Edit tour

Linux Analysis Report
Aqua.dbg.elf

Overview

General Information

Sample name:	Aqua.dbg.elf
Analysis ID:	1581809
MD5:	c9fcc13930fd293fa7bfb21b09b24864
SHA1:	e4e55b20c9bd4ef19f3f5b224432bdba65ea9df5
SHA256:	d722e328e8ea43bff3ea2a6b5f14d250e387433f0a59e25af756e43d2481ace7
Tags:	elfuser-abuse_ch
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Machine Learning detection for sample

Sample deletes itself

Sample reads /proc/mounts (often used for finding a writable filesystem)

Sample tries to kill multiple processes (SIGKILL)

Creates hidden files and/or directories

Deletes log files

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Executes commands using a shell command-line interpreter

Executes the "grep" command used to find patterns in files or piped streams

Executes the "kill" or "pkill" command typically used to terminate processes

Found strings indicative of a multi-platform dropper

Reads CPU information from /sys indicative of miner or evasive malware

Reads system information from the proc file system

Reads the 'hosts' file potentially containing internal network hosts

Sample has stripped symbol table

Sample listens on a socket

Sample tries to kill a process (SIGKILL)

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581809
Start date and time:	2024-12-29 01:42:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Aqua.dbg.elf
Detection:	MAL
Classification:	mal80.spre.troj.evad.linELF@0/207@36/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
Report size exceeded maximum capacity and may have missing behavior information.

Process Tree

system is lnxubuntu20

Aqua.dbg.elf (PID: 5431, Parent: 5357, MD5: c9fcc13930fd293fa7bfb21b09b24864) Arguments: /tmp/Aqua.dbg.elf

Aqua.dbg.elf New Fork (PID: 5432, Parent: 5431)

gnome-session-binary New Fork (PID: 5433, Parent: 1588)

sh (PID: 5433, Parent: 1588, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /bin/sh -e -u -c "export GIO_LAUNCHED_DESKTOP_FILE_PID=$$; exec \"$@\"" sh /usr/libexec/gsd-rfkill

gsd-rfkill (PID: 5433, Parent: 1588, MD5: 88a16a3c0aba1759358c06215ecfb5cc) Arguments: /usr/libexec/gsd-rfkill

systemd New Fork (PID: 5438, Parent: 1)

systemd-hostnamed (PID: 5438, Parent: 1, MD5: 2cc8a5576629a2d5bd98e49a4b8bef65) Arguments: /lib/systemd/systemd-hostnamed

gdm3 New Fork (PID: 5588, Parent: 1400)

Default (PID: 5588, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

gdm3 New Fork (PID: 5589, Parent: 1400)

Default (PID: 5589, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5601, Parent: 1)

dbus-daemon (PID: 5601, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5604, Parent: 2935)

pulseaudio (PID: 5604, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5605, Parent: 1)

rsyslogd (PID: 5605, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5613, Parent: 1)

rtkit-daemon (PID: 5613, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5617, Parent: 1)

systemd-logind (PID: 5617, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

gvfsd-fuse New Fork (PID: 5619, Parent: 3122)

fusermount (PID: 5619, Parent: 3122, MD5: 576a1b135c82bdcbc97a91acea900566) Arguments: fusermount -u -q -z -- /run/user/1000/gvfs

systemd New Fork (PID: 5683, Parent: 1)

polkitd (PID: 5683, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5687, Parent: 1)

dbus-daemon (PID: 5687, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

gdm3 New Fork (PID: 5688, Parent: 1400)

Default (PID: 5688, Parent: 1400, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /etc/gdm3/PrimeOff/Default

systemd New Fork (PID: 5689, Parent: 2935)

pulseaudio (PID: 5689, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5690, Parent: 1)

rsyslogd (PID: 5690, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5694, Parent: 1)

gpu-manager (PID: 5694, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5695, Parent: 5694)

sh (PID: 5695, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5696, Parent: 5695)

grep (PID: 5696, Parent: 5695, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5697, Parent: 5694)

sh (PID: 5697, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5698, Parent: 5697)

grep (PID: 5698, Parent: 5697, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5699, Parent: 5694)

sh (PID: 5699, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5701, Parent: 5699)

grep (PID: 5701, Parent: 5699, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5704, Parent: 5694)

sh (PID: 5704, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5708, Parent: 5704)

grep (PID: 5708, Parent: 5704, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5709, Parent: 5694)

sh (PID: 5709, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5713, Parent: 5709)

grep (PID: 5713, Parent: 5709, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5714, Parent: 5694)

sh (PID: 5714, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5715, Parent: 5714)

grep (PID: 5715, Parent: 5714, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5716, Parent: 5694)

sh (PID: 5716, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5717, Parent: 5716)

grep (PID: 5717, Parent: 5716, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5718, Parent: 5694)

sh (PID: 5718, Parent: 5694, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5719, Parent: 5718)

grep (PID: 5719, Parent: 5718, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5700, Parent: 1)

rtkit-daemon (PID: 5700, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5707, Parent: 1)

polkitd (PID: 5707, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 5720, Parent: 1)

generate-config (PID: 5720, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5721, Parent: 5720)

pkill (PID: 5721, Parent: 5720, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5724, Parent: 2935)

dbus-daemon (PID: 5724, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5727, Parent: 1)

gdm-wait-for-drm (PID: 5727, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5750, Parent: 2935)

pulseaudio (PID: 5750, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 5751, Parent: 1)

rsyslogd (PID: 5751, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5755, Parent: 1)

dbus-daemon (PID: 5755, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5756, Parent: 1)

rtkit-daemon (PID: 5756, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 5757, Parent: 1)

journalctl (PID: 5757, Parent: 1, MD5: bf3a987344f3bacafc44efd882abda8b) Arguments: /usr/bin/journalctl --smart-relinquish-var

systemd New Fork (PID: 5758, Parent: 1)

systemd-journald (PID: 5758, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5761, Parent: 1)

systemd-logind (PID: 5761, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5818, Parent: 1)

rsyslogd (PID: 5818, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5819, Parent: 1)

dbus-daemon (PID: 5819, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5820, Parent: 1)

systemd-journald (PID: 5820, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5824, Parent: 1)

gpu-manager (PID: 5824, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5825, Parent: 5824)

sh (PID: 5825, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5826, Parent: 5825)

grep (PID: 5826, Parent: 5825, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5827, Parent: 5824)

sh (PID: 5827, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5830, Parent: 5827)

grep (PID: 5830, Parent: 5827, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5831, Parent: 5824)

sh (PID: 5831, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5832, Parent: 5831)

grep (PID: 5832, Parent: 5831, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5833, Parent: 5824)

sh (PID: 5833, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5834, Parent: 5833)

grep (PID: 5834, Parent: 5833, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5835, Parent: 5824)

sh (PID: 5835, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5836, Parent: 5835)

grep (PID: 5836, Parent: 5835, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5839, Parent: 5824)

sh (PID: 5839, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5840, Parent: 5839)

grep (PID: 5840, Parent: 5839, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5841, Parent: 5824)

sh (PID: 5841, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5842, Parent: 5841)

grep (PID: 5842, Parent: 5841, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5843, Parent: 5824)

sh (PID: 5843, Parent: 5824, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5844, Parent: 5843)

grep (PID: 5844, Parent: 5843, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5845, Parent: 1)

rsyslogd (PID: 5845, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5846, Parent: 1)

dbus-daemon (PID: 5846, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5847, Parent: 1)

generate-config (PID: 5847, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 5848, Parent: 5847)

pkill (PID: 5848, Parent: 5847, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 5854, Parent: 1)

systemd-logind (PID: 5854, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5913, Parent: 1)

gdm-wait-for-drm (PID: 5913, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 5916, Parent: 1)

rsyslogd (PID: 5916, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5917, Parent: 1)

dbus-daemon (PID: 5917, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5923, Parent: 1)

systemd-journald (PID: 5923, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 5926, Parent: 1)

systemd-logind (PID: 5926, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 5983, Parent: 1)

rsyslogd (PID: 5983, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5984, Parent: 1)

dbus-daemon (PID: 5984, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 5988, Parent: 1)

gpu-manager (PID: 5988, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 5991, Parent: 5988)

sh (PID: 5991, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5992, Parent: 5991)

grep (PID: 5992, Parent: 5991, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 5993, Parent: 5988)

sh (PID: 5993, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 5994, Parent: 5993)

grep (PID: 5994, Parent: 5993, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 5998, Parent: 5988)

sh (PID: 5998, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 5999, Parent: 5998)

grep (PID: 5999, Parent: 5998, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6000, Parent: 5988)

sh (PID: 6000, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6001, Parent: 6000)

grep (PID: 6001, Parent: 6000, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6002, Parent: 5988)

sh (PID: 6002, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6003, Parent: 6002)

grep (PID: 6003, Parent: 6002, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6004, Parent: 5988)

sh (PID: 6004, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6005, Parent: 6004)

grep (PID: 6005, Parent: 6004, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6006, Parent: 5988)

sh (PID: 6006, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6007, Parent: 6006)

grep (PID: 6007, Parent: 6006, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6008, Parent: 5988)

sh (PID: 6008, Parent: 5988, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6009, Parent: 6008)

grep (PID: 6009, Parent: 6008, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 5989, Parent: 1)

rsyslogd (PID: 5989, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 5990, Parent: 1)

dbus-daemon (PID: 5990, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6010, Parent: 1)

generate-config (PID: 6010, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6011, Parent: 6010)

pkill (PID: 6011, Parent: 6010, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6014, Parent: 1)

gdm-wait-for-drm (PID: 6014, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6017, Parent: 1)

rsyslogd (PID: 6017, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6018, Parent: 1)

dbus-daemon (PID: 6018, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6022, Parent: 1)

systemd-journald (PID: 6022, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6025, Parent: 1)

systemd-logind (PID: 6025, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6082, Parent: 1)

rsyslogd (PID: 6082, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6083, Parent: 1)

dbus-daemon (PID: 6083, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6087, Parent: 1)

gpu-manager (PID: 6087, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6088, Parent: 6087)

sh (PID: 6088, Parent: 6087, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6089, Parent: 6088)

grep (PID: 6089, Parent: 6088, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6092, Parent: 6087)

systemd New Fork (PID: 6090, Parent: 1)

dbus-daemon (PID: 6090, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6091, Parent: 1)

rsyslogd (PID: 6091, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6093, Parent: 1)

generate-config (PID: 6093, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6094, Parent: 6093)

pkill (PID: 6094, Parent: 6093, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6100, Parent: 1)

gdm-wait-for-drm (PID: 6100, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6103, Parent: 1)

rsyslogd (PID: 6103, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6107, Parent: 1)

systemd-journald (PID: 6107, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6110, Parent: 1)

systemd-logind (PID: 6110, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6167, Parent: 1)

dbus-daemon (PID: 6167, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6168, Parent: 1)

dbus-daemon (PID: 6168, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6169, Parent: 1)

rsyslogd (PID: 6169, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6170, Parent: 1)

gpu-manager (PID: 6170, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6173, Parent: 6170)

sh (PID: 6173, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6177, Parent: 6173)

grep (PID: 6177, Parent: 6173, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6178, Parent: 6170)

sh (PID: 6178, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6179, Parent: 6178)

grep (PID: 6179, Parent: 6178, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6180, Parent: 6170)

sh (PID: 6180, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6181, Parent: 6180)

grep (PID: 6181, Parent: 6180, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6182, Parent: 6170)

sh (PID: 6182, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6183, Parent: 6182)

grep (PID: 6183, Parent: 6182, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6184, Parent: 6170)

sh (PID: 6184, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6185, Parent: 6184)

grep (PID: 6185, Parent: 6184, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6186, Parent: 6170)

sh (PID: 6186, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6187, Parent: 6186)

grep (PID: 6187, Parent: 6186, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6188, Parent: 6170)

sh (PID: 6188, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6189, Parent: 6188)

grep (PID: 6189, Parent: 6188, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6190, Parent: 6170)

sh (PID: 6190, Parent: 6170, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6191, Parent: 6190)

grep (PID: 6191, Parent: 6190, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6192, Parent: 1)

generate-config (PID: 6192, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6193, Parent: 6192)

pkill (PID: 6193, Parent: 6192, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6194, Parent: 1)

gdm-wait-for-drm (PID: 6194, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6197, Parent: 1)

rsyslogd (PID: 6197, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6201, Parent: 1)

systemd-journald (PID: 6201, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6204, Parent: 1)

systemd-logind (PID: 6204, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6263, Parent: 1)

dbus-daemon (PID: 6263, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6264, Parent: 1)

dbus-daemon (PID: 6264, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6265, Parent: 1)

rsyslogd (PID: 6265, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6266, Parent: 1)

gpu-manager (PID: 6266, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6267, Parent: 6266)

sh (PID: 6267, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6268, Parent: 6267)

grep (PID: 6268, Parent: 6267, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6272, Parent: 6266)

sh (PID: 6272, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6273, Parent: 6272)

grep (PID: 6273, Parent: 6272, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6274, Parent: 6266)

sh (PID: 6274, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6275, Parent: 6274)

grep (PID: 6275, Parent: 6274, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6276, Parent: 6266)

sh (PID: 6276, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6277, Parent: 6276)

grep (PID: 6277, Parent: 6276, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6278, Parent: 6266)

sh (PID: 6278, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6279, Parent: 6278)

grep (PID: 6279, Parent: 6278, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6280, Parent: 6266)

sh (PID: 6280, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6281, Parent: 6280)

grep (PID: 6281, Parent: 6280, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6282, Parent: 6266)

sh (PID: 6282, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6283, Parent: 6282)

grep (PID: 6283, Parent: 6282, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6284, Parent: 6266)

sh (PID: 6284, Parent: 6266, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6285, Parent: 6284)

grep (PID: 6285, Parent: 6284, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6286, Parent: 1)

generate-config (PID: 6286, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6287, Parent: 6286)

pkill (PID: 6287, Parent: 6286, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6290, Parent: 1)

gdm-wait-for-drm (PID: 6290, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6291, Parent: 1)

rsyslogd (PID: 6291, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6297, Parent: 1)

systemd-journald (PID: 6297, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6300, Parent: 1)

systemd-logind (PID: 6300, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6357, Parent: 1)

dbus-daemon (PID: 6357, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6358, Parent: 1)

rsyslogd (PID: 6358, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6359, Parent: 1)

dbus-daemon (PID: 6359, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6360, Parent: 1)

gpu-manager (PID: 6360, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6361, Parent: 6360)

sh (PID: 6361, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6362, Parent: 6361)

grep (PID: 6362, Parent: 6361, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6366, Parent: 6360)

sh (PID: 6366, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6367, Parent: 6366)

grep (PID: 6367, Parent: 6366, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6368, Parent: 6360)

sh (PID: 6368, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6369, Parent: 6368)

grep (PID: 6369, Parent: 6368, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6370, Parent: 6360)

sh (PID: 6370, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6371, Parent: 6370)

grep (PID: 6371, Parent: 6370, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6372, Parent: 6360)

sh (PID: 6372, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6373, Parent: 6372)

grep (PID: 6373, Parent: 6372, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6374, Parent: 6360)

sh (PID: 6374, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6375, Parent: 6374)

grep (PID: 6375, Parent: 6374, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6376, Parent: 6360)

sh (PID: 6376, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6377, Parent: 6376)

grep (PID: 6377, Parent: 6376, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6378, Parent: 6360)

sh (PID: 6378, Parent: 6360, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6379, Parent: 6378)

grep (PID: 6379, Parent: 6378, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6382, Parent: 1)

generate-config (PID: 6382, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6383, Parent: 6382)

pkill (PID: 6383, Parent: 6382, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6384, Parent: 1)

gdm-wait-for-drm (PID: 6384, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6387, Parent: 1)

rsyslogd (PID: 6387, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6388, Parent: 1)

dbus-daemon (PID: 6388, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6389, Parent: 1)

systemd-journald (PID: 6389, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6392, Parent: 1)

systemd-logind (PID: 6392, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6449, Parent: 1)

dbus-daemon (PID: 6449, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6450, Parent: 1)

rsyslogd (PID: 6450, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6454, Parent: 1)

gpu-manager (PID: 6454, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6456, Parent: 6454)

sh (PID: 6456, Parent: 6454, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6457, Parent: 6456)

grep (PID: 6457, Parent: 6456, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

systemd New Fork (PID: 6455, Parent: 1)

dbus-daemon (PID: 6455, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6458, Parent: 1)

rsyslogd (PID: 6458, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6459, Parent: 1)

generate-config (PID: 6459, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6460, Parent: 6459)

pkill (PID: 6460, Parent: 6459, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6466, Parent: 1)

gdm-wait-for-drm (PID: 6466, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6469, Parent: 1)

rsyslogd (PID: 6469, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6473, Parent: 1)

systemd-journald (PID: 6473, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6476, Parent: 1)

systemd-logind (PID: 6476, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6533, Parent: 1)

dbus-daemon (PID: 6533, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6536, Parent: 2935)

dbus-daemon (PID: 6536, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6537, Parent: 1)

rsyslogd (PID: 6537, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6538, Parent: 1)

dbus-daemon (PID: 6538, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6539, Parent: 1)

gpu-manager (PID: 6539, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6541, Parent: 6539)

sh (PID: 6541, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6542, Parent: 6541)

grep (PID: 6542, Parent: 6541, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6546, Parent: 6539)

sh (PID: 6546, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6547, Parent: 6546)

grep (PID: 6547, Parent: 6546, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6548, Parent: 6539)

sh (PID: 6548, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6549, Parent: 6548)

grep (PID: 6549, Parent: 6548, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6550, Parent: 6539)

sh (PID: 6550, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6551, Parent: 6550)

grep (PID: 6551, Parent: 6550, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6552, Parent: 6539)

sh (PID: 6552, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6553, Parent: 6552)

grep (PID: 6553, Parent: 6552, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6555, Parent: 6539)

sh (PID: 6555, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6556, Parent: 6555)

grep (PID: 6556, Parent: 6555, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6563, Parent: 6539)

sh (PID: 6563, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6564, Parent: 6563)

grep (PID: 6564, Parent: 6563, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6565, Parent: 6539)

sh (PID: 6565, Parent: 6539, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6566, Parent: 6565)

grep (PID: 6566, Parent: 6565, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6540, Parent: 2935)

pulseaudio (PID: 6540, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6554, Parent: 1)

rtkit-daemon (PID: 6554, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6559, Parent: 1)

polkitd (PID: 6559, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6567, Parent: 1)

generate-config (PID: 6567, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6568, Parent: 6567)

pkill (PID: 6568, Parent: 6567, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6573, Parent: 1)

gdm-wait-for-drm (PID: 6573, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6574, Parent: 1)

rsyslogd (PID: 6574, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6575, Parent: 1)

dbus-daemon (PID: 6575, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6579, Parent: 2935)

pulseaudio (PID: 6579, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6582, Parent: 1)

systemd-journald (PID: 6582, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6585, Parent: 1)

systemd-logind (PID: 6585, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6642, Parent: 1)

dbus-daemon (PID: 6642, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6643, Parent: 1)

rsyslogd (PID: 6643, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6647, Parent: 1)

gpu-manager (PID: 6647, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6648, Parent: 6647)

sh (PID: 6648, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6649, Parent: 6648)

grep (PID: 6649, Parent: 6648, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6651, Parent: 6647)

sh (PID: 6651, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6652, Parent: 6651)

grep (PID: 6652, Parent: 6651, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6654, Parent: 6647)

sh (PID: 6654, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6655, Parent: 6654)

grep (PID: 6655, Parent: 6654, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6660, Parent: 6647)

sh (PID: 6660, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6661, Parent: 6660)

grep (PID: 6661, Parent: 6660, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6662, Parent: 6647)

sh (PID: 6662, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6663, Parent: 6662)

grep (PID: 6663, Parent: 6662, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6664, Parent: 6647)

sh (PID: 6664, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6665, Parent: 6664)

grep (PID: 6665, Parent: 6664, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6666, Parent: 6647)

sh (PID: 6666, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6667, Parent: 6666)

grep (PID: 6667, Parent: 6666, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6668, Parent: 6647)

sh (PID: 6668, Parent: 6647, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6669, Parent: 6668)

grep (PID: 6669, Parent: 6668, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6650, Parent: 2935)

pulseaudio (PID: 6650, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6653, Parent: 1)

rsyslogd (PID: 6653, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6656, Parent: 1)

dbus-daemon (PID: 6656, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6672, Parent: 1)

rtkit-daemon (PID: 6672, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6675, Parent: 1)

systemd-logind (PID: 6675, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6734, Parent: 1)

polkitd (PID: 6734, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6738, Parent: 1)

generate-config (PID: 6738, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6739, Parent: 6738)

pkill (PID: 6739, Parent: 6738, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6742, Parent: 2935)

dbus-daemon (PID: 6742, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6743, Parent: 1)

gdm-wait-for-drm (PID: 6743, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6746, Parent: 2935)

pulseaudio (PID: 6746, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6747, Parent: 1)

rsyslogd (PID: 6747, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6748, Parent: 1)

dbus-daemon (PID: 6748, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6752, Parent: 1)

systemd-journald (PID: 6752, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6755, Parent: 1)

systemd-logind (PID: 6755, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6812, Parent: 1)

rsyslogd (PID: 6812, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6813, Parent: 1)

dbus-daemon (PID: 6813, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6814, Parent: 2935)

pulseaudio (PID: 6814, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6818, Parent: 1)

gpu-manager (PID: 6818, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6821, Parent: 6818)

sh (PID: 6821, Parent: 6818, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6822, Parent: 6821)

grep (PID: 6822, Parent: 6821, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6823, Parent: 6818)

sh (PID: 6823, Parent: 6818, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6826, Parent: 6823)

grep (PID: 6826, Parent: 6823, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6824, Parent: 1)

rsyslogd (PID: 6824, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6825, Parent: 1)

dbus-daemon (PID: 6825, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6827, Parent: 1)

generate-config (PID: 6827, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6828, Parent: 6827)

pkill (PID: 6828, Parent: 6827, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6832, Parent: 2935)

pulseaudio (PID: 6832, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6833, Parent: 1)

rtkit-daemon (PID: 6833, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6836, Parent: 1)

polkitd (PID: 6836, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6840, Parent: 1)

gdm-wait-for-drm (PID: 6840, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

systemd New Fork (PID: 6843, Parent: 2935)

dbus-daemon (PID: 6843, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6846, Parent: 1)

rsyslogd (PID: 6846, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6847, Parent: 1)

dbus-daemon (PID: 6847, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6851, Parent: 2935)

pulseaudio (PID: 6851, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6854, Parent: 1)

systemd-journald (PID: 6854, Parent: 1, MD5: 474667ece6cecb5e04c6eb897a1d0d9e) Arguments: /lib/systemd/systemd-journald

systemd New Fork (PID: 6855, Parent: 1)

dbus-daemon (PID: 6855, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6858, Parent: 1)

systemd-logind (PID: 6858, Parent: 1, MD5: 8dd58a1b4c12f7a1d5fe3ce18b2aaeef) Arguments: /lib/systemd/systemd-logind

systemd New Fork (PID: 6909, Parent: 1)

rsyslogd (PID: 6909, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6916, Parent: 1)

dbus-daemon (PID: 6916, Parent: 1, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6917, Parent: 2935)

pulseaudio (PID: 6917, Parent: 2935, MD5: 0c3b4c789d8ffb12b25507f27e14c186) Arguments: /usr/bin/pulseaudio --daemonize=no --log-target=journal

systemd New Fork (PID: 6918, Parent: 1)

rsyslogd (PID: 6918, Parent: 1, MD5: 0b8087fc907c42eb3c81a691db258e33) Arguments: /usr/sbin/rsyslogd -n -iNONE

systemd New Fork (PID: 6922, Parent: 1)

gpu-manager (PID: 6922, Parent: 1, MD5: 8fae9dd5dd67e1f33d873089c2fd8761) Arguments: /usr/bin/gpu-manager --log /var/log/gpu-manager.log

gpu-manager New Fork (PID: 6923, Parent: 6922)

sh (PID: 6923, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6925, Parent: 6923)

grep (PID: 6925, Parent: 6923, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6926, Parent: 6922)

sh (PID: 6926, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nvidia[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6930, Parent: 6926)

grep (PID: 6930, Parent: 6926, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nvidia[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6933, Parent: 6922)

sh (PID: 6933, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6935, Parent: 6933)

grep (PID: 6935, Parent: 6933, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6936, Parent: 6922)

sh (PID: 6936, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*radeon[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6937, Parent: 6936)

grep (PID: 6937, Parent: 6936, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*radeon[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6938, Parent: 6922)

sh (PID: 6938, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6939, Parent: 6938)

grep (PID: 6939, Parent: 6938, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6940, Parent: 6922)

sh (PID: 6940, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*amdgpu[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6941, Parent: 6940)

grep (PID: 6941, Parent: 6940, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*amdgpu[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

gpu-manager New Fork (PID: 6942, Parent: 6922)

sh (PID: 6942, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /etc/modprobe.d/*.conf"

sh New Fork (PID: 6943, Parent: 6942)

grep (PID: 6943, Parent: 6942, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf

gpu-manager New Fork (PID: 6944, Parent: 6922)

sh (PID: 6944, Parent: 6922, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: sh -c "grep -G \"^blacklist.*nouveau[[:space:]]*$\" /lib/modprobe.d/*.conf"

sh New Fork (PID: 6945, Parent: 6944)

grep (PID: 6945, Parent: 6944, MD5: 1e6ebb9dd094f774478f72727bdba0f5) Arguments: grep -G ^blacklist.*nouveau[[:space:]]*$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

systemd New Fork (PID: 6924, Parent: 1)

rtkit-daemon (PID: 6924, Parent: 1, MD5: df0cacf1db4ec95ac70f5b6e06b8ffd7) Arguments: /usr/libexec/rtkit-daemon

systemd New Fork (PID: 6929, Parent: 1)

polkitd (PID: 6929, Parent: 1, MD5: 8efc9b4b5b524210ad2ea1954a9d0e69) Arguments: /usr/lib/policykit-1/polkitd --no-debug

systemd New Fork (PID: 6947, Parent: 1)

generate-config (PID: 6947, Parent: 1, MD5: 1e6b1c887c59a315edb7eb9a315fc84c) Arguments: /usr/share/gdm/generate-config

generate-config New Fork (PID: 6948, Parent: 6947)

pkill (PID: 6948, Parent: 6947, MD5: fa96a75a08109d8842e4865b2907d51f) Arguments: pkill --signal HUP --uid gdm dconf-service

systemd New Fork (PID: 6952, Parent: 2935)

dbus-daemon (PID: 6952, Parent: 2935, MD5: 3089d47e3f3ab84cd81c48fd406d7a8c) Arguments: /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only

systemd New Fork (PID: 6953, Parent: 1)

gdm-wait-for-drm (PID: 6953, Parent: 1, MD5: 82043ba752c6930b4e6aaea2f7747545) Arguments: /usr/lib/gdm3/gdm-wait-for-drm

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Aqua.dbg.elf	Linux_Trojan_Gafgyt_9e9530a7	unknown	unknown	0xaa74:$a: F6 48 63 FF B8 36 00 00 00 0F 05 48 3D 00 F0 FF FF 48 89 C3
Aqua.dbg.elf	Linux_Trojan_Gafgyt_807911a2	unknown	unknown	0xb263:$a: FE 48 39 F3 0F 94 C2 48 83 F9 FF 0F 94 C0 84 D0 74 16 4B 8D
Aqua.dbg.elf	Linux_Trojan_Gafgyt_d4227dbf	unknown	unknown	0x7aee:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00 0xccfc:$a: FF 48 81 EC D0 00 00 00 48 8D 84 24 E0 00 00 00 48 89 54 24 30 C7 04 24 18 00
Aqua.dbg.elf	Linux_Trojan_Gafgyt_d996d335	unknown	unknown	0xebaa:$a: D0 EB 0F 40 38 37 75 04 48 89 F8 C3 49 FF C8 48 FF C7 4D 85 C0
Aqua.dbg.elf	Linux_Trojan_Gafgyt_620087b9	unknown	unknown	0xae23:$a: 48 89 D8 48 83 C8 01 EB 04 48 8B 76 10 48 3B 46 08 72 F6 48 8B
Aqua.dbg.elf	Linux_Trojan_Gafgyt_33b4111a	unknown	unknown	0xb0ee:$a: C1 83 E1 0F 74 1A B8 10 00 00 00 48 29 C8 48 8D 0C 02 48 89 DA 48
Aqua.dbg.elf	Linux_Trojan_Mirai_520deeb8	unknown	unknown	0x36a:$a: ED 48 89 44 24 30 44 89 6C 24 10 7E 47 48 89 C1 44 89 E8 44
Aqua.dbg.elf	Linux_Trojan_Mirai_449937aa	unknown	unknown	0xff6e:$a: 00 00 5B 72 65 73 6F 6C 76 5D 20 46 6F 75 6E 64 20 49 50 20
Aqua.dbg.elf	Linux_Trojan_Mirai_01e4a728	unknown	unknown	0x46d:$a: 44 24 23 48 8B 6C 24 28 83 F9 01 4A 8D 14 20 0F B6 02 88 45 08
Aqua.dbg.elf	Linux_Trojan_Mirai_e0cf29e2	unknown	unknown	0x4762:$a: 83 FE 01 76 12 0F B7 07 83 EE 02 48 83 C7 02 48 01 C2 83 FE 01
Click to see the 5 entries

String: Could not open raw socket!Failed to create socket!ACK Stomp got SYN+ACK!Could not listen on raw socket!Couldn't connect to host for ACK Stomp in time. RetryingEOF/proc//proc/%s/cmdlinerwgetcurlftpechokillbashrebootshutdownhaltpoweroff/fdsocket/proc/%s/stat/proc/proc/%d/exe/proc/%d/stat%d %s %c %d/proc/%d/maps/var/run/mnt/root/var/tmp/boot/bin/sbin/../(deleted)/homedbgmpslmipselmipsarmarm4arm5arm6arm7sh4m68kx86x586x86_64i586i686ppcspc[locker] killed process: %s ;; pid: %d

Source: global traffic	TCP traffic: 192.168.2.13:52978 -> 193.200.78.37:33966
Source: global traffic	TCP traffic: 192.168.2.13:44730 -> 89.190.156.145:7733

Source: /usr/sbin/rsyslogd (PID: 5605)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5690)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5751)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5818)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5845)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5916)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5983)	Reads hosts file: /etc/hosts	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5989)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6017)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6082)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6091)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6103)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6169)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6197)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6265)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6291)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6358)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6387)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6450)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6458)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6469)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6537)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6574)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6643)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6653)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6747)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6812)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6824)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6846)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6909)	Reads hosts file: /etc/hosts
Source: /usr/sbin/rsyslogd (PID: 6918)	Reads hosts file: /etc/hosts

Source: /lib/systemd/systemd-journald (PID: 5758)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	Socket: unknown address family	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6022)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6107)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6201)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6297)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6389)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6473)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6582)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6752)	Socket: unknown address family
Source: /lib/systemd/systemd-journald (PID: 6854)	Socket: unknown address family

Source: global traffic

TCP traffic: 192.168.2.13:48202 -> 185.125.190.26:443

Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145
Source: unknown	TCP traffic detected without corresponding DNS query: 89.190.156.145

Source: global traffic

DNS traffic detected: DNS query: raw.intenseapi.com

Source: syslog.437.dr, syslog.28.dr

String found in binary or memory: https://www.rsyslog.com

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 Author: unknown
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 Author: unknown

Sample tries to kill multiple processes (SIGKILL)

Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5433, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5414, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5415, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5601, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5604, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5605, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5687, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5689, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5690, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5724, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5274, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5617, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5727, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5750, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5751, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5755, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5758, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5818, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5819, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5824, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5845, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5846, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5820, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5913, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5916, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5983, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5984, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5989, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5990, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5923, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5926, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6014, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6017, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6018, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6082, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6083, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6087, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6090, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6091, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6022, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6025, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6100, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6103, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6167, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6168, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6169, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6107, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6110, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6194, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6197, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6263, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6264, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6265, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6201, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6204, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6290, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6357, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6358, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6359, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6297, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6384, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6387, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6388, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6449, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6450, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6454, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6455, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6458, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6389, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6392, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6466, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6469, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6533, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6537, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6538, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6540, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6476, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6574, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6575, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6579, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6642, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6643, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6653, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6656, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6742, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6582, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6743, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6746, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6748, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6812, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6813, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6814, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6824, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6825, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6832, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6843, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6755, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6855, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6909, result: successful	Jump to behavior

Source: ELF static info symbol of initial sample

.symtab present: no

Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1884, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5433, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 660, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 726, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 727, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 778, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 780, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 783, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 790, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 795, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 936, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1400, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1432, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 2970, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 3069, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 3132, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5414, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5415, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5601, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5604, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5605, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1411, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 2936, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5687, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5689, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5690, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5724, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 490, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 765, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 767, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 1410, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 2935, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5274, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5617, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5727, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5750, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5751, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5755, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5758, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5818, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5819, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5824, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5845, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5846, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5820, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5854, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5913, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5916, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5917, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5983, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5984, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5989, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5990, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5923, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 5926, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6014, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6017, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6018, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6082, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6083, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6087, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6090, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6091, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6022, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6025, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6100, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6103, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6167, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6168, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6169, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6107, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6110, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6194, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6197, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6263, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6264, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6265, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6201, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6204, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6290, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6291, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6357, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6358, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6359, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6297, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6300, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6384, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6387, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6388, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6449, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6450, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6454, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6455, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6458, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6389, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6392, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6466, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6469, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6533, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6536, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6537, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6538, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6540, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6473, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6476, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6573, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6574, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6575, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6579, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6642, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6643, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6650, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6653, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6656, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6742, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6582, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6675, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6743, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6746, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6747, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6748, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6812, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6813, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6814, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6818, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6824, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6825, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6832, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6843, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6752, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6755, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6840, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6846, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6847, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6851, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6855, result: successful	Jump to behavior
Source: /tmp/Aqua.dbg.elf (PID: 5432)	SIGKILL sent: pid: 6909, result: successful	Jump to behavior

Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_9e9530a7 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = d6ad6512051e87c8c35dc168d82edd071b122d026dce21d39b9782b3d6a01e50, id = 9e9530a7-ad4d-4a44-b764-437b7621052f, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_807911a2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = f409037091b7372f5a42bbe437316bd11c655e7a5fe1fcf83d1981cb5c4a389f, id = 807911a2-f6ec-4e65-924f-61cb065dafc6, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d4227dbf reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 58c4b1d4d167876b64cfa10f609911a80284180e4db093917fea16fae8ccd4e3, id = d4227dbf-6ab4-4637-a6ba-0e604acaafb4, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_d996d335 reference_sample = b511eacd4b44744c8cf82d1b4a9bc6f1022fe6be7c5d17356b171f727ddc6eda, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = e9ccb8412f32187c309b0e9afcc3a6da21ad2f1ffa251c27f9f720ccb284e3ac, id = d996d335-e049-4052-bf36-6cd07c911a8b, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_620087b9 reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 06cd7e6eb62352ec2ccb9ed48e58c0583c02fefd137cd048d053ab30b5330307, id = 620087b9-c87d-4752-89e8-ca1c16486b28, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_33b4111a reference_sample = 01da73e0d425b4d97c5ad75c49657f95618b394d09bd6be644eb968a3b894961, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = 9c3b63b9a0f54006bae12abcefdb518904a85f78be573f0780f0a265b12d2d6e, id = 33b4111a-e59e-48db-9d74-34ca44fcd9f5, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_520deeb8 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f4dfd1d76e07ff875eedfe0ef4f861bee1e4d8e66d68385f602f29cc35e30cca, id = 520deeb8-cbc0-4225-8d23-adba5e040471, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_449937aa reference_sample = 6f27766534445cffb097c7c52db1fca53b2210c1b10b75594f77c34dc8b994fe, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = cf2c6b86830099f039b41aeaafbffedfb8294a1124c499e99a11f48a06cd1dfd, id = 449937aa-682a-4906-89ab-80d7127e461e, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_01e4a728 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = d90477364982bdc6cd22079c245d866454475749f762620273091f2fab73c196, id = 01e4a728-7c1c-479b-aed0-cb76d64dbb02, last_modified = 2021-09-16
Source: Aqua.dbg.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_e0cf29e2 os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 3f124c3c9f124264dfbbcca1e4b4d7cfcf3274170d4bf8966b6559045873948f, id = e0cf29e2-88d7-4aa4-b60a-c24626f2b246, last_modified = 2021-09-16

Source: classification engine

Classification label: mal80.spre.troj.evad.linELF@0/207@36/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /usr/bin/dbus-daemon (PID: 5601)	File: /proc/5601/mounts	Jump to behavior
Source: /bin/fusermount (PID: 5619)	File: /proc/5619/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5687)	File: /proc/5687/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5724)	File: /proc/5724/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5755)	File: /proc/5755/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5819)	File: /proc/5819/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5846)	File: /proc/5846/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5917)	File: /proc/5917/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5984)	File: /proc/5984/mounts	Jump to behavior
Source: /usr/bin/dbus-daemon (PID: 5990)	File: /proc/5990/mounts
Source: /usr/bin/dbus-daemon (PID: 6018)	File: /proc/6018/mounts
Source: /usr/bin/dbus-daemon (PID: 6083)	File: /proc/6083/mounts
Source: /usr/bin/dbus-daemon (PID: 6090)	File: /proc/6090/mounts
Source: /usr/bin/dbus-daemon (PID: 6167)	File: /proc/6167/mounts
Source: /usr/bin/dbus-daemon (PID: 6168)	File: /proc/6168/mounts
Source: /usr/bin/dbus-daemon (PID: 6263)	File: /proc/6263/mounts
Source: /usr/bin/dbus-daemon (PID: 6264)	File: /proc/6264/mounts
Source: /usr/bin/dbus-daemon (PID: 6357)	File: /proc/6357/mounts
Source: /usr/bin/dbus-daemon (PID: 6359)	File: /proc/6359/mounts
Source: /usr/bin/dbus-daemon (PID: 6388)	File: /proc/6388/mounts
Source: /usr/bin/dbus-daemon (PID: 6449)	File: /proc/6449/mounts
Source: /usr/bin/dbus-daemon (PID: 6455)	File: /proc/6455/mounts
Source: /usr/bin/dbus-daemon (PID: 6533)	File: /proc/6533/mounts
Source: /usr/bin/dbus-daemon (PID: 6536)	File: /proc/6536/mounts
Source: /usr/bin/dbus-daemon (PID: 6538)	File: /proc/6538/mounts
Source: /usr/bin/dbus-daemon (PID: 6575)	File: /proc/6575/mounts
Source: /usr/bin/dbus-daemon (PID: 6642)	File: /proc/6642/mounts
Source: /usr/bin/dbus-daemon (PID: 6656)	File: /proc/6656/mounts
Source: /usr/bin/dbus-daemon (PID: 6742)	File: /proc/6742/mounts
Source: /usr/bin/dbus-daemon (PID: 6748)	File: /proc/6748/mounts
Source: /usr/bin/dbus-daemon (PID: 6813)	File: /proc/6813/mounts
Source: /usr/bin/dbus-daemon (PID: 6825)	File: /proc/6825/mounts
Source: /usr/bin/dbus-daemon (PID: 6843)	File: /proc/6843/mounts
Source: /usr/bin/dbus-daemon (PID: 6847)	File: /proc/6847/mounts
Source: /usr/bin/dbus-daemon (PID: 6855)	File: /proc/6855/mounts
Source: /usr/bin/dbus-daemon (PID: 6916)	File: /proc/6916/mounts
Source: /usr/bin/dbus-daemon (PID: 6952)	File: /proc/6952/mounts

Source: /usr/libexec/gsd-rfkill (PID: 5433)	Directory: <invalid fd (9)>/..	Jump to behavior
Source: /usr/libexec/gsd-rfkill (PID: 5433)	Directory: <invalid fd (8)>/..	Jump to behavior
Source: /lib/systemd/systemd-hostnamed (PID: 5438)	Directory: <invalid fd (10)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5617)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5617)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5617)	File: /run/systemd/seats/.#seat0Gp2ysW	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5683)	Directory: /root/.cache	Jump to behavior
Source: /usr/lib/policykit-1/polkitd (PID: 5707)	Directory: /root/.cache	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5761)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5761)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5761)	File: /run/systemd/seats/.#seat05WL7IO	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:66616dpkMXf	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:66617KHVzRj	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:66618QePVHj	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:66619tVMDTi	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:66620ZuYkRj	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:66626rAkBjf	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:66627RVAmhi	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	File: /run/systemd/journal/streams/.#9:67626YyLbKf	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5854)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5854)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5854)	File: /run/systemd/seats/.#seat0velf3O	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	File: /run/systemd/journal/streams/.#9:67052uc1lg5	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	File: /run/systemd/journal/streams/.#9:67053R38AK2	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	File: /run/systemd/journal/streams/.#9:67054njYPh3	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	File: /run/systemd/journal/streams/.#9:67061zb9Ww5	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	File: /run/systemd/journal/streams/.#9:67151ZVumu2	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	File: /run/systemd/journal/streams/.#9:67232XYMHP3	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5926)	Directory: <invalid fd (18)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5926)	Directory: <invalid fd (17)>/..	Jump to behavior
Source: /lib/systemd/systemd-logind (PID: 5926)	File: /run/systemd/seats/.#seat002Pkwi	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6022)	File: /run/systemd/journal/streams/.#9:6975276M1Tz
Source: /lib/systemd/systemd-journald (PID: 6022)	File: /run/systemd/journal/streams/.#9:69754lkY8Zz
Source: /lib/systemd/systemd-journald (PID: 6022)	File: /run/systemd/journal/streams/.#9:69755QpQsvz
Source: /lib/systemd/systemd-journald (PID: 6022)	File: /run/systemd/journal/streams/.#9:69756R37tqA
Source: /lib/systemd/systemd-journald (PID: 6022)	File: /run/systemd/journal/streams/.#9:69767EOQW8y
Source: /lib/systemd/systemd-logind (PID: 6025)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6025)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6025)	File: /run/systemd/seats/.#seat0kkCVpN
Source: /lib/systemd/systemd-journald (PID: 6107)	File: /run/systemd/journal/streams/.#9:70285Ka3QuX
Source: /lib/systemd/systemd-journald (PID: 6107)	File: /run/systemd/journal/streams/.#9:70286AHKTIW
Source: /lib/systemd/systemd-journald (PID: 6107)	File: /run/systemd/journal/streams/.#9:702879MVhH0
Source: /lib/systemd/systemd-journald (PID: 6107)	File: /run/systemd/journal/streams/.#9:70288l4PemZ
Source: /lib/systemd/systemd-journald (PID: 6107)	File: /run/systemd/journal/streams/.#9:70389M7MjlZ
Source: /lib/systemd/systemd-logind (PID: 6110)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6110)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6110)	File: /run/systemd/seats/.#seat09DHBFe
Source: /lib/systemd/systemd-journald (PID: 6201)	File: /run/systemd/journal/streams/.#9:70706oAOyJ3
Source: /lib/systemd/systemd-journald (PID: 6201)	File: /run/systemd/journal/streams/.#9:70707lxJ224
Source: /lib/systemd/systemd-journald (PID: 6201)	File: /run/systemd/journal/streams/.#9:70708Ufo5j5
Source: /lib/systemd/systemd-journald (PID: 6201)	File: /run/systemd/journal/streams/.#9:70709SDtXP3
Source: /lib/systemd/systemd-journald (PID: 6201)	File: /run/systemd/journal/streams/.#9:70805hoLmM6
Source: /lib/systemd/systemd-logind (PID: 6204)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6204)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6204)	File: /run/systemd/seats/.#seat0o3yzQj
Source: /lib/systemd/systemd-journald (PID: 6297)	File: /run/systemd/journal/streams/.#9:71313R7QYFk
Source: /lib/systemd/systemd-journald (PID: 6297)	File: /run/systemd/journal/streams/.#9:7131493ikZl
Source: /lib/systemd/systemd-journald (PID: 6297)	File: /run/systemd/journal/streams/.#9:71315m9Puyj
Source: /lib/systemd/systemd-journald (PID: 6297)	File: /run/systemd/journal/streams/.#9:71316YLuc3l
Source: /lib/systemd/systemd-journald (PID: 6297)	File: /run/systemd/journal/streams/.#9:71412CFjeLn
Source: /lib/systemd/systemd-journald (PID: 6297)	File: /run/systemd/journal/streams/.#9:71493ufFXIm
Source: /lib/systemd/systemd-logind (PID: 6300)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6300)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6300)	File: /run/systemd/seats/.#seat0MAdTGz
Source: /lib/systemd/systemd-journald (PID: 6389)	File: /run/systemd/journal/streams/.#9:73789lt3Lej
Source: /lib/systemd/systemd-journald (PID: 6389)	File: /run/systemd/journal/streams/.#9:73790wg0N9j
Source: /lib/systemd/systemd-journald (PID: 6389)	File: /run/systemd/journal/streams/.#9:73796hlFazj
Source: /lib/systemd/systemd-journald (PID: 6389)	File: /run/systemd/journal/streams/.#9:73797jIyouk
Source: /lib/systemd/systemd-journald (PID: 6389)	File: /run/systemd/journal/streams/.#9:738092xxI7k
Source: /lib/systemd/systemd-logind (PID: 6392)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6392)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6392)	File: /run/systemd/seats/.#seat0Td64Xy
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:73560DmI6dH
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:73561OOzm3F
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:73563KER6nE
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:735648VirTF
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:74251nphX5D
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:74260ty4RXE
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:74261s3WHDG
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:74268RWeUHF
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:74376WIP7PC
Source: /lib/systemd/systemd-journald (PID: 6473)	File: /run/systemd/journal/streams/.#9:74462xVRd8G
Source: /lib/systemd/systemd-logind (PID: 6476)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6476)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6476)	File: /run/systemd/seats/.#seat0XP56wT
Source: /usr/lib/policykit-1/polkitd (PID: 6559)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75843Hjqo9S
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75846YtHGWU
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75847Z2lCgS
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75849TYxLmV
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75851A0HZYS
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75858WHiLmT
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:758603gCpBR
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75869NF8seS
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75871ik2oaV
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75995iBkzeS
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75996u61f5R
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:75688kytJFT
Source: /lib/systemd/systemd-journald (PID: 6582)	File: /run/systemd/journal/streams/.#9:76865vAIUoV
Source: /lib/systemd/systemd-logind (PID: 6585)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6585)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6585)	File: /run/systemd/seats/.#seat0qlhDw9
Source: /lib/systemd/systemd-logind (PID: 6675)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6675)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6675)	File: /run/systemd/seats/.#seat01geeYV
Source: /usr/lib/policykit-1/polkitd (PID: 6734)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77370lFaSXI
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77372mZcSXI
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77373v9r5OM
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77375QQgBSI
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77381eOnjUJ
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77388gYZNsJ
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77395QvSlGK
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77396DOpvwM
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77398OTccLJ
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77474VcwAWM
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77609UGgsrJ
Source: /lib/systemd/systemd-journald (PID: 6752)	File: /run/systemd/journal/streams/.#9:77634RmPfDK
Source: /lib/systemd/systemd-logind (PID: 6755)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6755)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6755)	File: /run/systemd/seats/.#seat0LXuki1
Source: /usr/lib/policykit-1/polkitd (PID: 6836)	Directory: /root/.cache
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79229yKSjjv
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79230vTOxDu
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79231fmB4zs
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79238bwD7mr
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79239PC5I4r
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79240ytvrft
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79241tAUddt
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79242P15jiv
Source: /lib/systemd/systemd-journald (PID: 6854)	File: /run/systemd/journal/streams/.#9:79276fB0PGu
Source: /lib/systemd/systemd-logind (PID: 6858)	Directory: <invalid fd (18)>/..
Source: /lib/systemd/systemd-logind (PID: 6858)	Directory: <invalid fd (17)>/..
Source: /lib/systemd/systemd-logind (PID: 6858)	File: /run/systemd/seats/.#seat00JDBdM
Source: /usr/lib/policykit-1/polkitd (PID: 6929)	Directory: /root/.cache

Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6540/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6540/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6540/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6540/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6540/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6540/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6540/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6473/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6473/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6473/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6473/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6473/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6473/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6476/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6476/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6476/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6476/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6476/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6476/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6476/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6574/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6574/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6574/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6574/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6574/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6574/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6574/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6533/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6533/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6533/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6533/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6533/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6533/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6533/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6554/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/660/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/660/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/660/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/660/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/660/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/660/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/660/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/environ
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/sched
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/1/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6469/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6469/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6469/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6469/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6469/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6469/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6469/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6537/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6537/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6537/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6537/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6537/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6537/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6537/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6559/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6559/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6559/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6559/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6559/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6559/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6559/cgroup
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6536/comm
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6536/cmdline
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6536/status
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6536/attr/current
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6536/sessionid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6536/loginuid
Source: /lib/systemd/systemd-journald (PID: 6473)	File opened: /proc/6536/cgroup

Source: /usr/bin/gpu-manager (PID: 5695)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5697)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5699)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5704)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5709)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5714)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5716)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5718)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5825)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5827)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5831)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5833)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5835)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5839)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5841)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5843)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5991)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5993)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5998)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6000)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6002)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6004)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6006)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6008)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6088)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6173)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6178)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6180)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6182)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6184)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6186)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6188)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6190)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6267)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6272)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6274)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6276)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6278)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6280)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6282)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6284)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6361)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6366)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6368)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6370)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6372)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6374)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6376)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6378)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6456)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6541)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6546)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6548)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6550)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6552)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6555)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6563)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6565)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6648)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6651)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6654)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6660)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6662)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6664)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6666)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6668)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6821)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6823)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6923)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6926)	Shell command executed: sh -c "grep -G \"^blacklist.nvidia[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6933)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6936)	Shell command executed: sh -c "grep -G \"^blacklist.radeon[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6938)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6940)	Shell command executed: sh -c "grep -G \"^blacklist.amdgpu[[:space:]]$\" /lib/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6942)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /etc/modprobe.d/*.conf"
Source: /usr/bin/gpu-manager (PID: 6944)	Shell command executed: sh -c "grep -G \"^blacklist.nouveau[[:space:]]$\" /lib/modprobe.d/*.conf"

Source: /bin/sh (PID: 5696)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5698)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5701)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5708)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5713)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5715)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5717)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5719)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5826)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5830)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5832)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5834)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5836)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5840)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5842)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5844)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5992)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 5994)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 5999)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6001)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6003)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6005)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6007)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf	Jump to behavior
Source: /bin/sh (PID: 6009)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf	Jump to behavior
Source: /bin/sh (PID: 6089)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6177)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6179)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6181)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6183)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6185)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6187)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6189)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6191)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6268)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6273)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6275)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6277)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6279)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6281)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6283)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6285)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6362)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6367)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6369)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6371)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6373)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6375)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6377)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6379)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6457)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6542)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6547)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6549)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6551)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6553)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6556)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6564)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6566)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6649)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6652)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6655)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6661)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6663)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6665)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6667)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6669)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6822)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6826)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6925)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6930)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nvidia[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6935)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6937)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.radeon[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6939)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6941)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.amdgpu[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf
Source: /bin/sh (PID: 6943)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /etc/modprobe.d/alsa-base.conf /etc/modprobe.d/amd64-microcode-blacklist.conf /etc/modprobe.d/blacklist-ath_pci.conf /etc/modprobe.d/blacklist-firewire.conf /etc/modprobe.d/blacklist-framebuffer.conf /etc/modprobe.d/blacklist-modem.conf /etc/modprobe.d/blacklist-oss.conf /etc/modprobe.d/blacklist-rare-network.conf /etc/modprobe.d/blacklist.conf /etc/modprobe.d/intel-microcode-blacklist.conf /etc/modprobe.d/iwlwifi.conf /etc/modprobe.d/mdadm.conf
Source: /bin/sh (PID: 6945)	Grep executable: /usr/bin/grep -> grep -G ^blacklist.nouveau[[:space:]]$ /lib/modprobe.d/aliases.conf /lib/modprobe.d/blacklist_linux_5.4.0-72-generic.conf /lib/modprobe.d/blacklist_linux_5.4.0-81-generic.conf /lib/modprobe.d/fbdev-blacklist.conf /lib/modprobe.d/systemd.conf

Source: /usr/share/gdm/generate-config (PID: 5721)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 5848)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service	Jump to behavior
Source: /usr/share/gdm/generate-config (PID: 6011)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6094)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6193)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6287)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6383)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6460)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6568)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6739)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6828)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service
Source: /usr/share/gdm/generate-config (PID: 6948)	Pkill executable: /usr/bin/pkill -> pkill --signal HUP --uid gdm dconf-service

Source: /lib/systemd/systemd-journald (PID: 5758)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	Reads from proc file: /proc/meminfo	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 6022)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6107)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6201)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6297)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6389)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6473)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6582)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6752)	Reads from proc file: /proc/meminfo
Source: /lib/systemd/systemd-journald (PID: 6854)	Reads from proc file: /proc/meminfo

Source: /usr/sbin/rsyslogd (PID: 5605)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5605)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5690)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 5694)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5751)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5818)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5845)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5845)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 5916)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5983)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 5988)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 5989)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 5989)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6082)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6091)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6091)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6103)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6169)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6169)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6170)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6197)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6265)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6265)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6266)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6291)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6358)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6358)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6360)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6450)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6458)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6458)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6469)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6537)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6537)	Log file created: /var/log/auth.log
Source: /usr/bin/gpu-manager (PID: 6539)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6574)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6643)	Log file created: /var/log/kern.log
Source: /usr/bin/gpu-manager (PID: 6647)	Log file created: /var/log/gpu-manager.log
Source: /usr/sbin/rsyslogd (PID: 6653)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6653)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6747)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6812)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6824)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6824)	Log file created: /var/log/auth.log
Source: /usr/sbin/rsyslogd (PID: 6846)	Log file created: /var/log/kern.log
Source: /usr/sbin/rsyslogd (PID: 6918)	Log file created: /var/log/kern.log	Jump to dropped file
Source: /usr/sbin/rsyslogd (PID: 6918)	Log file created: /var/log/auth.log	Jump to dropped file
Source: /usr/bin/gpu-manager (PID: 6922)	Log file created: /var/log/gpu-manager.log	Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Sample deletes itself

Source: /tmp/Aqua.dbg.elf (PID: 5431)

File: /tmp/Aqua.dbg.elf

Jump to behavior

Source: /usr/bin/gpu-manager (PID: 5694)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5824)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5988)	Truncated file: /var/log/gpu-manager.log	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 6087)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6170)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6266)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6360)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6454)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6539)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6647)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6818)	Truncated file: /var/log/gpu-manager.log
Source: /usr/bin/gpu-manager (PID: 6922)	Truncated file: /var/log/gpu-manager.log

Source: /usr/bin/pulseaudio (PID: 5689)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5721)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 5848)	Reads CPU info from /sys: /sys/devices/system/cpu/online	Jump to behavior
Source: /usr/bin/pkill (PID: 6011)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6094)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6193)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6287)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6383)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6460)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6540)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6568)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6650)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6739)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6828)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6832)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pulseaudio (PID: 6917)	Reads CPU info from /sys: /sys/devices/system/cpu/online
Source: /usr/bin/pkill (PID: 6948)	Reads CPU info from /sys: /sys/devices/system/cpu/online

Source: /lib/systemd/systemd-hostnamed (PID: 5438)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5605)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/pulseaudio (PID: 5689)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5690)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5694)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5751)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5758)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5818)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5820)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5824)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5845)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5916)	Queries kernel information via 'uname':	Jump to behavior
Source: /lib/systemd/systemd-journald (PID: 5923)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5983)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/gpu-manager (PID: 5988)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/sbin/rsyslogd (PID: 5989)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6017)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6022)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6082)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6091)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6103)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6107)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6169)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6170)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6197)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6201)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6265)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6266)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6291)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6297)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6358)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6360)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6387)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6389)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6450)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6458)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6469)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6473)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6537)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6539)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6540)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6574)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6582)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6643)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6647)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6650)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6653)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6747)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6752)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6812)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6824)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6832)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6846)	Queries kernel information via 'uname':
Source: /lib/systemd/systemd-journald (PID: 6854)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6909)	Queries kernel information via 'uname':
Source: /usr/bin/pulseaudio (PID: 6917)	Queries kernel information via 'uname':
Source: /usr/sbin/rsyslogd (PID: 6918)	Queries kernel information via 'uname':
Source: /usr/bin/gpu-manager (PID: 6922)	Queries kernel information via 'uname':

Source: kern.log.44.dr	Binary or memory string: Dec 28 18:42:48 galassia kernel: [ 106.216484] Modules linked in: monitor(OE) md4 cmac cifs libarc4 fscache libdes vmw_vsock_vmci_transport vsock binfmt_misc dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua vmw_balloon joydev input_leds serio_raw vmw_vmci sch_fq_codel parport_pc ppdev lp drm parport ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear crct10dif_pclmul crc32_pclmul ghash_clmulni_intel aesni_intel crypto_simd cryptd glue_helper psmouse mptspi scsi_transport_spi ahci mptscsih libahci mptbase vmxnet3
Source: kern.log.44.dr	Binary or memory string: Dec 28 18:42:48 galassia kernel: [ 106.216510] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	Valid Accounts	Windows Management Instrumentation	2 Scripting	Path Interception	1 Disable or Modify Tools	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	1 Service Stop
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	11 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Indicator Removal	Security Account Manager	2 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Application Layer Protocol	Traffic Duplication	Data Destruction

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
Aqua.dbg.elf	37%	ReversingLabs	Linux.Backdoor.Mirai
Aqua.dbg.elf	100%	Avira	EXP/ELF.Mirai.W
Aqua.dbg.elf	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
raw.intenseapi.com	193.200.78.37	true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.rsyslog.com	syslog.437.dr, syslog.28.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
193.200.78.37	raw.intenseapi.com	Switzerland	29496	LINK-SERVICE-ASUA	false
185.125.190.26	unknown	United Kingdom	41231	CANONICAL-ASGB	false
89.190.156.145	unknown	United Kingdom	7489	HOSTUS-GLOBAL-ASHostUSHK	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
193.200.78.37	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse
185.125.190.26	arm5.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	nn.elf	Get hash	malicious	Nanominer, Xmrig	Browse
	nshkarm.elf	Get hash	malicious	Unknown	Browse
	wrjkngh4.elf	Get hash	malicious	Mirai	Browse
	mips.elf	Get hash	malicious	Gafgyt	Browse
	yakuza.m68k.elf	Get hash	malicious	Mirai	Browse
	mpsl.elf	Get hash	malicious	Gafgyt	Browse
	yakuza.i586.elf	Get hash	malicious	Mirai	Browse
	x86_64.elf	Get hash	malicious	Gafgyt	Browse
89.190.156.145	Aqua.mips.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse
	kqibeps.elf	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
raw.intenseapi.com	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.200.78.37

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HOSTUS-GLOBAL-ASHostUSHK	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.m68k.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	Aqua.sh4.elf	Get hash	malicious	Unknown	Browse	89.190.156.145
	kqibeps.elf	Get hash	malicious	Mirai	Browse	89.190.156.145
CANONICAL-ASGB	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm6.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	arm5.elf	Get hash	malicious	Unknown	Browse	185.125.190.26
	m68k.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
	45.200.149.186-boatnet.arm5-2024-12-28T01_23_00.elf	Get hash	malicious	Mirai	Browse	91.189.91.42
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	91.189.91.42
LINK-SERVICE-ASUA	Aqua.mips.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86_64.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.x86.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.mpsl.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.arm7.elf	Get hash	malicious	Mirai	Browse	193.200.78.37
	Aqua.spc.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.i686.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.arm4.elf	Get hash	malicious	Unknown	Browse	193.200.78.37
	Aqua.dbg.elf	Get hash	malicious	Unknown	Browse	193.200.78.37

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.9219280948873623
Encrypted:	false
SSDEEP:	3:5bkPn:pkP
MD5:	FF001A15CE15CF062A3704CEA2991B5F
SHA1:	B06F6855F376C3245B82212AC73ADED55DFE5DEF
SHA-256:	C54830B41ECFA1B6FBDC30397188DDA86B7B200E62AEAC21AE694A6192DCC38A
SHA-512:	65EBF7C31F6F65713CE01B38A112E97D0AE64A6BD1DA40CE4C1B998F10CD3912EE1A48BB2B279B24493062118AAB3B8753742E2AF28E56A31A7AAB27DE80E7BF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.4613201402110088
Encrypted:	false
SSDEEP:	3:5bkrIZsXvn:pkckv
MD5:	28FE6435F34B3367707BB1C5D5F6B430
SHA1:	EB8FE2D16BD6BBCCE106C94E4D284543B2573CF6
SHA-256:	721A37C69E555799B41D308849E8F8125441883AB021B723FED90A9B744F36C0
SHA-512:	6B6AB7C0979629D0FEF6BE47C5C6BCC367EDD0AAE3FC973F4DE2FD5F0A819C89E7656DB65D453B1B5398E54012B27EDFE02894AD87A7E0AF3A9C5F2EB24A9919
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	auto_null.monitor.

/run/systemd/journal/streams/.#9:66616dpkMXf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.505371830209417
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmr5/VDaqEPDi3vRqjq:SbFuFyLVIg1BG+f+MxVWqEPQ8ji4s
MD5:	8F48FBF418A78980F804DFFC349A1E85
SHA1:	FF825C6DE4C2A12818E8742242ED08860FE7D7FB
SHA-256:	76B0FC321D954DCDA85A681444EA57C77EB48C3003E8F430419489F64E7D8074
SHA-512:	FB66376759EF9D452CD38F7FF2BAA8246DC4C6CC08A78963B8895070E2FC216FDA0F3DB7847760734D3213081181D1C2E904409AC9B3439B9F689E256C506620
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=a0675f0200f843d9a3292358f89a1208.IDENTIFIER=journalctl.UNIT=systemd-journal-flush.service.

/run/systemd/journal/streams/.#9:66617KHVzRj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.476024697195899
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzCtHKGDCQnqjsicWg:SbFuFyLVIg1BG+f+MtGDJqjZcHcljX+
MD5:	A59E36386DC545FEA3B4744386F2ED59
SHA1:	9D90D9E1478850C7E5675A8879975DC7BCD2E3F8
SHA-256:	65763291531C516A725D8C8E063937042871B6691CB919B32D1A3E30FC685BE0
SHA-512:	725E8AF9200E7BD45967D64AD6CCA2037769B0B92251314DCEA1FD9F60F7AACFC290B5599C66D9975B0B30810F37D114EF3484A1853EF8B17CACEDAA2905CA99
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=953d0308ca774f3db56aaa021f5fd69d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:66618QePVHj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.396683256538854
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8JDnVSWAnEd/Ovsjx:SbFuFyLVIg1BG+f+M8NVSW5B7josQu
MD5:	242D34D1B0EC931315D0E4F45A0331B3
SHA1:	E77955BC96E96B41D60DD8D1E82389960F359E60
SHA-256:	94922C406CC5ED93265DD099045761026E45DD05B70638334767DD76A402B0B5
SHA-512:	71FDB235B53D1ADDB5B0619193E8377F0DE99482A8F59FB165DAD9F0780E9E64450DC2429E0A9822025ED7B321358333D1DD862BFB13A7647C6EC1EB50605DC4
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=615faf9071fb43a08fe93a8c180fa1b1.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66619tVMDTi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4336469495552935
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5RQnQVFHacnLjs1Ha:SbFuFyLVIg1BG+f+MrQnQz3nLjosQu
MD5:	B770FF7FDD4AE2A9A09B037B3D8E1828
SHA1:	CAE4767E5EF2A15E506F37A9941AB17F2F906672
SHA-256:	D879816484FA22466CEDF7E97611560DC51D2654C4C11867908270B8BEFA12A7
SHA-512:	A241210F726BD79DCAA83EDD2AFA5CD0E82BC52E883B0AFC2CD113D24E66092803407C01093200038C5F3EF14844180EB1BD3FE726BFAB60F25014EAFAA09266
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=348735d45054456a814b30fe59d429f8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:66620ZuYkRj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.4418234343510425
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm5xRKR/RD3hTjs2ALAXA:SbFuFyLVIg1BAf+ML8RTjNALyAZD
MD5:	748D3E413D8543BEE076FC6E9F1D6FC8
SHA1:	473A034775B438EDB6253CBF0031341E24A16037
SHA-256:	65EABBEBEA75D1BF67DC2035B25564A61B78FE37D1ECBCA9F8C9C0059B173476
SHA-512:	6709E44EF725B13471826CFB3FF4DB2E1E777C9E9B2E34A7FCEAA528BAAF4D8AD3AA0B35A5C59180EBA5781E8166B7708DEE321E50838EC66F2F6FAEB1CB0E87
Malicious:	false
Reputation:	low
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3619813374c84430bcf02cbc627e8bc4.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:66626rAkBjf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.491260551941688
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoccHFg0jZcHcljX+:qgFq6g10+f+MoTFgimAu
MD5:	84C11A3ABA8E680224C5FBE03BE98654
SHA1:	9B893EE789671875C698877963343DF90BFCD13D
SHA-256:	20B31B91E24D94D874570A941C37D7926C05534DBFE95D6ED33CE28FC67CBEBD
SHA-512:	E94C83584CD52527DE4CBC3F6F94667EAAC456BCE3BBBEAF880BC18F923A71F65D7ECFCF383E65FCAAF9AB5F6A12A008088253B24687D6F172D3C8C7FA321DE6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b657b80bc503489c9398b688a7770920.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:66627RVAmhi

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.450762238483836
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+M8BcOrkkBTZjNdQIeXD:qgFq6g1af+M8Bc1Iz2D
MD5:	8AEEC95C49BF05677A621E5696A1A1D0
SHA1:	7819463DC36A81CDF747E6C55C6D5C7F52451308
SHA-256:	32F352E26847E13B12434074A7D2ABB98971FD5198F87FB5A76A9D3FE595DAD3
SHA-512:	AF230B22F104F8416E6DC3DC88CCC6B7B863E8D0684EE08C85A6E3062898087D22FDA323DE9F95C6CA55CDFAA662320319698AE1331E438B372F49B0D9673216
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6d91b47f1fd84f95a3c0fc4e5d34419d.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67052uc1lg5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.446746034194054
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MozRGukn2Aw9ZqjZcHcljX+:qgFq6g10+f+MozSn2AwjkmAu
MD5:	5A838B3BC1E03AA49568767899B5D21B
SHA1:	2A8A2B654341D202276C515AECA97ABC10EE34D1
SHA-256:	B82E12C4EC4A8B3F3BE42CA9369037D83835C24A22F89D0A740AA00A9DC69151
SHA-512:	2DFF6B5DF8AFF6014479A63E3DCEE8352640AB0EC727B89C87F53D3147DEBAAA21141AB51BB735C4F22149CE3DB51C411FF518BF05C65C0B7C62DC2B4336EFC4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b20683dcc13c4e71bbfe66fee002ab3d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:67053R38AK2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.461060341056297
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyGx0kz5AcT1QYuqjx:SbFuFyLVIg1BG+f+MyGrzDTa5qjosQu
MD5:	8CF1640173B130C68A51B5AAC17E0ABF
SHA1:	BBD22A9F3A9090272D2468A634264FC12841996C
SHA-256:	681D22E28AD02C862555ADA17C077A91977E40EF5B0914CF0995FFC18332461C
SHA-512:	07ED908284044829BF8E143A4B758791024C62FF01F44224FDAC3F7B66A86FA4DC2736C61CA63DF99BC8B2743F97CD13DBAABE439637CD794C2B544696A6CCE1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=823898c9ce4e4843b67f152be92f3b55.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67054njYPh3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.43531734367577
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5KAXjivRQvATjs1Ha:SbFuFyLVIg1BG+f+Mwymv2YTjosQu
MD5:	63E384A395AFD5C4BFFDA57AD9FB3418
SHA1:	2D587E9F95E3CAE75297D75A9FCE5D2AA669D4C9
SHA-256:	3C205DC82EEBEE8F1D8983C15E82CE8A9B0877D25840439E9E3E951BE7F1289A
SHA-512:	B5CA3A4EF4AE51F453D7C1670F3A02FA5FDE496FD023C603EA75D4CF1AFCEBFFB69F1B8A14C0F4403CBD9B9DA01B4BDC68D7511746DFE64BF2E6B4B039245EAD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3c8e28f096e74acb92703cf7b0801a95.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67061zb9Ww5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.390031477988647
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmy2B2pGTOhTjs2ALAXaN:SbFuFyLVIg1BAf+My2B4GSjNALyAZD
MD5:	C2244CAAB71C11BDDA0E1A4368760D47
SHA1:	F947370AD59066F2EA562A68AEC81822E2382C94
SHA-256:	EF94F3BBF5A6D3528493246C370FFBC264F4D60DCE0248535DEFB42629BE3582
SHA-512:	583CF77FBEF50E85B90C197E785B5CA595288FB8ECCD9281BEE967D461A7011E97638AAC601D625F775BAF4F6F25BC4140EED5D84E3669CFDFC50041B7EE8976
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=809dde2a93ea491e9dc7d19cd876fb9e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67151ZVumu2

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.430031518031769
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9+eWdDk6GTaRDhMxsjs:SbFuFyLVIg1BAf+MkO1UhMqjNdQIeXD
MD5:	FCE04B6B551E5E7EE9A9E9D8E77D2C8D
SHA1:	61B14F457B2C321E40C4E14774405127BF243B27
SHA-256:	CB2C43D9C77A0404D329997D51F393635A4E4845D4FE22FB7BF5FB8047DDD1D2
SHA-512:	E6DE9B297E372943EAE42916D098892F79274A6A5A5154196B5DB0FBB85BD48C90B97079EDD95BD4E35B4A8A78CA448750C4A6E336CE40248C9B5393E68440B1
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=701ed2cdba1f4e40b07cb32e662af4fc.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:67232XYMHP3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.430718916237486
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoeSPEHYSHlA5qjs16:SbFuFyLVIg1BG+f+MoetH/eqjosQu
MD5:	43D385F38FA5E745CFB43FC4E4DBED55
SHA1:	A4D2332FBA959CD500CF101250E790B1C1E742E8
SHA-256:	7D039463B107CA8862B29C7A82B168475CE6899BFD18D6D9345DFCD47337032C
SHA-512:	6A62F1B35B77A4F52B3F23BFC641A833D662B54620AB3C58C69B7B446F2E45C80E5088CEA50A9EDD960CBEAF3F9E873A52378BEADE4DF2DFC13EC5FF85932011
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b67759dab0b3476c9ef7273f1e674fc9.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:67626YyLbKf

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.416803048985137
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8fDHPdpEBaBehTjsc:SbFuFyLVIg1BG+f+M8QYohTjosQu
MD5:	A940C874D895C9E9FB046D17579D7684
SHA1:	85B94CEA3F95D1C87C55877D0E912BC8EF6A9AE9
SHA-256:	8256976B608FF3211719F51BE17C06B36587CB164C82BBAA432DE445E1C44F9E
SHA-512:	164883B4653910BAB9FFE1EF1ADB0EE6C40C1E2DE19DB4ABEDD5F303F7F68764FFED535E0906214BF5E96B4E2BB474CEEA599DAC2C0422BF54F2215FCDC84F1A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6828f04b2fbe4cb2af36f77ad38d36c8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:6975276M1Tz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.46806401572084
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/XXyQbIQZBVuxsjsV:SbFuFyLVIg1BG+f+M/TZBVTjZcHcljX+
MD5:	51EB1879EFB520C7C4A2F4F42105EF3E
SHA1:	2A85D02C7108AE6F12FCD2D8618DCB8A8BBB1776
SHA-256:	56B316E07B72B9A2310326E77443E51E1DC880FBD6F9A7DB35EC5C642A959705
SHA-512:	6C19349853E2032A68EDFACF3A00056F973C869232FC609F5AE9E110C411E68670B7599A8D072D1362FF31E9BFB968DA0939EFDBE7731AC72987529716C13931
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5352382b05f742c58ae7dcaf2d24025b.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:69754lkY8Zz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3997228240900155
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuycTDUBR/TGxvXsjx:SbFuFyLVIg1BG+f+MuyiYB5TGp8josQu
MD5:	7335FE7F7EC4A709750F883BED6DDA6E
SHA1:	471D6FDDF8D4084D880E6602E1C542CBC56DB50C
SHA-256:	5AC6244EC54C788183EC4CE48CF11F5676941185DAD9C66730C767D66E45CE7E
SHA-512:	316EDC351EA4D74FBBC406EC955A5D5941F9584A154A597C08AA18B366ECEBF1879335E7CFF614E4BA185A30D5A0D85B20524614FB7A56D4FCCEF26B10FFA789
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d93f9355a9674a8da03e4035400623db.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69755QpQsvz

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.425186321900641
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvnO1dHTqiLgdF2jsc:SbFuFyLVIg1BG+f+MadHT/cd8josQu
MD5:	28FCE1878AB215A8004A842C7EC6C7D6
SHA1:	493013EF88D02A7CBDCA8955DBE08F26E0F96431
SHA-256:	5DC983804D4D10EA7EC075C114E0525E83A56777F45C79E728B8D258196A8665
SHA-512:	87153491E533F06BD46C42E37571E6E86C84F1C03FDE312103DB9661D3632AE698FD0CDE54C72B593C077F63E2F4F4469A956D3ABCA01C74FD97C054C0855EE5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ef3100ac09bb43e8b6d9746ef27c5e99.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:69756R37tqA

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.412942807844993
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvJVDlCVTvbHT5cNrqj+:SbFuFyLVIg1BAf+MB9QVH3jNALyAZD
MD5:	440627AF9D91848CB3F650A1DD7415F2
SHA1:	1B0D12AD26DA64DA1245EB85BE453BFAA5AD2B91
SHA-256:	CB26CE62D1BF527F4BB209CF39F93029E2C061A26FFDA9FC54E6DFA129A97D1C
SHA-512:	72A891E948BF19330E2F045368AA60C6AC7FB003A56E13D030A6C49D1040B7E997E5C9F1ECC3C0D5EDBFB0B5EE67252E4AD89CDC5D4D16D732EDCE275FE02E3E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e2a505391ef04406ace7d181b65e66e8.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:69767EOQW8y

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.480144849574925
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzCnTZzFFXWAPv8js2BI:SbFuFyLVIg1BAf+MunTjkIv8jNdQIeXD
MD5:	00FA48A2978AD71FB52D2BDA42C27EEE
SHA1:	D26DFA4DD29A06D6940F3809FF5EADB9375D7B56
SHA-256:	7A0FDD400FAF115FBB1B4FCDA871DBC7137660941CC9F9F810891595E4416ED6
SHA-512:	0CE46E4D3352A2C03DE424C531EA2276A1C69CEEE6144F268B267D84B9E2C211026E13B42D26CE5D90504B5519E98B4A6AC35EB10855E859B2C764D4203E0439
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=910fd46bf7374fa5bc8bf70e423e60b4.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70285Ka3QuX

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.47798925858467
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MogscW+i4qjZcHcljX+:qgFq6g10+f+MoNcW++mAu
MD5:	DF66F58060A6B639749BB60E83437FF1
SHA1:	443C7FEEEC53435F7E561818E3C749284C758E53
SHA-256:	4A2E1031B09B8A3175C18C3EE8ADFCB7BE91EE1AEDA93E0057B436651E9E175D
SHA-512:	2A3BB92B52E30B8D1F637760879D04FCB6785D7EF71F085648A7D888059A113B423EBFE3B275624B93713D04F0D07A52A60AAD61C2E9B2F6DB0DB943DEE7A826
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b84beb16ebd4485093ae589131d2fc9d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:70286AHKTIW

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.43118810226382
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoBOZ1ERQAuqjosQu:qgFq6g10+f+MoBOZ1wrQu
MD5:	C65DE86DC32576DC9EC8140588AE6031
SHA1:	5AB0E605CEEEE3FDC236D4038BF63B9ECAC9B0F8
SHA-256:	716382117AAB7E4AFD6F22E988637A612DED97E4108209A4AC55FDAE2038DA10
SHA-512:	85EAF24003496CE3EBEEAE60B8C87351B59D81ADC308CEA698503878425CBBE38A6CA727925FE3D310145E3FF525E12180B8ED4B2F5D9FDA34281AF7D93C7709
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=bd265e13aff24cc681f00701aea3c589.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:702879MVhH0

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4416593148195656
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuXJgzp3cN2js1Had9:SbFuFyLVIg1BG+f+MuXJgzyN2josQu
MD5:	66C4B2428AEDDAF6B596742107BAD1BC
SHA1:	4D2255104545CAFBCC233870D3FA1D1F0A8ED2A3
SHA-256:	88B18757A8B127CA548B3F323CE3CA7FB7ABF7AAB3A187A236E499D1F2DAFD38
SHA-512:	B8610297FFE3E9471F0C59B3A59945F870A9B681A0EBBC8D03F5B73B006B178DCCA1C2CB34377519F24CA2EDB0C6E6B053BA7971F7BD6100835C660EA41DC19A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d8cf83df0ce746fbb3b86ef9a8852749.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70288l4PemZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.411193893848521
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm6ouS/AI/CQZjs2ALAXA:SbFuFyLVIg1BAf+M6ouS/7/5jNALyAZD
MD5:	DDD3DC5A129D52D5BE9B733B466B98A1
SHA1:	8383FA04BC84190E07DE998C0EAF69D61F355B78
SHA-256:	B38D75FF90F27E2FCFEBF46D5F349F79E2DD91E20EFD89DC0ABF9C83144E6AC7
SHA-512:	F79CE83496D1C699E39CED49745FC31527D78CF85062A9EB8DEA20CAE207223858E82079A7ADDB336FFA9FA3A82C1FE4E2D587ED996A97F8B34B674907640829
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0ad78850bc5b400cb83fdbd61133a066.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70389M7MjlZ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.461770219510536
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmuzkozHcB5VM0Zjs2BbM:SbFuFyLVIg1BAf+MuzJzB0ZjNdQIeXD
MD5:	BDF2592F8CDA6AF68DEDD4BBCA3394B3
SHA1:	B38133E891817EE7179FC33113999EAE504D71D6
SHA-256:	CAE085ADB075BBEEAD98C8BC976542755A17B44117750F497D5A9796EC216248
SHA-512:	09F81EA2E5683019E0B7853687D37C2ADAD4CB03F66D21F40970F6B6FAE8F327ED15FA7BB259ADE5585C66F3909E63A58312C2AE19448266ABC8E7CB58953D47
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d3304abdf1f1407db6b98fe0c00f5259.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70706oAOyJ3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.482433376896886
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MoJn0U5qjZcHcljX+:qgFq6g10+f+MoJ0wkmAu
MD5:	CBE21FF76FFFB64EDAAE0B1D704F3ED7
SHA1:	A5F7CC3C3752EC065385A1D29D068E2D9147F072
SHA-256:	BB57385945674CE2DDEAA5A779ED34EA485934CF4599EEC2E0C60F48034B8ED4
SHA-512:	BAF7EFE2AE6310B752F1AE677D05DBD27F62BD1F8EFC50BDDC9FC023B95147D8A10A19955054611DF837C2D1C639097CB0F3DB4276BF4CBC7DD5C927528C5A64
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c9a53fb006164e1e924a8cccca515f83.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:70707lxJ224

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.40841977606963
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9kPdRpWzfBBfHKVhJ:SbFuFyLVIg1BG+f+M6PdrYBSVhTjosQu
MD5:	B451DD0A9C01A325733873638316C522
SHA1:	6EC9FF7DF8C901FA3B76B3FDAF6591E65C2CC15C
SHA-256:	3AD521C0B61C8B24E2999D35A627BAD0909E0C849C616D5EB46692212F56E8FB
SHA-512:	4E1BE1FB64BF6F28FD268F29416A440A7F2D93BDD34116497432A207588975A3FBF0A32DF3C001D65F47D207C5A0465DFA33E6BEA722D95E247A017F72573EC5
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7d0e3a1322a14f8c93dcc66dd88b16c8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70708Ufo5j5

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3157483635008695
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm4HHVGruKWDkShg2jx:SbFuFyLVIg1BG+f+M4HUruKWDJTjosQu
MD5:	13CD8E6B1956ED4D0000A83903851FCD
SHA1:	1991D2C9698405B435F5A8BDB16C078BA1582DF2
SHA-256:	6879A1723C749160015D3361CAC6F22F8491EE2E399D174968D67E9713289724
SHA-512:	F22B70CF61772E183CA2F0578AA4EF5C150D5F7DA1BB47F50408B51710BE8FC8E0B6A9A5C0B9B0413B633A932DB774956C99089C0E99F3134E26D46416E0CFB8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2bb08a0a300542adba68a8224ed8dbad.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:70709SDtXP3

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.423251365161089
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MwI3hNud6NrqjNALyAZD:qgFq6g1af+MFXu3IZD
MD5:	8775E6FB89BA04047F943B58367A6EE2
SHA1:	3924228AA5EC9EF7A6C817671A6E59A04172FC0F
SHA-256:	108721F6A5C59CEA8AE00F1BC079C1F579AAF02C2A0B2CE884620C063E39C50C
SHA-512:	3A8762DF5ACD8230C6CA162371E50D88AEB00B899FF41BECD59A787AEE8F2A61220F051230726ABB302CF04F1A40AC3F6FFE5AC6E72EDF72B9CCC9B9E8A43A62
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ec92b990dd11444abb70b4b130397805.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:70805hoLmM6

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.436726558301322
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/UCPcm+yMshuqjs2BbM:SbFuFyLVIg1BAf+MzPr+oMqjNdQIeXD
MD5:	A8C15CA64A88B21A8B7A5FF32C1278A3
SHA1:	D30BEBF76D633C35B2009C7CAD5126F23222DC40
SHA-256:	F1AFC79F09178944B2FA02579244566D4F86332BF9216502034E61CF226761A1
SHA-512:	533EE29B2C684A2D9369BE54EBBF9632E62CEA8C3DC0C94DDF39FBC0FBD1ECDE0E530ED3EC9B1ECDFD847F3202A93DD8F93D88DC47B00D7DA5044E699E9983A3
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5d78bd159a1945de858d5d506031a2ce.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71313R7QYFk

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.428341856306477
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MxVlEVE2Eb8jZcHcljX+:qgFq6g10+f+Mxn8bxmAu
MD5:	3F4B257C722F44E7828FB82F8CDD6ADB
SHA1:	89B3F42F903C143D856340809AD9748644BD9201
SHA-256:	18289E567195B79DB229342A3B16F9E163B3C35EA4A7E113D2E5588C76199F7B
SHA-512:	07B4E7856C1DC0A0D8395924671A1F6BC89E308A83F4CE0664F5ECE29C3F72010FFBCC392CDD3C295EF3F7132F00DCCA02225AAECA41FBD66C4475D810641D9A
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ad260c2ea0ab4e53ab96dd0e5c414c95.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:7131493ikZl

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.409509449930417
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MrAzf1LE+Yg2josQu:qgFq6g10+f+Mryh/YgEQu
MD5:	400CE1F7AD69A013A7E8DB57D0FFE890
SHA1:	90A01141B72C1328AE5816699405FE7F413D5CA2
SHA-256:	B0B453090EBA108A13FF6B0DB104E94737A047B3A216E3613DA77C871C059623
SHA-512:	B4892CDD06BA29AFAAB572243066960CCE83CD65B5245C3FDB6376169AEFD5E0EDB18765759EF84469DE6C858FB38791D90F1FE3DF8F77B2F3CA2DFC27032240
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=cd3ae40532c14da39a645759a7435df6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71315m9Puyj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.3542203511958455
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/54BQiL8HF1qjs1Ha:SbFuFyLVIg1BG+f+MTtojosQu
MD5:	F1B6F7546D36DDE0A5970298A5552BB0
SHA1:	EBE80B473FBA425A8F022BDD92337F08A6198A3E
SHA-256:	B757138FA476D95AE5D0CBC2287E1F4E5D59C7D331BD76D2EE369FC344AD6262
SHA-512:	5AB79BEAB41FCB29592A2F8105CBEC90DF77D26DAD90E35B0B529B325D9A8450A50353A2582ECACB4F20F684A9D76EA820AA3004BAD6CE49B13712ACC4DC9470
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5d4cb3a1a4d54a17b4410b24aa82202d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:71316YLuc3l

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.423726915018755
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm8DREBGU7AVGTEOylA0i:SbFuFyLVIg1BAf+M8DijfylpjNALyAZD
MD5:	2BD1301AD219C4B7531E4A4D78067473
SHA1:	1DCD56A9BF652524B954979A065FEC3EE8C562FB
SHA-256:	A218246D03FF91764A76B28F3D62A01EF726677E91300A661DA48FB7F0C474DE
SHA-512:	048CF11E44B64504D0F52E1A50F76B0BC2A1F73C22943B8DDB09382BBAE238D23B51D56BCEC35138418070BE623F9FA1E56EE712E9B9A8035E0AE5A12A45FCDC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6f4a24c36123491684160c6ab7841d6e.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71412CFjeLn

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.450441501379905
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm+B/hQH5Nlsjs2BbQIeT:SbFuFyLVIg1BAf+M+DoN2jNdQIeXD
MD5:	8FF9B14A642487963BCDF8FE14D38502
SHA1:	96EBB4B4613EFBC4AF081A40BBD5AE27A0F73D72
SHA-256:	FDD275EED2EE81B18CB381A74FFBA6E4641346F60108226DB75F7A7400DF0D26
SHA-512:	3D507CC3731FA6473607EB6B407E4844749F45F7BE696FFA7AFB50D88CFC3C6A8EC7FD6417DD76EC5F9EB1416250B1797D6ECF6FEDBFA97430DBE5DF4E950322
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=413782fb10854723add453a2ca2d852c.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:71493ufFXIm

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.39057760972002
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MsXw2zDw3qslsZjosQu:qgFq6g10+f+MspY370Qu
MD5:	1BD2FA50A573E85E28A4FC09480824C4
SHA1:	CDA4D98B6104984B1AD7FDA949DF08131A7941CE
SHA-256:	E71A520980684C0E3BA45BD7F77EBC6B80D12CAD29017FE174217E784CC1D6D8
SHA-512:	E971F089A6BEE4D4B827533F2EC7B419AB205585A656C4C452F219A1C29BA3E3C6371A03BA9F61787648570FC318E2977EDC35D11AFBA44804AA6EB7247B82D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f6b0ddce640f4318ba7e62ba02d4707c.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73560DmI6dH

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.461379129416207
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8FVn8pTc6RHK/RN2i:SbFuFyLVIg1BG+f+M8kh7jZcHcljX+
MD5:	190A18D43209DAC4A4D7C2FC8E14DC80
SHA1:	5A4E2EF503132CA11D1C121A45321239D5A9ACD9
SHA-256:	BC91CFD408BE84E09172D601DE5F8D9FF7263574F41BECC3987C45F7DE58D175
SHA-512:	D5D0AF98A9102377587CBED3EF2C32A900CD29E6C5FFBEE3F93A479D344ABE48213F97B4DA67C14AD7CA9996B5043495A98A8D124BF76140068301A22A095575
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=6555ed4234a9409f94c4a94584bf3a34.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:73561OOzm3F

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.416880403724283
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M8Wq5t/B9UnSmjosQu:qgFq6g10+f+M8Wq5LkSUQu
MD5:	ED4EC521FEC3D64ED266DB7C31313FDC
SHA1:	95F407818911F132092C2117E0EA91EFA9697E8A
SHA-256:	6EF754567CEED733A865543E549851BB4D2D1232748E0AD440848ACBBBADCC47
SHA-512:	BFB0FF80AA0C12AFECBB51A79A35E53EC7BDD7B769311945C86387A87C71C1F44D5F41F028EA589C60638D1A91D724BB61337F257E0E4DA415664D8CB9938916
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=634d9fa19c7e4f239c33e81ebabf8a37.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73563KER6nE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.382748985586953
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/HdQHASXQoV3cd0jx:SbFuFyLVIg1BG+f+MfdQHQoid0joa
MD5:	A3C55CEFEADD2499DE24F7FB0FCF9509
SHA1:	78A30E8001CCBF123CFA07B37C1F3887079E5FA3
SHA-256:	7C5397DE6A064634A521008DAA8D08A3A8879AF82D03262EBE0BBE52D4229868
SHA-512:	E3790220CC4D1FA4D5F5A4CFF9451EA00AD4F01B59C9A4472751CAEE0BF68C86B12255AA0A78831A55F27E5B3D144885315DB1421DE3472BB0ADD18B0888A445
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=526469efd48d4527ae7253b3a5eb3598.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:735648VirTF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.405053273596104
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+McC5VA2QDSNrqjosQu:qgFq6g10+f+McEVA+54Qu
MD5:	095EFBC0F7BA320552CAEE8B52B85EA3
SHA1:	63F8F9BB923E9C0AE64C1C1B61E3F8337D7E4D76
SHA-256:	CEBEB7A448EBB509B6CA82E4B1F51C00F82F0AEA37041B114D66F250C8761C6F
SHA-512:	848D675C7A5655713475D6AC898F90EDFA581820201C0EB7744B1609C9BB1484CB32798F5DA431761BD4DFCA4AE5669A639939CCA6523F9B7B119EAC6DED09D8
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1eab3b089fdd47bfab052be282e455f7.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73789lt3Lej

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.496612538163993
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MiS4InW0jZcHcljX+:qgFq6g10+f+MTRmAu
MD5:	245A162ADEB622C966A635B2CDAB5D61
SHA1:	235982478D98C078E25E82B57FB8E14F18F96A7B
SHA-256:	358AED953C2480804DCB8753205B3A9FA8E0B33D09BFCACF2470E9215FB94C13
SHA-512:	E27F31350F2193BCFD3AAD3229D249762A9FA616396F9EAE0005AFB8836DA54E1D3C5E7F3BF9F32C06A9FD148309C0A2D443835BC1604EF88A690E2669C6F247
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9e37294b4d504dd8825bc0008615cf43.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:73790wg0N9j

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.441534524727956
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy6VVU2zNBj8js1Ha7:SbFuFyLVIg1BG+f+My6VVU0LIjosQu
MD5:	75E0022E79AFBEE89CF4C40C51942655
SHA1:	D6A031B8790D0CD4517E574F02EC2173DDE9DECE
SHA-256:	2B908DB0FCFA9A4DA2BA4DEDB00CC3ADB00272B3AAB98D140E152C57D9E0ABB9
SHA-512:	30170675B3D48D3746289FA9208DB0C9A8CF22EBF403D7B00099ED6C38AF29E49C1B22ADEB84A8AB203C631B1FE6AD917609ACE718381BD97669771EAEDB0821
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8498201685fe4baca00d1031c474562f.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73796hlFazj

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.428239145310059
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmyww4ETrLpQLwsjs16:SbFuFyLVIg1BG+f+Myww46rdQLZjosQu
MD5:	81CE1AF367A9F11581A06FDE688EC6B5
SHA1:	A8989D864F201D51983F1CA3FBD110AD7FBEE7AD
SHA-256:	85BDD1817C977AC53EEF49AD36F923440F1CD3F76AE55EA44C7D25A63A4090FC
SHA-512:	0F5C67AD648F6D634FE631F62A0A9A4EDDC386679C1AD22042C197ACC2E7FA53B385A14384F3FAF3045DCC2FEFB0C629B89B0F7B758489861E7CC7C9A65DD41C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=843eeeffc1bd4267a60d46e53c443951.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:73797jIyouk

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.416660517612261
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm79S3jphQ4HyX2lNrxsi:SbFuFyLVIg1BAf+M41G92rqjNALyAZD
MD5:	520B12AE5E43C444D5EE77B407F705B3
SHA1:	CF9BE7FBFCA4241B5AC841DDD7762E2B85C5780D
SHA-256:	D49F4C0A9002D97E55EC560138C777AF68EA5BBD1A0B471982B3031ED7F56EF8
SHA-512:	BC7D903433E9897C7134AD0C6A7E5FC40A89C7C27B751F31633B678AAF44BF5746ABDE6CCC3602545EE73B5EC2A9D334CD9BFF92BA4B2EEF387F7E1896BC53CE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=1023901ddbfe452db52e44b7fb2ddc91.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:738092xxI7k

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.400737799801638
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmvmUCZJWmsH22js2BbQL:SbFuFyLVIg1BAf+Mw4W2jNdQIeXD
MD5:	2D6D3E1E4D1C5D867E2D2250FBA71EE4
SHA1:	A22883E8BE9AAE058FD0CD6CB8E9FD52E2CEE27B
SHA-256:	134ABB79B70FDDBDDA8DE78AEE081819D39E64763C7D829A7F1BA980786E3A5C
SHA-512:	C2AE686EA18944BDD8AE078A4AC604064BFC7105D40C7001C16FC3BA02BD5932324CF2C060D9955AE13B4B129FE8E6F4C50AB2A8F9DBF21402C209E7724AE6E6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e4e411ae0699409aad13ef5ef2c13f45.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74251nphX5D

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.334195048985214
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzuXXD8dVR9ruqjshQ:SbFuFyLVIg1BG+f+MqXXQdVjvjtWL0
MD5:	FB071A931DA547818199155EE876D170
SHA1:	18CBB6690A6EA73BD870AA514B872F408FE6AE8D
SHA-256:	5FC7668B8A938AAA4129E519AA0F0D6295349C0507E4D94F8F8CB9F64BB9DB67
SHA-512:	10F647D5C2FBFA9E3D095B15313FA487F3B5575E995DFDA6CB8E9427588680072402C6168FB48DDE613168223ED6A0F3BE5E1484403CAD6C672FA1E9DE676584
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=98af3c4df82f46058e1f4620446ef5af.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:74260ty4RXE

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.455922048592895
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/LDH1l2G5DnEsjsjF:SbFuFyLVIg1BG+f+Mzr1lh5DnFjNE
MD5:	891CF8591AEF8EDEDDD7EAA677104A84
SHA1:	B79F110687C7E23B879E3410A0B3FB6EE9D820DF
SHA-256:	3971E4616FD6C954677C35BD827A434596AC5D8D4A174828492524F6031DB405
SHA-512:	706F85644D7A745D9EB3F06D8B5636233AD02ACBB0D023D7C654F34B0457C81AD1B7812DA3AF7DB352BE003BD7E5473B698ABBA741D966B6BCF5A6A5AE751E53
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5888d502504f47f794c739bce9fa4431.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:74261s3WHDG

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.414826348023577
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6CunNcuDC2rqjshKe:SbFuFyLVIg1BG+f+M6CCNcMqjbVC
MD5:	83FD2EC7888E2109A9B3C5018296273B
SHA1:	F3E0099882BB13455714CD3989441BD037B3AEC2
SHA-256:	C67E7F127EE3DA7251012F9D5039664B2BD1B6E3985F9E403B220A8F44D95D81
SHA-512:	0078EB8DEE0C3D30A9541E02CD509A8B93BC70776A7E58FB158C095C297A75BCD82FD4DA8C74BA01B79BE331A5B39FEBBD6A8CE0DAB27AAE9C82EDD8B47AD49F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=05258659735b43e39a24f2fd010bda55.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:74268RWeUHF

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.464342748413902
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm9zTQERKRDjlylsjs2Ax:SbFuFyLVIg1BAf+MqEER9y2jNALyAZD
MD5:	1738729ECCDD983F74D3B7CF95B30595
SHA1:	E9A76BBB201B95F5A83091B9386A5D8B092BAE79
SHA-256:	660543F6C0577C948857B0D67F07744A1DE8DCC894D7E607C47BF49066D0E6DE
SHA-512:	12879482DAFA70518D02BCCB476C4298A7B525389A6561139021BA934F50A1ADD9E1EDA2724F62F52890C3D88596D983CC047FC7D08A4E348E99064E5D01F65C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=75a4f66c84ba4876ac4f9663b52101f2.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74376WIP7PC

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.453238138658498
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmzM8HaLi3KSRrUvXsjsd:SbFuFyLVIg1BAf+MIWaLIUv8jNdQIeXD
MD5:	81C31A4DD8B9263C512C56E36EA87C1C
SHA1:	19317A356DB13256EC1E0253E9969EC1E545FED9
SHA-256:	F2AD2B72B55FE618A053B531D8EF8E1CE79CFDF82F020A1CFE3C058D84D613AF
SHA-512:	06EB5FB3AB505AA25F5F1E10C16DD5C043844A86A3E200DA8D79FF475762E985F75AD72947BA333555C192B8FC4A2D9B9194171CDDBF50B3CB33C7499DB6E217
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=96ede15b631746d3a8f9c8747ac11101.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:74462xVRd8G

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.430594126145877
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/a+o23Dpjs1HadmQ9:SbFuFyLVIg1BG+f+My+13DpjosQu
MD5:	8EC044FAFA59BFF8EE879AEE01F49A5D
SHA1:	5B9C339FF263FF3EFB0B945A611E882A7FF05CA0
SHA-256:	2DF54F4F9BE01FB3686E82EAC21E6CA655268648F8A4181247BF28B6CFBBED9D
SHA-512:	6C08B6B6259EB9D723BDE0D8590F079B86B2B4977FF317DEEC4291D19F4DFC4ADE8FA4C5607CD6F6D806F463B356B4731DFC6A9B44499E711B21CD1C75A1FF37
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=56e0f800a74c426693e235433d151dfe.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75688kytJFT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.369594102347201
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5+FHhoHsC9XsjshQJ:SbFuFyLVIg1BG+f+MgasCOjtWL0
MD5:	938D69D1AED36E16487FB4CAC83FFD9F
SHA1:	89DF8AC7B2D4E286750CC6171EE51D42322B7854
SHA-256:	261277E844F37D66EA22DFDF9B5344F94FF14CEC651D250FEDC2EF6D7DD784AD
SHA-512:	8DFF9933C733D455B47445B2BC0377238CE126237EC7B98CAC8C393814073136B93DAD262D62BEDFB8977FA62816BF1606334F524D7F2DC8FA65D43C1DF5FE66
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3587b3282df145ac954098b12fad5511.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:75843Hjqo9S

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.3739180863488345
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm9t9TiFUylQ0jshQJT:SbFuFyLVIg1BG+f+M5TqUylQ0jtWL0
MD5:	B94B256BB557A373696F3B64A1EC1B0F
SHA1:	4546DEFD795154DE88B2555AF065C3CAA4B40001
SHA-256:	E9BD33068A73EBC2D52ACAB6C7636AB74262FF54E0D9028F0F4221BB15D71C10
SHA-512:	DE76E13E87068A91A9B31D2BEB82A3E6A86FBEE87A1116C7D9AF5D3586D67262CD6F5E06A1DECB83DEF6D1F64BAABDB71F85822164BA8F89BA1E474F2A785084
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7f79d6a78b674090a882b0143ce64795.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:75846YtHGWU

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.473342467805977
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6WSponOMjZcHcljX+:qgFq6g10+f+MzSponOamAu
MD5:	3D3F5A22AA342B58DDBF0ABEAE8B15BA
SHA1:	9314BA0570838B8AE9901F67C239C6EB256518AE
SHA-256:	548BA26CC68F57D4619AC454F4F111FBC3FF85C24699523EAC97DAC10E0C4ABA
SHA-512:	FFFB8DA582D1E97E236EF7E60576A78F911FB1569FBBC5C57A4BD62496FDFA684BAA81C3B1B32417195FE17E99C9F43020E83CE1BB8A4DC78ABA46D48F158C25
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0346de02356c46d3ad8b89bf860d8907.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:75847Z2lCgS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417879466987668
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmuD1A3cHd/hTjs1Ha7:SbFuFyLVIg1BG+f+MuhA3c9/ZjosQu
MD5:	FFAA9ECA49026076E968706B9047D85B
SHA1:	9C0F49E9092B414BCBA687A80B960305A6742A81
SHA-256:	1B6FD7E79FCCA6B08A8543AE6ADDDBF987B0F13FA0FB07216361BDFC9B426D74
SHA-512:	191F15C6556BA5C18136048070FFE3CA754C270AB08B762185044F0041F9B945018961950977A8F84577B37695FC12FE9C44749CE7E0E3258924938389C1F187
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d19dbe5e56a24af9b67041b79b9b8af6.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75849TYxLmV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.368271495562697
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmu3ffGVR8TIUDQE/zO:SbFuFyLVIg1BG+f+MuGV+kUMkshgrqjt
MD5:	D904415B93DE2CD1267F32D212CD5E7A
SHA1:	B413133DF695FD94CB17C8F577600FF44B597E34
SHA-256:	E50CCDD464664C44F2BAF90F31541B7228797931E20D181043245DD4378E8ADF
SHA-512:	59D37858D5AC26616DF4323069216C4C8D3AB9BDBE9AEC1572CC2BC2D01827E63C343ABD75CD092E630E6FAE64D1CABF3F1F50DC2BA084F080420D84072E8DDE
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d020ffbb66c04e4086d7d1f5a2792eb5.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:75851A0HZYS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.431312892355428
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmz3TRzO5Z0js1Hadme:SbFuFyLVIg1BG+f+MLTVOn0josQu
MD5:	B9154AD39E38F5EF1F44DD0FC895D5ED
SHA1:	599FABE3420F2E2804A53638E617750E278D6697
SHA-256:	32AF5871BEA444A99B0A896493ADDF3A3F0CB60BAD450E7ED70E39D7572C6583
SHA-512:	13B078BE89A06B341E43DB87394F7B355F0185CC7D8DC90146FF04461CBCC682C0D72117DBA4985B9E3A6BF6C46D110B1A23818A937F89688DA5E8BB0F2FB2A4
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=93308bd65434418b8324617e0dfc40d5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:75858WHiLmT

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.41000049302472
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmzNGwFsKxWIMqjsjOA:SbFuFyLVIg1BG+f+MJBFBxTMqjNE
MD5:	A56031B037BF5CD402E7E5B69141178F
SHA1:	92A7565D3EB5FC19ED9363EE241A41B00580E948
SHA-256:	CA392FB6CD6A7EB351C048585228DE5426333CE059FF6A0F769600392A42979F
SHA-512:	8D6114B40DAD128723D52147AA361877E37173C54DAA6B5B70B3E962DF17C2419F7BF620EF258F052964CC513641FDD31E1A20CE5F0F4E315827935EE8035D4F
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=9d428c43f1be4a80b0fa4538f4338005.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:758603gCpBR

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.4380041154840795
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+M6K3w4d3wEsqjZcHcljX+:qgFq6g10+f+MDw4OEskmAu
MD5:	3530948C3442B7A75A4D1C919CF6403B
SHA1:	9ADD92026427DB00B5AF9632395A9B6AC95553CF
SHA-256:	8C7E84B1CB8EC1A1075769E147EDF5FD4D23F954C7F71CC5658B665FD85ABD05
SHA-512:	06529BAAC1D80887F860CD8E23CDBA224C0CEB29D891CDF1BE0AF4CAFF8FEF8AB807A18F5FF2CE90280A88201D5F8E996C1CD63174D7E3AE7842F8E338E9EA3B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=06527987ae7e4e8f844ae60ee9550d55.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:75869NF8seS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.438020921204862
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoDW7NYHI+xsjshKJg:SbFuFyLVIg1BG+f+MoCRb+qjbVC
MD5:	47D04920B66F408AE83AE15F9F591C29
SHA1:	F8B080EBCCA88698FBC097B35A701C35FD1844F4
SHA-256:	A3178BC2A555B0963B49EE44A108DCC721801B217A1776A85548AD0D49890153
SHA-512:	A3DA00D8C44108B2FCDA5B74E25CE3C131A3D82F755AEB69D6DD59A9EFD39779FC99322F4022E0D39918705739A561104D8645957D4EDF501C2C034A3EE1E325
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b739a935fe954a6d999f1d78fb24296c.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:75871ik2oaV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.422942167226468
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm/1WAcWxXi3Zjs2ALAXA:SbFuFyLVIg1BAf+MM5UXgZjNALyAZD
MD5:	90C0D87957801F47D62C6B2CC0CC94FD
SHA1:	B7CFEB507CC4712D37C48E0AC5D9360977500194
SHA-256:	50201F027E4052861638DE4EC5034777FCA1E45B316D51B808C3B05E4067610A
SHA-512:	949B2B8B07B1F77D00083DE04D8BCF656DD96793ED9C3E7BC59BF8B90EFEB2C015B28D1301D8C449DFA386637C494F56435FBC58C5A3AAE44A7967C87A9FF08B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5e581e95f6794f2297a394ee2857c8ae.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:75995iBkzeS

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.392887329295385
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmufUSDOcEXBUGbTlq9:SbFuFyLVIg1BG+f+MufOBRSjoa
MD5:	E6F0ADA7163DCAC403F0A12AF94E6076
SHA1:	E355AD25904B644870D21B6F016C36E702126BCA
SHA-256:	E28F510CD3124A4B6C52AA32C1A0F0A452A94AE958B399918831B8AED2871B28
SHA-512:	77B08E49557FA31DA519FE5079557E80CCA81DB97F6C0D65C60D46C25F7F80356D570F08E740581EB6E1C7D30CCFD1D0C9283D7BB92BD3CD3524197015D19D5C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=d64817f49f654aae9bba2d156cb7046f.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:75996u61f5R

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.4872242930503905
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm7snWTSH+TwSB1esMqjs:SbFuFyLVIg1BAf+MgWT1rn4qjNdQIeXD
MD5:	A7311AAA5E31BCF41737CB937E3D92A4
SHA1:	E6C8282FD28DE8C33E9D3B7E9904AB35A9016583
SHA-256:	573500AFF44053B0876564F4C6DC712D1502847284B374CE51CE376118E8DAB7
SHA-512:	055D93570965818C961523583B45C8CCA6E1AAEB1947EC04EBC4F224E33C0F8FFEB5C1D2E1AD34019AC3EB0148768A67E55DEC4F18AA519096A7B70DE3CCBCF0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=10c8053bef944367ba263b4a77d96d39.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:76865vAIUoV

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.4009240321841565
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvGWRGEAAvV3dDinR2:SbFuFyLVIg1BG+f+MOXuNBin8josQu
MD5:	CD23E433F528AE141A77817F53C77814
SHA1:	00859881FCB79151A648DE857A7FD4C8307248FF
SHA-256:	AD7ACD6BEEAB293E4E327F413113EE0E16A10E65A8A98F3B4D2EEBA751AB4B98
SHA-512:	62B71B32CD09315746DEA1D9F388442B4DE46C1B1A9F2C87A02C10DCAC44E7721D7BF0E4A3095C832689BC5ACC60A1BE97ACFDDE5A562BE31160A3233E1C0C6E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=ec428a1d09c54e48a1ff70dd8fd11b5b.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77370lFaSXI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.472624799804825
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/iyj7BMFNjsicWmIo:SbFuFyLVIg1BG+f+M6yhMvjZcHcljX+
MD5:	EE7A6FF07D5540518125FC34DD5D230D
SHA1:	B03CFCDDF63B939D59DE574DA62F1359AEA90F75
SHA-256:	085485011498A1940890A486DD5AC0E3BC4247A283440C09AAF4867EE0ECCAEC
SHA-512:	BF3699465A750155FE88E2600924B09ED78BC0574A515446BA03E3E904726E53C755A45D2806DAD2C6C856D576D9F5355673B33DD812978C098FB38D949B6556
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5ebe2e7843204506b02260ec77325598.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:77372mZcSXI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.410045919647182
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsRcREdT/NE2eZjs16:SbFuFyLVIg1BG+f+MsRBdTlJejosQu
MD5:	5D453A225FE884A61CFEDADAA00AF898
SHA1:	0D22DF696C1DD1AF00F952B076053467885FCE27
SHA-256:	FB9F0BB69B1C78C9CECDC3B905FFD2D5C314D11B9AB91075785BB7D368DE313E
SHA-512:	2E864DC7411E2BD487CC1646390B1F8D0BED15EC4BFFB23CACE411D6C3BC08800ED6490ACEF86D611522B67977238A783440E42D82BD597BE1EC1A928177A902
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=f2038ac27c594a86a8a8ef6aab5e3df8.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77373v9r5OM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.372818053925854
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm41PmVzSJlRBWd2sqh:SbFuFyLVIg1BG+f+M41aOna2sqjtWL0
MD5:	3E802D977504A2DB768DAB29CC0E6B7E
SHA1:	40419B3E16B3D0D54875A46ACBB9D57F946BD9D8
SHA-256:	4AA43CEF02A99DB06884556A816B4EB50FCC49C364C3FAC1A9E5DC561CF053C3
SHA-512:	12E585922C980F33221D5FC7D74D503902F5793E08FA1F42CDC664F43261961701730C15FF57D0C9BFE50798C0C1796D95B88574165B86EE9E94C2FE999AC207
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=2585bbe52c5b4700b67594f4d38ce4e5.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:77375QQgBSI

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.442030222470801
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm8O06XWbSXdROAQN2d:SbFuFyLVIg1BG+f+M8O06XTdR55josQu
MD5:	2E4881D2ACE22501A58D5D5A282A01BE
SHA1:	F0C02D54DF9D6ECD462BC0B2A3FA70D451D1AA18
SHA-256:	D63F0D5E3CD351A5458BE0B48807A66B3DDF1C37B2703DA79765607D8553D9F3
SHA-512:	5969053F4409D99B4BC38B22DEB740579D0FB94DED35FB3F94539BCFB80CE29B10C01F358E36E861814EAFF2FBA2B44F8D3D97ECB1C880169275B44A2836BF32
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=612e4052819a47ce84e99fef544747c5.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77381eOnjUJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.3883982869754545
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxm98HU3d/VCATjs2ALAXA:SbFuFyLVIg1BAf+MCHyd/V5TjNALyAZD
MD5:	0ED7FFC9EE1395A4AF6602B101960F84
SHA1:	38602EB2F7704BFA6B0DE66A308E5234FF5EFF1E
SHA-256:	0186EF439AA899BE656F3DF00167042445AEEB408DF713784915DB4CF42960D0
SHA-512:	5795030376FFB0F5A4E2A6B105C740C965B7C1766398D15C3815F9437B6347AF9FAAA5506A2D91B39053D4283EA5270896E5299C382F41FE89A197DABC7E993E
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=7a8feed4221840a9883cc2d399e2c01d.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77388gYZNsJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.375548440000201
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5v6ldiGUT3vAgrxsh:SbFuFyLVIg1BG+f+MsldiGU78jtWL0
MD5:	292A5D60BE32DE9C23C7C043E943CC0D
SHA1:	EE64F5BBE88D91C37B6D68510A0FF9FCD153CBD1
SHA-256:	C9A2D37BB759A779B23448A434443B97B24BB79F53A4A9A255ACD36E23CC50C9
SHA-512:	6B6F0B5A7E6815B735316F55D7A518C1CF0A9557025893D0D93CD4FCDCF5E37B16DE85C7D13D8D68D2F15E8F9FC3DDE3E75260510BBDEC386D4EDB021FFEC7E0
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=333730591fde440f8c411b94096d5572.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:77395QvSlGK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.433326749883467
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/uUachnLSKqZsMqja:SbFuFyLVIg1BG+f+MWUXhL+SZjNE
MD5:	E0E030785C0B934ED1B532F4C73A6169
SHA1:	442A8B6FC5AC40CA2CA746BB817B0A9538214F4A
SHA-256:	12094F050EF9F96849C90E93CEE75FFA8ADC03E4A13DBA310A7BCDF9796B6CE6
SHA-512:	A39C50883951B60B54CBE93C31BD75815025812BA55BB7F5861E89FF26E771E7A60996640B4C719DF13B3C9D644783A4B8D9648599B1A513DCF839EE074D2A2C
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=578be19552384d9ea4d41b73383f3d9d.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:77396DOpvwM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.416730540831201
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmoKEwBchdoBXsjshKe:SbFuFyLVIg1BG+f+MoNo+jbVC
MD5:	80FF3D58F8D73511D5C648D068E2C7D9
SHA1:	B604D20902B3E0BE61B93FF8468543C861227940
SHA-256:	8423EF95C1BADE6D5EEA8F6016E5E7DBADDF23522378CBEAD1D0432BB0C14D8C
SHA-512:	3804E78B07D96BE2B2701DC04F5BAA0DB2866E3649AE26C93F1A70C732E6640703D9EECFF8E28EC642A2305953A4A835CCE803A6CFA72156C62F0CE66A348D87
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=b59a5ffdc2b046ea96b08ad1dc28536b.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:77398OTccLJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.472989517800864
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLCHh6KV+h6CQzuxmrR3U217WfqTsjs2BbQL:SbFuFyLVIg1BAf+MO217WygjNdQIeXD
MD5:	A1F7EC5EEFA16ADC33788BD247AC6C1A
SHA1:	617ABF195B3B97D2CA83329A720D4421ED2433B6
SHA-256:	2D6D44BC31A80CD1BC9907EDD6FDF335E363EAE66F1433E3AC8EA956E8FFE2DF
SHA-512:	747F1C7D100697B1F2350AB232978C82E67549B1BDAFEFC739CF01F299000CA64C50EE666537CFD381CB929CF34CF0D926FE853ECF048C9123CB5D748975D748
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=acc3c435575d45e5b4282cff1e1267bc.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:77474VcwAWM

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.380683591271804
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmy5fmbEENVWVToYg29:SbFuFyLVIg1BG+f+My4dOoN2joa
MD5:	8E0BCB028222554484A943BF187715A5
SHA1:	3CFF34F936AF924F7830AC484BE63BC29A2632DF
SHA-256:	1313D96282F9BAE030B8163F479FE0D8E7A19B76F52AFC2C10FEDF5496D753EF
SHA-512:	5C1EC99BC0FCCA7E59F14E5710AFAB9265DDD840BE85D741314E938A016600DF3CAE0C3EC4870AA5C33B7E3C37E32821C2E371A3C4FB979AE19FBEA12736F735
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=82d50c67e7cd4e9e8aafb592030ca7b4.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:77609UGgsrJ

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.427541302736461
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5NSxxOfTXlVqjs1Ha:SbFuFyLVIg1BG+f+MEQXPqjosQu
MD5:	C839E0066BA88821D467BC37BEAD0978
SHA1:	538BB4E8358ECDDA66C4093F2A674ADA3CB251A8
SHA-256:	6FF84C49A2FEFB02B01D5B8DE7DC697A1D9F13B3E3BD08588764E9357FD57CB7
SHA-512:	E91189C3D7F4905DFA27BA84B50BC8D857EFB89B7912B0E4F92D09D7C31F860758C0F0B3B450E36BA94E0E564AB6FBFEC3465CF406A1A9EB0B32EF9986B91468
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=37179c75da5c43b3ab0f75c6f4d2910d.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:77634RmPfDK

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.370210474161635
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm/iUjQRPk3c6RxsjsO:SbFuFyLVIg1BG+f+M63RvjtWL0
MD5:	C85B7E34C32A81B0C2C05E7865A4C284
SHA1:	F3481711CFB57A334525310FF32A21F7BB65D9D5
SHA-256:	064DCC2D4F0598131C01AA76815384EF2ECF6CF51F01EDB0E6146C2421440646
SHA-512:	F1D27D8A17A2D5DD5FAA0C6D2BD3BF5B4E55D226E06ACB7752631D27D8FD21324C506C2C5385972667275AEA10DCC85C744282C3A23FDB27D47820486F6D0927
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=5eb1ad8c38b44f6b8e0f0d897cc559cb.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:79229yKSjjv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.417677322156914
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MntpDR2ApAvF2josQu:qgFq6g10+f+MtpdYEQu
MD5:	FA4F21CAE09F23E196E9283D6F5780BB
SHA1:	E9A58752E0706D412045F221A063DC78FFAE670D
SHA-256:	681BD8A5F8075E1B5F5EE0A0271D837D8B2D3E655795F32566C1AD2B760D146B
SHA-512:	65788074A6FE34E72FD2AAB8E03472B22F82BA6D693D21B371A24FDF5423A6E3829898B4C7664559E88E0B1E8B705E355E95155BFEF11298545135DD4528F7BF
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=58507981998d47cdb03a8fd5219be0fe.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79230vTOxDu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	220
Entropy (8bit):	5.441435422312096
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BG+f+MydygW0ZjZcHcljX+:qgFq6g10+f+MKy30zmAu
MD5:	A76A39F0E5643E2C775D6A6A227614EC
SHA1:	6BB0BFA13ED85E9F558C03C962874B250C41A203
SHA-256:	19D7C67E80875D525E022C5E1D34076A40FD716312A6656F81616BDE8D4F10AB
SHA-512:	5C10F5FF8A9798EDF32D054780EDB56EBA43C21BB6AFFA60E4B5E0E9F9056566376508CC7F5F1827D78D61125D38E1C1B3EFD061B7A970D5354620C22E0F34E6
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=8f2d97a7704d430399d2f0723231389d.IDENTIFIER=systemd-logind.UNIT=systemd-logind.service.

/run/systemd/journal/streams/.#9:79231fmB4zs

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.386741123736228
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmsBVB/8SaGV0Mxsjsc:SbFuFyLVIg1BG+f+MsBX2GWZjosQu
MD5:	D60214152F95415937A9850427ECAD25
SHA1:	07980235674541CC7D4CFBFE98E78215C77376D0
SHA-256:	F8067315BBB5E9A94D3105DB85E401E2346C79F35C0EDA5EECA9BC0089B74F86
SHA-512:	BBC00BF4183863FD907FB04962243F966987612C08B1ACD33BEFD1F60A360991D07743D037ADB67DBF8CBB2014279A57FE4D2FD847591B2B6FBDE3F89A0F4DDC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=fd03c3583395408081ade044106591c0.IDENTIFIER=dbus-daemon.UNIT=dbus.service.

/run/systemd/journal/streams/.#9:79238bwD7mr

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	188
Entropy (8bit):	5.318872790893532
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm5hTFW2mUERrqjshQJ:SbFuFyLVIg1BG+f+MQ2mdNqjtWL0
MD5:	91E4BC05066F82B5D55404556265A276
SHA1:	EEF122C2230514F68EE34D8C9816D839C80DFC22
SHA-256:	9786FAE7F77CC626B476C8C7448255972BA04074041D1D8C6F01157CE7977AEC
SHA-512:	76C78B91573F6FB0F1C0D15D314776B5D20005C60F4E2E5A94514CADF4E6A6F75CE936C7D56A02B242ADFF7AC9BDF59A4F89BB52466F58ED542C9DAAA4B21F60
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=3eac333695cd4329afc5e656f9f1a239.IDENTIFIER=pulseaudio.

/run/systemd/journal/streams/.#9:79239PC5I4r

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.396677157105379
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxm6xsmBCRTBRmpIvsja:SbFuFyLVIg1BG+f+M6uZRTBqjNE
MD5:	2C0E0917EC966BD7C8964D105B5E2433
SHA1:	38960B1A66DE952590AA457BFDA874DABF642724
SHA-256:	5E03980F58E61C13BA696E33E7181E8C615BDE3B0E98802B268E5E6B1F6774B6
SHA-512:	81F2E7480389F37DE71618728EF4CEAFCEA75724307225E21C437D98680487955510F09E7873E991E07EEC3EC1B2D92FF804CECA2F57CDFE973D13F811977C34
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=0ce4ba64bd524525a640b0450fae1853.IDENTIFIER=rtkit-daemon.UNIT=rtkit-daemon.service.

/run/systemd/journal/streams/.#9:79240ytvrft

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	205
Entropy (8bit):	5.408265479887253
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmvtREBYFArW3ifZ2j0:SbFuFyLVIg1BG+f+MsBGwfZ2jbVC
MD5:	9C76CDDD571187D87733A22C6B1EAA0E
SHA1:	0A1A01FF5CAEBD64E0D4E67349BB042D399541DB
SHA-256:	D09C5DCD76AD020625B66578E2F6D36A9BF1FE83F6F3012838F4D6F76B5CDCC3
SHA-512:	892A3A372F6B6BB9357F9D200AC7588C6BBAE66F5260EFECB7ACF0165AB36071023E62F6CDBEFA13FE2B1A6DA9F5A342604F9E998D49326206FCB5C54C1EB6FD
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=eaa2a1fa51904c73bd85f020d1185246.IDENTIFIER=polkitd.UNIT=polkit.service.

/run/systemd/journal/streams/.#9:79241tAUddt

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.430254579384991
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+MmjGtIDGy0jNALyAZD:qgFq6g1af+MmGny2IZD
MD5:	F0E74FB6497836974335C40BE4B94088
SHA1:	76BBACB939DE9087DBD322BB2CE5892D65C7ACF1
SHA-256:	AC11F1CE0AE1F4A7FBA08F0670A28B85E3D663724AECFD00E326090979FFE12D
SHA-512:	B25721AFE9D64BDF27D97AE1689DB6BF1DB42CC43FC3C225F1E2024961AC600490F221C3185AB8DF98E7177BD4C1933C5C4600DC4B22B4095F2610464683BB52
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=360fda495a144e3cbbe7641fff29b0c6.IDENTIFIER=generate-config.UNIT=gdm.service.

/run/systemd/journal/streams/.#9:79242P15jiv

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.393109599449564
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsPOYsn9ms954Hh6SnLAqC+h6KV+h6CQzuxmve0RWW2dRpAVI0Mq9:SbFuFyLVIg1BG+f+Mm0RWndRpUZjoa
MD5:	AF9A5EAD72A4F27932D0FFBE274B2305
SHA1:	0BC6D11F5D9F9B5099A158FB879B01C5D7E5B546
SHA-256:	A655063193B51024580C204CFDBADFCC107A807F81485CBF452BCB9A26B7039D
SHA-512:	B863753C0DB5B1F0F5DBA5A54611BFC0322F7A3160D4F9614E6207FA92C6A655203E748AF781C1089B2660F3BA080D32FCD474D4728000FC07EE53AE58CF990B
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=0.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=e6c7570d3e244b829311b984ce06e058.IDENTIFIER=dbus-daemon.

/run/systemd/journal/streams/.#9:79276fB0PGu

Download File

Process:	/lib/systemd/systemd-journald
File Type:	ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.459337458458511
Encrypted:	false
SSDEEP:	6:SbFuFyLVIg1BAf+Mx1gBXUxuqjNdQIeXD:qgFq6g1af+M9uw2D
MD5:	B6DBACC169C2383A745188420C5F3E69
SHA1:	71012FB4392EE32711077B4868FC13CFC112378A
SHA-256:	4C8E2ED609486081879F1365390783A63AF1CE237D5C70B9E720E7D48F602AB6
SHA-512:	AE163EEEE542E439F95272F5A80BD3AF10B161B4F417285FCDC56EA80C32A9D52723BC2609FA5FFB1067354A40FE23A6FA38F9ED3DB69BE954186C7E4743E4AC
Malicious:	false
Preview:	# This is private data. Do not parse.PRIORITY=30.LEVEL_PREFIX=1.FORWARD_TO_SYSLOG=1.FORWARD_TO_KMSG=0.FORWARD_TO_CONSOLE=0.STREAM_ID=c276e840ba974f2692bdddd3d9a8139a.IDENTIFIER=gdm-wait-for-drm.UNIT=gdm.service.

/run/systemd/seats/.#seat002Pkwi

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat00JDBdM

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat01geeYV

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat05WL7IO

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat09DHBFe

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Gp2ysW

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0LXuki1

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0MAdTGz

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0Td64Xy

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0XP56wT

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0kkCVpN

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0o3yzQj

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0qlhDw9

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/systemd/seats/.#seat0velf3O

Download File

Process:	/lib/systemd/systemd-logind
File Type:	ASCII text
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.921230646592726
Encrypted:	false
SSDEEP:	3:SbFVVmFyinKMsuH47rLg205vmLUbr+v:SbFuFyLwH47Pg20ggWv
MD5:	BE58CCABC942125F5E27AF6EB1BA2F88
SHA1:	07C20F55E36EE48869B223B8FC4DBC227C7353AC
SHA-256:	551B1D1C8E5953D5D0CF49C83C1568E2FBEF8BDDB69903B3DA82240B777B4629
SHA-512:	E5A270995FDE80530927E0BACD3BF76EE820C968AABD55D2E34579326F388AFD6DE7FB8C5D54F69D3F6AC30A5B587FD3B0456FC60326E7DF4F45789A900D046C
Malicious:	false
Preview:	# This is private data. Do not parse..IS_SEAT0=1.CAN_MULTI_SESSION=1.CAN_TTY=1.CAN_GRAPHICAL=0.

/run/user/1000/pulse/pid

Download File

Process:	/usr/bin/pulseaudio
File Type:	ASCII text
Category:	dropped
Size (bytes):	5
Entropy (8bit):	2.321928094887362
Encrypted:	false
SSDEEP:	3:Bc:m
MD5:	9F8C838BA61BF599F632E6180D9E0064
SHA1:	295DF01F35CE5209C5AAC7E5923B40395083D822
SHA-256:	919D2D544277518711C0ACC6C5B8DFBAC6CD70D4B78A2557CBDCCC4B7E0B2E3A
SHA-512:	D49006237C3E1435824D1E77FEE60255E1EA5D7BE5CDA2C177BB3B26C3938BFE787717BE1A562B233760E87422716758D6F8EB2E282ACB39BC2BAA7E6545F089
Malicious:	false
Preview:	6917.

/var/lib/ubuntu-drivers-common/last_gfx_boot

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	25
Entropy (8bit):	2.7550849518197795
Encrypted:	false
SSDEEP:	3:JoT/V9fDVbn:M/V3n
MD5:	078760523943E160756979906B85FB5E
SHA1:	0962643266F4C5537F7D125046F28F21D6DD0C89
SHA-256:	048416AC7A9A99690B8B53718CD39F32F637B55CC8DD8E67E58E5AEF060DD41C
SHA-512:	DEFAAE8F8B54C61A716A0B0B4884358FEB8EB44DFEA01AAA5A687FDA7182792B7DEBB34AA840672EB3B40EB59FD0186749E08E47D181786C7FAA8C8F73F0104D
Malicious:	false
Preview:	15ad:0405;0000:00:0f:0;1.

/var/log/auth.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	782
Entropy (8bit):	4.875060300374501
Encrypted:	false
SSDEEP:	12:IvWF7ZPaV5pM8vWF7ZPgKM8vWFxG8vWFdsvWFKznMcvWFONAvmdvWFONA2+VmvWN:SaZea+aZ4B+UG+8O9znxvAv2vA2+Vgy
MD5:	05DE415404923E23BEF7A12F794AF6F9
SHA1:	5C1D3ECD8D6BDF7DC11028D9CB5290513AF67EB7
SHA-256:	BFC43A14817E59DBA534BC7C16666756CD0C04871AF52BF5BA91A303C204D09B
SHA-512:	C0FF4EE857522452A7BA8F96330D71331EC139E0A5BF0B9001F43200F4380C086851FFDC995C7C5F727516E7CA65663EFB11F866AB8D12B635CD62FF21E69F45
Malicious:	false
Preview:	Dec 28 18:45:12 galassia systemd-logind[6858]: Failed to add user by file name 1000, ignoring: Invalid argument.Dec 28 18:45:12 galassia systemd-logind[6858]: Failed to add user by file name 127, ignoring: Invalid argument.Dec 28 18:45:12 galassia systemd-logind[6858]: User enumeration failed: Invalid argument.Dec 28 18:45:12 galassia systemd-logind[6858]: User of session 2 not known..Dec 28 18:45:12 galassia systemd-logind[6858]: Session enumeration failed: No such file or directory.Dec 28 18:45:12 galassia systemd-logind[6858]: Watching system buttons on /dev/input/event0 (Power Button).Dec 28 18:45:12 galassia systemd-logind[6858]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard).Dec 28 18:45:12 galassia systemd-logind[6858]: New seat seat0..

/var/log/gpu-manager.log

Download File

Process:	/usr/bin/gpu-manager
File Type:	ASCII text
Category:	dropped
Size (bytes):	1371
Entropy (8bit):	4.8296848499188485
Encrypted:	false
SSDEEP:	24:wPXXX9uV6BNu3WDF3GF3XFFxFFed2uk2HUvJlfWkpPpx7uvvAdow9555cJz:wPXXXe6vejpeC2HUR5WkpPpcvAdow95O
MD5:	3AF77E630DA00B3BE24F4E8AA5D78B13
SHA1:	BCF2D99E002F6DE2413A183227B011CFBEF5673D
SHA-256:	EB1CBBA20845237B4409274D693FEAE13F835274DA3337B7A9D14F4D7FDF9DEA
SHA-512:	8524B1E8A761F962B32F396812099B9B0B2DCF3C9FCA8605424753CFCFF4DC67EDC5EE1D8C91B9C0ED7FAE6BB1E752898B8D514B7C421D1839D6FEDA609C593C
Malicious:	false
Preview:	log_file: /var/log/gpu-manager.log.last_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.new_boot_file: /var/lib/ubuntu-drivers-common/last_gfx_boot.can't access /run/u-d-c-nvidia-was-loaded file.can't get module info via kmodcan't access /opt/amdgpu-pro/bin/amdgpu-pro-px.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/kernel.Looking for nvidia modules in /lib/modules/5.4.0-72-generic/updates/dkms.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/kernel.Looking for amdgpu modules in /lib/modules/5.4.0-72-generic/updates/dkms.Is nvidia loaded? no.Was nvidia unloaded? no.Is nvidia blacklisted? no.Is intel loaded? no.Is radeon loaded? no.Is radeon blacklisted? no.Is amdgpu loaded? no.Is amdgpu blacklisted? no.Is amdgpu versioned? no.Is amdgpu pro stack? no.Is nouveau loaded? no.Is nouveau blacklisted? no.Is nvidia kernel module available? no.Is amdgpu kernel module available? no.Vendor/Device Id: 15ad:405.BusID "PCI:0@0:15:0".Is boot vga? yes.Error: can't acce

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/system.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.427819184140339
Encrypted:	false
SSDEEP:	3:F31Hl4bqwSrQbqwS7:F3IbPqQbP6
MD5:	7EEFDBB64F9EF0331709B7AD7EA7BF16
SHA1:	DE24E33B059A014ADB8219A0B26FADE2EB651499
SHA-256:	884F6556BBF032755CA76E632C673E90B569A40754EBC614264715D728B7EAC2
SHA-512:	C201F4F5CA69E5DAA03B48917BC8D47A12B69C79BAF6F4D1CC3374FEF987E5BE35C27EF4BB6E8E77F0B618047297DC38930757DD7FEF211FBCFC2106CFCFA36F
Malicious:	false
Preview:	LPKSHHRH..................>l..H}.\Rf.7....................................>l..H}.\Rf.7..........................................................................................................................................................

/var/log/journal/ee49dfd4fa47433baee88884e2d7de7c/user-1000.journal

Download File

Process:	/lib/systemd/systemd-journald
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	1.448047321524811
Encrypted:	false
SSDEEP:	3:F31HllpO/DEjtt9pO/DEjd:F3ODHD
MD5:	E01F516CF4C8D88874582044613927FC
SHA1:	D05A7B75154D5197E9B03018DF45A2B0EE859011
SHA-256:	19E3E1BE6472338077056787F6E3226649F1592DDDA576933BB8EA93B88F65FF
SHA-512:	CE65023F7B3DDB4A4353DACA58512F715C6767BC8441B3C88A79ECEACB35F4AE1530053B37B1373BFE87A29C256D2DA434CEAD1AA373E2C0C218A9D9F319866C
Malicious:	false
Preview:	LPKSHHRH................T...K.O._.Va.s.................................T...K.O._.Va.s.........................................................................................................................................................

/var/log/kern.log

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	4733
Entropy (8bit):	4.786067582618496
Encrypted:	false
SSDEEP:	48:nY5YiYuYsYaYZYUYYYBYUYOY/YtYcYtYMYwgYQThYfYZThm1Y6TOjYptYA4YsiY1:rGdfdTA371w
MD5:	2FF144A49884EEA8B46086E00F5FC1A1
SHA1:	ACDB6C95688A75AAAB7E9A6A65733BEF01307ECA
SHA-256:	BF458E04E0B3BB81080E8E38A79C382ACD8554761AC5395C0BF7A9FD54FE119B
SHA-512:	68AAA24F38CACDC603DE1710DCF3E38DB9BEA16D19FE6CA75034512849769EAA5301AB0513989BD5D840C275DB665A181B35E0902CBFBF0430FEBD444F592D11
Malicious:	false
Preview:	Dec 28 18:45:06 galassia kernel: [ 242.636001] blocking signal 19: 5432 -> 3132.Dec 28 18:45:06 galassia kernel: [ 242.796209] blocking signal 9: 5432 -> 660.Dec 28 18:45:06 galassia kernel: [ 242.918765] blocking signal 9: 5432 -> 726.Dec 28 18:45:06 galassia kernel: [ 243.040721] blocking signal 9: 5432 -> 765.Dec 28 18:45:06 galassia kernel: [ 243.162784] blocking signal 9: 5432 -> 767.Dec 28 18:45:06 galassia kernel: [ 243.284669] blocking signal 9: 5432 -> 778.Dec 28 18:45:06 galassia kernel: [ 243.407209] blocking signal 9: 5432 -> 936.Dec 28 18:45:06 galassia kernel: [ 243.529455] blocking signal 9: 5432 -> 1410.Dec 28 18:45:06 galassia kernel: [ 243.530035] blocking signal 9: 5432 -> 1411.Dec 28 18:45:06 galassia kernel: [ 243.530687] blocking signal 9: 5432 -> 2935.Dec 28 18:45:06 galassia kernel: [ 243.531337] blocking signal 9: 5432 -> 2936.Dec 28 18:45:06 galassia kernel: [ 243.532819] blocking signal 9: 5432 -> 3132.Dec 28 18:45:06 galassia kernel: [ 243.80726

/var/log/syslog

Download File

Process:	/usr/sbin/rsyslogd
File Type:	ASCII text
Category:	dropped
Size (bytes):	14529
Entropy (8bit):	5.087510910048201
Encrypted:	false
SSDEEP:	96:HqQ9pvZTRJJzRT+UaQEzdfdN7A33P1wk+wKcLlOZ6gHMDxePgHAMDcg1f4QHm2Tb:KQ7dhN+RQd/+qpog3DcAZfg+/J0U4Q
MD5:	DD67BDEBA30227052E34621CD353F152
SHA1:	3828FFDF1980573306EBCA04FE71F2AE2A36AF36
SHA-256:	797C9A0601773D559027B20C90DD67B5E052A4CFAAD15D4755AD6AA74B87E465
SHA-512:	009DD01ED990B46B0E8B9B676FDA1187BADC21E3D01D18FDFC4F48051311632644DC5A687A1CEABF196EDFB602FB65B9E89031DC3FD6F04FE3215EE5D053E7AA
Malicious:	false
Preview:	Dec 28 18:45:06 galassia kernel: [ 242.636001] blocking signal 19: 5432 -> 3132.Dec 28 18:45:06 galassia kernel: [ 242.796209] blocking signal 9: 5432 -> 660.Dec 28 18:45:06 galassia kernel: [ 242.918765] blocking signal 9: 5432 -> 726.Dec 28 18:45:06 galassia kernel: [ 243.040721] blocking signal 9: 5432 -> 765.Dec 28 18:45:06 galassia kernel: [ 243.162784] blocking signal 9: 5432 -> 767.Dec 28 18:45:06 galassia kernel: [ 243.284669] blocking signal 9: 5432 -> 778.Dec 28 18:45:06 galassia kernel: [ 243.407209] blocking signal 9: 5432 -> 936.Dec 28 18:45:06 galassia kernel: [ 243.529455] blocking signal 9: 5432 -> 1410.Dec 28 18:45:06 galassia kernel: [ 243.530035] blocking signal 9: 5432 -> 1411.Dec 28 18:45:06 galassia kernel: [ 243.530687] blocking signal 9: 5432 -> 2935.Dec 28 18:45:06 galassia kernel: [ 243.531337] blocking signal 9: 5432 -> 2936.Dec 28 18:45:06 galassia kernel: [ 243.532819] blocking signal 9: 5432 -> 3132.Dec 28 18:45:06 galassia kernel: [ 243.53563

File type:	ELF 64-bit LSB executable, x86-64, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.256894646065979
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	Aqua.dbg.elf
File size:	75'920 bytes
MD5:	c9fcc13930fd293fa7bfb21b09b24864
SHA1:	e4e55b20c9bd4ef19f3f5b224432bdba65ea9df5
SHA256:	d722e328e8ea43bff3ea2a6b5f14d250e387433f0a59e25af756e43d2481ace7
SHA512:	481e2429751b59c1a6877f8ab19a134fb90f227ea2e8fc17afdd424003377f9fa0c507b5c1f9d439324ff1be5a7517b5efcb844efb80a6aa4213c4325b992ae8
SSDEEP:	1536:KCy7rRwCMo01sMQ85CJiLBOelnX4tPFwVzMNAhwknl67mBnFkbrz:/y3RwCMZ1sMpKwBOelINweNAhD67mBFY
TLSH:	7D735B17758080FCC29DC178572FA63BF6B3B17E1235B26D17E0ED222E99E215E2E194
File Content Preview:	.ELF..............>.......@.....@........&..........@.8...@.......................@.......@...................................... ....... Q...... Q............../..............Q.td....................................................H...._........H........

ELF header
Class:	ELF64
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Advanced Micro Devices X86-64
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x400194
Flags:	0x0
ELF Header Size:	64
Program Header Offset:	64
Program Header Size:	56
Number of Program Headers:	3
Section Header Offset:	75280
Section Header Size:	64
Number of Section Headers:	10
Header String Table Index:	9

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x4000e8	0xe8	0x13	0x0	0x6	AX	1
.text	PROGBITS	0x400100	0x100	0xf436	0x0	0x6	AX	16
.fini	PROGBITS	0x40f536	0xf536	0xe	0x0	0x6	AX	1
.rodata	PROGBITS	0x40f560	0xf560	0x2585	0x0	0x2	A	32
.ctors	PROGBITS	0x512000	0x12000	0x10	0x0	0x3	WA	8
.dtors	PROGBITS	0x512010	0x12010	0x10	0x0	0x3	WA	8
.data	PROGBITS	0x512040	0x12040	0x590	0x0	0x3	WA	32
.bss	NOBITS	0x5125e0	0x125d0	0x29c8	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x125d0	0x3e	0x0	0x0		1

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x400000	0x400000	0x11ae5	0x11ae5	6.3943	0x5	R E	0x100000	.init .text .fini .rodata
LOAD	0x12000	0x512000	0x512000	0x5d0	0x2fa8	2.7380	0x6	RW	0x100000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x8

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 01:42:45.476641893 CET	34129	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:45.610316038 CET	53	34129	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:45.611092091 CET	34754	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:45.744617939 CET	53	34754	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:47.200777054 CET	58690	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:47.334369898 CET	53	58690	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:47.336561918 CET	48957	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:47.470081091 CET	53	48957	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:48.874501944 CET	42384	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:49.008150101 CET	53	42384	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:49.011266947 CET	40891	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:49.144987106 CET	53	40891	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:50.513605118 CET	43373	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:50.647241116 CET	53	43373	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:50.650696993 CET	55802	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:50.772948980 CET	53	55802	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:52.241786957 CET	45755	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:52.364068985 CET	53	45755	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:52.368927956 CET	49581	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:52.502623081 CET	53	49581	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:53.915790081 CET	37698	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:54.049858093 CET	53	37698	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:54.054876089 CET	50833	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:54.177141905 CET	53	50833	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:55.536458969 CET	36779	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:55.670241117 CET	53	36779	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:55.672909021 CET	38065	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:55.807049990 CET	53	38065	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:57.211848021 CET	39930	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:57.450350046 CET	53	39930	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:57.451546907 CET	48917	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:57.573822021 CET	53	48917	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:58.984038115 CET	53251	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:59.343946934 CET	53	53251	8.8.8.8	192.168.2.13
Dec 29, 2024 01:42:59.344927073 CET	49377	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:42:59.467150927 CET	53	49377	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:00.833414078 CET	46760	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:00.968063116 CET	53	46760	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:00.972954035 CET	43728	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:01.106642008 CET	53	43728	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:02.567082882 CET	37098	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:02.826836109 CET	53	37098	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:02.831471920 CET	45183	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:02.965045929 CET	53	45183	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:04.342109919 CET	49184	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:04.475738049 CET	53	49184	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:04.491734028 CET	60786	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:04.625334978 CET	53	60786	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:06.019558907 CET	53024	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:06.258455038 CET	53	53024	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:06.284837961 CET	38221	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:06.418502092 CET	53	38221	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:07.863532066 CET	39360	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:07.997136116 CET	53	39360	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:08.021446943 CET	51802	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:08.155258894 CET	53	51802	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:09.545241117 CET	55896	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:09.908878088 CET	53	55896	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:09.939857960 CET	35919	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:10.073535919 CET	53	35919	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:11.467792988 CET	42126	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:11.602334976 CET	53	42126	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:11.624696970 CET	35818	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:11.863104105 CET	53	35818	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:13.422764063 CET	51846	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:13.556277990 CET	53	51846	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:13.560914040 CET	45849	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:13.683157921 CET	53	45849	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:15.219333887 CET	53002	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:15.353437901 CET	53	53002	8.8.8.8	192.168.2.13
Dec 29, 2024 01:43:15.360486031 CET	60617	53	192.168.2.13	8.8.8.8
Dec 29, 2024 01:43:15.495718956 CET	53	60617	8.8.8.8	192.168.2.13

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 29, 2024 01:42:55.518623114 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable
Dec 29, 2024 01:44:15.530675888 CET	192.168.2.13	192.168.2.1	8279	(Port unreachable)	Destination Unreachable

Start time (UTC):	00:42:44
Start date (UTC):	29/12/2024
Path:	/tmp/Aqua.dbg.elf
Arguments:	/tmp/Aqua.dbg.elf
File size:	75920 bytes
MD5 hash:	c9fcc13930fd293fa7bfb21b09b24864

Start time (UTC):	00:42:45
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:42:46
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:42:47
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:42:48
Start date (UTC):	29/12/2024
Path:	/usr/sbin/gdm3
Arguments:	-
File size:	453296 bytes
MD5 hash:	2492e2d8d34f9377e3e530a61a15674f

Start time (UTC):	00:42:49
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:42:50
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	00:42:51
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	00:42:52
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:42:53
Start date (UTC):	29/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	00:42:54
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:42:55
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:43:00
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:43:01
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Aqua.dbg.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Process Tree

Yara Signatures

Initial Sample

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-sink

/home/saturnino/.config/pulse/ee49dfd4fa47433baee88884e2d7de7c-default-source

/run/systemd/journal/streams/.#9:66616dpkMXf

/run/systemd/journal/streams/.#9:66617KHVzRj

/run/systemd/journal/streams/.#9:66618QePVHj

/run/systemd/journal/streams/.#9:66619tVMDTi

/run/systemd/journal/streams/.#9:66620ZuYkRj

/run/systemd/journal/streams/.#9:66626rAkBjf

/run/systemd/journal/streams/.#9:66627RVAmhi

/run/systemd/journal/streams/.#9:67052uc1lg5

/run/systemd/journal/streams/.#9:67053R38AK2

/run/systemd/journal/streams/.#9:67054njYPh3

/run/systemd/journal/streams/.#9:67061zb9Ww5

/run/systemd/journal/streams/.#9:67151ZVumu2

/run/systemd/journal/streams/.#9:67232XYMHP3

/run/systemd/journal/streams/.#9:67626YyLbKf

/run/systemd/journal/streams/.#9:6975276M1Tz

/run/systemd/journal/streams/.#9:69754lkY8Zz

/run/systemd/journal/streams/.#9:69755QpQsvz

/run/systemd/journal/streams/.#9:69756R37tqA

/run/systemd/journal/streams/.#9:69767EOQW8y

/run/systemd/journal/streams/.#9:70285Ka3QuX

/run/systemd/journal/streams/.#9:70286AHKTIW

/run/systemd/journal/streams/.#9:702879MVhH0

/run/systemd/journal/streams/.#9:70288l4PemZ

/run/systemd/journal/streams/.#9:70389M7MjlZ

/run/systemd/journal/streams/.#9:70706oAOyJ3

/run/systemd/journal/streams/.#9:70707lxJ224

/run/systemd/journal/streams/.#9:70708Ufo5j5

/run/systemd/journal/streams/.#9:70709SDtXP3

/run/systemd/journal/streams/.#9:70805hoLmM6

/run/systemd/journal/streams/.#9:71313R7QYFk

Linux Analysis Report
Aqua.dbg.elf

Start time (UTC):	00:43:03
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:43:04
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:43:05
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	00:43:06
Start date (UTC):	29/12/2024
Path:	/bin/sh
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	00:43:07
Start date (UTC):	29/12/2024
Path:	/usr/bin/gpu-manager
Arguments:	-
File size:	76616 bytes
MD5 hash:	8fae9dd5dd67e1f33d873089c2fd8761

Start time (UTC):	00:43:08
Start date (UTC):	29/12/2024
Path:	/usr/share/gdm/generate-config
Arguments:	-
File size:	129816 bytes
MD5 hash:	1e6b1c887c59a315edb7eb9a315fc84c

Start time (UTC):	00:43:10
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:43:11
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:43:18
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75

Start time (UTC):	00:43:20
Start date (UTC):	29/12/2024
Path:	/usr/lib/systemd/systemd
Arguments:	-
File size:	1620224 bytes
MD5 hash:	9b2bec7092a40488108543f9334aab75