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8095, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8032, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8100, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8104, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8105, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8127, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8129, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8130, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8133, result: no such process	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8190, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8128, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8226, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8282, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8288, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8225, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8292, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8293, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8362, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8457, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8464, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8521, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8394, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8458, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8602, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8603, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8604, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8608, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8737, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8748, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8799, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8738, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8824, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8828, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8831, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8838, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1638, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6243, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 658, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 720, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 721, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 772, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 774, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 777, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 785, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 793, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1320, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1344, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1886, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1983, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 2048, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6221, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6222, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6409, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6413, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6414, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6415, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1335, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1872, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6493, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6501, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6516, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 491, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 759, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 761, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1334, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 1860, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6547, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6604, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6605, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6606, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6611, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6622, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6544, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6684, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6687, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6753, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6761, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6764, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6763, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6765, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6766, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6769, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6859, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6859, result: no such process	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6860, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6861, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6862, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6935, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6936, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6959, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6975, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6986, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 6996, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7013, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7070, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7071, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7001, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7076, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7081, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7146, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7149, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7151, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7152, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7153, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7182, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7185, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7242, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7246, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7247, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7314, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7322, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7323, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7325, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7326, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7355, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7359, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7333, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7356, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7419, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7422, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7500, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7501, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7502, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7497, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7504, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7505, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7594, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7595, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7598, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7655, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7659, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7660, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7730, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7740, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7666, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7742, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7769, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7771, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7774, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7770, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7834, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7835, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7911, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7912, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7913, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7843, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7915, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7916, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7957, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7959, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7962, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8019, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8023, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 7958, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8024, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8094, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8095, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8032, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8100, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8104, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8105, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8127, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8129, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8130, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8133, result: no such process	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8190, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8128, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8226, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8282, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8288, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8225, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8292, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8293, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8362, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8457, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8464, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8521, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8394, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8458, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8602, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8603, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8604, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8608, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8737, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8748, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8799, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8738, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8824, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8828, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8831, result: successful	Jump to behavior
Source: /tmp/Aqua.mips.elf (PID: 6241)	SIGKILL sent: pid: 8838, result: successful	Jump to behavior

Source: classification engine

Classification label: mal68.spre.troj.evad.linELF@0/205@52/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 6409)	File: /proc/6409/mounts	Jump to behavior
Source: /bin/fusermount (PID: 6420)	File: /proc/6420/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6493)	File: /proc/6493/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6543)	File: /proc/6543/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6604)	File: /proc/6604/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6753)	File: /proc/6753/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6766)	File: /proc/6766/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6861)	File: /proc/6861/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 6935)	File: /proc/6935/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 7146)	File: /proc/7146/mounts
Source: /usr/bin/dbus-daemon (PID: 7152)	File: /proc/7152/mounts
Source: /usr/bin/dbus-daemon (PID: 7246)	File: /proc/7246/mounts
Source: /usr/bin/dbus-daemon (PID: 7322)	File: /proc/7322/mounts
Source: /usr/bin/dbus-daemon (PID: 7325)	File: /proc/7325/mounts
Source: /usr/bin/dbus-daemon (PID: 7419)	File: /proc/7419/mounts
Source: /usr/bin/dbus-daemon (PID: 7501)	File: /proc/7501/mounts
Source: /usr/bin/dbus-daemon (PID: 7504)	File: /proc/7504/mounts
Source: /usr/bin/dbus-daemon (PID: 7659)	File: /proc/7659/mounts
Source: /usr/bin/dbus-daemon (PID: 7834)	File: /proc/7834/mounts
Source: /usr/bin/dbus-daemon (PID: 7912)	File: /proc/7912/mounts
Source: /usr/bin/dbus-daemon (PID: 7915)	File: /proc/7915/mounts
Source: /usr/bin/dbus-daemon (PID: 7924)	File: /proc/7924/mounts
Source: /usr/bin/dbus-daemon (PID: 8023)	File: /proc/8023/mounts
Source: /usr/bin/dbus-daemon (PID: 8095)	File: /proc/8095/mounts
Source: /usr/bin/dbus-daemon (PID: 8104)	File: /proc/8104/mounts
Source: /usr/bin/dbus-daemon (PID: 8120)	File: /proc/8120/mounts
Source: /usr/bin/dbus-daemon (PID: 8123)	File: /proc/8123/mounts
Source: /usr/bin/dbus-daemon (PID: 8130)	File: /proc/8130/mounts

Source: /usr/libexec/gsd-rfkill (PID: 6243)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 6243)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6248)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6431)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6431)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6431)	File: /run/systemd/seats/.#seat0z3ok7v	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 6492)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6547)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6547)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6547)	File: /run/systemd/seats/.#seat0ThflHf	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78710epZPMK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:787110EFv7M	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78712faHqvL	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78713C0OqNN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78714MoZe8J	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78715B8fxMM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78716Iy8rLM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78717HkL9vN	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78732ERirIK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:78733lWV0KK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:7881590lLdK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:79920f8lqOL	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:79933dbMaAK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:8001263srJK	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:80111U3DxbM	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:80114cHxgeL	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	File: /run/systemd/journal/streams/.#9:80131vqFwLM	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6691)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6691)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6691)	File: /run/systemd/seats/.#seat0PSHnQa	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6782)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6782)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6782)	File: /run/systemd/seats/.#seat0z333T1	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6936)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6936)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 6936)	File: /run/systemd/seats/.#seat0cc2jGH	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 7082)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7082)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7082)	File: /run/systemd/seats/.#seat0Q1oriH
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:806269vggPZ
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80627m8upG2
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80628KJZyR2
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80629iItH00
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:806303atZoZ
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:806312pxUTZ
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80632JSONY0
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80633ZqEPP0
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80634CGUmK0
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80635zG5mN2
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80650cvOMf3
Source: /lib/systemd/systemd-journald (PID: 7139)	File: /run/systemd/journal/streams/.#9:80663vuwJp1
Source: /lib/systemd/systemd-logind (PID: 7185)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7185)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83676dL1Thx
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83677XMaK9w
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83678HyD1eB
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:836795YtMby
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83680BAHSzx
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83681ReEEAy
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83683sJv81A
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83781qhfoCz
Source: /lib/systemd/systemd-journald (PID: 7252)	File: /run/systemd/journal/streams/.#9:83786XTQvWA
Source: /lib/systemd/systemd-logind (PID: 7256)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7256)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7256)	File: /run/systemd/seats/.#seat0LBrKIS
Source: /lib/systemd/systemd-logind (PID: 7359)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7359)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7359)	File: /run/systemd/seats/.#seat0ao7EwF
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85940p9N0H4
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85942MFnkh7
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85943jIrAc6
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85945OTl9P7
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85946Oj0Ps4
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85947OeRj36
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85948Lybv57
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85964PbgjR5
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:85965LK3g94
Source: /lib/systemd/systemd-journald (PID: 7431)	File: /run/systemd/journal/streams/.#9:86055uE9CA4
Source: /lib/systemd/systemd-logind (PID: 7436)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7436)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7436)	File: /run/systemd/seats/.#seat0i9RuKr
Source: /lib/systemd/systemd-logind (PID: 7514)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7514)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7514)	File: /run/systemd/seats/.#seat0oD32to
Source: /lib/systemd/systemd-logind (PID: 7598)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7598)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7598)	File: /run/systemd/seats/.#seat0BLb68I
Source: /lib/systemd/systemd-journald (PID: 7665)	File: /run/systemd/journal/streams/.#9:87066XXSXYK
Source: /lib/systemd/systemd-journald (PID: 7665)	File: /run/systemd/journal/streams/.#9:87067PulCGN
Source: /lib/systemd/systemd-journald (PID: 7665)	File: /run/systemd/journal/streams/.#9:87068i6929O
Source: /lib/systemd/systemd-journald (PID: 7665)	File: /run/systemd/journal/streams/.#9:87070f4P21O
Source: /lib/systemd/systemd-journald (PID: 7665)	File: /run/systemd/journal/streams/.#9:87071EEpweM
Source: /lib/systemd/systemd-journald (PID: 7665)	File: /run/systemd/journal/streams/.#9:87072BPpLqM
Source: /lib/systemd/systemd-journald (PID: 7665)	File: /run/systemd/journal/streams/.#9:87095wMAn5L
Source: /lib/systemd/systemd-logind (PID: 7671)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7671)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7671)	File: /run/systemd/seats/.#seat0ZtISag
Source: /lib/systemd/systemd-logind (PID: 7774)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7774)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7774)	File: /run/systemd/seats/.#seat03Yz931
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89196ZQECib
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89198XdEWo9
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89199g2Ftsa
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89201HnsT2b
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89202TYugFb
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89204OiVFG9
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89212Biu8fc
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:892210jLsx9
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89222faX6X8
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89224QXJ9bd
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:89225V9waxa
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:892265DF1Pa
Source: /lib/systemd/systemd-journald (PID: 7842)	File: /run/systemd/journal/streams/.#9:893502lgAbd
Source: /lib/systemd/systemd-logind (PID: 7848)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7848)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 7848)	File: /run/systemd/seats/.#seat0ZH2dLC
Source: /usr/lib/policykit-1/polkitd (PID: 7939)	Directory: /root/.cache
Source: /lib/systemd/systemd-logind (PID: 7962)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 7962)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91352tLtvKs
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:913532HNR4r
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:913557NszWu
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91356roGLKt
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91363tLxrft
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91364MnEP1t
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91365xqSGgt
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91366sw2Qdt
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91373nuXuvu
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91374xHn31u
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91375EyOBjv
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91376Q3F4Qt
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91385w9iLys
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:91386afRGGt
Source: /lib/systemd/systemd-journald (PID: 8031)	File: /run/systemd/journal/streams/.#9:90831BTPlcu
Source: /lib/systemd/systemd-logind (PID: 8036)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 8036)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 8036)	File: /run/systemd/seats/.#seat0fguCiS
Source: /usr/lib/policykit-1/polkitd (PID: 8112)	Directory: /root/.cache

Source: /lib/systemd/systemd-logind (PID: 7598)

Empty hidden file: /run/systemd/seats/.#seat0BLb68I

Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7770/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7770/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7770/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7770/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7770/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7770/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7770/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7774/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7774/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7774/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7774/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7774/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7774/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7774/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7842/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7842/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7842/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7842/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7842/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7842/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/environ
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/sched
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7939/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7939/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7939/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7939/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7939/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7939/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7939/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1860/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1860/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1860/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1860/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1860/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1860/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/1860/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/658/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/658/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/658/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/658/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/658/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/658/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/658/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7931/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7931/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7931/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7931/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7931/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7931/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7931/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7834/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7834/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7834/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7834/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7834/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7834/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7834/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7848/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7848/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7848/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7848/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7848/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7848/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7848/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7925/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7925/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7925/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7925/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7925/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7925/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7925/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7924/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7924/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7924/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7924/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7924/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7924/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7924/cgroup
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7916/comm
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7916/cmdline
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7916/status
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7916/attr/current
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7916/sessionid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7916/loginuid
Source: /lib/systemd/systemd-journald (PID: 7842)	File opened: /proc/7916/cgroup

Source: /usr/bin/gpu-manager (PID: 6502)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6505)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6510)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6512)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6517)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6520)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6523)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6526)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6614)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6616)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6618)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6679)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6685)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6751)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6755)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6757)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6775)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6777)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6839)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6842)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6844)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6846)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6848)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6850)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7002)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7004)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7006)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7008)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7072)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7077)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7143)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7147)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7158)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7160)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7162)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7164)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7166)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7168)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7170)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7172)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7248)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7250)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7253)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7315)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7317)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7334)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7336)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7338)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7340)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7342)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7344)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7346)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7348)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7423)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7425)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7427)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7429)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7432)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7493)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7495)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7498)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7510)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7571)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7573)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7577)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7579)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7581)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7583)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7585)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7661)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7663)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7667)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7728)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7731)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7736)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7747)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7749)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7751)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7753)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7755)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7757)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7759)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7761)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7838)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7840)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7844)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7905)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7907)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7909)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7921)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7926)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7928)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7930)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7935)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7940)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7945)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 7947)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 8025)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 8027)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 8029)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 8033)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 8096)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 8098)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 6503)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6509)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6511)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6513)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6518)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6521)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6524)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6527)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6615)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6617)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6619)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6683)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6688)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6752)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6756)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6758)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6776)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6778)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6840)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6843)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6845)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6847)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6849)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6851)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 7003)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7005)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7007)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7010)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7075)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7078)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7144)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7148)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7159)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7161)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7163)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7165)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7167)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7169)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7171)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7173)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7249)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7251)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7313)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7316)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7320)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7335)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7337)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7339)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7341)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7343)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7345)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7347)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7349)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7424)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7426)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7428)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7430)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7433)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7494)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7496)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7499)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7511)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7572)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7574)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7578)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7580)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7582)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7584)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7586)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7662)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7664)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7668)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7729)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7732)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7737)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7748)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7750)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7752)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7754)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7756)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7758)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7760)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7762)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7839)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7841)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7845)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7906)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7908)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7910)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7922)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7927)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7929)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7934)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7936)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7941)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 7946)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 7948)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 8026)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 8028)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 8030)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 8066)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 8097)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 8099)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 6529)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6762)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6855)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 7150)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7177)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7324)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7351)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7503)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7588)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7741)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7764)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7914)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 7950)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 8103)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 6611)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6959)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7139)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7182)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7252)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7355)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7431)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7594)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7665)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7769)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7842)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 7957)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 8031)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 8127)	Reads from proc file: /proc/meminfo

Source: /sbin/agetty (PID: 6516)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6544)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 6763)	Reads version info: /etc/issue	Jump to behavior
Source: /sbin/agetty (PID: 7333)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7497)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7666)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 7843)	Reads version info: /etc/issue
Source: /sbin/agetty (PID: 8032)	Reads version info: /etc/issue

Source: /usr/sbin/rsyslogd (PID: 6415)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6415)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6498)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6501)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6501)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6537)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6605)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6612)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6684)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6769)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6769)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6774)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6862)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6996)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7081)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7153)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7153)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7157)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7242)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7314)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7326)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7326)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7332)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7356)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7505)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7505)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7509)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7655)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7730)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7742)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7742)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7746)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 7770)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7916)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 7916)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 7920)	Log file created: /var/log/gpu-manager.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 7958)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 8100)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 8100)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 8122)	Log file created: /var/log/kern.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.mips.elf (PID: 6239)

File: /tmp/Aqua.mips.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 6498)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6612)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6774)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 7001)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7157)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7247)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7332)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7422)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7509)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7660)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7746)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7835)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 7920)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 8024)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pkill (PID: 6529)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6762)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6855)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 7150)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7177)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7324)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7351)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7503)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7588)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7741)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7764)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7914)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 7925)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 7950)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 8103)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 8105)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 8128)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /tmp/Aqua.mips.elf (PID: 6237)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 6248)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6415)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6498)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6501)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6516)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6537)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6544)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6605)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6611)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6612)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6684)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6686)	Queries kernel information via 'uname':	Jump to behavior
Source: /sbin/agetty (PID: 6763)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6764)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6769)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6774)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6862)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 6928)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6959)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6996)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7001)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7081)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7139)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7153)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7157)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7182)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7242)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7252)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7314)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7326)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7332)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7333)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7355)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7356)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7422)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7431)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7497)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7500)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7505)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7509)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7594)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7655)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7660)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7665)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7666)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7730)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7742)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7746)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7769)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7770)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7835)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7842)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 7843)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7911)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7916)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 7920)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 7925)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 7957)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 7958)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 8024)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 8031)	Queries kernel information via 'uname':
Source: /sbin/agetty (PID: 8032)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 8100)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 8105)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 8122)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 8127)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 8128)	Queries kernel information via 'uname':

Source: syslog.33.dr	Binary or memory string: Dec 28 18:37:56 galassia kernel: [ 418.980907] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018
Source: Aqua.mips.elf, 6237.1.00007ffc12d31000.00007ffc12d52000.rw-.sdmp	Binary or memory string: U/tmp/qemu-open.irPrsP\
Source: Aqua.mips.elf, 6237.1.0000559571cf7000.0000559571d7e000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/mips
Source: Aqua.mips.elf, 6237.1.0000559571cf7000.0000559571d7e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/mips
Source: Aqua.mips.elf, 6237.1.00007ffc12d31000.00007ffc12d52000.rw-.sdmp	Binary or memory string: %s/qemu-op
Source: Aqua.mips.elf, 6237.1.00007ffc12d31000.00007ffc12d52000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-mips
Source: Aqua.mips.elf, 6237.1.00007ffc12d31000.00007ffc12d52000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-mips/tmp/Aqua.mips.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/Aqua.mips.elf
Source: Aqua.mips.elf, 6237.1.00007ffc12d31000.00007ffc12d52000.rw-.sdmp	Binary or memory string: /tmp/qemu-open.irPrsP
Source: syslog.33.dr	Binary or memory string: Dec 28 18:37:56 galassia kernel: [ 418.980888] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel drm parport_pc ppdev lp parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse ahci mptspi vmxnet3 scsi_transport_spi mptscsih libahci mptbase
Source: Aqua.mips.elf, 6237.1.00007ffc12d31000.00007ffc12d52000.rw-.sdmp	Binary or memory string: MPDIR%s/qemu-op

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Hide Artifacts	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Hidden Files and Directories	Security Account Manager	3 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Indicator Removal	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Aqua.mips.elf	47%	ReversingLabs	Linux.Trojan.Mirai
Aqua.mips.elf	100%	Avira	EXP/ELF.Mirai.W

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.intenseapi.com	193.200.78.37	true	false		high
daisy.ubuntu.com	162.213.35.24	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://daisy.ubuntu.com/9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.485.dr, syslog.33.dr, syslog.220.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.213.35.25	unknown	United States	41231	CANONICAL-ASGB	false
193.200.78.37	raw.intenseapi.com	Switzerland	29496	LINK-SERVICE-ASUA	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false
109.202.202.202	unknown	Switzerland	13030	INIT7CH	false
91.189.91.43	unknown	United Kingdom	41231	CANONICAL-ASGB	false
91.189.91.42	unknown	United Kingdom	41231	CANONICAL-ASGB	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
162.213.35.25	kqibeps.elf	Get hash	malicious	Mirai	Browse
	wlw68k.elf	Get hash	malicious	Mirai	Browse
	x86_64.elf	Get hash	malicious	Gafgyt	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	wiewa64.elf	Get hash	malicious	Mirai	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	vwkjebwi686.elf	Get hash	malicious	Mirai	Browse
	dwhdbg.elf	Get hash	malicious	Mirai	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	wnbw86.elf	Get hash	malicious	Mirai	Browse
193.200.78.37	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
89.190.156.145	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse
	ngwa5.elf	Get hash	malicious	Mirai	Browse
109.202.202.202	kpLwzBouH4.elf	Get hash	malicious	Unknown	Browse	ch.archive.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_92.0%2bbuild3-0ubuntu0.20.04.1_amd64.deb

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.intenseapi.com	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
daisy.ubuntu.com	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	db0fa4b8db0333367e9bda3ab68b8042.mips.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	162.213.35.25
	boatnet.arm7.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	boatnet.spc.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	45.200.149.186-boatnet.mpsl-2024-12-28T01_23_00.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	45.200.149.186-boatnet.arm7-2024-12-28T01_23_01.elf	Get hash	malicious	Mirai	Browse	162.213.35.24
	45.200.149.186-boatnet.x86-2024-12-28T01_22_59.elf	Get hash	malicious	Mirai	Browse	162.213.35.25
	109.71.252.43-boatnet.sh4-2024-12-28T20_30_38.elf	Get hash	malicious	Mirai	Browse	162.213.35.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	kqibeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	ngwa5.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
INIT7CH	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	arm6.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	m68k.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	45.200.149.186-boatnet.arm5-2024-12-28T01_23_00.elf	Get hash	malicious	Mirai	Browse	109.202.202.202
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
	mips.elf	Get hash	malicious	Unknown	Browse	109.202.202.202
CANONICAL-ASGB	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	45.200.149.186-boatnet.arm5-2024-12-28T01_23_00.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
LINK-SERVICE-ASUA	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	193.200.78.37
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	193.200.78.37

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/run/systemd/journal/streams/.#9:78710epZPMK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.50987199871906
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+dwCEydFlsjs7LbgS:SbFuFyLVIg1BG+f+M+6HoF2ji4s
MD5:	B550C31BA82FB35C02FC64679615E3E7
SHA1:	3C674AE5A87F5583B55478D1A845EE019974DABE
SHA-256:	7BA3099671804D534EB7634E186162501B6809BAA406A8A64A8A067A65C48986
SHA-512:	20CD423F589E9B7A4497A3D9D7F6B9CEE925AD588E864A26AE3CE7823684EB1560D8B56DD920EA7D05CCB91FCE78DD84FE82DF87EFE8D8F33BCE20DA406B1B3B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=43e241c9347e460c81cf45ada947fa23.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:787110EFv7M

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.51480682890335
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8nzM2hXwhjZcHcljX+:qgFq6g10+f+M8zFhKmAu
MD5:	8D7B1DADE52FE2D36D129C1583C3D876
SHA1:	1132AC74EB9C8FCA6CA2BF65C65FC41DED99EA1B
SHA-256:	4979BB9DAE510E05C72E782C484207E19909B2FFEBD872A7CB03F6117CCAF1D5
SHA-512:	E23571B5A87642841A2E4BFA2F1922504DAA573F6958F9A653256FC6ABE61CBB38AAB48488D4D6EC20A6321C441EF289566510D2D670EC60A04B1BC224D08A66
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=61987e065fa3455ab224f263e1f4c099.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78712faHqvL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.360135179358572
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9HcXcH67GyyXQVvsS:SbFuFyLVIg1BG+f+Mta7Xyw0jdCLKzK
MD5:	0D2E73F9ECFE2CCCA414E0131AD00EA2
SHA1:	E4DD4E828B5804611D314573A87DEF34F49A1B2A
SHA-256:	D3F2B6066729736C9C633EC0834B526A29C55609A7E6C6175984F424196CA472
SHA-512:	83D3921FD0CB203C04F2775B2521F2FDE62502B06DFA3027AD2E4C757FAC0A06279ECFB1942CA529232D17D16495E9CA75291720F810C87CFC9C15F634916693
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7e582fe29e014fa2a7cd3ea842b52250.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:78713C0OqNN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.411788081690034
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuUw3B7DjZjZcHcljX+:qgFq6g10+f+MvgmAu
MD5:	CB7BE368F75CE7A564B3FD5F26A4E0F1
SHA1:	7E7E6D9E40E8DCD8B1DE03C3D4AB125F0D00B496
SHA-256:	DBE62667243571C5B189A3461D1A7B1B44E6AAF7582B97FC7553EDD4CBAAC71B
SHA-512:	064AC1D71E05D7CCC411D61C908B077DF7686AC02A2719612084A6A07D0E91C0DF1B98A66950844D6B2EA0843CD61442BDD1FE9B4BD8761CBECE3FF5DD319912
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d4c43db089eb44d9aa14ddeef096e8cb.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78714MoZe8J

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.391352807032766
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DTWwnWLQ3XRZA72C:SbFuFyLVIg1BG+f+M8Da9+AjosQu
MD5:	0B42328D77310D426C6A1AD49D81F473
SHA1:	BA2631C8A564813AC6B34A36BDEE51BF5CF6FEE1
SHA-256:	8E2565A0DE76575813AA8A261D25045567BB71E6CA3A6672EC7AC7FF50AC79CC
SHA-512:	E7F9AD25CD45B140C9316D1073FD59FBABAFE03054C619C3E659472034F0F8E4170C1900A719D7870DA31B76058AE029F70559E3A2665B02DF244415CCF7FDF0
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f630c4a11e346b5a0f653fa24e86cea.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78715B8fxMM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.43159112670639
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6SJCn1UQbRBDEdATjsx:SbFuFyLVIg1BAf+M6SJCeQxjNALyAZD
MD5:	BDAABA880DFB79F9B4457112EEA4DFC0
SHA1:	49F37766908DF84B9AAB274D16FE7908C8FA9F5E
SHA-256:	D6B0B13A6C209ACC1B9446CA8C75CC85610557DFF38CC3B0EF5213793E1F584E
SHA-512:	9BAF7B600F55DF984D6ABCB4428ADE83CCC2CF0040CF2D029411744F973AEFC790CDB62266808EA9E7A706EB3435A59AC69DA53C2C821D5CF4F0582230F206DD
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0274cb937ffe4a018b0169fb4dc1a7a8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:78716Iy8rLM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.421456753888204
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+Mu8SBFGSA4jdCLKzK:qgFq6g10+f+M9SBFCLAK
MD5:	6B39AF71B66C0392527573239A96A4C5
SHA1:	5ABD56319322DD7BCEFDB9F36D8697B9FF45150F
SHA-256:	031952433BA4A11CD6639C04CFB78C9517E2E6F09E82B04668658272BA9CE33C
SHA-512:	82E20BB31B17E0D035262DC3CDCE15A49644FE0AC2CB8A527A0F0424CF6C51B3D950DD5AF1DD44041943CCAD9BBC3C51CC9D0487479A5C721DC8927C7C573F8D
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d7cfef873cb940719c7bb55549633a2f.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:78717HkL9vN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.414917254175652
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6xBTlUHQha5qjosQu:qgFq6g10+f+MoBTlw54Qu
MD5:	AA7C93B9485F34D169C8A94A501DCF1B
SHA1:	D293904A2ED5C672C4A16104C72DAFA7A3925A97
SHA-256:	1E3AA5D36612BEE3B72E658E2A2892A455A4170B32505BDF3583C35341A9F672
SHA-512:	E024F5EC47AF4A2EE3421980B9DE0305A1EE95ECF1B9D6DF2658774EB2AB0118C2B798735E0103C33179CEEAF8BB3F4FCCD83A4D4E8298831065044540DE982F
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=09e942eaa7a64bc1bbd028cb5512356c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:78732ERirIK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.467492665634145
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuTU9x1eMV++sjsicN:SbFuFyLVIg1BG+f+MuwIMkTjZcHcljX+
MD5:	CE68B67440BE932D824B50881EC41A1B
SHA1:	50CB04A784C20C3EBECDC4CA1AC4554CADA601E3
SHA-256:	5830DE396B8CC268B53558E5615AA1D359FC151C6E919B38BC18110547AF5767
SHA-512:	4B3F83A4864A08FFA48C208711871E79DBD564994D2C2E223BFF0E3C3DE4D34E8CADD27E72CD42F9B89B15E21799A0A6F939F1171C16D03D1E5BF616D043C58B
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=da35f92d850246408c92c806e5e5caf3.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:78733lWV0KK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.4123984745666345
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6gVUm+20qSMCg2jsV:SbFuFyLVIg1BG+f+M6g+mn0pQ2jLkGq
MD5:	BD6BA156CD0BE48C17E7A152FA57A4A2
SHA1:	04EDFE070630C47A9B45B988DC9FCCC6BB96EE9B
SHA-256:	1E979ABD04BE8CF8B95CC0155998E29A00A10EE960F2B975B2CC6A44A5313148
SHA-512:	AAF019218DBC51DFE51A159AC7463BEDFBBF3DA5FEBD3B32786F16D658CBA26DBE9DFAA186D4F6B2613CDE3D22A91E821CC2992C7A4F886B1DA70C00638610E3
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=076d791850514a209c680e72fe2b198d.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:7881590lLdK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.432898182060914
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/3wQwQo3DwxJ8js2ALl:SbFuFyLVIg1BAf+MI/QozwkjNALyAZD
MD5:	9F6C7FB2BD4ACF38B6550B3801879E6B
SHA1:	70D83AFFA17C3803CC23F82157AEA44366F024BA
SHA-256:	F7F0BC51A8E99D9129A5E0AA08C16BF84A27EA898BFC6C78D29D4E39F0DD6D23
SHA-512:	EA2A648EBA54A7CCB0217A2596199E8A439B6AEC83CE33A1493AE56DA28025696BFDDF5A84DF6D4541E35BCFDCE2DDAA2C76656D0E79579E6D0C65EB035585A1
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5e78532739cb435e9baf7a27e7f42f4f.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79920f8lqOL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.454141591669603
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuGHrdcU3ELZ2js2BbQL:SbFuFyLVIg1BAf+MuQn3VjNdQIeXD
MD5:	310F3544B5FDDA721AC550680EEBE7DA
SHA1:	ADEBE6FB3B0AFDD2FFFDED668646A18FD7483AAA
SHA-256:	E72D158A0906B0F5847FD933149CA96E55465E93E779637B33B13E1D5D2F1096
SHA-512:	DD654A426074951F65A17C68857D09EEAF588E4A7CD338E4D53002F0F595216A97CFCA3426C5DC3330BC7605617A8E4B4B6DF83D599FEF22B899232539FD360B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dd0560b9ce16480ab69917816a6b72ad.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79933dbMaAK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.353967641513171
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8BEcxAARmRHk2YAgn:SbFuFyLVIg1BG+f+M8BEPlw2jdCLKzK
MD5:	6B68FC4AA5E4EED634FEAA02C6F0AD24
SHA1:	40CDC33F89541BC35626A9DF39098BF0CA73065B
SHA-256:	697089C202FB850347F044813020895010B4E0F26316FAB623456F636D139615
SHA-512:	D26CFC60380547B8930318BE129B478350E47046509789ED186400B6BE9C8DD4D3F4D24FE67B8875CE2C13EF5C142ADCE97D84BFA86FA5D9D04149F0F71ECE24
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6da9e0ae967e4924bef6bceb25a5da6f.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:8001263srJK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.385135625980578
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyY7G6S4xf2js1Had9:SbFuFyLVIg1BG+f+My+G6SGejosQu
MD5:	A0B829B47D4A79294024ADFC4F29A357
SHA1:	B0F4FB3EE4C6CD54515DAAD9E27900AB43275554
SHA-256:	16454664B5B47E8C241254119C86A049BD85E337E9464C3E0D44D6E1A4034ADC
SHA-512:	88A27AB74AE63197CBA47FE043DD6BFD2A2F707C13DF5DD461137DA5ECCA5716FA8B8C01B47C001130C03FDA41799B49859CBCFC7A6976BE061A67938C153007
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8e57021315514afea21c4a0873c0ae18.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:80111U3DxbM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.379846071041793
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M4GigdWuAht2jdCLKzK:qgFq6g10+f+M4GUhtcCLAK
MD5:	43FC71A65ECFC19AD9C5F4BC0541DF5C
SHA1:	2391677E4E1F32E7D003702A85FA2ABD35094138
SHA-256:	11C4F796F35B482F20BEF968B3A09FD9369603D4C3C1B2F485E833741CDFB9D3
SHA-512:	3D6625451422ED5FBF6EB11BA95726D0F142737DE16CC2AF80D7BD15EE2EFCE88023AA7D56A7C1C5F97B32A3F011811ADF9876700CFBFB6A67D14237768E50E4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=28a4ad19f9c4406eab49fd83aa925d2b.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:80114cHxgeL

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.483576077070274
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MCdEnDV8Wz4jZcHcljX+:qgFq6g10+f+MeEnD6YumAu
MD5:	EE7A034A487409A5136BD98D690F9FC8
SHA1:	584F6AA2FA6E2A14C70DF02F6098901FB54743A5
SHA-256:	53615BB73D3DD9F80A03696EFFF6381D209B9D03A818A11E3C679BEEAC433D71
SHA-512:	24517003B5B58BA4C344C4582CFD292D1564694B9DA781598A970F46FD27AF3A79E1AAA89ECC6B3ACF8829A5F1FCDC95065CCD12C25326124AB2EA72452B6681
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=351c88cd4dd24da7b019c42575327ce6.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:80131vqFwLM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.43572163333728
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzWXJQdeWgOATjs1Ha:SbFuFyLVIg1BG+f+MaXfTjosQu
MD5:	4033BCB6B349BC94DF1D004D328BF208
SHA1:	34D5BE1FC725205E52D6EF4B5F8B930377B4DF86
SHA-256:	7A72D243FFA7F57C5E060AC63AE12CAC0DB9D300B544DF0958B87648BF4BD20E
SHA-512:	DEEE28793AF2130E79E6A5D80CB8923516B0AA0D13D30E7A52DA836C43181BCCEE4787FF5C4FA94B223671AAC6163401F77F6B30AD53DD9A3A7C42D5B0F6DAEE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=97c212f174584c1288e9c73957e88ea7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:806269vggPZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4271494714492725
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmujGRQvdHS3X6Rqjsc:SbFuFyLVIg1BG+f+MuZHSn6RqjosQu
MD5:	AECBB051660BB6561B313C63F00C6AE0
SHA1:	59283AE655E443BB649BCDEDDA4C974450690743
SHA-256:	96161F1735A4D27D505E31AE7D4E63A771D1A90A68EACD8A8844D0CBF1B009D8
SHA-512:	E91CF5C44781CF1304FAB5C8C1AA7E3B17296FDC7DD203D04969C7DF0A202E3014FDF78FB73DA73A1C385D552541DCE8A9876A33D9E09FB35288ED57CCB3DE51
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=db6845cc430d4666b9667834e3074125.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:80627m8upG2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.488092979159779
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpyxmgKDXRDaHjsicN:SbFuFyLVIg1BG+f+MCKFWHjZcHcljX+
MD5:	95C64686F8CB8A15E23D5EE7833CDAB2
SHA1:	8DD44D8ED909754FE423210F1AECDAB8EF31CD1B
SHA-256:	DB2ED1B548A3898353D55EDD6A8BB15C56CA0004517F9B6912087A27DC96EEF8
SHA-512:	A94E8030EB5D18382913A378118BDA7BBB38314021658C1C93B48BD7888CC075CA85F971A9F2119A6A3785EC4C0D22EB21951735F6721E07AE0D2744B549FCF9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c2271d984915494c8f73870e4f038737.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:80628KJZyR2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.367672662505064
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+r/cje7BVaaB8vRqS:SbFuFyLVIg1BG+f+M+zhBbdjdCLKzK
MD5:	04371E51DD2FD5EAA2D57F225F99B22D
SHA1:	EE3E652CB1B90BC4CAD3A0B7F7C1E2752260CA6B
SHA-256:	B45BE3FB2204DB95E93CF25CF82581741AAD3F68F0064F53D2201B4001A29432
SHA-512:	76A519D9027A9C9755A71BC1C264E5DB74B7C4934B47E44A0DFD783B8424E4912CD19A01C3492AEABB84CE9744C77A535B5D53EBDCF5A358233FF12F4DB4E154
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4ac3a0b6abb3499789e32d03863d20af.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:80629iItH00

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.519250947215567
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MnBY9XypYjZcHcljX+:qgFq6g10+f+MC1mAu
MD5:	2A2C45B0DC623CC698D6E81F78BC755F
SHA1:	5924733FF97973463BBE024B9ACE85E1BC79C03D
SHA-256:	35DE2712E75109C3A25E51917BB9865CDF936952325B496F9ABFE349A702DBE9
SHA-512:	ADCECA73340911FEDEB8233EEB16CFF55A299820996285E2D3FCF1D7A55341875558DE9668CC8CCB46B7DB256507D6D18C00DAED92076A0788DB05CD89A536F0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=38cb5552d4414dc7b82090639fb81bc8.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:806303atZoZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.41008883092378
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyQ0dQQqXNrxsjsmNm:SbFuFyLVIg1BG+f+Mypm1N2jdCLKzK
MD5:	7D494108707F12F028C2CBEEC29359AE
SHA1:	E9FA83174501EFBB979EB0409E59135C56071B8D
SHA-256:	85A6ED80775CB358D5F8FABBA661A6B203B96A1806971FFF529FE50E781D629C
SHA-512:	6F3A32B65914C4BF9724E04EF586A3FB7B706D03020021CCE0A0F1E98FCF62B91C5E63670962F31D66AC2635E82A1F5BCB11031386F3AC42470759F8D4279595
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8c18b36361894fd58805ad5e110f9722.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:806312pxUTZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.5159370565192
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M5D21R2yjZcHcljX+:qgFq6g10+f+Mh2b2smAu
MD5:	8E1ADD4085C0F1B668712A4A74462A31
SHA1:	B2AEC26FC8681360BC6C5FAD58783AD785870F78
SHA-256:	1994D8A10B8610F98B8E8C8FF1D713FBA1D59DFB6030350B1AAB724E445897AC
SHA-512:	D4EF5DF3EB698F174FF22BE0F08EA88C4F7303393D0146E390AC37F282B5781583842976C22A893CCB2946944EDECF6A730BF5541CF5FCE2EE40A161E9FAF221
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=15215851c7e6422c98f771040649b6aa.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:80632JSONY0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4138408361731205
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu5vDQENNYzhTjs1Ha:SbFuFyLVIg1BG+f+MupRNNYzhTjosQu
MD5:	62159A78D02CDCED55869A16F026BCFB
SHA1:	1530D9A083736E96D75DDD240DD9EFD09267541C
SHA-256:	90AA4AB186D8C7CF61DBF8F258D8AF4D10B2F629253005A866A69BD1E32DC8C2
SHA-512:	37775A3CD699CC21C3F6213F8019557C59E383DD354343B166B0B778DC68C19F315D533FA6E00D679D7EDE2BFC130D3A0B37DF40753DBF7D3BF6198CE6AFA6F1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=df6d4df17f5a4f22890a22b73fa3ed5d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:80633ZqEPP0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.415283710887725
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7eXmJ1ds4Ax3eXY+sj+:SbFuFyLVIg1BAf+MKXmJnsxjNALyAZD
MD5:	AA5EF33579BA99A14E9764B82E574284
SHA1:	F388EA137DE304C324BF7AE22F7147198F823023
SHA-256:	2DC27549F9CBF3DCF4C6B040DAD94786A54BB6351519B8E4A3E3F535DC77D20D
SHA-512:	7779E2C2409C6BB24D30C5B467BF49F3DC07AE52A9EDAD0B58CD84CD32CBAAEAA841E3B7B9E485AC6ACE15BD2283F41277A83EC3A7D8CE41CEAF6687FAE1F314
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1a912c354dff4636a98e8e093e7ade92.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:80634CGUmK0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.39436313839109
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6wU1gjnRBwqjdCLKzK:qgFq6g10+f+MI1gjrjCLAK
MD5:	BC21B0DD518BE094E974553B2A2B1DDA
SHA1:	22057846D2443C8B4D19ED58B555628E619B57AE
SHA-256:	839629D6BE35DD13D6C4E9F46CC3CC7E2DDE47FE7B259AC99EC9FF9E952A7053
SHA-512:	DEF674E3E4B8AB0CED1690DE413E5265CE9C06569B908A2532A4D558F114B17423A17A6AF01CADC2EEDE533C8176BE29A1BB9D96D5907E107127C7CBB21DEF4F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=02d317cfb1694dfeb53200a38d4fce41.IDENTIFIER=whoopsie.UNIT=whoopsie.service.

/run/systemd/journal/streams/.#9:80635zG5mN2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.429224952715189
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/PBiXXT3USJIjs1Ha:SbFuFyLVIg1BG+f+MnBinHejosQu
MD5:	5E35A096507C35F818A74CC63D91639E
SHA1:	E3A2CAE1ECDAD60F5857935368B26BF9C911A365
SHA-256:	22E6C907127B15D04BAA3022ED36DA288AD9F61B8BE4FB3BD69F8A2576517A56
SHA-512:	8764633CA9F1E1D3E8C2B90CC955488F8D81C2C888FF81EF3CA18B7965E91043C29B889A892FAB8B1905370DB97C1A415D867A8B42AB4CB776CEC2BC57077939
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=57defd4a23b145bc91637a93df7ebc66.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:80650cvOMf3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.429579772479865
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7VxXEtIEHEzeTjs2ALl:SbFuFyLVIg1BAf+MZx0tZRjNALyAZD
MD5:	345816CF1A93AAD83F310AE4364BDC4B
SHA1:	F77D36E9EB0E202884B150F316044E82A297B8A8
SHA-256:	756D929E2099CE4CE20864D4736EA38C53FCA5A8AABCDF3E527AA06C43D64187
SHA-512:	237A3CA20A95517C2E79A0622EA31ED7E1968F3838B6D09ED5E390FF09C5FA1CB34B74FE6193FA856D2F45D9DC56DE0B46590BB80BB23D780DB6731AA1DC632F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=170699e2218d4bb78baba7e95f7bb0b7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:80663vuwJp1

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.46814452267616
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M6mcRQHiUqjNdQIeXD:qgFq6g1af+MncRQRw2D
MD5:	C2EC440D05BFB5741310B88D5E303397
SHA1:	0619A3E58C0494E06E946766EF40EAFC57D6D253
SHA-256:	0F5B1A9FF243EA18D70F60CDF0F10203F5FE844CDBED9173AADBF7056C896D91
SHA-512:	B29D690502622A4A4AB15A6EF62789A545F0E70DB6F081FBEC3EBC8839BE0E8946E624A21D25113D07483689A14A1640DFCEDF2AA0A1AF7183E3ED618CB161FC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=092945b648dd44bd957075ec20012d7a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83676dL1Thx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.486508817588884
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5nUXbQEZXVLZyvsZi:SbFuFyLVIg1BG+f+M5QQI88jZcHcljX+
MD5:	54E2FC454743A7FA847478B2A76DE906
SHA1:	2141C2DE5456D9201C543BE6538A3779DF2E1A94
SHA-256:	ACCEF59CC59493AAFCF240B2B51F656968FABB3B6C4B572FCBC0384A7BDAE435
SHA-512:	FDB7688C24D9A0A5043C80022EF3A021F3989A1C5300AD2E544641614DFB0815436CE9DE265CBF77D1F50111787F776E12CDDAC244CA3AF279620A4AC44A983E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=320812a4d29c4ba783248432d7550d9f.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:83677XMaK9w

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4567289548135935
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyRXRCQG7S4B/qc2sd:SbFuFyLVIg1BG+f+MyxRCKmnLjosQu
MD5:	D75A72BDAB93DF6B1784F873B7ED2D93
SHA1:	869DC685FF7AA424E3F6628B5EBCF6A057134058
SHA-256:	9163A4AB6B24B1C1285B9661F76090EDC0623940134AA03468CB9A8DF32989DA
SHA-512:	B7BC7CFE71C6C4A3E040115DABB18AEF2FF0E7F4C15C8B7480B8B6B8449BF76B5901938CA0787F6972401825F3A615A84D6ABE0C6F72CF9AA0ACD447B203AA51
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8cc233525c3747a2bffe9426051992ab.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83678HyD1eB

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4811254219296375
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpEWIV3JiqjsicWmIo:SbFuFyLVIg1BG+f+MvIVJiqjZcHcljX+
MD5:	8EDC12C1193CEF306B957510776BEB89
SHA1:	6148461CB27694528F2F692700E4723655625FE8
SHA-256:	73A98E79EF4B732A6CF4B122894A7CF9DF2BBB5664122F81DAAC5ED34CB8542F
SHA-512:	774BD9A70639F8BF736BCF33C963023F3C1E2F4889CE75156254DAA78D50FA77F5C213805CE68C29C8D2ADC9D5AB706412BC2D548D1CD3D5B6D57A81A0747153
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c030816f87044e5fb970fe0d1677fe24.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:836795YtMby

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.396076024562657
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/cXZAH9Xrxsjs1Ha7:SbFuFyLVIg1BG+f+MuaH9mjosQu
MD5:	0C25B650D57FFFD7BFE53D2E2562F5CF
SHA1:	B36E3671897792BC22E6752ED9CA0F139EE8CAF6
SHA-256:	977136594AD45B7AF58ED3524ED69B712855A3D37BF8DFE7CE0F0BED2AEE5F2F
SHA-512:	8AB4D6CD5A3341F913A4761DCFC9289F984F3DE3BB36FDAEE448206B557733D561F9DD33AAE66109B4C114BEF3ABFD11AD1792F8097BEB90FB5DFC5745950A50
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=506ef26ee04c4ac29b011306641228a0.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83680BAHSzx

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.421591767324915
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmoeVWUghw0hglsjs2ALl:SbFuFyLVIg1BAf+MoeVWzR22jNALyAZD
MD5:	D9CCF9086594BFDB89FF9B0A017DFE6E
SHA1:	D6AAC056C3AFB7910FE5E1086D380EBBD2CA3E17
SHA-256:	52ADC72BE75AC089BD3D04F1C243F786D13DAF5CB8E4703079D7E258848A732B
SHA-512:	A5FC81041CDC03BB20C33DAD3E07A57AB92B47C5DE9BB2630EA0B6C536B0EACE239619B0F9C7804EED1D444E7ADD89683378CB1393E5ACE09A625E9DA1E38E74
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b8941c08cae343ba94061f71ac9f2043.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83681ReEEAy

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4472692638955555
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5Fl6UMSz4HXVUwsjx:SbFuFyLVIg1BG+f+Mbl6UMqMVUZjosQu
MD5:	DBCD6FF19D7C7AF5184EFEC8EB5033ED
SHA1:	BFBE97D61059F26D68B8D2079034577272FC8AC0
SHA-256:	59CAE7CF088200366FD401B06B12E92DD76A315D4EB76E74C0DB03FD11F5145D
SHA-512:	4A9ABAC3629C640969B28D80C19081BAF12BF9BA7E20F9BE959BF2F86342D68231AA640586D4AA4250298C4D883A95DD230C3CAC5E69D0E8B34A24310ABB8DF6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3bd6ef79bfb041f5942b64f2537b282b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:83683sJv81A

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.424801022110101
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+NjBR1U8DeVvswsjs2o:SbFuFyLVIg1BAf+M+N9A8QsZjNALyAZD
MD5:	5E2AC06F68E04F26D51DA42D84FD7765
SHA1:	0C79B198FF38F30AF0B563F407F56F6FA4015A66
SHA-256:	50FB12ABA9F5EBC37C66B151C09A5159599335AA6494A88BC00B1012AE9CF7AE
SHA-512:	9CF1ACD467FEA8B282FE669389DAFB743572DB396A60E8C2F305364358130082B3BD3B1042F36796C7214814080531326D4C1ED36E2A9A538868776002172CEB
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4a4b3b01123c4eb383035c7e178960b0.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83781qhfoCz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.476478290826936
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmz21nUGEwgGMqjs2BbQL:SbFuFyLVIg1BAf+MhPqjNdQIeXD
MD5:	C276D1F40BE400BA8E06C37FBA15BBD2
SHA1:	6393D464B534173FB46A1DC3CB55BD0968E24FB1
SHA-256:	281EF84EEB578F3B1F4E0A9095C8A30DB9ED46FCA7DCE3E4593382747E03B8E8
SHA-512:	9E451CF203F75D680ACA6066EA4561465838C5B66FE605598CD8AA6B50A65EEBE1C9C77BB73C7536E0AE571E09502EA18EE8F338256A7D5A110C227AF1E7A4B5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=956c59a71c57424497ebcea98493be55.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:83786XTQvWA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.382279904823893
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmznQhGpR1qkSOOsjsV:SbFuFyLVIg1BG+f+MsMv7jLkGq
MD5:	32EC0D3A0A826A96E9CEA9DAD6138440
SHA1:	E0F90E1706C2331A471B8F908902796AC2092715
SHA-256:	FBE9C5E44A432B14E9A2D0E1D1AB7FECB5895897A9925B0119A24E18C9534960
SHA-512:	BD343879C18EB8D3C1DEA9BD1A999EB4942C11043A3DA230BFA713B17EDA03770D8FD44E0AC7CF5FDE4B6C0E525EFF4A84680EC7F1C75BD3D5212F281DEBA70B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9bb8725acae040bba90104e67a5874dc.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:85940p9N0H4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.459058362964759
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MNWWD8HxgrqjZcHcljX+:qgFq6g10+f+McQWDmAu
MD5:	86A54E3B7838052259AB89EBC05060AE
SHA1:	2BAE9BEA8A2711377B93CE24B61A2B1AA89EEC90
SHA-256:	AA6AB8932711DFF1097AF207E1E4D1E79920FFB4887231A537AF3B1D03DA8AEC
SHA-512:	14F8E5AA74481290A3DAD1D84DB28A51672EDC5CF23C284667DDE213824F42D2A4581909AF865B6BF55DB0DBB65BFC68F4236879E1008385513B44E44C4D878F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cb30cccbccc64b9db232303b47f64cb5.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:85942MFnkh7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.413358394288532
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz3dHlHTI+qGED1vXU:SbFuFyLVIg1BG+f+MRt2TR8josQu
MD5:	95C753E87E5C6157587010A5E1B69BCD
SHA1:	F5DC1E6C35AFB34BCF038DAADCC6275E9D5DBF4C
SHA-256:	5FABBE109A5A455409C3A6024D684A8145500E51D9A7532F7EBF73A499DFB203
SHA-512:	44F22E8181AAEB6608960B59799754B7182F4A28C1CA407EE80A853794E28A7F5C25BA735EA60E057F7622DA3F4288D54A507FA4D4B33B15CEE10E97B176EEF5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=99e688b4fbca440f9f820aafca3d165a.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85943jIrAc6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.489295990552917
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuvwKUazsZjZcHcljX+:qgFq6g10+f+MAszmAu
MD5:	2B86CF681173009CD9E37989C69ABF41
SHA1:	B345C21AF7097881BB830120E4AC4A537AFEB891
SHA-256:	AE5B84A769CE74B37030E8D44084A114CE16C2B4EC219B022584669073F0278B
SHA-512:	4D1EB8A359ECBE00376A0A0557A58AD3B42E10957811F0DA23B8864E7B18795AB94E3C74F3E99F98B48E186250EEBFE8BACF11F6B16B8044C6624949824C4363
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d25800ea95b54a7cbcc86e566ac7163f.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:85945OTl9P7

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.419842616536299
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvMHw20GbVNzshgrqd:SbFuFyLVIg1BG+f+MEQMbVKhgrqjosQu
MD5:	72D367DB672120436D39CB62087369EA
SHA1:	92B6F34EAE7936460B2D6374E92FBBFC533CC14A
SHA-256:	6E4E3F66D9E20A94C6807E8E24EF5789A82EF05E75BB5AB50FAC27350462FACB
SHA-512:	8045849B74B6C59688C158CEBFBD3121A05CBE6AD64BAAB6B763749C3EAFF0F45A8D69835E843D826C204256B70D747100205949A270A48892CDC89B889559F9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e010d9f6c5ab4ea998247cab920f4e25.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85946Oj0Ps4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4151108606632485
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmunqKINcJZE2lsjs2ALl:SbFuFyLVIg1BAf+MunbIEZEjNALyAZD
MD5:	09A2F6A45BF0077E2F5D9B602DF48E94
SHA1:	7D67C2B5E4FEBE3D1C2EAD1467B2BBBB5BAF272E
SHA-256:	052AEEC6D9359585606DF45F2AE2CA516D584F76301EADA8E32226538D466C64
SHA-512:	D72AE659EE3BE2D61423DC371957F9DE3255DD09FEC0016A05149CEA454D636DC54A6D8AA2EF457DAF6F34B1AD9E763799D0D5FF0B744DAE82DD03D4A9DA30CC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d7a2732bfd9f4f359c1199ae0b12f09c.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:85947OeRj36

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.437887725200597
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5NN5ZIuWoQ0Mqjs16:SbFuFyLVIg1BG+f+M7fRMqjosQu
MD5:	EA0AAB3FD94A643BA894750BA07D228E
SHA1:	4FA8928A55274F4BE8ACFB87C561E9E845C30BA9
SHA-256:	55D21CE7B46391DE4A8CE4A6CEB59CC975A3176BF6BD5EBB255441916BA16FF4
SHA-512:	612C70E0EC0636895FF8D70EEEBD0CCF5F92291C7FAE67258CA1EA6DF91847F3317893452C191B4763E3D328173BF91FACE26CE29E1BEAEEB874E4A20F6A9A72
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=34cd9bb0b9034fc7bf29c86638e5d9b5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:85948Lybv57

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.490394058371946
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MWS41huqjZcHcljX+:qgFq6g10+f+MWL1MkmAu
MD5:	34E56A17E17EFCCF98C1314E1C57D77D
SHA1:	2E766B17C5E4EB2A98C56598076B6DD49BD16514
SHA-256:	DC2FF843136F20DE8A245BBE0A3DCF0CD0AD35CCBF3594ADD238512C27928213
SHA-512:	16DDDBBC16A67C227081F9D1868AD708D147F9FA274E34786DF809CAFEB347B238F38BC7689A073712E729DA76CE3C39334692633C11785342DDD8EA7C0C0134
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=75ff7087ea28441b8e6a04b518c165d7.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:85964PbgjR5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.354850903576713
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmptVc8EQRnnsRRBV2S:SbFuFyLVIg1BG+f+MWQRnsRV2jLkGq
MD5:	6ADD0EA5895996896AD8E94EAA83D771
SHA1:	3C49A9CF281224BFD7EA2034931C15F076D7F21E
SHA-256:	53CDFB07179DADBA1B5916F9DD7F4DDB4ADB778B91297044E187AB481BBE9ADA
SHA-512:	2DA8472A29B037BEDE89B090EB7E4FCD92B5DA519D2C7A2AA76287BE6FF7A1BA6A1A4121FBD69D4EF2151CC8CB8C4EDA2CA25896C4CB7D03A889FC6B92D4D1CF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=caa089fa0a704204880029be0c468df6.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:85965LK3g94

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.399238805185099
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmsEunXlEFuqjs2ALAXaN:SbFuFyLVIg1BAf+MsRegqjNALyAZD
MD5:	4C64EFDE2CE3085495E44CD6DBCED3FD
SHA1:	AD7F2DCD81F09F376B60E31F7912764016E141BC
SHA-256:	5BF08439C1973B6A1C10C9FE8C4E6376F86AAB85061F7F8C70801A5035705836
SHA-512:	9886CF1A80CBA48F035A1FC8BD16C8B417F7A928A795E19933AA5E18ECE56AD26ABD21C9EFBFAF19368BAEA961FA14AA8AE03594B455B49DEB47A233CF9AA55A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fa7e743b539b4f30b56a9fa1ba7beff7.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:86055uE9CA4

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.47714989959507
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmo5LOHj3GWJf0huqjs2y:SbFuFyLVIg1BAf+MoNUfYuqjNdQIeXD
MD5:	BE810BA196E52144CEF881868476FAA3
SHA1:	234E49704F755256C58A2931905FC27DC0C4D5B5
SHA-256:	87BAAE6AEEE75AAF3819FE3A1DBD2C7F3BC14E7335E604E6F55B48FAAC8F1001
SHA-512:	7FCC84998303BE32371426B4FBFEE00EDEC0D367FAA26B1E23AED6A7AF51A05C95E59049F6DECECFD48B9AC057BD0F226C5E87663B2ACC7EB4AD4FC15C4DFFBF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b063d9537b9744cbb3e08cd6d6c849e5.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87066XXSXYK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4937525814226715
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/xI3G+dxsjsicWmIo:SbFuFyLVIg1BG+f+MW3G+AjZcHcljX+
MD5:	9E24229D793D0B84317179C55918779A
SHA1:	97E77C53DAA51D7892F82652640081EE90446DA4
SHA-256:	BA37236286BCFDA6B6DA97CE8E2256D5D308CB153AD5D5ED599BC050D78E021E
SHA-512:	E6A145F5972159CAC95428177826456A5F58730B62D9B457F3DD7ADDCE73644A292B90764C16D366DCB1BA3067B19EC69D3AE31F80DB26122E7E5E1F600FB3AF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5b105281864f487fa8af6e63cf2d2202.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87067PulCGN

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.404772976542271
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+tLzduoYivF2js1Ha:SbFuFyLVIg1BG+f+M+FzdLYiv8josQu
MD5:	2812227E34BC3E26DCC2F750387DA490
SHA1:	D29BC09D25F061F4FD37CA91B313235C778145AB
SHA-256:	1C211D0EAD457D9E7AAB90523D4610055CC5BF628490EA5499F330363B8799E5
SHA-512:	AEB95F7DCDE21FB6240D97B878AA66BCAA006989267FCD5B26EDE9BFFEADEBAEA5292BB26B68DEDA95DCCC8504FDDE8D8DB0D9871CFE51B853970F4602AADDC3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=4088a12d0c7d4877a820fb3107169e18.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:87068i6929O

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.511480465649446
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyUuRArFjZcHcljX+:qgFq6g10+f+MB2AjmAu
MD5:	7291A631E4B211D9152FC11A580E903E
SHA1:	8F6C86A9D8BDAAC5C8079197F13A458A3716B0B8
SHA-256:	EEF18C0CA4CB96927E6257946B7004C54028F6281126CD0FF183D7480BAD31C5
SHA-512:	981AF6E704CA3513798C8F6E512A114FE9713C2DF82606460DBA2A8A967EF0502661E7CF742DC4ADEA45E24E01DB572B56E876332B8335F5127034332B8767C4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8cac26c8745947b2be111ff10f8d5851.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:87070f4P21O

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.436183686517546
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvBDDmEBKMRxsjs2ALAQ:SbFuFyLVIg1BAf+MZDxxqjNALyAZD
MD5:	DCB55C8494FA2DF746A2AF1905C588D9
SHA1:	6E535BCEBCCF53B73A56AD1134CA2881C405314F
SHA-256:	3DBBEBC578CED610CB9083A63C1AB237D3742A702E09256B33E4ACE3524266A8
SHA-512:	1908FB6B667ACC68D32590A18F3D41BA2383081B8CFA4B43EBE0E79DB9D1F46E660041BC5F7547898A179925D6792A045CCD4ACA09A425F69ED130BA969DEDB2
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e825511380994c4ead064b544735164a.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87071EEpweM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.393681842958032
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuQGWSDFd1MALjLkGq:qgFq6g10+f+M3wFTMAgT
MD5:	491173A1E5A2E0DFFD4F147B58CC9087
SHA1:	2F10F83E088DE81FB10A8E1AA8114CCADB25846B
SHA-256:	C55F85E95C587E284021E18B445E647A87C730B26BDEAA04065688C907DEC460
SHA-512:	79C94FF21FE2FF26318CEF4F8AE093364CE4002286426BCF044E838EC741BB8FFF3403AFAC042D6C8BC055A3C3B00DBB790062AE55A7D053684B6689D5DC5172
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d7c3ffc9e5c74cc1bb9ab21a7c10e278.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:87072BPpLqM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4074459060230735
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvbA3txddauGPRxsjs2o:SbFuFyLVIg1BAf+MsJch8jNALyAZD
MD5:	367D1CD998D42924C20064EAA4116BB7
SHA1:	13131A7428E3F7E16557767CB124ED40898C1B3B
SHA-256:	877A1EB3411C68B6CE657A96DCB1E6637105EBBC987A55CC0119CD6DF3A196D3
SHA-512:	4A816363AE649E5C9C8B503E5C11D5CCE515F518EC02FC27B4A5D5E7C8EBFBD809904F2D62AD248E20CA9444DA3517B6DB4388C5301AC6B2D6B0312F9F7EA33B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e39e44b773484eb4888b7b3b786fb9cb.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:87095wMAn5L

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4858475439724135
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8SG8auBATjs2BbQIeXD:SbFuFyLVIg1BAf+M8SG8aHjNdQIeXD
MD5:	64EAF3FDE95E3FEF2ADDBFD7A7CA22BB
SHA1:	F6121AC5D19269BCA792A1AE4BE0A1659726F451
SHA-256:	0C98B724761DA58DAB3C866CB4CFEBC2B3939A34CA362BE6C915B0C381B7BD54
SHA-512:	9298E315CDE8D7C66A35C185639A82BB1E39D2560F2B4F7728E444ADD57D24CFE9FCE7D43DA71F8B000133143985784F9C68DBD89602ACDAA27248E04E1F3763
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=65bc46d17322409886ac8d47222a030f.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89196ZQECib

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.500805394987642
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpc5cQQ0AbsjsicWmt:SbFuFyLVIg1BG+f+My5cMjZcHcljX+
MD5:	93624A71ACCFAB94908D19891311A98B
SHA1:	64AA1FE3F1D5F00D33BB3913A46FFFDA91887DA0
SHA-256:	9DC3A3ED4D68CBDB602CFC1D11AFC97F7BA24552E2A5465A68623D0422E6FE66
SHA-512:	A2F1F52BFCA9DF049B42499B456639FA80E82D5FE3DBBBA49E83C7B33E091755ACD11D710E06A49A1D72525470D1DA23D62C0641F2398DD2AEC819870F90D6AC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c833e436c49541f7b0372e150cf374ab.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:89198XdEWo9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.426353350500574
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6rEEfNXpATjs1Had9:SbFuFyLVIg1BG+f+M6rEoiTjosQu
MD5:	C282C787832353E74AF19F6D49FCB6E6
SHA1:	DF3E4DB77223216E2B8BC8ABF02B5BAD1FC90147
SHA-256:	4C5BA8248FF2FCF1C72F64F196AE85D81B8AC193707123CE509C3C6FFECC54D7
SHA-512:	C70CF25A2714915E424852644E1CA6D096DD01FD5308455AD659EEEB84F8941F06DADF065FC04AB28B64F759591421839CEBE4A9925CAC681063721B7A4D8A9D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=00dbcc0603c14ff0a6692ed71218c545.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89199g2Ftsa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.483268461029686
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzHSWGdgV9zc+N2rx9:SbFuFyLVIg1BG+f+MblDRqqjZcHcljX+
MD5:	F21150AA836FBFCF3A47B10561295179
SHA1:	0B4AA7D184D40CE08F1C15EBEC4646D87DF4AFD3
SHA-256:	EDF9644C815E38D941C277F5B5150FBF06AA1EB02B8D682CBC65B3DCD143C3B6
SHA-512:	B4702BD6DE9AD128CAFD1296B690490E5484EC5B8EAAD139DE1073D163338FFECA2AEFD65B52EFEA26AE99CA25804E68FA8442264B07BE3E18A3AD0558F7FC42
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=98027356037d4c0b8bbe3650f10d6733.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:89201HnsT2b

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.440772583273466
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8HdPWbRAVcCgWURB+:SbFuFyLVIg1BG+f+M8HlWFpCcqjosQu
MD5:	118017EE0D57A9FBFA3AC097D9AE969D
SHA1:	24CA022F4DE4270389F9CCD12464BC56B8C09F0B
SHA-256:	262ABD0B7A1983313AD14849FFF095393B27831941086C999E5374A04FD1C6AD
SHA-512:	1FE6072FAD709252387FB128868AFC3D734216C711FA49409A4BCE4BF8F16887F83D23418292D84B98E30D36D489DAA736EAFD0A388A5A16D7D4E8310F16AC42
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6b8f63fbe7b24e09a4df7a52c14d7d83.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89202TYugFb

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.441237943606215
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5wW8yPHjTs7c2js2ALl:SbFuFyLVIg1BAf+MuyPHjgg2jNALyAZD
MD5:	A698530E5BAFB1E2E2C07DED64B54AF4
SHA1:	9641B85F1E5FDE1ECF732CFB0545F9D42B8D3EDC
SHA-256:	17FE25207D316827537151D552D250E6EA83C44901402DA6E218D7BB3197321C
SHA-512:	6BE7832DFCBB4EB35EE61E9A6B4EE24B9A210FC03BEA7B936E538B2A41523704A4813593CCD8C8E1016059C516B86C92C6C4067263B756691D3D34E62073DBC6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=361832293cad4f6b96e2f1e717fe7487.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:89204OiVFG9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.359439266468579
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm7JYJncN3udR9VtrxU:SbFuFyLVIg1BG+f+MuS3ulv2josQu
MD5:	3D19EDD2ACBFA08615C2D88C29D0FCAD
SHA1:	759D107CBA396190FA67EB166AD2B0CAA52F7008
SHA-256:	E6F2DCC705447A213A6B21E5CE1FCB5071FFB3AE6D4E004E5ABC71C4A3090BA5
SHA-512:	A4FF10F60AFAE3B103BC192C6745E5EAC8AA1EB6C0B919B36F073258B133969447CD0158FF3B29DBE748E999039D93ECEFCD0615146EB137DD96078DAA808D76
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1f0c1a9d2bbc4dbb94f2b221b8cca10b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:89212Biu8fc

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.378839593676053
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm96Sb2EXZXlsjs1Han:SbFuFyLVIg1BG+f+MEoXZX2joa
MD5:	38C62AA54C03DCC83218E9599E338E8F
SHA1:	36025705E6F20C798B85B263BA2A7FAFE8DDC822
SHA-256:	808E6EE9F27FAD54226D8821007DB705232CFC0DBE8764CE54CBC84A0F64CDF8
SHA-512:	75E14CEADE421CBF078DFF2585C5AD07BCCF550EF01709F167A5A01FBA18C236A2448E43747A947C9BB9A3C749F504DB881D1ED078735DF6A0D59E244FDF9A7D
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=719e7e208d514b549a7ac347b5a6c460.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:892210jLsx9

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.390733296235696
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyeSdkczBlcvshTjsO:SbFuFyLVIg1BG+f+MyNdVzBlcv8jtWL0
MD5:	F585B8811B4A35161DE17EF15A8159AF
SHA1:	76AB2548CE76B1DCB5472AE961306990E777E98B
SHA-256:	9C36F643B5DED10028A74B211B7BBC0AE0361EFB771660F39E79EB8F0C360A4F
SHA-512:	5E3355CC8773791C3CA688225323740E8A2F3EC6C4A51F716BE0E74864F8AB08CF4CE2ADC6DBF907F11AC3DF2E518BA19AFC9CA2C6EA33E8E5BEA779163E0ECD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=87227870698c490691b68930353dcffe.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:89222faX6X8

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.397052662088934
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5bBXWVYAd4Wpmsjsx:SbFuFyLVIg1BG+f+MdBa4WdjNE
MD5:	AD0DF02ED061509A55AE99205BA7BC0A
SHA1:	B2B5820C782F8A337CC32E2E760D5C866713F373
SHA-256:	D6E77116453E29D337C22AB27201AC913349C924C5641EAD1F2C36484FD12F48
SHA-512:	4DA38D21DFC8D1E2399A63E696B06F7960ADDD0D7E25F09F3AF38B183E276E547D697B16B891616745903D0B568FC4EEFF0753EAEE57738EB1A8B96633958466
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=33fcfd2e1500421e8f7033d3223b8aab.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:89224QXJ9bd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.394714381894728
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5AGBvAQRT6EnjEDKE:SbFuFyLVIg1BG+f+M6GuETvjqyjbVC
MD5:	12D8DA3B5E5CB26C3E2C299E7C44A785
SHA1:	FC6748BB5C5F56B7C4E958C6B57E9FEC5782A48A
SHA-256:	040E29D54AA54478BF791455499BB7A1E5AE74A181FF4D069C731CC1215FE4BD
SHA-512:	CA460EF05CB59B7C45093EB06AD5E331B4109366064483C4F4EE414620EDCFD741E5CF04979B02DA18539D1D2A06125A75F26E154EAA75DDBB4E8FBA60BF5673
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3c2e20d604e54649ac9662baf6c53fd5.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:89225V9waxa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.3886691622130405
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8aIGzHRiIRqjLkGq:qgFq6g10+f+M8azzUINT
MD5:	05E14A8E0DE0056F2D32D41581BAA8E7
SHA1:	056B39535AEB6D9BAF62FE452DCEA46BC3B041D5
SHA-256:	6AAB74F1E4C0C75AFD2F4B5271E4A79E2935A215022B7679A715997007BCBD98
SHA-512:	EAF3373D9E6CC985476759288DB9A50BEB252248C68F118961FFBD8267A18E5D912F81175405E0DD3AABEE6F5036D9111BB2133E46A8E72309B17561E2C315CA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=638037121f504cb1a42e733aab365bac.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:892265DF1Pa

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.401683150813562
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MuVB2mDuqskjNALyAZD:qgFq6g1af+M62mEmIZD
MD5:	8D1FE7D61C14D45A1B5E5A8DA46A30A9
SHA1:	8C82F38FBDCF401EABBEDA325D4DB076C5BEDA54
SHA-256:	EC2606FE13951E4D885415A54C71CA54B786B42224C4FEAB5E0C3C001FF6C212
SHA-512:	F8BBA9EF8864A2127AAE87C56EFF682D35E3EF0B596AD04C2DFE6639C2760F24C5CC4263DAC8681B54303D5603E5C69D475C29A1359033CD234B5497D84D3059
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dad6add456b74faa9f3c082ad04e0ce2.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:893502lgAbd

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.464874589330695
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MvXkIQtshg2jNdQIeXD:qgFq6g1af+MvXkahgM2D
MD5:	20C38FD069151FFFAF49BAA4C5E9EAE7
SHA1:	2D743983A4EF5E621C1A5E353BB59FB1CAADDBAF
SHA-256:	385C687558FE106F8D1025AC89835F59B2C0ED060CF075CD84901EF04A958B1D
SHA-512:	311713554D60BF7215B6F468711800A909F04992800D561D7EC45167BCBBA9A791D33D5E79EE21625BE89ACF4E8174510D26AF9A0627EEDAF4BF77F5A1601AB4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a10cf2d7583147c8bacfc6d7712a05d9.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:90831BTPlcu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.455652536811061
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/D4TiXc0H7sjs1Ha7:SbFuFyLVIg1BG+f+M7aitojosQu
MD5:	77E77659C1EFEEFE91E95E8D60F1F0E3
SHA1:	9A40996818C9F1A2F925667C4A7E3B6ADB4A8185
SHA-256:	201003F7BA34AA07AAD21DD7715FCB439839B4B679E2F07FF2364608FA414959
SHA-512:	A4344A3F6FED06E8649D92893EC6DD690387515A4FFB3086B504385107851AA7E4AA14DC80B96351657A6E865B8B3E71977EAA185C737866A1635934A4A98493
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5b6577f93f574a2992f576131c92150c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91352tLtvKs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.472212240190127
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MuP4U5dU22jZcHcljX+:qgFq6g10+f+M42mAu
MD5:	4E56FBE45D43F0A7840A5512401A97F3
SHA1:	E82C677B879761F899445C7BF8E712A0F7923B45
SHA-256:	B65FD89992C82F00D30ACBB56AC4C080EA3DF1EC88AB84B552B0E9902FEFF044
SHA-512:	07C754F8BD8FD7B8FC8EAE6DF5DA8DC5EEC363593634D4E00D6952373F5067E736FC573087BDEFAEA913386AF8357FF1D4F66EA1E202C781359E86FC3BA60E56
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=dcf3a44cd3974f089a6c38f74d19808b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:913532HNR4r

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3101880671661865
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4kW1QCuRdBDYTjshQ:SbFuFyLVIg1BG+f+M4iDRDETjtWL0
MD5:	AD3C8A208E672BF65AC9FC8A7AB36CA9
SHA1:	82922D0F1502BB0EFD2DCF2B6FFE9B69A3C92FB0
SHA-256:	CFDDE1742E64E4FC6F845B809334A53F555480367E3AADE7559A5AEBBA84F8DB
SHA-512:	B2D522E526382EA3AB683D570E4D234097595C8448E4451D23C974B6A0200BCC1AF37BA0AE200EC7AAA1A43B10E0633E7BC2A79045717ACBCDBEC7BBDCE96996
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=22dca7fe8d6a496ea8720e866f0a48df.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:913557NszWu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.433646949555294
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MyBVgucABBLqjosQu:qgFq6g10+f+MgQIL4Qu
MD5:	760CFBD1460EBA144ABAFBABDD9FCD88
SHA1:	C7B46C3F602CD8C987410D4593F8275F79E0A939
SHA-256:	7C8F00025B75A37B8AF33568F8E4BE9785F1BFCAC6461BFF1C16DD175C59CD9D
SHA-512:	2E5658F2205013A027D60989079EE8A797BF735E2D274EDA1664FA1CA912ACDDA78DDC391455A72C21543C3DA8A592251134A81F4ACFFD84CDFAD80444B4F442
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=81805b7c934643af9f3304cb489edd55.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91356roGLKt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496276020340598
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmv5Vu8bmPbhVjsicWg:SbFuFyLVIg1BG+f+M7u0mT3jZcHcljX+
MD5:	DD1C4AC92AD147D9A6E443D6D04BDC38
SHA1:	F90DD457DE5E7384E79530454EDFA38D482671B5
SHA-256:	CD10EB32A9AE29D561B112AD24D65F0C0AA0EEF211D00562BF83872FBDEBBF8E
SHA-512:	CA49E64AAC2347BCEA5964FB970AA87D51458183006AC3A112E8F28BF9CA44F83DBCAD9A3506D5088104CC9422689C00C25838958F6912D289E0F08DC2DCB6C0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ee98457e7d684b12b9fbef41939bd6f9.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:91363tLxrft

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.36411873465245
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz6UWbdHRRsKYF2jsO:SbFuFyLVIg1BG+f+M8nskjtWL0
MD5:	71B3EC65915D246AC4E53690433183A7
SHA1:	1E34B490821286E54556E958BE749F36E8F47CBB
SHA-256:	6E1B0D0465A2403AB63AEEE56FCA6E8C9F2B6DCAD09F6D37E399C2BFFC97FC9B
SHA-512:	0A634523BF08C9BF9984927B19E5CDBC7E9B785F7316C9CC16E4DE2E90852B63ED2C4770B80F5141FD4AE0F608E3F39D7B0384BC5D904FC5A387BC66433C9F89
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=98255d3f008b432aa699fb81c4a8443f.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91364MnEP1t

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.422210853230372
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyNHTg100/X7hTjs16:SbFuFyLVIg1BG+f+MyBg106XlTjosQu
MD5:	1284901D2FD2000E9F3C34814C90879E
SHA1:	5A4DE2209C3C1AD58AA761934101190ED35FFDAA
SHA-256:	01E12E6A618F063192C119BC87CCE3B9869CFA52B28DE50709528C1854FBBD34
SHA-512:	07299B02157CAAC223D9D1BBDB967342DCAF13DBAEA6A513A5B9A5518BCB34EA41F66F6F611CA4A4F03F8755A119E64F62CB15F9F3EEA41A57A00FD952D051C9
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=828b525760c14128a35fae4845180a7e.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91365xqSGgt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.397233949260007
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvmdyTVg3yLcuxsjs2Ax:SbFuFyLVIg1BAf+M+22C4TjNALyAZD
MD5:	BE99331FB648A294E1AAAF5B3EA685B8
SHA1:	947ABDDA840ABDC37EFDE82070EBA7D1BACCBCE1
SHA-256:	F9A049C6E8146E0EBC0DDF3680B64B841D8D5B49232FB2489AC79401F37F0518
SHA-512:	AF3FBEA5113C21D3D0692072120E0CCAF005FD7FDC467372106D20F0050367FD6E3C00D409BA206C44E797FF88DEA7D6416B49A4BE3554F546B0C4DAD788B9CD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e870f8e606094ba0a2646605c8dec0e2.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91366sw2Qdt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.37558532446514
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvrGyA2adLXSBEtRD9:SbFuFyLVIg1BG+f+MzGABEtRmqjosQu
MD5:	0BAF3DC11612B780E03F9E6032286D6D
SHA1:	C37D1F2236EF915D4E255F7A461B6A3A7B38D8C9
SHA-256:	188CD54ABA6096D234AD70D3567B468FE47F65F152BFF11843A5D0A7E264CA78
SHA-512:	12111BCBE275BC8DA5C452CA254A7BE169C0CD7E15AC485B67E83C546833C0F22DFA6CBBBC322F2962E80054D63AE7D92FF8DF807C80B767D84F4DCDE58696F1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e82d0d7f8ae44cfc8f24247da412a4f7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:91373nuXuvu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.36010337559839
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm+3RTVR0cddTiUADxO:SbFuFyLVIg1BG+f+M+FVR0cfnjtWL0
MD5:	53CAFF8B36F14C800D60A3310A3166B6
SHA1:	13640D9A46261674293C552AD3EAAB9E747D559E
SHA-256:	CB32C71AF992B815F68A36BE5063AF1AA5D93F7283428A39CF3DD30F0F559F54
SHA-512:	D722B01DDA3690E5DA65D520EA045D98FA1DD5DA693D4AF2E4DB9FD80F72BE87542D4EC84A552444DECFB620659D4A6EBA60CD20FA0805BEE906534FF019E0D0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=44994605a3944598822407001f5dc1db.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:91374xHn31u

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.436834302961349
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmufWU9HFZ8Dcq3grx5:SbFuFyLVIg1BG+f+MurlFCDJ3grqjNE
MD5:	4F1C7F61E01A881F2E35A59B9072EA60
SHA1:	6BFD7E22EC116CA3B95CAC4453AF4AA7329D1942
SHA-256:	B73C0A4F7D78ECEA34873FE5A8BE43A286612D2CFB5D869070F1F3579BCB103B
SHA-512:	0251FEC67993AF2C4B188714E6E19BDAA3D16711758A9E1D74E019CF549809FB5C054A110FDC04088E5A4BE42B2FC2FD3174C0BD1DD55B25B639EC76D1D87075
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d611d3102bc74d808b50a8b95a159afc.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:91375EyOBjv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.428264823643887
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6vT4D+Y/RHbBV0h+N:SbFuFyLVIg1BG+f+M6L4L58hTjbVC
MD5:	13FB58E248BDDCB8B3B2886F40A0BEAE
SHA1:	2B1535EDC7BB437067C1D5D115AB4802826824EB
SHA-256:	3D56DE94984F93F1C763B41AF4FF737FA3EA7C6B2032842F803DCAA2A478D2CA
SHA-512:	BD571A09337815A53647C9ABDE25E095E2315CF5B3B119D248D3109ECE89F15F17DF50CA08A386401F33BB87C6B7FB22AF5794104AD7316F721D3D0D71E383E5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=07963f4f3f29480692387c9a684bfbd0.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:91376Q3F4Qt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.437385162507092
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmynFRnSks2rxsjs2BbQL:SbFuFyLVIg1BAf+MyFRSiqjNdQIeXD
MD5:	D63EEFC76B86A2431C0D39278D453138
SHA1:	1DE968A617D73AE8014689BAA7241C1B8E756768
SHA-256:	BF8BE6677D1A228616B1972A93D84E8919053BCE18FC8B03EF58A2AA1A0E7AC8
SHA-512:	9E7363AA67B594EA700DAFD6C6BBBF375B2F068838EB9939B7DD21ECB4E18900DFFDC5C7AED7CD6F4FFF9B71C9EA2EB2B1CA99647CCB228A0EB3D48C614F0991
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=84da13afd85c4e899dfb9bb41538bc9a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:91385w9iLys

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.428638304721491
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmpCAWXQlRir5c6XRXM:SbFuFyLVIg1BG+f+MBvlR+5pRdjLkGq
MD5:	36DB039F7B3F56F33C8BC8150A5CA58F
SHA1:	2059B246885213C901890C7D1FC2E8EFE660D1DC
SHA-256:	D8A436BC7A5482899EC6EC0DE24CBB6EF9E2C201D0CF43FF0789757229687BBB
SHA-512:	16792652D1975A0898B0D14D162DB86C40F4E3CC5B3579076B61087DD0B6253432EDE1C8BDF9D58A7FC29394E49DA898DDB9FD6F5EBC63679E0A18F2DF34ABFA
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cbd1e2c287d6496d8a5905242d956ffa.IDENTIFIER=agetty.UNIT=getty@tty2.service.

/run/systemd/journal/streams/.#9:91386afRGGt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.353375340167411
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8DQHmYgSXdTwElW2C:SbFuFyLVIg1BG+f+M8DQHmXS/V2joa
MD5:	A07D481B138DB4AEAEAFC4289D731709
SHA1:	6B4BC0106F333E2C4540DEE33A8945D8524BD12F
SHA-256:	C542BDFB7E87965CB6845E259437F1539E755E04079FF7C45DA45A4FA64B0EAB
SHA-512:	75F4ECE8676C458238E67C1DC3F58300FA066A5988F3F8100A42295ABF4EFFA6EE574546F40ECD755407EF3F32D6FD83C15EA301A5C2D8BC28DFD97377984DB0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f51bafb701d4c1d912fcf14067fa4f0.IDENTIFIER=dbus-daemon.

/run/systemd/seats/.#seat03Yz931

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0LBrKIS

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0PSHnQa

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Q1oriH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ThflHf

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ZH2dLC

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ZtISag

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0ao7EwF

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0cc2jGH

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0fguCiS

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0i9RuKr

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0oD32to

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0z333T1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0z3ok7v

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	1.9219280948873623
Encrypted:	false
SSDEEP:	3:S:S
MD5:	3BC86424FB71932444AF4C884E890A08
SHA1:	9461B3379A6132E9B2A3EC7C8F6948FF3E498C7D
SHA-256:	FD458E29108A6107679314C191538FB361CFBF7C6317F6C24950263FAE8B9DAA
SHA-512:	2EECDEAC368C92F68355F8C415FF413CB15250EA4C2E3A0C90CE22168978A3354E9025B435A095187078029FB12E51351CF0720876681F58C8185703AA969AFC
Malicious:	false
Preview:	8128.

/run/utmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6670868467684749
Encrypted:	false
SSDEEP:	3:ilmlsXlXEWtl/8Cbllll:iAA+ylEC7
MD5:	C2EAD06AA43AE0D1710926AE4439147C
SHA1:	0A6640F946F77A6021E3D3485D3B2EF1F2400F44
SHA-256:	AD3DE193C976646C3E1002B6FE25B2AC5DF1E6F642ED48006A28DB52B3E9EFEA
SHA-512:	23A4DE738B3EFCB4A18C4F6C0A01BE306F58CA8BF850A1BE2557ED87D37CBDE2FBA013FBF15348576F6FE51446DF39F6102D766D9623C053487C259E286AA98A
Malicious:	false
Preview:	....`...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................`...L.pg.B......................................

/tmp/qemu-open.irPrsP (deleted)

Download File

Process:	/tmp/Aqua.mips.elf
File Type:	data
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.1852301329094015
Encrypted:	false
SSDEEP:	3:TgHWCL8HJN:Tg2BJN
MD5:	5DE8DFDDC7FAB7288CAFB40F58749EFE
SHA1:	E57A6BA66AE8E362D2683846F616A6693D95A81D
SHA-256:	E8AEB1E3E141F734EC9A546B30945CF93CBCB58DBCB931216DCE3C1F467035B2
SHA-512:	37F922569AEAEEB3DF5DBB21F0C9E91C41575A5B2CCBFC188DA1562F62F6499A7699FB0BE5476D4FF43267D96983A45740FE7C931A8AE9ACE5600F5B1DFE0635
Malicious:	false
Preview:	/tmp/Aqua.mips.elf.nwlrbbmqbh

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1718
Entropy (8bit):	4.929378879525493
Encrypted:	false
SSDEEP:	24:E6TZeaw6TZ4BwqGwCACYDdpAvIpA2+VWyw62Zeaw62Z4Bw6oGw6QA6QY6xd6TAv1:Btpv1fVev6fVm
MD5:	D7EB2AEB532350A57F62DF5D4C47D203
SHA1:	E93643D551F69E4A1E42BAB4FCBA65B0CCE4211D
SHA-256:	326A5792E3F3FE8DA3DD8445CD9FB1BBB7C03CB8F8CEF28A7BA02A7C61A3F65D
SHA-512:	BD7539E12291DB8124CFB631559CA8698DCDF42E07D23D2B94BCC0FB4604C6E77ABA08C0CB818F4E3BA4A52DB3B985BC3C47405503040676A74FEC0E9EC31A80
Malicious:	false
Preview:	Dec 28 18:39:43 galassia systemd-logind[7962]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 28 18:39:43 galassia systemd-logind[7962]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 28 18:39:43 galassia systemd-logind[7962]: User enumeration failed: Invalid argument.Dec 28 18:39:43 galassia systemd-logind[7962]: User of session 2 not known..Dec 28 18:39:43 galassia systemd-logind[7962]: User of session c1 not known..Dec 28 18:39:43 galassia systemd-logind[7962]: Session enumeration failed: No such file or directory.Dec 28 18:39:43 galassia systemd-logind[7962]: Watching system buttons on /dev/input/event0 (Power Button).Dec 28 18:39:43 galassia systemd-logind[7962]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 28 18:39:43 galassia systemd-logind[7962]: New seat seat0..Dec 28 18:39:43 galassia systemd-logind[8036]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 28 18:39:43 galassia syst

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.448047321524811
Encrypted:	false
SSDEEP:	3:F31Hlqa539ugs//Sa539ugUl:F3nN9vs/HN9vU
MD5:	6236C41BF711915EEE00CAA78D461E68
SHA1:	B79625763237479BB32BEAE4C9A7000E65C63DCF
SHA-256:	0C0ADE7657738535C8C9153C7BA273E4E36073F00437D24721E56ED0ADFBA329
SHA-512:	B154BC2ED34231A8644D20309D8935F7BEC41034DAC7373766C6F7DEC53261FFE09D791BEE17CB7E03CA1C0CE9A1E8BABBFA3CA58CB8AF8F22458D41EE2F904D
Malicious:	false
Preview:	LPKSHHRH.................ES.#.B\........................................ES.#.B\...............................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.448047321524811
Encrypted:	false
SSDEEP:	3:F31HlpDE1UXtlDDE1Untll:F3KwsA
MD5:	14D343DA4C91EC5CE4F0099F38732967
SHA1:	BD1EC8619E06596E528A906267DAACCFB061744C
SHA-256:	4A3B4ABC0BF2D38A8A4331766BCA0AB19CE4DD7AA83F8B534041ED47E84C4AC5
SHA-512:	B0D14442DCB9918728EBBC7BB0FF81728B0F8CE70096DD23CF39091EB64D68D9068F136ABB2B2E6AE8BA6CEA4989F9FD12942B3B126DBE22E54C3187398487E4
Malicious:	false
Preview:	LPKSHHRH................2\|.B.gI}....`.j.................................2\|.B.gI}....`.j.........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	1251
Entropy (8bit):	4.740892116623737
Encrypted:	false
SSDEEP:	24:7KolnSAIpsY7PAIps+ESTAIwzUvF4eGvysvPsvbeS8JvGajrRM7JftkGet:7fln8ps+Rps+EuwzguFyIPIbMQy0xt2t
MD5:	9FC262E58A3CDDA453C725F442AB51DC
SHA1:	014BF97AF82D7B077131E6AF2B4BDDA3F9D47A5F
SHA-256:	389C5FBC5A7C5912FBC827470A086F797216272AF31DA51C1CF5FF6CD9DD4203
SHA-512:	EC4D350A1CBB5CBDB9D93FAAB82235BD6028DBA2A971EFC282BA14F42B7BD7E84F04123B5181003DE187A59B684F03FE33F0F3723C5F1A3539BF74D36EA19A61
Malicious:	false
Preview:	Dec 28 18:39:45 galassia kernel: [ 527.919867] blocking signal 9: 6241 -> 2048.Dec 28 18:39:45 galassia kernel: [ 528.518774] New task spawned: old: (tgid 8122, tid 8122), new (tgid: 8122, tid: 8124).Dec 28 18:39:45 galassia kernel: [ 528.518959] New task spawned: old: (tgid 8122, tid 8122), new (tgid: 8122, tid: 8125).Dec 28 18:39:46 galassia kernel: [ 528.521375] New task spawned: old: (tgid 8122, tid 8124), new (tgid: 8122, tid: 8126).Dec 28 18:39:46 galassia kernel: [ 528.576104] blocking signal 30: 6241 -> 720.Dec 28 18:39:46 galassia kernel: [ 528.578835] blocking signal 30: 6241 -> 759.Dec 28 18:39:46 galassia kernel: [ 528.583023] blocking signal 30: 6241 -> 761.Dec 28 18:39:46 galassia kernel: [ 528.588857] blocking signal 30: 6241 -> 772.Dec 28 18:39:46 galassia kernel: [ 528.596654] blocking signal 30: 6241 -> 936.Dec 28 18:39:46 galassia kernel: [ 528.600778] blocking signal 30: 6241 -> 1334.Dec 28 18:39:46 galassia kernel: [ 528.606461] blocking signal 30: 6241

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	3900
Entropy (8bit):	5.064216656469643
Encrypted:	false
SSDEEP:	48:f3j7qPr97RIj2mTFsfln8ps+RpsLer3yEuwzguFyIPIbMQy0xt2lMtlWtV0a3DoV:3qR7RAGVDi35k0pQGo/U8UK
MD5:	BDC5B4E622672BDA5CF315C56264D647
SHA1:	B1B06A0D02670146B0C683B3D2F6F87853704371
SHA-256:	1D91FA1B6C276DE1E79C32B39FF09349BDF6941BD9159570C617993BD32DDC08
SHA-512:	73033C08EC20A4BDE3EDCF80DEEF0169050159587E2918E95309C78068C1B68AF6561DF3F755DABA9E16E50B85F660A009403565E04D5E827B94F90BFB4674B4
Malicious:	false
Preview:	Dec 28 18:39:45 galassia systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL.Dec 28 18:39:45 galassia systemd[1]: rsyslog.service: Failed with result 'signal'..Dec 28 18:39:45 galassia rtkit-daemon[8109]: Exiting cleanly..Dec 28 18:39:45 galassia systemd[1]: rsyslog.service: Scheduled restart job, restart counter is at 29..Dec 28 18:39:45 galassia rtkit-daemon[8109]: Demoting known real-time threads..Dec 28 18:39:45 galassia systemd[1]: Stopped System Logging Service..Dec 28 18:39:45 galassia rtkit-daemon[8109]: Successfully demoted thread 8118 of process 8105..Dec 28 18:39:45 galassia systemd[1]: Starting System Logging Service....Dec 28 18:39:45 galassia rtkit-daemon[8109]: Successfully demoted thread 8105 of process 8105..Dec 28 18:39:45 galassia systemd[1]: dbus.service: Main process exited, code=killed, status=9/KILL.Dec 28 18:39:45 galassia rtkit-daemon[8109]: Demoted 2 threads..Dec 28 18:39:45 galassia systemd[1]: dbus.service: Failed with result 'signal

/var/log/wtmp

Download File

Process:	/sbin/agetty
File Type:	data
Category:	dropped
Size (bytes):	384
Entropy (8bit):	0.6670868467684749
Encrypted:	false
SSDEEP:	3:ilmlsXlXEWtl/8Cbllll:iAA+ylEC7
MD5:	C2EAD06AA43AE0D1710926AE4439147C
SHA1:	0A6640F946F77A6021E3D3485D3B2EF1F2400F44
SHA-256:	AD3DE193C976646C3E1002B6FE25B2AC5DF1E6F642ED48006A28DB52B3E9EFEA
SHA-512:	23A4DE738B3EFCB4A18C4F6C0A01BE306F58CA8BF850A1BE2557ED87D37CBDE2FBA013FBF15348576F6FE51446DF39F6102D766D9623C053487C259E286AA98A
Malicious:	false
Preview:	....`...tty2.tty2.......................tty2LOGIN...............................................................................................................................................................................................................................................................................................`...L.pg.B......................................

Source: global traffic	TCP traffic: 192.168.2.23:50020 -> 89.190.156.145:7733
Source: global traffic	TCP traffic: 192.168.2.23:40838 -> 193.200.78.37:33966

File type:	ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.492231168195168
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.mips.elf
File size:	98'356 bytes
MD5:	2b711d17881cc12fdcc3a761c22799d3
SHA1:	bcffbbc116c25851ce51968024ba949040270023
SHA256:	b5d1cf8b222162567f46281e792145774689c205701a02f3723cf6fb13a429de
SHA512:	ab2e6af60bbbcb7a808387ffe2a1c01e0aa381c01a8ddb32e5ed9ab2d8e6102cb81cd2e3ef28f348eba036c3babcc444f56c6c9fb44bce5abf1544769d4dfb94
SSDEEP:	1536:F7EnxX/ZpiIvAuZrOVIpUEW5iIO24eFyZNI4oSiWbQ5:KnxX//iw6EWAIO2ok4zbo
TLSH:	89A3C71E6E219FBDF769833007B34A21A79833D637E1D685E19CD6001E6078E641FFA9
File Content Preview:	.ELF.....................@.`...4..~......4. ...(.............@...@....s...s...............s..Es..Es.......,.........dt.Q............................<...'......!'.......................<...'......!... ....'9... ......................<...'..h...!........'9V

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MIPS R3000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400260
Flags:	0x1007
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	97796
Section Header Size:	40
Number of Section Headers:	14
Header String Table Index:	13

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x400094	0x94	0x8c	0x0	0x6	AX	4
.text	PROGBITS	0x400120	0x120	0x15620	0x0	0x6	AX	16
.fini	PROGBITS	0x415740	0x15740	0x5c	0x0	0x6	AX	4
.rodata	PROGBITS	0x4157a0	0x157a0	0x1c30	0x0	0x2	A	16
.ctors	PROGBITS	0x4573d4	0x173d4	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x4573dc	0x173dc	0x8	0x0	0x3	WA	4
.data.rel.ro	PROGBITS	0x4573e8	0x173e8	0x4	0x0	0x3	WA	4
.data	PROGBITS	0x4573f0	0x173f0	0x470	0x0	0x3	WA	16
.got	PROGBITS	0x457860	0x17860	0x540	0x4	0x10000003	WAp	16
.sbss	NOBITS	0x457da0	0x17da0	0x14	0x0	0x10000003	WAp	4
.bss	NOBITS	0x457dc0	0x17da0	0x2230	0x0	0x3	WA	16
.mdebug.abi32	PROGBITS	0xbe2	0x17da0	0x0	0x0	0x0		1
.shstrtab	STRTAB	0x0	0x17da0	0x64	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x173d0	0x173d0	5.5045	0x5	R E	0x10000	.init .text .fini .rodata
LOAD	0x173d4	0x4573d4	0x4573d4	0x9cc	0x2c1c	4.2298	0x6	RW	0x10000	.ctors .dtors .data.rel.ro .data .got .sbss .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x7	RWE	0x4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 01:37:53.102404118 CET	55762	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:37:53.362235069 CET	53	55762	8.8.8.8	192.168.2.23
Dec 29, 2024 01:37:53.364065886 CET	52231	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:37:53.726459026 CET	53	52231	8.8.8.8	192.168.2.23
Dec 29, 2024 01:37:56.196788073 CET	56419	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:37:56.435635090 CET	53	56419	8.8.8.8	192.168.2.23
Dec 29, 2024 01:37:56.460304976 CET	44610	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:37:56.697643042 CET	53	44610	8.8.8.8	192.168.2.23
Dec 29, 2024 01:37:58.114161968 CET	57126	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:37:58.236443996 CET	53	57126	8.8.8.8	192.168.2.23
Dec 29, 2024 01:37:58.242144108 CET	55734	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:37:58.364506006 CET	53	55734	8.8.8.8	192.168.2.23
Dec 29, 2024 01:37:59.776645899 CET	53161	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:37:59.803440094 CET	48348	53	192.168.2.23	1.1.1.1
Dec 29, 2024 01:37:59.803478003 CET	44904	53	192.168.2.23	1.1.1.1
Dec 29, 2024 01:38:00.015645981 CET	53	53161	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:00.017967939 CET	37560	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:00.024573088 CET	53	48348	1.1.1.1	192.168.2.23
Dec 29, 2024 01:38:00.024779081 CET	53	44904	1.1.1.1	192.168.2.23
Dec 29, 2024 01:38:00.151804924 CET	53	37560	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:00.262482882 CET	36724	53	192.168.2.23	1.1.1.1
Dec 29, 2024 01:38:00.399979115 CET	53	36724	1.1.1.1	192.168.2.23
Dec 29, 2024 01:38:01.612092018 CET	34181	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:01.850003004 CET	53	34181	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:01.852473974 CET	56745	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:01.986047029 CET	53	56745	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:03.388817072 CET	56418	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:03.522365093 CET	53	56418	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:03.523197889 CET	52353	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:03.657190084 CET	53	52353	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:05.110114098 CET	55722	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:05.598061085 CET	53	55722	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:05.599035978 CET	45576	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:06.065824986 CET	53	45576	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:07.478697062 CET	48352	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:07.612926006 CET	53	48352	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:07.614077091 CET	34523	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:07.852987051 CET	53	34523	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:09.301443100 CET	55335	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:09.434837103 CET	53	55335	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:09.436602116 CET	38854	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:09.570806980 CET	53	38854	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:10.988254070 CET	38393	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:11.122580051 CET	53	38393	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:11.146452904 CET	46098	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:11.280169010 CET	53	46098	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:12.764118910 CET	36390	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:12.898391962 CET	53	36390	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:12.925355911 CET	38328	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:13.058804989 CET	53	38328	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:14.474602938 CET	49280	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:14.608688116 CET	53	49280	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:14.612906933 CET	54425	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:14.746685028 CET	53	54425	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:16.173955917 CET	46482	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:16.307456017 CET	53	46482	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:16.311747074 CET	35708	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:16.335057020 CET	36583	53	192.168.2.23	1.1.1.1
Dec 29, 2024 01:38:16.433974028 CET	53	35708	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:16.472558022 CET	53	36583	1.1.1.1	192.168.2.23
Dec 29, 2024 01:38:17.841262102 CET	43585	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:17.963560104 CET	53	43585	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:17.969276905 CET	55584	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:18.091522932 CET	53	55584	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:19.455105066 CET	35603	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:19.588733912 CET	53	35603	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:19.594297886 CET	36815	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:19.727828026 CET	53	36815	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:20.017359972 CET	60070	53	192.168.2.23	1.1.1.1
Dec 29, 2024 01:38:20.216799974 CET	53	60070	1.1.1.1	192.168.2.23
Dec 29, 2024 01:38:21.179991961 CET	34030	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:21.313785076 CET	53	34030	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:21.316282034 CET	35850	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:21.438653946 CET	53	35850	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:22.899535894 CET	58114	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:23.033539057 CET	53	58114	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:23.036498070 CET	50804	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:23.170226097 CET	53	50804	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:24.534459114 CET	35807	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:24.656749010 CET	53	35807	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:24.657716990 CET	51819	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:24.791954041 CET	53	51819	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:26.155544043 CET	51488	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:26.289799929 CET	53	51488	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:26.290708065 CET	38436	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:26.424150944 CET	53	38436	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:27.834533930 CET	50977	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:27.968267918 CET	53	50977	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:27.968919039 CET	55557	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:28.102672100 CET	53	55557	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:29.554625034 CET	60452	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:29.676850080 CET	53	60452	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:29.679580927 CET	44115	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:29.813797951 CET	53	44115	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:31.182003975 CET	40673	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:31.317240953 CET	53	40673	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:31.322654009 CET	34640	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:31.456372023 CET	53	34640	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:32.370758057 CET	42713	53	192.168.2.23	1.1.1.1
Dec 29, 2024 01:38:32.507744074 CET	53	42713	1.1.1.1	192.168.2.23
Dec 29, 2024 01:38:32.872117996 CET	53911	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:32.994328976 CET	53	53911	8.8.8.8	192.168.2.23
Dec 29, 2024 01:38:32.998991966 CET	36384	53	192.168.2.23	8.8.8.8
Dec 29, 2024 01:38:33.133027077 CET	53	36384	8.8.8.8	192.168.2.23

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 29, 2024 01:38:02.893044949 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable
Dec 29, 2024 01:39:22.910304070 CET	192.168.2.23	192.168.2.1	8283	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-29 00:38:03 UTC	307	OUT	POST /9aadafe2051348cd32033e1cad68f0a5fe46fba3240ac1e6e42158f31b8a1371790c09baf3996b4979fe8e533446c7dedf30f654c68b25357334c66911dc6a9e HTTP/1.1 Host: daisy.ubuntu.com Accept: / Content-Type: application/octet-stream X-Whoopsie-Version: 0.2.69ubuntu0.3 Content-Length: 164887 Expect: 100-continue
2024-12-29 00:38:04 UTC	25	IN	HTTP/1.1 100 Continue
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 17 84 02 00 02 50 72 6f 63 45 6e 76 69 72 6f 6e 00 4e 00 00 00 50 41 54 48 3d 28 63 75 73 74 6f 6d 2c 20 6e 6f 20 75 73 65 72 29 0a 58 44 47 5f 52 55 4e 54 49 4d 45 5f 44 49 52 3d 3c 73 65 74 3e 0a 4c 41 4e 47 3d 65 6e 5f 55 53 2e 55 54 46 2d 38 0a 53 48 45 4c 4c 3d 2f 62 69 6e 2f 62 61 73 68 00 02 5f 4c 6f 67 69 6e 64 53 65 73 73 69 6f 6e 00 02 00 00 00 35 00 02 44 61 74 65 00 19 00 00 00 54 75 65 20 41 75 67 20 31 37 20 32 30 3a 31 38 3a 30 34 20 32 30 32 31 00 02 53 6f 75 72 63 65 50 61 63 6b 61 67 65 00 0d 00 00 00 6c 69 67 68 74 2d 6c 6f 63 6b 65 72 00 02 50 61 63 6b 61 67 65 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 41 72 63 68 69 74 65 63 74 75 72 65 00 06 00 00 00 61 6d 64 36 34 00 02 44 69 73 74 72 6f 52 65 6c 65 61 Data Ascii: ProcEnvironNPATH=(custom, no user)XDG_RUNTIME_DIR=<set>LANG=en_US.UTF-8SHELL=/bin/bash_LogindSession5DateTue Aug 17 20:18:04 2021SourcePackagelight-lockerPackageArchitectureamd64Architectureamd64DistroRelea
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 72 75 6e 74 69 6d 65 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6d 2d 73 79 73 74 65 6d 64 20 32 34 35 2e 34 2d 34 75 62 75 6e 74 75 33 2e 31 31 0a 6c 69 62 70 61 6d 30 67 20 31 2e 33 2e 31 2d 35 75 62 75 6e 74 75 34 2e 31 0a 6c 69 62 70 61 6e 67 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 63 61 69 72 6f 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 66 74 32 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 6e 67 6f 78 66 74 2d 31 2e 30 2d 30 20 31 2e 34 34 2e 37 2d 32 75 62 75 6e 74 75 34 0a 6c 69 62 70 61 70 65 72 2d 75 74 69 6c 73 20 31 2e 31 2e 32 38 0a 6c Data Ascii: tu4.1libpam-runtime 1.3.1-5ubuntu4.1libpam-systemd 245.4-4ubuntu3.11libpam0g 1.3.1-5ubuntu4.1libpango-1.0-0 1.44.7-2ubuntu4libpangocairo-1.0-0 1.44.7-2ubuntu4libpangoft2-1.0-0 1.44.7-2ubuntu4libpangoxft-1.0-0 1.44.7-2ubuntu4libpaper-utils 1.1.28l
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 67 73 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 30 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 31 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 32 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 33 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 34 20 20 20 20 20 20 20 20 20 20 20 20 20 30 78 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 0a 6b 35 20 Data Ascii: 0x0 0gs 0x0 0k0 0x0 0k1 0x0 0k2 0x0 0k3 0x0 0k4 0x0 0k5
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 34 30 30 30 2d 37 66 37 39 31 63 30 37 35 30 30 30 20 2d 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 78 63 62 2d 72 65 6e 64 65 72 2e 73 6f 2e 30 2e 30 2e 30 0a 37 66 37 39 31 63 30 37 35 30 30 30 2d 37 66 37 39 31 63 30 37 36 30 30 30 20 72 2d 2d 70 20 30 30 30 30 63 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 Data Ascii: /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c074000-7f791c075000 ---p 0000c000 fd:00 806260 /usr/lib/x86_64-linux-gnu/libxcb-render.so.0.0.07f791c075000-7f791c076000 r--p 0000c000 fd:00 806260 /u
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 33 30 30 30 2d 37 66 37 39 31 63 37 37 34 30 30 30 20 72 77 2d 70 20 30 30 30 32 36 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 34 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 2d 6c 69 6e 75 78 2d 67 6e 75 2f 6c 69 62 67 64 6b 5f 70 69 78 62 75 66 2d 32 2e 30 2e 73 6f 2e 30 2e 34 30 30 30 2e 30 0a 37 66 37 39 31 63 37 37 34 30 30 30 2d 37 66 37 39 31 63 37 37 38 30 30 30 20 72 2d 2d 70 20 30 30 30 30 30 30 30 30 20 66 64 3a 30 30 20 38 30 36 32 36 38 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 75 73 72 2f 6c 69 62 2f 78 38 36 5f 36 34 Data Ascii: nux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c773000-7f791c774000 rw-p 00026000 fd:00 806245 /usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.4000.07f791c774000-7f791c778000 r--p 00000000 fd:00 806268 /usr/lib/x86_64
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 37 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 70 6c 61 74 66 6f 72 6d 20 65 69 73 61 2e 30 3a 20 43 61 6e 6e 6f 74 20 61 6c 6c 6f 63 61 74 65 20 72 65 73 6f 75 72 63 65 20 66 6f 72 20 45 49 53 41 20 73 6c 6f 74 20 38 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 36 20 67 61 6c 61 73 73 69 61 20 6b 65 72 6e 65 6c 3a 20 73 64 20 33 32 3a 30 3a 30 3a 30 3a 20 5b 73 64 61 5d 20 41 73 73 75 6d 69 6e 67 20 64 72 69 76 65 20 63 61 63 68 65 3a 20 77 72 69 74 65 20 74 68 72 6f 75 67 68 0a 41 75 67 20 31 37 20 32 30 3a 32 34 3a 34 37 20 67 Data Ascii: platform eisa.0: Cannot allocate resource for EISA slot 7Aug 17 20:24:46 galassia kernel: platform eisa.0: Cannot allocate resource for EISA slot 8Aug 17 20:24:46 galassia kernel: sd 32:0:0:0: [sda] Assuming drive cache: write throughAug 17 20:24:47 g
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 4d 6f 64 75 6c 65 3a 20 22 66 62 64 65 76 68 77 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4c 6f 61 64 69 6e 67 20 2f 75 73 72 2f 6c 69 62 2f 78 6f 72 67 2f 6d 6f 64 75 6c 65 73 2f 6c 69 62 66 62 64 65 76 68 77 2e 73 6f 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 34 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 4d 6f 64 75 6c 65 20 66 62 64 65 76 68 77 3a 20 76 65 6e 64 6f 72 3d 22 58 2e 4f 72 67 20 46 6f 75 6e 64 61 74 69 6f 6e 22 0a 41 75 67 20 31 37 Data Ascii: 551]: (II) LoadModule: "fbdevhw"Aug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Loading /usr/lib/xorg/modules/libfbdevhw.soAug 17 20:25:04 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) Module fbdevhw: vendor="X.Org Foundation"Aug 17
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 39 32 30 78 31 32 30 30 22 20 28 69 6e 73 75 66 66 69 63 69 65 6e 74 20 6d 65 6d 6f 72 79 20 66 6f 72 20 6d 6f 64 65 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 65 28 30 29 3a 20 4e 6f 74 20 75 73 69 6e 67 20 64 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 39 36 30 78 36 30 30 22 20 28 62 61 64 20 6d 6f 64 65 20 63 6c 6f 63 6b 2f 69 6e 74 65 72 6c 61 63 65 2f 64 6f 75 62 6c 65 73 Data Ascii: /lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "1920x1200" (insufficient memory for mode)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmware(0): Not using default mode "960x600" (bad mode clock/interlace/doubles
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 20 31 33 33 36 20 31 35 32 30 20 20 38 36 34 20 38 36 35 20 38 36 38 20 38 39 35 20 2d 68 73 79 6e 63 20 2b 76 73 79 6e 63 20 28 35 33 2e 37 20 6b 48 7a 20 64 29 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 76 6d 77 61 72 65 28 30 29 3a 20 20 44 65 66 61 75 6c 74 20 6d 6f 64 65 20 22 31 30 32 34 78 37 36 38 22 3a 20 39 34 2e 35 20 4d 48 7a 2c 20 36 38 2e 37 20 6b 48 7a 2c 20 38 35 2e 30 20 48 7a 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 49 49 29 20 76 6d 77 61 72 Data Ascii: 1336 1520 864 865 868 895 -hsync +vsync (53.7 kHz d)Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (**) vmware(0): Default mode "1024x768": 94.5 MHz, 68.7 kHz, 85.0 HzAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: (II) vmwar
2024-12-29 00:38:04 UTC	16384	OUT	Data Raw: 65 64 20 53 65 74 20 32 20 6b 65 79 62 6f 61 72 64 3a 20 61 6c 77 61 79 73 20 72 65 70 6f 72 74 73 20 63 6f 72 65 20 65 76 65 6e 74 73 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 44 65 76 69 63 65 22 20 22 2f 64 65 76 2f 69 6e 70 75 74 2f 65 76 65 6e 74 31 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 3a 30 35 20 67 61 6c 61 73 73 69 61 20 2f 75 73 72 2f 6c 69 62 2f 67 64 6d 33 2f 67 64 6d 2d 78 2d 73 65 73 73 69 6f 6e 5b 31 35 35 31 5d 3a 20 28 2a 2a 29 20 4f 70 74 69 6f 6e 20 22 5f 73 6f 75 72 63 65 22 20 22 73 65 72 76 65 72 2f 75 64 65 76 22 0a 41 75 67 20 31 37 20 32 30 3a 32 35 Data Ascii: ed Set 2 keyboard: always reports core eventsAug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "Device" "/dev/input/event1"Aug 17 20:25:05 galassia /usr/lib/gdm3/gdm-x-session[1551]: () Option "_source" "server/udev"Aug 17 20:25
2024-12-29 00:38:06 UTC	279	IN	HTTP/1.1 400 Bad Request Date: Sun, 29 Dec 2024 00:38:05 GMT Server: gunicorn/19.7.1 X-Daisy-Revision-Number: 979 X-Oops-Repository-Version: 0.0.0 Strict-Transport-Security: max-age=2592000 Connection: close Transfer-Encoding: chunked 17 Crash already reported. 0

Start time (UTC):	00:37:52
Start date (UTC):	29/12/2024
Path:	/tmp/Aqua.mips.elf
Arguments:	/tmp/Aqua.mips.elf
File size:	5777432 bytes
MD5 hash:	0083f1f0e77be34ad27f849842bbb00c

Start time (UTC):	00:37:53
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:37:54
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:37:55
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:37:56
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:37:57
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	00:37:58
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	00:37:59
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	00:38:03
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:00
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:02
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:09
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.mips.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/run/systemd/journal/streams/.#9:78710epZPMK

/run/systemd/journal/streams/.#9:787110EFv7M

/run/systemd/journal/streams/.#9:78712faHqvL

/run/systemd/journal/streams/.#9:78713C0OqNN

/run/systemd/journal/streams/.#9:78714MoZe8J

/run/systemd/journal/streams/.#9:78715B8fxMM

/run/systemd/journal/streams/.#9:78716Iy8rLM

/run/systemd/journal/streams/.#9:78717HkL9vN

/run/systemd/journal/streams/.#9:78732ERirIK

/run/systemd/journal/streams/.#9:78733lWV0KK

/run/systemd/journal/streams/.#9:7881590lLdK

/run/systemd/journal/streams/.#9:79920f8lqOL

/run/systemd/journal/streams/.#9:79933dbMaAK

/run/systemd/journal/streams/.#9:8001263srJK

/run/systemd/journal/streams/.#9:80111U3DxbM

/run/systemd/journal/streams/.#9:80114cHxgeL

/run/systemd/journal/streams/.#9:80131vqFwLM

/run/systemd/journal/streams/.#9:806269vggPZ

/run/systemd/journal/streams/.#9:80627m8upG2

/run/systemd/journal/streams/.#9:80628KJZyR2

/run/systemd/journal/streams/.#9:80629iItH00

/run/systemd/journal/streams/.#9:806303atZoZ

/run/systemd/journal/streams/.#9:806312pxUTZ

/run/systemd/journal/streams/.#9:80632JSONY0

/run/systemd/journal/streams/.#9:80633ZqEPP0

/run/systemd/journal/streams/.#9:80634CGUmK0

/run/systemd/journal/streams/.#9:80635zG5mN2

/run/systemd/journal/streams/.#9:80650cvOMf3

/run/systemd/journal/streams/.#9:80663vuwJp1

/run/systemd/journal/streams/.#9:83676dL1Thx

/run/systemd/journal/streams/.#9:83677XMaK9w

Linux Analysis Report
Aqua.mips.elf

Start time (UTC):	00:38:08
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:10
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:11
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	00:38:12
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	00:38:13
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	00:38:15
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:21
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:16
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:17
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:38:18
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761